$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft File: SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft (raw, json) Hash identifier: 5s+zUu4Y9fqrB7z2pH6DKVHpV9M7cNfNd8WIf5nh0N8= Subject key identifier: 47:C5:A2:F3:DE:98:59:1C:49:C6:F3:2E:57:62:25:8D:C8:9F:01:63 Authority key identifier: 49:9D:69:1B:0F:73:2D:90:06:E9:51:3C:60:B7:36:6B:4E:69:04:00 Certificate issuer: /CN=A91D2B9A/serialNumber=499D691B0F732D9006E9513C60B7366B4E690400 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft Manifest number: 22 Signing time: Sat 07 Mar 2026 08:06:32 +0000 Manifest this update: Sat 07 Mar 2026 08:06:32 +0000 Manifest next update: Sat 14 Mar 2026 08:06:32 +0000 Files and hashes: 1: SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl (hash: P0oV7EKMd19vUxJC5HbDJTZdYlM+8nZ4txjobfEcIv4=) 2: 75BE67B2F12311F09E054F8D4F6F56BC.roa (hash: QeHn1agdKxmdJdH278JH44lkIuCADGys4RpsqprN2FU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 02:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2B9A, serialNumber=499D691B0F732D9006E9513C60B7366B4E690400 Validity Not Before: Mar 7 08:06:32 2026 GMT Not After : Mar 14 08:06:32 2026 GMT Subject: CN=69abdc88-4323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3f:74:8d:ef:9c:85:46:31:f7:4d:98:78:35: 21:79:b7:38:fb:2e:bd:f0:3a:87:9c:47:70:ff:8b: e8:9a:4b:f6:3d:68:7c:00:57:a4:3c:e5:63:ff:9d: dd:1a:76:4a:1a:90:b3:72:11:cc:e0:cc:65:47:7c: d5:4d:4a:b2:20:9b:3e:25:34:a1:39:33:8d:fc:fd: c0:c8:2e:df:d6:f2:3f:eb:9f:cd:0e:19:7c:67:00: 03:ce:0e:6b:21:b6:0b:0f:7b:8d:65:36:16:a9:a0: 96:8a:99:b8:37:54:16:fd:c7:0b:e0:71:30:04:ff: 02:8c:f5:fd:5d:1e:2a:2f:62:b3:0a:af:be:e3:4f: 7a:0c:83:2a:33:89:c2:7e:66:7b:e0:7d:7c:b0:e1: ae:29:b8:ed:02:e1:29:2c:5a:3a:b5:67:0d:1d:d8: 9b:93:a2:00:27:58:51:b8:5a:7f:32:01:98:2e:a1: f6:b3:79:93:73:58:a1:7a:c2:26:b8:d5:0e:c3:25: 69:4c:10:d5:42:48:e9:fb:09:be:65:14:5f:68:32: cb:09:25:26:42:1f:1b:1d:23:eb:7a:3d:f5:d0:ca: 30:b2:fb:1b:ae:09:4b:d5:c2:70:00:36:45:df:91: ca:ed:c0:71:8c:92:62:2e:4d:b6:7b:72:14:cd:e6: 89:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C5:A2:F3:DE:98:59:1C:49:C6:F3:2E:57:62:25:8D:C8:9F:01:63 X509v3 Authority Key Identifier: keyid:49:9D:69:1B:0F:73:2D:90:06:E9:51:3C:60:B7:36:6B:4E:69:04:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:7d:74:53:5f:a4:19:94:6f:e7:af:96:94:38:57:14:a5:bb: 23:5c:06:58:bd:8e:5b:61:8e:bb:3b:d5:1a:ce:ce:6c:cd:6d: 45:a4:ec:1a:bb:fd:e4:b2:0d:d2:60:71:01:e1:0a:57:9e:7c: 28:20:f2:d8:8d:94:d4:ec:4d:e9:b4:94:16:4a:7d:c6:27:a0: 9f:69:8b:52:2b:50:be:8f:94:43:42:74:36:43:e8:2a:55:73: 05:19:8b:54:d8:97:39:41:07:6a:40:9b:fb:8c:bc:32:35:a7: 6c:d1:64:00:e2:dd:c2:57:4e:b4:98:ca:cd:29:b1:bd:50:7f: e4:ed:5e:ab:0a:65:0e:bb:bc:1b:17:17:31:32:16:5c:4c:7f: 93:22:d1:c9:e8:43:1d:15:6a:90:bb:14:73:46:dc:93:4b:91: 2e:11:76:66:5d:57:d5:83:7f:21:2a:5f:a6:e2:d5:41:7d:75: 87:b1:4e:7f:df:4e:38:c5:9f:b1:e0:47:87:6f:02:9a:67:4f: 25:32:c2:84:4c:49:4c:81:37:5e:cf:3a:c5:92:cd:95:d4:73: f4:a8:4e:e5:b0:fa:77:21:9b:b9:30:ee:dc:67:d9:ec:c5:cf: 0c:81:15:52:4b:29:df:38:39:1b:3d:f8:91:5e:fc:d3:e1:c6: 13:f9:9a:99 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkI5QTExMC8GA1UEBRMoNDk5RDY5MUIwRjczMkQ5MDA2RTk1MTNDNjBCNzM2NkI0 RTY5MDQwMDAeFw0yNjAzMDcwODA2MzJaFw0yNjAzMTQwODA2MzJaMBgxFjAUBgNV BAMTDTY5YWJkYzg4LTQzMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxP3SN75yFRjH3TZh4NSF5tzj7Lr3wOoecR3D/i+iaS/Y9aHwAV6Q85WP/nd0a dkoakLNyEczgzGVHfNVNSrIgmz4lNKE5M438/cDILt/W8j/rn80OGXxnAAPODmsh tgsPe41lNhapoJaKmbg3VBb9xwvgcTAE/wKM9f1dHiovYrMKr77jT3oMgyozicJ+ ZnvgfXyw4a4puO0C4SksWjq1Zw0d2JuTogAnWFG4Wn8yAZguofazeZNzWKF6wia4 1Q7DJWlMENVCSOn7Cb5lFF9oMssJJSZCHxsdI+t6PfXQyjCy+xuuCUvVwnAANkXf kcrtwHGMkmIuTbZ7chTN5olfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUR8Wi896Y WRxJxvMuV2IljcifAWMwHwYDVR0jBBgwFoAUSZ1pGw9zLZAG6VE8YLc2a05pBAAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQjlBLzc3OTY5QjhDRjEy MjExRjBBQzVDREE3RTRFNkY1NkJDL1NaMXBHdzl6TFpBRzZWRThZTGMyYTA1cEJB QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvU1oxcEd3OXpMWkFHNlZFOFlMYzJhMDVwQkFBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy QjlBLzc3OTY5QjhDRjEyMjExRjBBQzVDREE3RTRFNkY1NkJDL1NaMXBHdzl6TFpB RzZWRThZTGMyYTA1cEJBQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCnfXRTX6QZlG/nr5aUOFcUpbsjXAZYvY5bYY67O9Uazs5szW1FpOwau/3ksg3S YHEB4QpXnnwoIPLYjZTU7E3ptJQWSn3GJ6CfaYtSK1C+j5RDQnQ2Q+gqVXMFGYtU 2Jc5QQdqQJv7jLwyNads0WQA4t3CV060mMrNKbG9UH/k7V6rCmUOu7wbFxcxMhZc TH+TItHJ6EMdFWqQuxRzRtyTS5EuEXZmXVfVg38hKl+m4tVBfXWHsU5/3044xZ+x 4EeHbwKaZ08lMsKETElMgTdezzrFks2V1HP0qE7lsPp3IZu5MO7cZ9nsxc8MgRVS SynfODkbPfiRXvzT4cYT+ZqZ -----END CERTIFICATE-----Generated at Sat Mar 7 14:36:56 2026 by rpki-client