$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.mft File: F6I2W2QK2rIDQznh5f80TkeLWJg.mft (raw, json) Hash identifier: Aq98le2mrWgNchs4WbBYPbXkeOh6ZsLtZpMiPfXcKWY= Subject key identifier: 7A:C1:B6:97:2D:B4:C4:6A:DE:96:BB:83:C7:30:37:2B:96:FD:0B:66 Authority key identifier: 17:A2:36:5B:64:0A:DA:B2:03:43:39:E1:E5:FF:34:4E:47:8B:58:98 Certificate issuer: /CN=A91E1BB0/serialNumber=17A2365B640ADAB2034339E1E5FF344E478B5898 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F6I2W2QK2rIDQznh5f80TkeLWJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.mft Manifest number: 38 Signing time: Tue 03 Mar 2026 08:10:06 +0000 Manifest this update: Tue 03 Mar 2026 08:10:06 +0000 Manifest next update: Tue 10 Mar 2026 08:10:06 +0000 Files and hashes: 1: F6I2W2QK2rIDQznh5f80TkeLWJg.crl (hash: ktV3GNk6iOv/x531NQXYKtNBK4veumaWormgxQLwzgQ=) 2: CAA5A90CC47811F0833DFF5DC4F9AE02.roa (hash: H8pE2g5ZUOoAMl+wWqQ1EZjDZWZf77Qbks8/czGrNQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.crl rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F6I2W2QK2rIDQznh5f80TkeLWJg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 08:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1BB0, serialNumber=17A2365B640ADAB2034339E1E5FF344E478B5898 Validity Not Before: Mar 3 08:10:06 2026 GMT Not After : Mar 10 08:10:06 2026 GMT Subject: CN=69a6975e-8dae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7f:48:d2:f9:52:54:f6:81:44:df:5e:1a:8f: 44:83:0a:2f:89:07:27:de:be:20:40:65:7b:5d:d2: b5:d6:25:21:90:a1:4b:21:e1:4a:91:7b:37:ce:5d: 77:02:b8:71:4d:b5:9d:c8:90:7f:26:94:9e:7e:b0: 13:7c:fb:ab:ed:fe:bb:05:59:82:42:98:30:d2:08: 80:43:8d:67:6a:a0:10:57:1e:1a:93:f8:89:39:7f: 2c:6d:cd:b4:88:a7:93:e2:5e:1a:cc:16:f6:da:81: 35:ca:9e:50:4f:a2:6d:93:e5:23:4e:ac:83:30:84: 29:f2:86:dc:21:be:0b:3b:56:fc:ed:e1:80:ec:f2: 22:bb:24:6f:ab:d4:d7:8a:e6:49:72:78:7a:94:9f: c6:ef:40:7f:17:25:a2:b9:9d:a4:06:d2:47:99:a0: ed:b4:f3:be:a8:de:b8:d1:69:64:ac:b8:5a:0d:46: 6f:18:8a:52:5a:6e:a1:0c:b9:02:21:46:83:6a:66: 45:3d:d6:69:ff:68:3c:d3:1b:e1:7f:55:dd:09:df: cf:fa:51:46:6d:26:4a:82:3b:6b:17:9c:77:ee:52: 42:b3:73:97:61:4d:d1:49:f1:26:de:cb:a8:ad:de: 26:61:f0:ec:61:eb:66:d9:b9:01:ad:da:25:3b:72: e3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C1:B6:97:2D:B4:C4:6A:DE:96:BB:83:C7:30:37:2B:96:FD:0B:66 X509v3 Authority Key Identifier: keyid:17:A2:36:5B:64:0A:DA:B2:03:43:39:E1:E5:FF:34:4E:47:8B:58:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F6I2W2QK2rIDQznh5f80TkeLWJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:0e:07:fb:f4:8d:e5:90:5b:e1:5f:a8:82:53:39:42:a8:ff: d4:8f:99:ed:76:8a:73:55:e7:0e:f0:b7:36:50:a5:4d:57:df: e3:b5:f7:e1:e5:8a:5a:b4:36:ae:05:5f:8e:b5:79:92:72:7e: 3d:02:49:33:bb:13:ab:62:53:4c:0d:5a:9a:40:2c:02:28:0c: 3a:a4:39:8f:6e:f3:3c:51:76:50:03:e1:75:a1:e9:35:a5:30: 6e:38:88:e7:83:89:57:8c:af:8c:58:3f:ae:eb:a8:e7:cf:93: 31:c3:d6:91:6e:26:39:88:86:92:2e:cd:dd:21:b6:c8:28:fb: f1:e7:48:2f:f5:b1:a8:a5:17:70:41:b5:04:eb:83:6c:76:20: 65:40:e8:43:b7:ce:23:36:8a:59:18:a1:cb:10:fc:a2:dd:cf: c9:eb:6f:48:4d:a7:8f:24:1a:b6:f3:cb:7d:ec:06:e5:b0:dc: f2:12:25:6e:c7:ce:1b:4c:f9:2c:e2:54:cb:1b:be:ac:b5:a5: 0f:43:e9:6a:3c:81:64:c4:b9:2a:89:d2:1c:a3:77:e6:f0:da: f3:bc:c7:36:6c:16:b2:4e:70:83:2b:ae:9f:ac:92:71:09:0f: 3a:d3:dd:7d:aa:03:40:16:04:ce:a6:bd:00:d3:8b:16:9b:4e: d0:ba:77:d5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUJCMDExMC8GA1UEBRMoMTdBMjM2NUI2NDBBREFCMjAzNDMzOUUxRTVGRjM0NEU0 NzhCNTg5ODAeFw0yNjAzMDMwODEwMDZaFw0yNjAzMTAwODEwMDZaMBgxFjAUBgNV BAMTDTY5YTY5NzVlLThkYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7f0jS+VJU9oFE314aj0SDCi+JByfeviBAZXtd0rXWJSGQoUsh4UqRezfOXXcC uHFNtZ3IkH8mlJ5+sBN8+6vt/rsFWYJCmDDSCIBDjWdqoBBXHhqT+Ik5fyxtzbSI p5PiXhrMFvbagTXKnlBPom2T5SNOrIMwhCnyhtwhvgs7Vvzt4YDs8iK7JG+r1NeK 5klyeHqUn8bvQH8XJaK5naQG0keZoO20876o3rjRaWSsuFoNRm8YilJabqEMuQIh RoNqZkU91mn/aDzTG+F/Vd0J38/6UUZtJkqCO2sXnHfuUkKzc5dhTdFJ8Sbey6it 3iZh8Oxh62bZuQGt2iU7cuMjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUesG2ly20 xGrelruDxzA3K5b9C2YwHwYDVR0jBBgwFoAUF6I2W2QK2rIDQznh5f80TkeLWJgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxQkIwLzUzRURCNEQwQzQ3 ODExRjA4NTM4NTAyNUM0RjlBRTAyL0Y2STJXMlFLMnJJRFF6bmg1ZjgwVGtlTFdK Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRjZJMlcyUUsycklEUXpuaDVmODBUa2VMV0pnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx QkIwLzUzRURCNEQwQzQ3ODExRjA4NTM4NTAyNUM0RjlBRTAyL0Y2STJXMlFLMnJJ RFF6bmg1ZjgwVGtlTFdKZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB5Dgf79I3lkFvhX6iCUzlCqP/Uj5ntdopzVecO8Lc2UKVNV9/jtffh5YpatDau BV+OtXmScn49AkkzuxOrYlNMDVqaQCwCKAw6pDmPbvM8UXZQA+F1oek1pTBuOIjn g4lXjK+MWD+u66jnz5Mxw9aRbiY5iIaSLs3dIbbIKPvx50gv9bGopRdwQbUE64Ns diBlQOhDt84jNopZGKHLEPyi3c/J629ITaePJBq288t97AblsNzyEiVux84bTPks 4lTLG76staUPQ+lqPIFkxLkqidIco3fm8NrzvMc2bBayTnCDK66frJJxCQ860919 qgNAFgTOpr0A04sWm07QunfV -----END CERTIFICATE-----Generated at Wed Mar 4 08:22:44 2026 by rpki-client