$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft File: CgFEnq6g-yiFx_PFZO6TMac_P_k.mft (raw, json) Hash identifier: oPK8bRecsf0BbRfWHRTDduaWfvvdZNpiSMC3wbT3+Ps= Subject key identifier: F8:2B:C5:51:A4:02:8C:68:3E:51:7E:4F:4F:CD:6A:DA:46:1B:3F:3B Authority key identifier: 0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 Certificate issuer: /CN=A91567D5/serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Certificate serial: 0254 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft Manifest number: 038B Signing time: Fri 27 Mar 2026 01:57:37 +0000 Manifest this update: Fri 27 Mar 2026 01:57:37 +0000 Manifest next update: Fri 03 Apr 2026 01:57:37 +0000 Files and hashes: 1: CgFEnq6g-yiFx_PFZO6TMac_P_k.crl (hash: 5w/3YvbDGiUDaqhAgZ/SSA8zwFYKQTYGY3/eH81eL2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 01:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 596 (0x254) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5, serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Validity Not Before: Mar 27 01:57:37 2026 GMT Not After : Apr 3 01:57:37 2026 GMT Subject: CN=69c5e411-a2b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:55:2b:66:8c:a9:71:87:b4:ab:65:53:be:ea: fd:a2:c9:5d:bd:c1:68:9b:1e:f2:43:64:e9:80:d3: 41:27:26:48:5e:68:7b:14:28:82:49:29:d1:19:41: 6c:d9:e9:8f:ff:22:ff:f3:f5:aa:70:a8:f4:69:d8: a3:ba:24:a8:77:c3:98:0c:11:46:5d:f1:88:a4:27: 93:a1:87:ff:24:27:1f:5d:8b:f7:f7:2f:6f:ac:75: bf:6c:c5:b9:5a:bf:bc:57:e1:3d:64:28:72:e8:c5: 66:05:fa:f6:03:8e:e4:82:b7:7b:60:80:f3:fb:ce: 55:9e:ca:06:60:a1:49:db:bc:2d:ec:75:59:db:21: 63:e0:a1:bb:45:48:e4:11:52:b0:b4:2d:9b:03:55: 84:6a:a4:0e:e0:dc:79:b4:b3:61:b7:79:95:dd:19: 57:1e:73:f0:19:94:cb:17:a8:a9:4e:bd:f3:04:a3: 7b:07:ce:f2:0c:17:7b:0a:89:79:cf:0b:4d:4f:f4: 2a:c7:25:dc:f4:29:25:43:b7:23:7c:bf:2e:ca:15: 3d:76:c5:41:f6:8b:70:c3:2d:54:dc:5d:b3:3f:36: dd:fb:06:c4:2a:b9:5a:e0:c1:a2:4b:33:84:3b:79: 97:0b:a4:52:f2:e2:1a:32:c6:b8:49:8f:57:1f:01: 9f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:2B:C5:51:A4:02:8C:68:3E:51:7E:4F:4F:CD:6A:DA:46:1B:3F:3B X509v3 Authority Key Identifier: keyid:0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:37:0a:7c:67:0b:9e:c2:c2:10:0f:26:dc:a4:da:39:2e:bc: aa:eb:fe:01:b6:db:9b:bc:e1:46:68:15:20:b3:20:1b:8e:08: 62:e9:b9:fb:ea:1b:a5:47:af:06:fd:f6:7c:ce:24:ee:03:00: be:b0:4a:c8:0f:58:bb:bb:c0:cc:78:2c:7a:fb:40:9f:f5:0f: 1c:5a:77:01:25:86:27:3e:1a:64:8c:4d:ae:68:d0:a6:ed:06: c5:1a:a6:b4:d5:3a:4b:ba:f7:d0:80:f3:0f:ba:c3:68:72:d6: e1:31:98:b6:e8:42:62:37:6b:ed:0b:26:f0:d4:96:e9:a9:57: 94:7a:92:06:dc:e2:80:1b:7f:ba:78:ff:0d:95:9d:ff:99:53: 33:c9:4c:66:79:31:af:76:5e:dc:c2:38:ee:19:8b:bd:84:2a: 4a:82:0d:83:a7:8c:1c:ca:23:52:4a:48:24:db:a5:4e:c9:41: b3:d1:8d:63:1a:25:f0:77:76:b9:9d:77:e9:7a:77:88:ea:0c: dc:9c:01:2b:54:58:39:db:ae:e0:f2:b4:db:d3:40:3c:b1:8e: 7c:11:ff:31:74:4d:59:31:6a:9d:61:42:31:de:9b:39:72:a2: 89:23:1c:0d:d5:b9:37:99:b2:fa:7f:56:47:54:9f:3b:76:16: 12:99:8b:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3RDUxMTAvBgNVBAUTKDBBMDE0NDlFQUVBMEZCMjg4NUM3RjNDNTY0RUU5MzMx QTczRjNGRjkwHhcNMjYwMzI3MDE1NzM3WhcNMjYwNDAzMDE1NzM3WjAYMRYwFAYD VQQDEw02OWM1ZTQxMS1hMmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3lUrZoypcYe0q2VTvur9osldvcFomx7yQ2TpgNNBJyZIXmh7FCiCSSnRGUFs 2emP/yL/8/WqcKj0adijuiSod8OYDBFGXfGIpCeToYf/JCcfXYv39y9vrHW/bMW5 Wr+8V+E9ZChy6MVmBfr2A47kgrd7YIDz+85VnsoGYKFJ27wt7HVZ2yFj4KG7RUjk EVKwtC2bA1WEaqQO4Nx5tLNht3mV3RlXHnPwGZTLF6ipTr3zBKN7B87yDBd7Col5 zwtNT/QqxyXc9CklQ7cjfL8uyhU9dsVB9otwwy1U3F2zPzbd+wbEKrla4MGiSzOE O3mXC6RS8uIaMsa4SY9XHwGf7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPgrxVGk AoxoPlF+T0/NatpGGz87MB8GA1UdIwQYMBaAFAoBRJ6uoPsohcfzxWTukzGnPz/5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjdENS9ERUZDQTQ1MkI0 MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15aUZ4X1BGWk82VE1hY19Q X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnRkVucTZnLXlpRnhfUEZaTzZUTWFjX1Bfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjdENS9ERUZDQTQ1MkI0MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15 aUZ4X1BGWk82VE1hY19QX2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAozcKfGcLnsLCEA8m3KTaOS68quv+Abbbm7zhRmgVILMgG44IYum5++obpUev Bv32fM4k7gMAvrBKyA9Yu7vAzHgsevtAn/UPHFp3ASWGJz4aZIxNrmjQpu0GxRqm tNU6S7r30IDzD7rDaHLW4TGYtuhCYjdr7Qsm8NSW6alXlHqSBtzigBt/unj/DZWd /5lTM8lMZnkxr3Ze3MI47hmLvYQqSoINg6eMHMojUkpIJNulTslBs9GNYxol8Hd2 uZ136Xp3iOoM3JwBK1RYOduu4PK029NAPLGOfBH/MXRNWTFqnWFCMd6bOXKiiSMc DdW5N5my+n9WR1SfO3YWEpmLTw== -----END CERTIFICATE-----Generated at Sat Mar 28 15:56:04 2026 by rpki-client