$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft File: CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft (raw, json) Hash identifier: NS7gHsvWoR52EOET0nA+/Ht0aXysGn1ZcCoVmGHtGZA= Subject key identifier: 2E:6F:4B:28:0E:7F:34:27:CA:83:C7:7A:6C:09:EC:85:8B:AF:9E:16 Authority key identifier: 0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A Certificate issuer: /CN=A91705D7/serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A Certificate serial: 016B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft Manifest number: 0162 Signing time: Wed 25 Mar 2026 04:13:01 +0000 Manifest this update: Wed 25 Mar 2026 04:13:00 +0000 Manifest next update: Wed 01 Apr 2026 04:13:00 +0000 Files and hashes: 1: CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl (hash: lLOFsC9MVw4r05mztbTftoixuVOqr2K4fxGOEQj+pOw=) 2: 71DE3A16C2F511F09F5F373FC4F9AE02.roa (hash: 8TbV+zYNCDzHLyCRMT9o+lX4iB4i5tIxVYs1dczzSvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 363 (0x16b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91705D7, serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A Validity Not Before: Mar 25 04:13:00 2026 GMT Not After : Apr 1 04:13:00 2026 GMT Subject: CN=69c360cd-7235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4e:6a:4c:9a:89:b1:cf:f2:e6:e8:e7:57:be: 2b:20:d0:c8:10:f0:86:0c:01:a2:9d:d4:32:38:2c: 82:f0:61:eb:33:9e:5f:4d:ce:01:40:1b:4f:83:b9: d3:7e:8b:8c:8a:f7:87:b5:f9:51:fd:cc:8d:b0:0b: f0:a9:31:44:9d:fe:b4:d2:7d:8c:10:32:e3:42:19: 32:6a:df:43:bc:15:9d:30:cb:71:e5:2f:23:70:e6: 3b:84:1c:86:42:0d:71:53:cd:56:8b:b4:e3:c3:e3: a9:3b:56:92:32:c3:e3:b6:e2:7e:74:3c:1a:48:d2: f5:33:51:d8:6e:4c:4b:d6:40:c4:e2:7f:74:19:9a: 27:e4:a5:5f:47:08:c6:4b:90:1f:06:37:0d:b0:3b: d9:2b:01:c2:ae:e9:64:07:ac:9d:df:ac:de:e2:4e: b3:7e:15:17:2f:95:30:ab:cf:98:ae:ea:7c:5c:84: 2c:5f:f0:91:56:c5:bc:86:40:4f:ea:d8:47:ea:21: e5:a9:ae:1b:a1:07:7c:8e:ec:b3:45:0f:a2:15:cd: 36:ff:85:12:52:b0:8b:31:0b:45:5b:e4:77:17:9e: 12:6a:32:71:e3:eb:b4:fb:3b:1b:fe:a0:f0:8b:bd: 5e:35:9a:fc:e8:5d:ba:d2:e0:71:72:f8:0a:75:65: 60:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:6F:4B:28:0E:7F:34:27:CA:83:C7:7A:6C:09:EC:85:8B:AF:9E:16 X509v3 Authority Key Identifier: keyid:0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:eb:07:14:13:f7:1c:cc:64:ef:45:98:1a:5b:f7:8c:73:a5: 6e:29:29:e1:73:e9:f4:23:38:1f:d5:bb:ae:8e:9a:0f:08:dd: d0:c1:b9:84:84:d0:28:c5:ba:8d:38:05:7e:43:85:e3:a3:3e: b9:52:a7:91:76:b3:6c:a0:8b:be:4c:f2:bd:45:79:ec:03:4f: 3f:b7:46:86:f8:57:39:f1:3b:4f:14:c3:6f:61:12:3b:d0:67: 80:38:8c:19:2c:6e:b9:9e:47:9a:41:bb:fc:c6:12:a3:1e:e1: 52:d1:85:20:29:d5:f3:a9:3d:f0:47:c1:d9:2d:9c:a1:df:d3: 4f:41:6e:81:3b:29:30:ca:40:ec:c1:b6:60:ac:eb:9a:d9:e2: 8d:bc:7f:89:7f:21:82:0d:57:60:5e:f5:a3:9e:e9:15:a0:8b: ae:50:c6:92:87:a2:35:b0:0b:e2:77:bc:a4:c0:f1:09:08:67: 2d:a3:ae:8e:eb:19:d9:58:26:b9:66:b5:65:40:7b:5e:62:91: b7:3b:ca:1e:b2:a0:59:e3:b1:a7:6f:fa:b7:5f:c0:f8:10:5b: b9:0c:ef:b6:bc:ee:86:fa:0f:94:c9:4b:ef:cf:1a:cd:e0:e3: af:3d:5a:97:07:31:35:83:e8:74:16:53:67:98:89:24:54:79: 0d:0d:eb:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA1RDcxMTAvBgNVBAUTKDBBOEJEMkIwMkZGNjk1MTcxREMwMUU4QzdFNEFBMkQ5 ODhEQTNCOUEwHhcNMjYwMzI1MDQxMzAwWhcNMjYwNDAxMDQxMzAwWjAYMRYwFAYD VQQDEw02OWMzNjBjZC03MjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvU5qTJqJsc/y5ujnV74rINDIEPCGDAGindQyOCyC8GHrM55fTc4BQBtPg7nT fouMiveHtflR/cyNsAvwqTFEnf600n2MEDLjQhkyat9DvBWdMMtx5S8jcOY7hByG Qg1xU81Wi7Tjw+OpO1aSMsPjtuJ+dDwaSNL1M1HYbkxL1kDE4n90GZon5KVfRwjG S5AfBjcNsDvZKwHCrulkB6yd36ze4k6zfhUXL5Uwq8+Yrup8XIQsX/CRVsW8hkBP 6thH6iHlqa4boQd8juyzRQ+iFc02/4USUrCLMQtFW+R3F54SajJx4+u0+zsb/qDw i71eNZr86F260uBxcvgKdWVgqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC5vSygO fzQnyoPHemwJ7IWLr54WMB8GA1UdIwQYMBaAFAqL0rAv9pUXHcAejH5KotmI2jua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDVENy9BMDgxNkVEMDE2 RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9Db3ZTc0NfMmxSY2R3QjZNZmtxaTJZamFP NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NvdlNzQ18ybFJjZHdCNk1ma3FpMllqYU81by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDVENy9BMDgxNkVEMDE2RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9Db3ZTc0NfMmxS Y2R3QjZNZmtxaTJZamFPNW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKOsHFBP3HMxk70WYGlv3jHOlbikp4XPp9CM4H9W7ro6aDwjd0MG5hITQKMW6 jTgFfkOF46M+uVKnkXazbKCLvkzyvUV57ANPP7dGhvhXOfE7TxTDb2ESO9BngDiM GSxuuZ5HmkG7/MYSox7hUtGFICnV86k98EfB2S2cod/TT0FugTspMMpA7MG2YKzr mtnijbx/iX8hgg1XYF71o57pFaCLrlDGkoeiNbAL4ne8pMDxCQhnLaOujusZ2Vgm uWa1ZUB7XmKRtzvKHrKgWeOxp2/6t1/A+BBbuQzvtrzuhvoPlMlL788azeDjrz1a lwcxNYPodBZTZ5iJJFR5DQ3rcg== -----END CERTIFICATE-----Generated at Thu Mar 26 23:01:51 2026 by rpki-client