$ rpki-client -vvf rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft File: CBKglmLws-NPK1pRwz6OknA-Q2k.mft (raw, json) Hash identifier: BhSkv6WeVjgGhnE5uoWml31s7p48O64PfmaezALAoFU= Subject key identifier: C5:C7:59:1B:37:CD:78:34:26:E4:16:C2:3D:6C:0F:72:4D:48:50:9E Authority key identifier: 08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69 Certificate issuer: /CN=A91547EC/serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369 Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft Manifest number: 6B Signing time: Wed 25 Mar 2026 07:06:51 +0000 Manifest this update: Wed 25 Mar 2026 07:06:50 +0000 Manifest next update: Wed 01 Apr 2026 07:06:50 +0000 Files and hashes: 1: CBKglmLws-NPK1pRwz6OknA-Q2k.crl (hash: 1+SRjEEK4N0ZG6+rPmm9WBpvBg/oZj4jPjvh26Ex2aU=) 2: 7CB1102487DD11F0A89FB377C4F9AE02.roa (hash: LJuHTr9dIvZYkAmMksiQJJP2qElg6VwwLMqlMwzQK3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:06:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91547EC, serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369 Validity Not Before: Mar 25 07:06:50 2026 GMT Not After : Apr 1 07:06:50 2026 GMT Subject: CN=69c3898b-a103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:be:1e:08:d9:91:d2:fe:94:15:48:96:2a:bf: 4a:fd:a0:92:05:b4:9b:32:23:29:74:68:73:89:85: 89:14:28:04:63:2f:75:1e:30:a3:09:fc:da:1b:a3: c1:b7:a5:b9:d6:37:8c:98:0f:d2:e5:3d:67:6e:21: 4f:ac:2d:ab:99:bc:82:04:e3:9e:5a:e2:fc:1b:b5: 97:72:da:a7:ae:9d:70:c9:a1:5c:f6:5f:6c:1a:aa: 88:c6:9e:2a:e6:8b:aa:a9:eb:a3:11:dc:0c:44:b1: 2e:39:91:1a:23:d2:2d:a8:36:7b:60:74:db:72:1c: f5:d7:c8:54:d2:7a:f5:b3:5c:28:9a:1b:42:5e:b1: 72:a5:8c:88:1a:98:70:37:09:d2:8e:e7:ae:39:94: 5d:6a:de:0c:ee:d4:4c:37:89:06:6f:86:35:ff:40: 76:db:47:d2:ec:31:79:c4:a0:2a:b1:bf:b7:db:68: d2:c5:f8:e5:dd:d6:c2:60:ca:33:3e:62:71:bc:89: 89:e3:20:de:32:c8:c5:c5:31:89:a3:3c:45:92:e9: 45:dc:49:60:bc:f8:37:7b:b7:41:60:ea:09:86:31: 3f:88:aa:f3:ee:1c:f5:0b:c9:ba:7b:bb:06:23:ab: 27:ca:bd:fb:57:9f:6f:7f:6a:22:3b:37:2c:5f:a1: 00:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C7:59:1B:37:CD:78:34:26:E4:16:C2:3D:6C:0F:72:4D:48:50:9E X509v3 Authority Key Identifier: keyid:08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:02:dd:a2:9b:5b:74:51:89:ab:c2:b2:b3:e9:d3:e7:21:b7: 19:fe:dd:31:df:3f:ec:57:ff:ee:00:0a:28:20:95:02:2f:4a: 59:5b:cd:4b:20:0a:87:f0:1e:67:be:8d:ff:38:2e:1a:06:d8: 9f:e5:d7:f7:2d:3e:00:28:64:05:a2:03:d9:ce:8b:69:5d:3f: fe:95:57:e0:c5:fe:cd:28:9f:fd:69:c5:1a:15:00:3a:f0:35: 0c:24:a7:ec:f7:80:aa:6e:54:c6:96:a3:b7:01:68:cf:9a:a3: 44:3b:ec:63:ed:43:aa:71:8f:55:1c:0c:ac:a0:27:9b:9f:77: e3:77:43:f0:87:3e:0a:e2:56:31:67:31:04:c8:47:e0:ea:5a: 9d:16:d3:da:bc:76:bb:2d:f7:82:b7:45:a4:ca:88:b9:1d:01: 89:fa:e2:4f:31:38:74:c6:be:e6:90:10:05:7e:40:92:9a:f0: 00:98:3a:1f:cc:b3:59:08:76:a3:aa:1c:a8:73:79:f1:65:4e: 11:3e:a5:8a:d0:17:00:e6:11:05:5e:d2:ee:b1:84:92:ed:51: 43:46:76:ac:2b:6a:ba:62:ce:0b:8c:1e:c1:2a:40:05:39:32: 06:31:a9:d6:fb:75:69:97:e3:69:d1:89:a7:27:cb:2c:0b:65: e7:97:9d:e5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDdFQzExMC8GA1UEBRMoMDgxMkEwOTY2MkYwQjNFMzRGMkI1QTUxQzMzRThFOTI3 MDNFNDM2OTAeFw0yNjAzMjUwNzA2NTBaFw0yNjA0MDEwNzA2NTBaMBgxFjAUBgNV BAMTDTY5YzM4OThiLWExMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2vh4I2ZHS/pQVSJYqv0r9oJIFtJsyIyl0aHOJhYkUKARjL3UeMKMJ/Nobo8G3 pbnWN4yYD9LlPWduIU+sLauZvIIE455a4vwbtZdy2qeunXDJoVz2X2waqojGnirm i6qp66MR3AxEsS45kRoj0i2oNntgdNtyHPXXyFTSevWzXCiaG0JesXKljIgamHA3 CdKO5645lF1q3gzu1Ew3iQZvhjX/QHbbR9LsMXnEoCqxv7fbaNLF+OXd1sJgyjM+ YnG8iYnjIN4yyMXFMYmjPEWS6UXcSWC8+Dd7t0Fg6gmGMT+IqvPuHPULybp7uwYj qyfKvftXn29/aiI7NyxfoQAfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUxcdZGzfN eDQm5BbCPWwPck1IUJ4wHwYDVR0jBBgwFoAUCBKglmLws+NPK1pRwz6OknA+Q2kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0N0VDLzI1NjM1N0M4ODdE RDExRjBCNzRDRkU3NkM0RjlBRTAyL0NCS2dsbUx3cy1OUEsxcFJ3ejZPa25BLVEy ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ0JLZ2xtTHdzLU5QSzFwUnd6Nk9rbkEtUTJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 N0VDLzI1NjM1N0M4ODdERDExRjBCNzRDRkU3NkM0RjlBRTAyL0NCS2dsbUx3cy1O UEsxcFJ3ejZPa25BLVEyay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAwAt2im1t0UYmrwrKz6dPnIbcZ/t0x3z/sV//uAAooIJUCL0pZW81LIAqH8B5n vo3/OC4aBtif5df3LT4AKGQFogPZzotpXT/+lVfgxf7NKJ/9acUaFQA68DUMJKfs 94CqblTGlqO3AWjPmqNEO+xj7UOqcY9VHAysoCebn3fjd0Pwhz4K4lYxZzEEyEfg 6lqdFtPavHa7LfeCt0Wkyoi5HQGJ+uJPMTh0xr7mkBAFfkCSmvAAmDofzLNZCHaj qhyoc3nxZU4RPqWK0BcA5hEFXtLusYSS7VFDRnasK2q6Ys4LjB7BKkAFOTIGManW +3Vpl+Np0YmnJ8ssC2Xnl53l -----END CERTIFICATE-----Generated at Thu Mar 26 14:11:15 2026 by rpki-client