$ rpki-client -vvf rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft File: 09Fa7ppPiuXCgRCKfS062B1Oec0.mft (raw, json) Hash identifier: pUzHWWWEM075AygVo7xuUJUa8jGgaCafLQC1k8O2T6U= Subject key identifier: 1F:0D:99:1A:3C:67:40:0D:97:C8:07:1C:B9:B4:11:5D:13:E7:DE:A3 Authority key identifier: D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD Certificate issuer: /CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Certificate serial: 089B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft Manifest number: 086C Signing time: Fri 06 Mar 2026 20:30:53 +0000 Manifest this update: Fri 06 Mar 2026 20:30:52 +0000 Manifest next update: Fri 13 Mar 2026 20:30:52 +0000 Files and hashes: 1: 09Fa7ppPiuXCgRCKfS062B1Oec0.crl (hash: zs1PCu0vQB3oox8UR+XtR7x2AlNCwl4pAOQKVN6Dl1o=) 2: C3738F60A78511F0B1D3342CC4F9AE02.roa (hash: ZfTIR8TGwp2P85QSM1a/IxofhAGkLpSqtbyjjhfAgLg=) 3: 0C64C6B2821011F0B329B866C4F9AE02.roa (hash: lExxASod+vTrHAZUifNEIUE6w3DAJ5EfQ5njvR6+5Wk=) 4: 7F9EB0A28CF111F09EC8727CC4F9AE02.roa (hash: dZSGdKL0fT43QyP+9eRJ/p1uKLlPSPkLrmJVMY+G7cE=) 5: 3AA556009A8411EFB791ED77C4F9AE02.roa (hash: nvL+2PVCxBOioAh3hiy04zI2LTapZAzo/a3FuuDB2+g=) 6: BE79CDCE16AF11F08B8C4061C4F9AE02.roa (hash: gr9TB6mbp8pvm9IlWtWPZGmC0tWM99h0bM3AhfhRWRk=) 7: 29BC840E002711EB8FA6A142C4F9AE02.roa (hash: exHqTstkURQu3VvXhhXKw9Xn1SBFnETfF6G5C83h/GI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 20:30:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2203 (0x89b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91397C2, serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Validity Not Before: Mar 6 20:30:52 2026 GMT Not After : Mar 13 20:30:52 2026 GMT Subject: CN=69ab397d-e691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:33:12:a5:e3:73:fe:9f:06:47:99:8d:c1:e9: 02:c7:fa:c3:8c:13:dd:81:80:6f:32:33:4b:79:2a: 55:24:e0:41:d3:08:76:ad:6a:c8:b1:4a:8d:0f:d6: eb:c2:8c:95:ad:e3:04:67:a2:1d:87:6b:30:fa:a2: c0:22:ee:62:5f:e3:77:0a:a8:02:a6:39:88:66:52: b5:36:0c:65:00:70:84:ae:f0:c1:4d:43:f6:d7:2c: ad:de:67:76:47:a3:14:85:db:42:1e:79:65:4d:24: 26:e3:25:eb:24:0f:46:91:9b:21:f3:f5:5c:7f:21: 74:90:27:cb:51:6b:ce:cc:f8:b7:b5:76:bd:c5:73: 75:9f:e8:af:23:51:45:fb:52:89:63:e4:8c:8c:29: 98:52:a5:bc:89:b9:ee:46:30:95:1c:86:a9:7f:00: 72:85:af:b5:42:04:f6:b8:88:68:69:ca:5a:3b:86: 3b:6a:50:d0:62:ef:6a:7a:ae:2e:ac:22:fe:99:a7: 17:0d:a5:e5:d0:13:e0:1c:36:6e:36:c0:38:97:c9: 4e:b3:09:da:c7:ad:30:ba:87:1d:c1:af:3d:93:c2: b2:3b:23:a2:09:79:2b:16:d9:a5:9f:28:d2:94:23: 11:a1:70:01:41:2e:04:93:fe:bb:31:07:78:31:59: 6c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:0D:99:1A:3C:67:40:0D:97:C8:07:1C:B9:B4:11:5D:13:E7:DE:A3 X509v3 Authority Key Identifier: keyid:D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:19:2f:b9:0f:ca:21:5e:cd:5a:08:6d:12:69:bb:3b:f9:bd: 98:0e:15:4f:e6:cf:65:c2:54:54:93:b0:bc:83:7a:2e:a2:eb: 14:2b:ee:ab:4c:70:b9:6e:47:44:cc:81:db:7c:be:44:ee:0d: 98:89:4a:44:da:16:7b:4e:fd:bd:ad:6b:c0:10:a0:0a:6c:c7: 3a:c9:dc:07:9f:9b:22:0f:0f:e2:14:69:30:b7:e6:ad:64:e0: a0:5a:15:5f:09:54:64:73:7b:73:bf:8e:7d:1f:b3:86:db:1f: 1b:e2:92:a0:5b:57:c4:2b:4f:c1:c7:59:93:a7:32:8b:4c:2a: 45:47:f8:df:24:fe:59:7a:d1:f5:35:0e:0c:17:86:d2:49:9b: e7:39:1a:9c:81:a2:0b:d0:3c:24:94:b9:8a:61:9b:20:c7:11: b3:23:b8:8c:b2:1c:14:b3:90:8d:17:8c:7a:49:e9:f9:8b:29: 13:99:ef:c5:25:70:ff:29:f5:87:81:90:07:2c:90:b8:25:06: b3:53:b0:77:a8:55:02:fe:9e:37:65:85:49:b1:a0:b4:fe:85: b3:18:c9:13:b4:1a:82:98:5b:84:fb:ac:18:2a:b8:fa:23:be: d6:c9:e0:07:42:74:65:06:e8:f5:18:75:b3:d5:86:fa:db:cf: 07:16:a2:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk3QzIxMTAvBgNVBAUTKEQzRDE1QUVFOUE0RjhBRTVDMjgxMTA4QTdEMkQzQUQ4 MUQ0RTc5Q0QwHhcNMjYwMzA2MjAzMDUyWhcNMjYwMzEzMjAzMDUyWjAYMRYwFAYD VQQDEw02OWFiMzk3ZC1lNjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjMSpeNz/p8GR5mNwekCx/rDjBPdgYBvMjNLeSpVJOBB0wh2rWrIsUqND9br woyVreMEZ6Idh2sw+qLAIu5iX+N3CqgCpjmIZlK1NgxlAHCErvDBTUP21yyt3md2 R6MUhdtCHnllTSQm4yXrJA9GkZsh8/VcfyF0kCfLUWvOzPi3tXa9xXN1n+ivI1FF +1KJY+SMjCmYUqW8ibnuRjCVHIapfwByha+1QgT2uIhoacpaO4Y7alDQYu9qeq4u rCL+macXDaXl0BPgHDZuNsA4l8lOswnax60wuocdwa89k8KyOyOiCXkrFtmlnyjS lCMRoXABQS4Ek/67MQd4MVlsGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB8NmRo8 Z0ANl8gHHLm0EV0T596jMB8GA1UdIwQYMBaAFNPRWu6aT4rlwoEQin0tOtgdTnnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTdDMi80RTQyNkRFOEZC RUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1WENnUkNLZlMwNjJCMU9l YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5RmE3cHBQaXVYQ2dSQ0tmUzA2MkIxT2VjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTdDMi80RTQyNkRFOEZCRUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1 WENnUkNLZlMwNjJCMU9lYzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAABkvuQ/KIV7NWghtEmm7O/m9mA4VT+bPZcJUVJOwvIN6LqLrFCvuq0xwuW5H RMyB23y+RO4NmIlKRNoWe079va1rwBCgCmzHOsncB5+bIg8P4hRpMLfmrWTgoFoV XwlUZHN7c7+OfR+zhtsfG+KSoFtXxCtPwcdZk6cyi0wqRUf43yT+WXrR9TUODBeG 0kmb5zkanIGiC9A8JJS5imGbIMcRsyO4jLIcFLOQjReMeknp+YspE5nvxSVw/yn1 h4GQByyQuCUGs1Owd6hVAv6eN2WFSbGgtP6FsxjJE7QagphbhPusGCq4+iO+1sng B0J0ZQbo9Rh1s9WG+tvPBxairg== -----END CERTIFICATE-----Generated at Sat Mar 7 14:20:15 2026 by rpki-client