$ rpki-client -vvf rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft File: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft (raw, json) Hash identifier: hBMzs9ey0BNRsit0bKwirkt2NsRH0SSuytMspqRSKoU= Subject key identifier: EF:1F:BC:96:19:4F:D4:40:C7:72:21:36:45:C1:7B:47:C3:08:D5:9B Authority key identifier: 09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00 Certificate issuer: /CN=A91F05B5/serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00 Certificate serial: 01FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft Manifest number: 01F3 Signing time: Fri 13 Mar 2026 02:24:14 +0000 Manifest this update: Fri 13 Mar 2026 02:24:14 +0000 Manifest next update: Fri 20 Mar 2026 02:24:14 +0000 Files and hashes: 1: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl (hash: nxxXyLeoB3Q3tnoWxchiu3AKzZgBBQAFGU4u7X/yReQ=) 2: E0A69DBC2AB311EE9CA5E515C4F9AE02.roa (hash: 7Bxn3wZA5E3LlFzXPZWxpmh9knM5LDb9n3/rau33dLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 02:24:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 506 (0x1fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F05B5, serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00 Validity Not Before: Mar 13 02:24:14 2026 GMT Not After : Mar 20 02:24:14 2026 GMT Subject: CN=69b3754e-c428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9a:50:4b:0d:b5:18:3b:b7:3a:12:86:16:21: 44:d2:86:d4:49:25:85:a0:6e:95:5e:42:65:f2:98: 0d:52:ab:f9:7d:2a:19:0d:e6:51:9f:1f:e3:5f:53: b2:7a:55:39:d9:57:59:d1:92:dc:78:3e:04:00:e6: ba:5f:2f:8d:03:ba:0e:5e:68:7e:2e:fc:c0:a3:12: d5:a5:c1:0f:e6:a2:8d:11:b1:2d:0b:b0:d9:6d:9e: 6d:d2:3b:9d:fe:8d:75:04:b9:41:08:9a:ab:7f:96: fb:d1:c7:c7:41:1e:6e:c9:c3:7f:6e:b5:9e:6e:ac: 54:e8:b1:37:0c:6d:1a:62:1e:3a:96:05:fe:a7:3e: a7:3e:68:f8:62:08:24:99:5f:cd:77:73:a5:fa:15: 62:70:58:1e:de:7b:45:f9:63:bf:a7:84:de:2b:b1: 44:16:a5:fc:ec:d3:7a:c2:fd:b8:de:47:88:13:0a: 47:a0:3c:b5:82:ae:22:58:44:77:32:45:d9:26:05: 39:67:81:23:61:63:31:f4:4d:8d:52:82:af:90:63: 0a:98:d9:2b:eb:70:04:27:01:4c:74:7a:9f:bd:2f: a6:78:91:73:f9:ef:12:57:13:ea:ce:22:5f:94:d1: 21:e7:32:09:11:80:c3:c0:ff:57:cf:47:89:55:52: 08:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1F:BC:96:19:4F:D4:40:C7:72:21:36:45:C1:7B:47:C3:08:D5:9B X509v3 Authority Key Identifier: keyid:09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:d9:98:3d:69:0c:93:48:56:03:df:a7:c0:f5:dd:26:68:ff: de:81:df:90:d9:04:85:18:55:5a:c0:c0:91:c4:f0:30:e5:d4: 3c:c3:bb:44:5e:d8:77:23:cd:7b:5c:68:f6:19:53:a3:2a:23: 4e:89:4b:00:bc:8d:4e:ec:73:2e:b2:18:1f:b9:5e:e4:b9:06: 91:f7:ca:02:53:d5:fa:a6:1f:3e:f9:e1:83:4c:c8:96:13:35: 1c:18:4d:eb:52:c1:37:82:66:fb:82:94:74:5c:30:3a:e5:2e: 73:b9:93:a9:d7:a9:6d:ca:a2:5a:02:d2:18:22:94:f2:e5:ce: 18:aa:51:82:a8:ac:86:1f:93:9f:9a:e5:28:00:2f:ac:ad:eb: 41:e8:53:b8:8d:e7:79:b4:8b:9f:01:e9:1b:18:17:17:a0:cc: 8a:c3:be:2a:64:ef:3f:2a:2c:ee:ef:01:51:a2:e7:ac:d8:d6: b6:f7:0b:af:b7:51:db:3c:50:20:45:bb:ad:d2:a1:17:8a:1a: c7:de:00:bf:54:03:69:06:29:0b:a7:86:b9:05:d1:b1:03:a1: 13:6e:96:aa:74:ee:0f:86:2a:15:c2:82:00:6b:72:7f:05:d0: 7c:8a:62:ba:11:b7:ef:65:21:d4:84:ff:7f:5d:6e:c4:4f:ed: f5:b6:51:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA1QjUxMTAvBgNVBAUTKDA5NUY2QzZCQjM4N0M2OTMyRkRBMDFDMEJGQTYyNkY2 QUFDN0JCMDAwHhcNMjYwMzEzMDIyNDE0WhcNMjYwMzIwMDIyNDE0WjAYMRYwFAYD VQQDEw02OWIzNzU0ZS1jNDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZpQSw21GDu3OhKGFiFE0obUSSWFoG6VXkJl8pgNUqv5fSoZDeZRnx/jX1Oy elU52VdZ0ZLceD4EAOa6Xy+NA7oOXmh+LvzAoxLVpcEP5qKNEbEtC7DZbZ5t0jud /o11BLlBCJqrf5b70cfHQR5uycN/brWebqxU6LE3DG0aYh46lgX+pz6nPmj4Yggk mV/Nd3Ol+hVicFge3ntF+WO/p4TeK7FEFqX87NN6wv243keIEwpHoDy1gq4iWER3 MkXZJgU5Z4EjYWMx9E2NUoKvkGMKmNkr63AEJwFMdHqfvS+meJFz+e8SVxPqziJf lNEh5zIJEYDDwP9Xz0eJVVIIzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO8fvJYZ T9RAx3IhNkXBe0fDCNWbMB8GA1UdIwQYMBaAFAlfbGuzh8aTL9oBwL+mJvaqx7sA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDVCNS80NzUwMTIwNjJB QjMxMUVFOEZBRTcyMTRDNEY5QUUwMi9DVjlzYTdPSHhwTXYyZ0hBdjZZbTlxckh1 d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWOXNhN09IeHBNdjJnSEF2NlltOXFySHV3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDVCNS80NzUwMTIwNjJBQjMxMUVFOEZBRTcyMTRDNEY5QUUwMi9DVjlzYTdPSHhw TXYyZ0hBdjZZbTlxckh1d0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsNmYPWkMk0hWA9+nwPXdJmj/3oHfkNkEhRhVWsDAkcTwMOXUPMO7RF7YdyPN e1xo9hlToyojTolLALyNTuxzLrIYH7le5LkGkffKAlPV+qYfPvnhg0zIlhM1HBhN 61LBN4Jm+4KUdFwwOuUuc7mTqdepbcqiWgLSGCKU8uXOGKpRgqishh+Tn5rlKAAv rK3rQehTuI3nebSLnwHpGxgXF6DMisO+KmTvPyos7u8BUaLnrNjWtvcLr7dR2zxQ IEW7rdKhF4oax94Av1QDaQYpC6eGuQXRsQOhE26WqnTuD4YqFcKCAGtyfwXQfIpi uhG372Uh1IT/f11uxE/t9bZRHw== -----END CERTIFICATE-----Generated at Sat Mar 14 22:14:10 2026 by rpki-client