$ rpki-client -vvf rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft File: Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft (raw, json) Hash identifier: 9JxdDprNdQsXrJB7BYtx2Ckym76/B8FbnkAPuqQXdcw= Subject key identifier: 11:CC:7B:1C:02:D7:BF:A5:59:7A:E7:E5:F6:83:B7:31:D0:1E:54:CF Authority key identifier: 0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A Certificate issuer: /CN=A918E0B2/serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A Certificate serial: 05F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft Manifest number: 05E7 Signing time: Tue 24 Mar 2026 22:39:01 +0000 Manifest this update: Tue 24 Mar 2026 22:39:00 +0000 Manifest next update: Tue 31 Mar 2026 22:39:00 +0000 Files and hashes: 1: Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl (hash: vhYftHvmNqQc1YGVc9p/b3fdyrpNoL7Cy9G4jaYao3E=) 2: 63E3EB3EEF6611EB9A7EFE0EC4F9AE02.roa (hash: DwFRC5Q8naeDAzyAtmNxc5ykjCbZ/7NV7SU48cPZy64=) 3: 64720824EF6611EB9A7EFE0EC4F9AE02.roa (hash: LL0n4MdM8xP/nWYSFwrtL/Mk/fArB+tqMpKJaeazPNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:39:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1527 (0x5f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E0B2, serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A Validity Not Before: Mar 24 22:39:00 2026 GMT Not After : Mar 31 22:39:00 2026 GMT Subject: CN=69c31285-138c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d6:b9:65:94:70:36:a3:fd:5e:f5:4a:76:aa: 3a:d7:cd:ce:e9:90:6d:81:b6:aa:3c:c3:13:30:ce: eb:62:63:8c:18:bd:d3:43:f4:54:5f:bc:35:6e:a2: 9d:f2:fa:07:71:72:f6:c7:9a:89:5e:c2:30:e2:76: d4:39:03:f2:85:21:7e:f0:ef:4e:68:cb:2f:ba:c0: c4:70:9d:a3:1f:21:16:75:f3:af:92:0e:33:f3:46: 6a:e0:9f:91:ea:9b:90:5a:6e:36:a9:0f:ac:5e:a9: e0:0d:7d:a1:f7:10:b7:ad:3b:28:85:3f:25:2f:da: 2e:58:24:05:1e:a0:80:df:10:bf:68:5a:a5:ce:b8: 20:7f:34:c7:3a:39:4f:f7:6b:7b:a7:2c:34:94:51: 8f:29:0c:ab:07:9c:3d:00:46:9e:6b:d0:d1:54:63: 6d:95:31:d6:7e:1b:eb:1d:b2:f4:43:34:e7:b5:5b: 81:c2:2c:92:43:36:e4:a0:36:c2:42:9f:3e:ae:57: 52:5a:b8:04:33:f7:b3:a0:4a:15:07:a0:93:34:27: 40:8a:a6:67:fa:ff:d1:cc:40:1f:4b:1c:6d:ae:de: 36:d5:6c:c2:c3:8e:5e:f9:60:4d:6b:7f:6f:43:e1: fc:e0:eb:38:e7:1e:ed:2d:c4:40:ea:f1:de:fa:4a: 3a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:CC:7B:1C:02:D7:BF:A5:59:7A:E7:E5:F6:83:B7:31:D0:1E:54:CF X509v3 Authority Key Identifier: keyid:0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:dd:d3:44:6b:0c:38:c7:bf:f8:6d:ec:54:09:82:93:69:82: dc:c4:2b:b8:05:a7:12:4e:8a:d4:9e:4f:72:ae:86:60:49:3a: 30:76:97:ae:3e:c1:20:da:fc:7a:b3:e6:6c:17:70:89:b6:8e: b8:67:85:fa:f9:d6:1e:1e:5b:31:6d:d3:e5:f3:4e:4d:0e:f1: db:ef:7a:f8:3e:8b:55:8f:c0:a7:14:38:2d:6a:54:a5:94:b0: fc:36:89:f1:16:21:66:25:1a:e6:50:31:df:38:96:52:7d:39: ca:e5:35:2c:b7:28:74:93:57:bc:27:1c:7c:54:5f:d8:27:25: fe:bb:d1:8d:88:50:d4:95:a4:d1:22:a8:40:f9:d3:8f:8a:df: 97:70:0f:81:cf:1e:1c:bb:f1:91:cd:40:8a:86:d2:a8:15:36: 18:b1:2b:36:c9:a9:42:de:6e:68:f2:a6:b3:44:ee:81:c4:84: 1d:c2:07:5c:9e:27:03:d2:b4:33:60:d4:a1:26:39:35:ef:2c: 2e:cd:40:cb:b1:a1:a7:4a:d5:b0:bf:d7:18:8b:8b:44:81:47: 58:9b:15:f0:f0:90:cd:b1:cd:21:53:54:f0:9d:fb:c5:08:a0: fd:66:67:dd:0d:bb:85:90:b5:d3:64:e7:d3:b4:0a:9a:af:43: 56:9d:bc:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUwQjIxMTAvBgNVBAUTKDBCM0VCQTg4RjFBREExQTFCNTA4OTFCMjY1MzFBM0U3 MDlCRjY1OUEwHhcNMjYwMzI0MjIzOTAwWhcNMjYwMzMxMjIzOTAwWjAYMRYwFAYD VQQDEw02OWMzMTI4NS0xMzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNa5ZZRwNqP9XvVKdqo6183O6ZBtgbaqPMMTMM7rYmOMGL3TQ/RUX7w1bqKd 8voHcXL2x5qJXsIw4nbUOQPyhSF+8O9OaMsvusDEcJ2jHyEWdfOvkg4z80Zq4J+R 6puQWm42qQ+sXqngDX2h9xC3rTsohT8lL9ouWCQFHqCA3xC/aFqlzrggfzTHOjlP 92t7pyw0lFGPKQyrB5w9AEaea9DRVGNtlTHWfhvrHbL0QzTntVuBwiySQzbkoDbC Qp8+rldSWrgEM/ezoEoVB6CTNCdAiqZn+v/RzEAfSxxtrt421WzCw45e+WBNa39v Q+H84Os45x7tLcRA6vHe+ko6qwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBHMexwC 17+lWXrn5faDtzHQHlTPMB8GA1UdIwQYMBaAFAs+uojxraGhtQiRsmUxo+cJv2Wa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTBCMi82NzA0MkMxOEVG NjQxMUVCODMzRkM4MERDNEY5QUUwMi9DejY2aVBHdG9hRzFDSkd5WlRHajV3bV9a Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N6NjZpUEd0b2FHMUNKR3laVEdqNXdtX1paby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTBCMi82NzA0MkMxOEVGNjQxMUVCODMzRkM4MERDNEY5QUUwMi9DejY2aVBHdG9h RzFDSkd5WlRHajV3bV9aWm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAit3TRGsMOMe/+G3sVAmCk2mC3MQruAWnEk6K1J5Pcq6GYEk6MHaXrj7BINr8 erPmbBdwibaOuGeF+vnWHh5bMW3T5fNOTQ7x2+96+D6LVY/ApxQ4LWpUpZSw/DaJ 8RYhZiUa5lAx3ziWUn05yuU1LLcodJNXvCccfFRf2Ccl/rvRjYhQ1JWk0SKoQPnT j4rfl3APgc8eHLvxkc1AiobSqBU2GLErNsmpQt5uaPKms0TugcSEHcIHXJ4nA9K0 M2DUoSY5Ne8sLs1Ay7Ghp0rVsL/XGIuLRIFHWJsV8PCQzbHNIVNU8J37xQig/WZn 3Q27hZC102Tn07QKmq9DVp285w== -----END CERTIFICATE-----Generated at Thu Mar 26 20:42:06 2026 by rpki-client