$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft File: rQUyxqhtSiMdAK5R-tgo9qK2qos.mft (raw, json) Hash identifier: KK3c9DZNOZzz6HVdEpi5/eARvmi8OZRtcN75AzmLsF4= Subject key identifier: 15:40:96:9A:20:A1:2F:F9:3A:40:9A:62:B3:63:82:50:14:DA:6A:1A Authority key identifier: AD:05:32:C6:A8:6D:4A:23:1D:00:AE:51:FA:D8:28:F6:A2:B6:AA:8B Certificate issuer: /CN=A91DE334/serialNumber=AD0532C6A86D4A231D00AE51FAD828F6A2B6AA8B Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQUyxqhtSiMdAK5R-tgo9qK2qos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft Manifest number: 2B Signing time: Tue 03 Mar 2026 08:29:13 +0000 Manifest this update: Tue 03 Mar 2026 08:29:12 +0000 Manifest next update: Tue 10 Mar 2026 08:29:12 +0000 Files and hashes: 1: rQUyxqhtSiMdAK5R-tgo9qK2qos.crl (hash: N1SyIbzotF/AbGsDmbUlZsXGjrijwntSMtB03fu5dAY=) 2: 38D21898F49411F08DD0DDBA746F56BC.roa (hash: 2TmQLP3BLhtpTJZcn16jZ9UXy19wv2rakTfjxerLpXo=) 3: 81346F96F49411F0BFEF52BD746F56BC.roa (hash: KtQdT3wKXi5XLWS0IbUBySou/W4dYxSu83urtoPZVvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.crl rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQUyxqhtSiMdAK5R-tgo9qK2qos.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 08:29:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE334, serialNumber=AD0532C6A86D4A231D00AE51FAD828F6A2B6AA8B Validity Not Before: Mar 3 08:29:12 2026 GMT Not After : Mar 10 08:29:12 2026 GMT Subject: CN=69a69bd9-a88d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:22:d9:3e:94:a9:76:06:76:6b:1d:3f:39:d6: c4:f3:c0:1e:bf:26:32:bc:ba:61:e8:3f:18:46:20: 3a:94:3f:98:03:b1:b3:5d:e4:2f:58:d5:dc:e6:15: 60:c9:6b:8c:72:29:c8:f6:5e:20:86:ad:37:67:c1: 22:5b:a4:63:cc:5e:4f:bc:b0:29:2c:d1:94:dc:32: 55:5b:95:01:62:f3:b8:05:90:48:0e:89:f9:f4:ae: 92:2a:ca:43:b3:18:04:05:8c:3e:e5:f9:c3:d9:29: 9e:24:e7:a3:a5:8b:ca:3a:db:56:64:28:c7:e0:ae: 85:32:d2:04:aa:09:a9:86:1f:3b:75:af:09:af:73: 21:84:4a:fd:1a:9e:fa:77:97:44:29:59:46:32:1c: 80:eb:c4:2d:fd:68:09:ff:3c:e3:07:10:ab:29:15: d9:f6:f7:a0:1b:b1:18:38:27:4e:95:27:51:51:dc: 86:7e:b4:96:f9:3d:19:26:3a:89:28:66:8c:b2:ec: a6:16:d5:ef:a6:e0:41:23:a0:5e:0a:15:ad:b4:02: d1:13:14:79:06:da:50:ab:fa:05:fe:24:30:b7:6b: 1f:08:33:3f:7c:6f:cb:79:3b:ac:48:34:25:5b:59: c4:98:84:34:8d:b3:fb:f6:5d:a9:a9:86:8d:32:5a: 5f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:40:96:9A:20:A1:2F:F9:3A:40:9A:62:B3:63:82:50:14:DA:6A:1A X509v3 Authority Key Identifier: keyid:AD:05:32:C6:A8:6D:4A:23:1D:00:AE:51:FA:D8:28:F6:A2:B6:AA:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQUyxqhtSiMdAK5R-tgo9qK2qos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:9b:0b:c6:20:cb:2b:12:54:39:18:7f:51:e9:81:7b:a9:4b: 5f:49:66:e5:43:f0:5b:b3:e8:e9:5b:e7:8d:4e:d2:00:1a:91: df:9d:ec:c2:49:7e:f6:1d:91:f9:bf:0a:3f:4a:6b:46:3b:a6: b3:0b:2b:a1:ee:a7:a0:0d:5c:a2:aa:81:18:30:df:72:26:21: f5:74:b7:55:52:80:ea:8d:c1:58:6e:17:04:06:3d:0b:83:45: 81:6a:75:06:e3:55:ce:a4:c8:d4:c0:3c:49:ae:35:d5:b6:43: e1:02:f3:fc:94:85:ff:f2:d7:f2:c2:f2:bf:56:75:8c:2a:17: e0:44:09:82:1f:3e:db:4a:79:10:8b:1c:39:30:b2:76:f5:ec: 8c:27:27:b9:99:35:3f:73:f8:94:08:0d:35:37:1d:cd:cb:51: 93:df:92:89:2e:07:cb:e1:e2:e6:04:d0:fe:97:aa:fa:82:d2: e8:e9:54:65:39:a5:51:1c:9c:b7:2a:97:b8:0e:a1:fb:af:50: dd:ca:28:6a:8c:13:45:5d:14:43:83:75:24:ae:11:63:c7:34: c0:73:d0:3a:72:80:12:a6:21:74:af:81:06:0b:de:98:69:61: 0e:4c:b0:6a:18:4f:3d:46:4e:37:60:19:a6:e7:c6:48:03:7c: 23:0e:d8:8d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RTMzNDExMC8GA1UEBRMoQUQwNTMyQzZBODZENEEyMzFEMDBBRTUxRkFEODI4RjZB MkI2QUE4QjAeFw0yNjAzMDMwODI5MTJaFw0yNjAzMTAwODI5MTJaMBgxFjAUBgNV BAMTDTY5YTY5YmQ5LWE4OGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD6Itk+lKl2BnZrHT851sTzwB6/JjK8umHoPxhGIDqUP5gDsbNd5C9Y1dzmFWDJ a4xyKcj2XiCGrTdnwSJbpGPMXk+8sCks0ZTcMlVblQFi87gFkEgOifn0rpIqykOz GAQFjD7l+cPZKZ4k56Oli8o621ZkKMfgroUy0gSqCamGHzt1rwmvcyGESv0anvp3 l0QpWUYyHIDrxC39aAn/POMHEKspFdn296AbsRg4J06VJ1FR3IZ+tJb5PRkmOoko Zoyy7KYW1e+m4EEjoF4KFa20AtETFHkG2lCr+gX+JDC3ax8IMz98b8t5O6xINCVb WcSYhDSNs/v2Xampho0yWl/LAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFUCWmiCh L/k6QJpis2OCUBTaahowHwYDVR0jBBgwFoAUrQUyxqhtSiMdAK5R+tgo9qK2qosw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFMzM0L0JDNUI0QkJFRTU3 OTExRjA4MzZFRUFBMTQxNkY1NkJDL3JRVXl4cWh0U2lNZEFLNVItdGdvOXFLMnFv cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvclFVeXhxaHRTaU1kQUs1Ui10Z285cUsycW9zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF MzM0L0JDNUI0QkJFRTU3OTExRjA4MzZFRUFBMTQxNkY1NkJDL3JRVXl4cWh0U2lN ZEFLNVItdGdvOXFLMnFvcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCGmwvGIMsrElQ5GH9R6YF7qUtfSWblQ/Bbs+jpW+eNTtIAGpHfnezCSX72HZH5 vwo/SmtGO6azCyuh7qegDVyiqoEYMN9yJiH1dLdVUoDqjcFYbhcEBj0Lg0WBanUG 41XOpMjUwDxJrjXVtkPhAvP8lIX/8tfywvK/VnWMKhfgRAmCHz7bSnkQixw5MLJ2 9eyMJye5mTU/c/iUCA01Nx3Ny1GT35KJLgfL4eLmBND+l6r6gtLo6VRlOaVRHJy3 Kpe4DqH7r1DdyihqjBNFXRRDg3UkrhFjxzTAc9A6coASpiF0r4EGC96YaWEOTLBq GE89Rk43YBmm58ZIA3wjDtiN -----END CERTIFICATE-----Generated at Wed Mar 4 08:32:55 2026 by rpki-client