$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft File: toNIsZBwY8BERWnOsijqUkbQLxk.mft (raw, json) Hash identifier: RETJpgDpyyGon6ReRARGznEiqiYqpjRunL0XS4wh55w= Subject key identifier: 58:31:33:17:57:24:14:E6:14:AC:20:B3:5F:0B:C2:8C:39:D0:17:38 Authority key identifier: B6:83:48:B1:90:70:63:C0:44:45:69:CE:B2:28:EA:52:46:D0:2F:19 Certificate issuer: /CN=A91B3CB5/serialNumber=B68348B1907063C0444569CEB228EA5246D02F19 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft Manifest number: 3E Signing time: Mon 02 Mar 2026 18:12:28 +0000 Manifest this update: Mon 02 Mar 2026 18:12:28 +0000 Manifest next update: Mon 09 Mar 2026 18:12:28 +0000 Files and hashes: 1: toNIsZBwY8BERWnOsijqUkbQLxk.crl (hash: /mm7i5pMINaIaTLMjO8afIhspluOaoXnNi1xxuOGhXk=) 2: 3AF6CDE4CE7E11F0BDD3E452C4F9AE02.roa (hash: 0wi2dknpR06NzdVHMhDQvzTD3ZFfo6Ir3jbrCyXBQX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.crl rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 18:12:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3CB5, serialNumber=B68348B1907063C0444569CEB228EA5246D02F19 Validity Not Before: Mar 2 18:12:28 2026 GMT Not After : Mar 9 18:12:28 2026 GMT Subject: CN=69a5d30c-c377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:21:a4:a2:61:83:3c:f6:3b:28:4c:f0:3c:b7: d6:61:07:39:1a:e2:61:58:0f:a8:96:42:b3:e5:e0: 2e:2d:3f:7c:d0:f1:c4:b4:04:13:e5:17:7a:26:2f: 56:c1:91:6a:f9:59:8e:9e:1a:75:45:72:4d:f3:b7: 21:0b:45:03:78:0e:6d:98:55:5e:45:64:92:1f:25: a4:dc:32:01:6e:41:f9:96:16:f3:f3:e9:a7:03:e3: 48:de:1f:07:b0:ab:55:d1:6f:42:d4:0d:38:c1:15: 6f:be:b8:92:3e:a9:26:fe:5c:30:71:0e:7c:df:7f: 8b:de:4a:13:a5:ae:78:da:41:d5:2e:4a:60:45:0e: 9f:73:22:57:4b:83:7f:5a:29:f6:0a:a4:32:d9:db: fc:a7:e1:70:1d:c6:3a:64:e3:e8:40:51:77:1f:f2: 9a:3b:78:e1:38:b5:ae:0b:e3:f8:85:bd:ce:9b:b1: 88:40:7f:44:a9:11:f2:8b:7c:12:8e:44:c4:2c:d5: 95:98:e8:61:6d:3c:a1:84:2b:92:86:39:be:f5:4c: 0c:2e:67:c0:8a:f3:6f:d6:28:8a:57:7d:d2:28:47: 6d:79:77:50:2e:18:fe:3e:e7:1a:e3:da:05:75:66: 96:2f:94:82:f7:d8:10:04:73:fc:40:41:9a:96:95: 00:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:31:33:17:57:24:14:E6:14:AC:20:B3:5F:0B:C2:8C:39:D0:17:38 X509v3 Authority Key Identifier: keyid:B6:83:48:B1:90:70:63:C0:44:45:69:CE:B2:28:EA:52:46:D0:2F:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:7e:92:62:1c:da:b5:b2:34:ec:c9:9d:0a:8b:63:c3:35:e2: 7b:dc:68:dd:c0:fb:2c:03:54:9b:e2:3f:d3:00:a2:b9:27:bc: 3e:25:78:4f:ab:ac:4d:26:ae:ed:21:48:31:10:82:24:99:71: f7:3a:b0:4b:bd:41:95:e9:77:53:de:da:e8:2e:03:da:3b:e0: b4:e7:d3:00:92:04:b0:fa:47:aa:ae:b5:19:c2:19:06:da:61: db:8a:a9:dc:36:d3:f6:fa:12:8e:af:ec:9f:db:84:59:dd:e0: a0:d3:05:5c:59:09:61:74:0d:e0:3e:22:f7:e2:e3:08:91:d1: bf:4b:48:57:cb:79:16:f4:42:c0:74:c4:f0:40:62:2d:79:ee: 80:32:b4:bb:94:59:f2:d2:ba:50:f2:8d:49:0c:25:74:26:ba: 6d:f1:d4:68:53:d4:b7:a6:92:54:e4:59:65:4a:1f:e1:16:38: f2:5a:85:a6:a7:45:c8:3e:cc:a9:d2:a8:50:61:df:7c:f9:c9: ec:25:8e:8d:9b:e6:f1:40:e6:0f:4f:fd:ff:2f:08:4c:cd:d5: 60:3c:62:60:f4:cc:cd:f5:56:d9:12:20:e8:62:62:35:0e:7e: be:3d:34:15:db:f7:7a:c9:31:a8:12:1d:74:ae:a1:e7:59:d3: 93:f3:93:83 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC M0NCNTExMC8GA1UEBRMoQjY4MzQ4QjE5MDcwNjNDMDQ0NDU2OUNFQjIyOEVBNTI0 NkQwMkYxOTAeFw0yNjAzMDIxODEyMjhaFw0yNjAzMDkxODEyMjhaMBgxFjAUBgNV BAMTDTY5YTVkMzBjLWMzNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYIaSiYYM89jsoTPA8t9ZhBzka4mFYD6iWQrPl4C4tP3zQ8cS0BBPlF3omL1bB kWr5WY6eGnVFck3ztyELRQN4Dm2YVV5FZJIfJaTcMgFuQfmWFvPz6acD40jeHwew q1XRb0LUDTjBFW++uJI+qSb+XDBxDnzff4veShOlrnjaQdUuSmBFDp9zIldLg39a KfYKpDLZ2/yn4XAdxjpk4+hAUXcf8po7eOE4ta4L4/iFvc6bsYhAf0SpEfKLfBKO RMQs1ZWY6GFtPKGEK5KGOb71TAwuZ8CK82/WKIpXfdIoR215d1AuGP4+5xrj2gV1 ZpYvlIL32BAEc/xAQZqWlQDtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWDEzF1ck FOYUrCCzXwvCjDnQFzgwHwYDVR0jBBgwFoAUtoNIsZBwY8BERWnOsijqUkbQLxkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzQ0I1L0VEMjI1NTMyQzQz NDExRjBBODI3QTU3REM0RjlBRTAyL3RvTklzWkJ3WThCRVJXbk9zaWpxVWtiUUx4 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdG9OSXNaQndZOEJFUlduT3NpanFVa2JRTHhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz Q0I1L0VEMjI1NTMyQzQzNDExRjBBODI3QTU3REM0RjlBRTAyL3RvTklzWkJ3WThC RVJXbk9zaWpxVWtiUUx4ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB/fpJiHNq1sjTsyZ0Ki2PDNeJ73GjdwPssA1Sb4j/TAKK5J7w+JXhPq6xNJq7t IUgxEIIkmXH3OrBLvUGV6XdT3troLgPaO+C059MAkgSw+keqrrUZwhkG2mHbiqnc NtP2+hKOr+yf24RZ3eCg0wVcWQlhdA3gPiL34uMIkdG/S0hXy3kW9ELAdMTwQGIt ee6AMrS7lFny0rpQ8o1JDCV0Jrpt8dRoU9S3ppJU5FllSh/hFjjyWoWmp0XIPsyp 0qhQYd98+cnsJY6Nm+bxQOYPT/3/LwhMzdVgPGJg9MzN9VbZEiDoYmI1Dn6+PTQV 2/d6yTGoEh10rqHnWdOT85OD -----END CERTIFICATE-----Generated at Wed Mar 4 08:21:42 2026 by rpki-client