$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft File: 5C9d7yZZtef6JwN2jpSH79xZW7A.mft (raw, json) Hash identifier: 7nXWEB8286UZOk2Gqy4QR1TqjD5lGA47HcxgsZwUQKU= Subject key identifier: DA:81:B1:3B:3C:6D:15:67:C5:BF:BB:BE:E3:E0:7B:46:A5:54:33:8B Authority key identifier: E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0 Certificate issuer: /CN=A91CC4A7/serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft Manifest number: 48 Signing time: Tue 03 Mar 2026 07:57:10 +0000 Manifest this update: Tue 03 Mar 2026 07:57:10 +0000 Manifest next update: Tue 10 Mar 2026 07:57:10 +0000 Files and hashes: 1: 5C9d7yZZtef6JwN2jpSH79xZW7A.crl (hash: NiwZMDP0J0RoZe36PnCRojzNbtg6Ndg1W/oYYrsAcQw=) 2: 944C9A24AB4511F09AA0C458C4F9AE02.roa (hash: 4YrP0rl3gACg5qm8ArvUCizFJDOa1cfOGVN50zaYqQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.crl rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 07:57:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC4A7, serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0 Validity Not Before: Mar 3 07:57:10 2026 GMT Not After : Mar 10 07:57:10 2026 GMT Subject: CN=69a69456-ffa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e9:33:9a:55:1e:6f:fb:ce:44:e2:5d:bf:41: ff:88:e2:bd:4c:9f:e0:0d:0b:3a:6e:f5:fb:78:dc: a1:55:89:e0:78:e1:c8:9a:80:74:ad:aa:9d:1f:9d: 89:7e:a5:99:f3:75:cd:64:00:f7:fd:35:38:7c:57: e7:68:2d:8e:d5:d4:1b:fb:8c:dd:b8:97:74:6c:9b: 01:5a:0a:4f:41:0d:6b:62:41:86:d3:be:c9:a4:71: d7:16:bb:62:b8:e9:92:ba:84:80:76:b5:ae:ba:34: 06:4e:2b:c0:83:f7:70:22:a0:6b:78:65:b8:c5:f9: c2:d7:e9:0b:45:be:25:f6:7c:49:7a:7f:ca:65:48: 6b:50:34:1c:4e:09:66:bc:9a:98:cb:b1:90:0e:9d: 9b:d3:27:30:26:57:18:e6:27:cd:93:a5:62:f5:6a: 4b:3a:16:48:d8:73:3a:94:85:10:0a:3c:f8:78:c0: 74:06:ab:7e:48:46:48:6a:9f:09:fd:02:44:4f:0f: ce:86:ec:51:b3:a0:67:ef:6e:8d:fb:ca:8a:fb:6d: 05:0f:f6:16:a4:33:0e:3f:e0:af:74:a0:40:5c:36: 8d:ac:20:4e:0f:18:aa:ae:7a:8d:39:5f:b4:35:f9: 78:fc:f1:44:6d:4b:0c:09:73:af:77:37:73:2e:a1: ef:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:81:B1:3B:3C:6D:15:67:C5:BF:BB:BE:E3:E0:7B:46:A5:54:33:8B X509v3 Authority Key Identifier: keyid:E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:b3:74:fb:f3:f7:47:24:b7:60:da:84:65:6e:5c:f6:8c:11: 9a:cc:e6:2f:66:a5:b3:59:50:d0:72:34:31:83:49:ba:15:7a: ff:e3:d1:2e:c9:80:52:15:f2:bd:48:2b:5a:a4:6f:e3:89:4d: db:fe:b1:d2:8d:38:a8:58:1b:07:a0:13:d9:51:94:b6:38:1b: 41:f1:24:8f:3a:b7:4a:ed:3f:09:85:32:18:cc:35:ea:18:36: 6d:32:62:3b:ac:36:fe:f7:0c:01:75:30:1e:10:9c:43:01:10: 28:cb:bf:c8:eb:8a:e3:8e:d2:fe:8c:0d:bf:c9:0c:81:d8:a5: ea:f5:c4:b1:40:25:1d:44:f9:aa:de:1b:ac:8e:47:00:82:67: 54:d9:11:d6:64:64:03:64:e6:bf:85:91:c0:c2:44:05:54:86: 64:86:34:3d:79:dd:42:2e:30:7d:a5:98:4e:fb:2d:0e:e7:79: 68:50:92:5a:b5:d4:13:48:fb:79:3a:dc:35:da:08:29:c4:24: 4b:8c:99:3b:5c:40:f9:d2:da:fc:5f:91:e4:01:d1:86:59:e0: 72:98:3a:e3:29:9c:58:cd:6d:d0:15:27:15:fa:fa:2f:f2:37: 8b:b5:09:d1:4b:30:89:db:45:59:52:ba:c6:d7:84:be:de:20: 64:4e:2b:9b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QzRBNzExMC8GA1UEBRMoRTQyRjVERUYyNjU5QjVFN0ZBMjcwMzc2OEU5NDg3RUZE QzU5NUJCMDAeFw0yNjAzMDMwNzU3MTBaFw0yNjAzMTAwNzU3MTBaMBgxFjAUBgNV BAMTDTY5YTY5NDU2LWZmYTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDV6TOaVR5v+85E4l2/Qf+I4r1Mn+ANCzpu9ft43KFVieB44ciagHStqp0fnYl+ pZnzdc1kAPf9NTh8V+doLY7V1Bv7jN24l3RsmwFaCk9BDWtiQYbTvsmkcdcWu2K4 6ZK6hIB2ta66NAZOK8CD93AioGt4ZbjF+cLX6QtFviX2fEl6f8plSGtQNBxOCWa8 mpjLsZAOnZvTJzAmVxjmJ82TpWL1aks6FkjYczqUhRAKPPh4wHQGq35IRkhqnwn9 AkRPD86G7FGzoGfvbo37yor7bQUP9hakMw4/4K90oEBcNo2sIE4PGKqueo05X7Q1 +Xj88URtSwwJc693N3Muoe/3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2oGxOzxt FWfFv7u+4+B7RqVUM4swHwYDVR0jBBgwFoAU5C9d7yZZtef6JwN2jpSH79xZW7Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDNEE3L0ZBOThGQjNFQUI0 NDExRjA4NDNEMDY1N0M0RjlBRTAyLzVDOWQ3eVpadGVmNkp3TjJqcFNINzl4Wlc3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNUM5ZDd5Wlp0ZWY2SndOMmpwU0g3OXhaVzdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND NEE3L0ZBOThGQjNFQUI0NDExRjA4NDNEMDY1N0M0RjlBRTAyLzVDOWQ3eVpadGVm Nkp3TjJqcFNINzl4Wlc3QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDLs3T78/dHJLdg2oRlblz2jBGazOYvZqWzWVDQcjQxg0m6FXr/49EuyYBSFfK9 SCtapG/jiU3b/rHSjTioWBsHoBPZUZS2OBtB8SSPOrdK7T8JhTIYzDXqGDZtMmI7 rDb+9wwBdTAeEJxDARAoy7/I64rjjtL+jA2/yQyB2KXq9cSxQCUdRPmq3husjkcA gmdU2RHWZGQDZOa/hZHAwkQFVIZkhjQ9ed1CLjB9pZhO+y0O53loUJJatdQTSPt5 Otw12ggpxCRLjJk7XED50tr8X5HkAdGGWeBymDrjKZxYzW3QFScV+vov8jeLtQnR SzCJ20VZUrrG14S+3iBkTiub -----END CERTIFICATE-----Generated at Wed Mar 4 08:37:24 2026 by rpki-client