$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft File: -cREz887ajdUceO1SHT8K0myxyY.mft (raw, json) Hash identifier: gaeHECjL/ImUnKVnDL4X8ZnZl1l0Rl32ji5CA8f0D24= Subject key identifier: B8:5F:5C:56:7D:67:8C:63:F5:91:45:5D:91:A5:D0:51:C1:8A:11:41 Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 Certificate issuer: /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft Manifest number: 0129 Signing time: Fri 13 Mar 2026 04:39:25 +0000 Manifest this update: Fri 13 Mar 2026 04:39:24 +0000 Manifest next update: Fri 20 Mar 2026 04:39:24 +0000 Files and hashes: 1: -cREz887ajdUceO1SHT8K0myxyY.crl (hash: d9ZaqfzB6SaxXA41Cjh5Bihnk8F1lrmRoFUVf1nf3BU=) 2: BD75B3E6818211F0AE3B2562C4F9AE02.roa (hash: deIU7Zl7zxSEqTIjGaroE4xnq1wHqEBfpYOwiKotx0g=) 3: DF6D4464818211F097447962C4F9AE02.roa (hash: jhQL0W/2W5KHiOPkasyItTgEf7kv9NJDTrAi7+qfj00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 04:39:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B9A, serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Validity Not Before: Mar 13 04:39:24 2026 GMT Not After : Mar 20 04:39:24 2026 GMT Subject: CN=69b394fd-29d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b7:03:bc:a9:1a:99:46:45:d4:31:76:15:4b: 31:82:42:6f:bf:c3:c8:8b:ab:7b:c4:6c:96:a1:1f: 0a:97:b0:8b:34:93:9c:06:ee:58:40:1e:5d:22:23: 7e:01:26:23:08:76:7a:55:9e:f6:a3:38:d2:65:c6: 04:ba:f9:70:ff:30:48:fe:ff:fb:9a:4c:23:b5:23: e4:39:e8:1f:09:39:d8:c7:0a:88:7d:02:a1:ec:5b: 1b:c8:d0:6a:97:2d:b2:d0:7c:ea:b2:fe:7e:5f:d1: cb:4a:55:a5:c1:13:81:10:ad:9c:42:df:47:22:6a: 72:81:77:ea:6e:f1:ca:f3:8e:42:b7:59:c9:0b:94: fb:f5:92:54:57:e1:26:3b:57:ea:8b:7b:cc:19:f8: b0:c4:f6:8d:18:d7:8b:af:07:d6:da:79:af:b7:53: 2a:5a:a5:f6:52:80:6f:77:6c:02:2a:bb:33:b7:0a: f5:5b:7b:22:10:c1:43:da:4d:f1:f1:ee:4c:bc:87: 41:c3:8d:a3:5e:41:23:9d:a8:e7:11:5b:94:53:ab: c7:f8:c1:b1:e8:3e:27:a8:bd:2a:8d:91:ca:07:a0: 34:84:b6:c9:0d:8d:1f:ab:95:0f:69:76:9d:7b:72: 1c:4b:37:ea:10:58:24:8a:ed:07:fc:48:5d:15:93: 0e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:5F:5C:56:7D:67:8C:63:F5:91:45:5D:91:A5:D0:51:C1:8A:11:41 X509v3 Authority Key Identifier: keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:1c:7b:a0:50:92:55:80:47:48:d9:d6:0d:97:2c:3f:57:7c: e4:a8:da:27:b5:c5:d4:1b:85:f8:51:7f:46:90:3e:d3:5e:eb: c1:b1:45:f9:f7:b5:99:27:30:8d:61:f0:21:d1:d0:3c:b0:e3: 04:43:53:b7:df:88:f9:90:11:e8:5a:42:5f:bf:32:55:90:54: 81:76:cf:d2:4a:1b:83:52:e1:1e:47:47:d2:df:c1:ea:0b:f7: 58:ec:ce:a6:9b:6d:64:52:a5:38:9a:a2:d8:9f:eb:7f:21:4c: 85:79:4d:e2:99:c4:b5:82:95:c3:66:ea:39:46:2e:ce:b9:d7: 6e:bb:46:b5:17:24:d4:85:35:d1:15:c2:83:46:7f:b8:48:cd: 76:82:bb:0f:69:ae:60:55:9c:f1:f7:29:20:b2:4f:46:b8:f7: 4c:3c:83:09:15:ce:5f:ac:e8:f4:90:fe:36:fb:20:57:cb:8e: cd:8a:93:b4:e8:86:3a:ee:f3:6e:ff:39:57:ec:c9:d9:2f:c2: 74:cd:57:11:be:9b:b8:40:cf:6a:3b:1d:ac:d3:94:da:ff:58: 8a:d6:ae:2a:5c:55:39:fd:da:71:35:0a:d7:06:da:58:d2:96: 0f:97:a9:8a:b6:7a:fc:86:b6:f2:0b:13:07:29:32:46:cf:bf: c9:8a:68:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCOUExMTAvBgNVBAUTKEY5QzQ0NENGQ0YzQjZBMzc1NDcxRTNCNTQ4NzRGQzJC NDlCMkM3MjYwHhcNMjYwMzEzMDQzOTI0WhcNMjYwMzIwMDQzOTI0WjAYMRYwFAYD VQQDEw02OWIzOTRmZC0yOWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLcDvKkamUZF1DF2FUsxgkJvv8PIi6t7xGyWoR8Kl7CLNJOcBu5YQB5dIiN+ ASYjCHZ6VZ72ozjSZcYEuvlw/zBI/v/7mkwjtSPkOegfCTnYxwqIfQKh7FsbyNBq ly2y0Hzqsv5+X9HLSlWlwROBEK2cQt9HImpygXfqbvHK845Ct1nJC5T79ZJUV+Em O1fqi3vMGfiwxPaNGNeLrwfW2nmvt1MqWqX2UoBvd2wCKrsztwr1W3siEMFD2k3x 8e5MvIdBw42jXkEjnajnEVuUU6vH+MGx6D4nqL0qjZHKB6A0hLbJDY0fq5UPaXad e3IcSzfqEFgkiu0H/EhdFZMOPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLhfXFZ9 Z4xj9ZFFXZGl0FHBihFBMB8GA1UdIwQYMBaAFPnERM/PO2o3VHHjtUh0/CtJsscm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI5QS8xMTYwMTI4RTYx NTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2FqZFVjZU8xU0hUOEswbXl4 eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1jUkV6ODg3YWpkVWNlTzFTSFQ4SzBteXh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI5QS8xMTYwMTI4RTYxNTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2Fq ZFVjZU8xU0hUOEswbXl4eVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUhx7oFCSVYBHSNnWDZcsP1d85KjaJ7XF1BuF+FF/RpA+017rwbFF+fe1mScw jWHwIdHQPLDjBENTt9+I+ZAR6FpCX78yVZBUgXbP0kobg1LhHkdH0t/B6gv3WOzO ppttZFKlOJqi2J/rfyFMhXlN4pnEtYKVw2bqOUYuzrnXbrtGtRck1IU10RXCg0Z/ uEjNdoK7D2muYFWc8fcpILJPRrj3TDyDCRXOX6zo9JD+NvsgV8uOzYqTtOiGOu7z bv85V+zJ2S/CdM1XEb6buEDPajsdrNOU2v9YitauKlxVOf3acTUK1wbaWNKWD5ep irZ6/Ia28gsTBykyRs+/yYpoCw== -----END CERTIFICATE-----Generated at Sat Mar 14 10:43:44 2026 by rpki-client