$ rpki-client -vvf rpki.apnic.net/member_repository/A913E42C/0F8B6ACE001111F1892C277E406F56BC/ClvdO0-5-Mviogt7R_zLS4UwJTc.mft File: ClvdO0-5-Mviogt7R_zLS4UwJTc.mft (raw, json) Hash identifier: qVDsrm4JG0wT6lxMNAI9XzkGhw6hgN0mS7VMCIoqu1I= Subject key identifier: AB:62:E1:8A:27:3B:2A:01:C1:20:4E:EB:5D:24:5B:B5:C8:A4:43:33 Authority key identifier: 0A:5B:DD:3B:4F:B9:F8:CB:E2:A2:0B:7B:47:FC:CB:4B:85:30:25:37 Certificate issuer: /CN=A913E42C/serialNumber=0A5BDD3B4FB9F8CBE2A20B7B47FCCB4B85302537 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ClvdO0-5-Mviogt7R_zLS4UwJTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E42C/0F8B6ACE001111F1892C277E406F56BC/ClvdO0-5-Mviogt7R_zLS4UwJTc.mft Manifest number: 27 Signing time: Wed 25 Mar 2026 08:05:16 +0000 Manifest this update: Wed 25 Mar 2026 08:05:15 +0000 Manifest next update: Wed 01 Apr 2026 08:05:15 +0000 Files and hashes: 1: ClvdO0-5-Mviogt7R_zLS4UwJTc.crl (hash: tHcdXSwVPfUkyJGVTUdr1c/ZsbYEruc7Fxes4agLu7M=) 2: 4CC7C93C00F711F194E0B0C53C6F56BC.roa (hash: 7vAVjvl3vUeCtEH/2NqH9j2x3y9M77GMQ2JCNqdOMHA=) 3: 4C4BE7FE00F711F194E0B0C53C6F56BC.roa (hash: svd60AEEHpNpfVRn7OrH+VBGP9pdW4hSFbTkUKQrx6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E42C/0F8B6ACE001111F1892C277E406F56BC/ClvdO0-5-Mviogt7R_zLS4UwJTc.crl rsync://rpki.apnic.net/member_repository/A913E42C/0F8B6ACE001111F1892C277E406F56BC/ClvdO0-5-Mviogt7R_zLS4UwJTc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ClvdO0-5-Mviogt7R_zLS4UwJTc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E42C, serialNumber=0A5BDD3B4FB9F8CBE2A20B7B47FCCB4B85302537 Validity Not Before: Mar 25 08:05:15 2026 GMT Not After : Apr 1 08:05:15 2026 GMT Subject: CN=69c3973b-1fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4a:1b:2e:e0:bb:5c:42:eb:e1:c1:aa:37:21: ae:94:4d:06:01:23:b8:ff:62:0f:8a:d3:2c:ef:ee: dc:13:6f:6b:8d:9b:6b:3f:ad:a8:fb:d9:86:70:85: eb:87:0e:f4:9e:e4:a6:56:a9:8e:6a:85:ce:42:0b: 62:c7:96:7c:94:2d:de:b0:f1:2a:e7:9c:80:7e:72: 05:7c:4d:2c:a4:de:4b:3e:03:28:df:eb:a5:5c:30: 45:a3:5d:c1:7a:c6:f9:8a:89:c5:03:16:c8:6c:5c: dd:be:2d:d0:94:33:4f:20:92:ce:bc:ef:2c:05:8d: 9f:f3:50:7e:0c:e4:fe:57:c0:cc:0c:7a:d2:64:e3: 4e:b7:d2:3e:24:e2:7d:ab:22:41:e6:d9:2b:c6:ea: 07:5f:38:b1:3f:03:13:ca:c9:a9:1f:5e:dc:7f:18: 1d:9b:f9:8e:27:08:08:1c:9c:7a:3a:6a:b3:c0:45: d3:bd:a3:c1:89:a5:bd:59:bb:59:94:45:e2:f9:bd: bb:c4:1c:bb:02:6f:f3:46:68:b4:15:a3:c7:57:a7: ea:bd:62:c4:e5:80:46:4e:95:36:17:42:b4:ed:2b: 6a:c1:db:52:e8:f1:3e:7d:12:1b:cd:5f:b1:33:5b: 65:16:87:f7:12:25:70:de:15:04:6f:f6:a8:32:28: b6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:62:E1:8A:27:3B:2A:01:C1:20:4E:EB:5D:24:5B:B5:C8:A4:43:33 X509v3 Authority Key Identifier: keyid:0A:5B:DD:3B:4F:B9:F8:CB:E2:A2:0B:7B:47:FC:CB:4B:85:30:25:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E42C/0F8B6ACE001111F1892C277E406F56BC/ClvdO0-5-Mviogt7R_zLS4UwJTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ClvdO0-5-Mviogt7R_zLS4UwJTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E42C/0F8B6ACE001111F1892C277E406F56BC/ClvdO0-5-Mviogt7R_zLS4UwJTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:96:1b:c7:45:2c:0d:4c:6b:e5:f2:59:7a:da:2f:50:57:42: d6:0c:ef:0c:df:48:10:d5:74:63:61:2e:cb:4a:be:8c:54:1c: 4c:45:15:62:eb:7c:e4:f5:f7:3c:81:50:02:2a:a2:c1:87:b0: 33:bf:32:d3:90:80:66:d1:bb:b5:2f:2b:43:ea:47:46:62:88: 86:b5:58:b9:15:a2:3a:a6:05:69:c9:48:db:36:6e:ce:19:fa: 6e:1b:e0:3c:30:b2:61:bd:f8:93:54:03:86:2d:41:9e:f8:93: 6e:8f:a6:81:58:be:3e:d5:c3:e4:84:17:01:5f:bc:6f:c9:ec: 8a:6c:ca:c9:29:eb:2d:d0:6d:f7:05:7b:b4:ee:be:d6:84:57: ce:1b:21:ce:a8:ff:98:00:b1:da:b5:c0:ae:03:0f:48:23:14: c7:f4:3d:32:83:82:65:b8:15:68:0b:c8:c6:33:64:97:9b:b3: ac:9e:58:f8:45:96:58:e8:d8:c6:04:c8:79:f2:fe:5a:c4:86: f8:ce:c9:9e:81:29:88:d7:9c:a2:97:0e:e5:1a:c9:5d:46:33: c9:40:04:4b:c2:9c:da:32:39:81:7c:9d:cc:64:f0:37:f5:ce: 94:fc:da:98:80:c4:d3:08:d8:a6:0d:c2:f9:af:b3:92:c4:89: 18:ab:14:6d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RTQyQzExMC8GA1UEBRMoMEE1QkREM0I0RkI5RjhDQkUyQTIwQjdCNDdGQ0NCNEI4 NTMwMjUzNzAeFw0yNjAzMjUwODA1MTVaFw0yNjA0MDEwODA1MTVaMBgxFjAUBgNV BAMTDTY5YzM5NzNiLTFmZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0Shsu4LtcQuvhwao3Ia6UTQYBI7j/Yg+K0yzv7twTb2uNm2s/raj72YZwheuH DvSe5KZWqY5qhc5CC2LHlnyULd6w8SrnnIB+cgV8TSyk3ks+Ayjf66VcMEWjXcF6 xvmKicUDFshsXN2+LdCUM08gks687ywFjZ/zUH4M5P5XwMwMetJk40630j4k4n2r IkHm2SvG6gdfOLE/AxPKyakfXtx/GB2b+Y4nCAgcnHo6arPARdO9o8GJpb1Zu1mU ReL5vbvEHLsCb/NGaLQVo8dXp+q9YsTlgEZOlTYXQrTtK2rB21Lo8T59EhvNX7Ez W2UWh/cSJXDeFQRv9qgyKLZPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUq2Lhiic7 KgHBIE7rXSRbtcikQzMwHwYDVR0jBBgwFoAUClvdO0+5+Mviogt7R/zLS4UwJTcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFNDJDLzBGOEI2QUNFMDAx MTExRjE4OTJDMjc3RTQwNkY1NkJDL0NsdmRPMC01LU12aW9ndDdSX3pMUzRVd0pU Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvQ2x2ZE8wLTUtTXZpb2d0N1JfekxTNFV3SlRjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF NDJDLzBGOEI2QUNFMDAxMTExRjE4OTJDMjc3RTQwNkY1NkJDL0NsdmRPMC01LU12 aW9ndDdSX3pMUzRVd0pUYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCFlhvHRSwNTGvl8ll62i9QV0LWDO8M30gQ1XRjYS7LSr6MVBxMRRVi63zk9fc8 gVACKqLBh7AzvzLTkIBm0bu1LytD6kdGYoiGtVi5FaI6pgVpyUjbNm7OGfpuG+A8 MLJhvfiTVAOGLUGe+JNuj6aBWL4+1cPkhBcBX7xvyeyKbMrJKest0G33BXu07r7W hFfOGyHOqP+YALHatcCuAw9IIxTH9D0yg4JluBVoC8jGM2SXm7Osnlj4RZZY6NjG BMh58v5axIb4zsmegSmI15yilw7lGsldRjPJQARLwpzaMjmBfJ3MZPA39c6U/NqY gMTTCNimDcL5r7OSxIkYqxRt -----END CERTIFICATE-----Generated at Thu Mar 26 09:50:16 2026 by rpki-client