$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft File: 0WaBZz8RihAOwgFHTM-7UYeD2WA.mft (raw, json) Hash identifier: m0KQLBTroOa15qhXqhmiAIz0hsqdJxUbpDt4+zL7wjc= Subject key identifier: 23:EB:4D:80:68:67:DD:10:8A:C8:D5:08:78:E6:D5:EE:3B:4E:45:94 Authority key identifier: D1:66:81:67:3F:11:8A:10:0E:C2:01:47:4C:CF:BB:51:87:83:D9:60 Certificate issuer: /CN=A91C9E82/serialNumber=D16681673F118A100EC201474CCFBB518783D960 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft Manifest number: 3F Signing time: Sat 07 Mar 2026 03:03:49 +0000 Manifest this update: Sat 07 Mar 2026 03:03:49 +0000 Manifest next update: Sat 14 Mar 2026 03:03:49 +0000 Files and hashes: 1: 0WaBZz8RihAOwgFHTM-7UYeD2WA.crl (hash: tnFiXKrl7UHeWaaDVE50MlQbSAqXiOG+THqI+HRWkPE=) 2: D798F0A0C04B11F0A85A7449C4F9AE02.roa (hash: D1XVMH1vA5La0IfiYGXEnqhzX2rQW9q2kW1yPmg2KPU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.crl rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 02:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9E82, serialNumber=D16681673F118A100EC201474CCFBB518783D960 Validity Not Before: Mar 7 03:03:49 2026 GMT Not After : Mar 14 03:03:49 2026 GMT Subject: CN=69ab9595-0b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ef:12:81:e2:cb:91:c7:7d:bd:3a:93:50:e5: 26:36:ce:05:b3:4f:4b:6c:36:95:b1:15:e4:dd:05: 42:82:2b:8a:84:86:f4:91:c5:b1:c7:b7:66:7b:73: 88:d9:45:70:ce:0d:34:d8:16:eb:5c:40:92:ee:2e: 17:47:af:b0:0c:35:e5:8c:2e:c9:14:85:de:77:cc: 5b:c8:7f:62:58:ab:ad:e5:ba:e2:00:10:30:cb:ef: a2:7a:71:19:39:40:3e:27:e0:5e:d5:01:b2:ec:75: 98:c0:fe:49:90:55:82:09:e3:d7:20:b5:9b:e9:e0: 49:70:7c:fe:3c:ad:60:fb:cf:0d:a2:95:76:56:2d: 79:4b:27:c0:ff:e7:1a:d9:e6:10:08:aa:12:c1:19: 19:4f:06:e2:82:0c:7e:49:77:61:72:d7:fe:40:ad: 82:dc:ab:31:50:7d:24:07:a1:b7:5d:45:e2:75:8d: af:3d:b4:60:72:6d:06:d9:87:46:46:c1:ae:17:1d: 54:8f:8d:a5:97:76:b4:4d:24:25:24:fd:dc:96:92: 67:bf:69:ce:48:cf:17:a6:e2:43:03:ea:b0:38:ab: 0f:a6:85:09:ba:f4:39:d4:87:5d:6c:09:d1:74:93: d4:01:50:3d:d2:d0:9d:28:ee:dc:74:6f:0d:65:45: 5f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:EB:4D:80:68:67:DD:10:8A:C8:D5:08:78:E6:D5:EE:3B:4E:45:94 X509v3 Authority Key Identifier: keyid:D1:66:81:67:3F:11:8A:10:0E:C2:01:47:4C:CF:BB:51:87:83:D9:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:17:dc:7d:5e:85:60:97:c0:b9:64:22:e6:c7:38:02:28:d2: 5a:a6:a6:24:d5:b0:a5:a4:6b:af:fa:9a:99:fe:cb:fb:ff:77: 02:34:b7:14:9a:23:d9:10:c8:99:39:a4:26:6e:fe:97:c4:d4: 86:0b:c4:ea:9c:f1:25:9c:c3:a2:66:73:b1:3a:56:d0:44:e9: 38:13:bb:b4:7a:77:30:11:77:d3:39:aa:2b:88:92:25:03:cb: eb:67:31:7a:95:3a:21:0e:c8:01:4e:ba:61:49:59:9c:14:85: a7:08:a1:16:55:f2:9f:89:fe:1b:ca:26:9c:58:e0:f2:67:62: 61:0c:ec:8a:d9:36:49:ed:d7:83:a2:68:e7:72:22:02:f1:15: 8e:ca:b2:ff:bf:43:2d:fd:30:e5:59:a4:25:87:03:21:ea:34: f1:78:1c:ec:c4:b2:a4:5b:92:2e:38:3a:76:1c:a5:ca:a1:d6: d9:86:07:83:f2:d1:83:74:69:56:87:a3:da:b0:85:0a:27:e8: fd:2a:70:f0:74:1b:68:94:5c:f0:5a:be:7d:c6:01:ca:af:35: 77:3e:90:d1:f8:d7:d4:d4:81:ba:15:85:b2:8b:dd:e9:14:bd: 5c:d6:79:32:e3:2d:b9:9c:b3:02:b6:2d:dd:00:ba:75:38:43: 18:94:11:61 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUU4MjExMC8GA1UEBRMoRDE2NjgxNjczRjExOEExMDBFQzIwMTQ3NENDRkJCNTE4 NzgzRDk2MDAeFw0yNjAzMDcwMzAzNDlaFw0yNjAzMTQwMzAzNDlaMBgxFjAUBgNV BAMTDTY5YWI5NTk1LTBiN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCd7xKB4suRx329OpNQ5SY2zgWzT0tsNpWxFeTdBUKCK4qEhvSRxbHHt2Z7c4jZ RXDODTTYFutcQJLuLhdHr7AMNeWMLskUhd53zFvIf2JYq63luuIAEDDL76J6cRk5 QD4n4F7VAbLsdZjA/kmQVYIJ49cgtZvp4ElwfP48rWD7zw2ilXZWLXlLJ8D/5xrZ 5hAIqhLBGRlPBuKCDH5Jd2Fy1/5ArYLcqzFQfSQHobddReJ1ja89tGBybQbZh0ZG wa4XHVSPjaWXdrRNJCUk/dyWkme/ac5Izxem4kMD6rA4qw+mhQm69DnUh11sCdF0 k9QBUD3S0J0o7tx0bw1lRV/bAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUI+tNgGhn 3RCKyNUIeObV7jtORZQwHwYDVR0jBBgwFoAU0WaBZz8RihAOwgFHTM+7UYeD2WAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5RTgyL0IzN0I3ODRBQkU5 RTExRjA5ODFCNEMzMkM0RjlBRTAyLzBXYUJaejhSaWhBT3dnRkhUTS03VVllRDJX QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvMFdhQlp6OFJpaEFPd2dGSFRNLTdVWWVEMldBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 RTgyL0IzN0I3ODRBQkU5RTExRjA5ODFCNEMzMkM0RjlBRTAyLzBXYUJaejhSaWhB T3dnRkhUTS03VVllRDJXQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAkF9x9XoVgl8C5ZCLmxzgCKNJapqYk1bClpGuv+pqZ/sv7/3cCNLcUmiPZEMiZ OaQmbv6XxNSGC8TqnPElnMOiZnOxOlbQROk4E7u0encwEXfTOaoriJIlA8vrZzF6 lTohDsgBTrphSVmcFIWnCKEWVfKfif4byiacWODyZ2JhDOyK2TZJ7deDomjnciIC 8RWOyrL/v0Mt/TDlWaQlhwMh6jTxeBzsxLKkW5IuODp2HKXKodbZhgeD8tGDdGlW h6PasIUKJ+j9KnDwdBtolFzwWr59xgHKrzV3PpDR+NfU1IG6FYWyi93pFL1c1nky 4y25nLMCti3dALp1OEMYlBFh -----END CERTIFICATE-----Generated at Sat Mar 7 14:37:39 2026 by rpki-client