$ rpki-client -vvf rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft File: CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft (raw, json) Hash identifier: H/J1H5WF0kUI5CUGR1qL1ZqKo/sKIp3t2HF4H06HBA4= Subject key identifier: 5F:1D:BB:CF:5C:DE:B2:78:65:63:3F:68:7D:B4:E7:45:79:ED:2D:BD Authority key identifier: 0A:08:8A:19:BB:DB:61:DE:D1:91:6C:86:0A:B2:B8:BE:E1:86:ED:CD Certificate issuer: /CN=A91777B9/serialNumber=0A088A19BBDB61DED1916C860AB2B8BEE186EDCD Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft Manifest number: 011D Signing time: Fri 27 Mar 2026 05:15:33 +0000 Manifest this update: Fri 27 Mar 2026 05:15:33 +0000 Manifest next update: Fri 03 Apr 2026 05:15:33 +0000 Files and hashes: 1: CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl (hash: S9W9vZeJfdsvTx9iF7ECkTdReP6qWrEpZpHsthXnZu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 05:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91777B9, serialNumber=0A088A19BBDB61DED1916C860AB2B8BEE186EDCD Validity Not Before: Mar 27 05:15:33 2026 GMT Not After : Apr 3 05:15:33 2026 GMT Subject: CN=69c61275-98ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a4:89:11:96:88:e1:d4:36:be:eb:5e:13:7b: b4:1a:0b:f0:a1:bd:45:97:cc:e5:72:a2:97:cf:5c: d0:b9:0f:a1:bd:e8:2c:e4:d6:6c:dc:36:bf:f9:72: ef:a7:59:a6:7e:d7:6b:41:fc:38:27:95:c9:41:06: ea:1b:aa:8e:f5:f0:f8:cb:fb:62:7e:79:16:56:5a: 35:d8:60:50:e9:bd:4d:a6:e3:69:83:21:d2:a9:89: 3f:e8:ea:41:0a:f0:6a:b0:5f:ad:81:cb:ed:14:93: 5a:31:60:57:d1:0d:8f:4e:a5:53:c4:3a:8e:94:79: 97:6a:47:cf:1d:72:0f:55:56:3b:08:36:54:74:f6: 11:9f:e9:e0:5d:c0:74:c9:e8:24:3b:27:3a:8d:18: 21:0d:41:25:b6:20:42:d7:b1:5e:8d:d4:82:b7:53: 56:b0:e3:18:ae:21:fd:e1:be:3b:d3:81:37:64:66: d8:8d:36:1b:dd:6a:ad:e1:7a:dc:86:42:39:75:8e: bf:12:7a:b8:76:74:a7:14:66:4e:b1:35:5f:2a:0f: 95:47:3f:c2:8d:8d:20:97:1d:50:55:22:8d:d0:29: dc:3b:55:9e:95:e9:0b:8b:83:ca:7c:03:80:07:ab: 04:9d:04:9a:59:01:52:0f:68:90:78:b9:bb:0e:74: 51:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1D:BB:CF:5C:DE:B2:78:65:63:3F:68:7D:B4:E7:45:79:ED:2D:BD X509v3 Authority Key Identifier: keyid:0A:08:8A:19:BB:DB:61:DE:D1:91:6C:86:0A:B2:B8:BE:E1:86:ED:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:05:e1:9c:f1:43:55:a4:d8:57:19:0d:a8:12:92:37:88:5b: ff:c7:50:d7:5a:4d:05:b2:30:d4:0f:db:40:ab:a0:b2:55:da: 73:40:42:5c:df:8a:2c:e8:76:6f:ea:9e:df:2b:ed:5d:f4:ae: ad:47:c5:1e:4a:70:db:89:82:56:c5:e1:03:20:40:fc:c5:3a: 41:28:08:07:80:30:02:c8:c2:59:32:fc:8f:5a:c5:46:cf:d4: 97:bc:09:9a:61:83:90:8a:a3:60:fe:18:69:96:00:26:a3:a2: 2d:dd:03:72:25:75:3d:c5:98:21:89:f5:00:3c:6f:f1:6d:4a: 03:32:a1:26:50:1d:e8:8f:bc:b5:1c:2b:5a:21:35:cf:61:be: 75:28:0b:9a:e4:df:00:db:9f:50:93:53:bb:3d:26:e0:6f:0a: 8c:21:07:d7:8c:ce:8c:14:77:41:f1:73:6d:3b:2c:cc:df:78: 14:56:3d:6f:1b:b6:24:95:ac:04:04:85:50:12:ea:49:fc:e3: fd:d8:22:77:94:f1:cf:8e:2c:72:db:80:f8:5f:4a:84:80:8d: 56:d5:b5:36:4e:f4:06:cc:2f:b3:c7:d9:a3:57:2f:e0:63:2e: 49:5e:5e:9f:9c:eb:50:94:09:f1:c2:86:dc:57:52:70:90:fb: 1d:92:ad:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc3QjkxMTAvBgNVBAUTKDBBMDg4QTE5QkJEQjYxREVEMTkxNkM4NjBBQjJCOEJF RTE4NkVEQ0QwHhcNMjYwMzI3MDUxNTMzWhcNMjYwNDAzMDUxNTMzWjAYMRYwFAYD VQQDEw02OWM2MTI3NS05OGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqSJEZaI4dQ2vuteE3u0Ggvwob1Fl8zlcqKXz1zQuQ+hvegs5NZs3Da/+XLv p1mmftdrQfw4J5XJQQbqG6qO9fD4y/tifnkWVlo12GBQ6b1NpuNpgyHSqYk/6OpB CvBqsF+tgcvtFJNaMWBX0Q2PTqVTxDqOlHmXakfPHXIPVVY7CDZUdPYRn+ngXcB0 yegkOyc6jRghDUEltiBC17FejdSCt1NWsOMYriH94b4704E3ZGbYjTYb3Wqt4Xrc hkI5dY6/Enq4dnSnFGZOsTVfKg+VRz/CjY0glx1QVSKN0CncO1WelekLi4PKfAOA B6sEnQSaWQFSD2iQeLm7DnRRZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF8du89c 3rJ4ZWM/aH2050V57S29MB8GA1UdIwQYMBaAFAoIihm722He0ZFshgqyuL7hhu3N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzdCOS9EQjUxN0IwODc1 QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9DZ2lLR2J2YllkN1JrV3lHQ3JLNHZ1R0c3 YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnaUtHYnZiWWQ3UmtXeUdDcks0dnVHRzdjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzdCOS9EQjUxN0IwODc1QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9DZ2lLR2J2Yllk N1JrV3lHQ3JLNHZ1R0c3YzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArgXhnPFDVaTYVxkNqBKSN4hb/8dQ11pNBbIw1A/bQKugslXac0BCXN+KLOh2 b+qe3yvtXfSurUfFHkpw24mCVsXhAyBA/MU6QSgIB4AwAsjCWTL8j1rFRs/Ul7wJ mmGDkIqjYP4YaZYAJqOiLd0DciV1PcWYIYn1ADxv8W1KAzKhJlAd6I+8tRwrWiE1 z2G+dSgLmuTfANufUJNTuz0m4G8KjCEH14zOjBR3QfFzbTsszN94FFY9bxu2JJWs BASFUBLqSfzj/dgid5Txz44sctuA+F9KhICNVtW1Nk70Bswvs8fZo1cv4GMuSV5e n5zrUJQJ8cKG3FdScJD7HZKtWA== -----END CERTIFICATE-----Generated at Sat Mar 28 12:03:00 2026 by rpki-client