$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft File: CBzlpnA274VGmQv1lMzWMoB0BR0.mft (raw, json) Hash identifier: Tn5SxOY5ICFGptSQeZxnWR48wKLa8WWkBQCEWXIRfQg= Subject key identifier: 9F:E3:85:96:11:03:C1:D3:80:11:58:33:00:BC:A7:6B:20:B8:2C:7F Authority key identifier: 08:1C:E5:A6:70:36:EF:85:46:99:0B:F5:94:CC:D6:32:80:74:05:1D Certificate issuer: /CN=A91AB1F6/serialNumber=081CE5A67036EF8546990BF594CCD6328074051D Certificate serial: 0A10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft Manifest number: 0A03 Signing time: Tue 24 Mar 2026 19:37:25 +0000 Manifest this update: Tue 24 Mar 2026 19:37:25 +0000 Manifest next update: Tue 31 Mar 2026 19:37:25 +0000 Files and hashes: 1: CBzlpnA274VGmQv1lMzWMoB0BR0.crl (hash: wBNWgsSEDUgK266lAMmuvBrCreYIf0RgVduBJb8yFag=) 2: 59675AB20A4011F0AC302962C4F9AE02.roa (hash: 2Iz+yAVxYx71x7F/RxujD049uCoDIu8QgELmnr4mv9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.crl rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:37:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2576 (0xa10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB1F6, serialNumber=081CE5A67036EF8546990BF594CCD6328074051D Validity Not Before: Mar 24 19:37:25 2026 GMT Not After : Mar 31 19:37:25 2026 GMT Subject: CN=69c2e7f5-d3c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3f:73:50:d2:78:5b:8f:28:61:b5:ba:0b:f6: 44:1c:b2:ab:1f:7e:5d:65:78:84:d4:7d:0a:9a:fa: dd:f3:0a:52:59:af:00:f0:f5:0f:32:7f:f1:63:45: d1:a6:20:2d:8a:01:83:3b:4b:a7:b3:21:ac:32:3d: eb:ee:9e:8c:96:93:7a:dc:58:af:c6:43:52:c4:ce: 22:59:f4:51:fa:f2:20:ed:27:42:4f:3d:ac:22:76: 80:ed:10:2b:9a:a7:bc:fe:dc:e1:b6:48:71:59:39: c4:ca:6a:68:f3:cf:4c:ab:c3:ba:89:13:6d:7a:74: 82:cc:51:c6:69:44:0b:ac:8f:54:e6:36:d1:40:63: 25:07:17:f6:bf:f2:86:e6:64:44:df:d4:85:0f:bf: 19:d9:58:ed:cc:73:6a:34:b7:a0:be:fa:c5:1a:09: 4d:e3:b1:e3:d9:a2:bb:f7:db:26:08:98:32:4c:08: c0:39:1e:d4:26:5e:d7:e1:a3:05:c7:cb:fe:97:fc: 49:02:64:42:83:33:9f:6b:db:3d:48:66:85:d1:81: 4d:a2:38:ea:fa:73:17:32:c5:01:a9:f8:d9:4e:92: f0:50:2e:8f:39:cb:3e:16:0d:2c:fd:d1:a5:d4:1b: 59:35:6d:bf:ba:9c:ad:a2:49:1e:0c:74:70:18:b4: b9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E3:85:96:11:03:C1:D3:80:11:58:33:00:BC:A7:6B:20:B8:2C:7F X509v3 Authority Key Identifier: keyid:08:1C:E5:A6:70:36:EF:85:46:99:0B:F5:94:CC:D6:32:80:74:05:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:0f:37:5e:cb:16:67:f9:31:63:38:b8:a4:41:73:57:ca:40: e8:ed:d1:28:6c:13:f7:bd:e6:73:16:99:8d:f1:54:2d:ad:da: ca:b4:79:be:65:ce:b4:8f:ee:13:fe:7c:41:6a:6f:e0:8f:a6: cd:6f:c4:59:b3:dd:80:cd:af:3e:37:f3:cb:b0:d6:f0:f5:8f: 94:1b:4e:de:92:8b:73:0e:9a:5c:90:fa:b7:33:45:2d:c7:27: 3f:f7:77:86:4c:43:36:38:77:ae:82:19:6d:1f:5d:7a:01:d4: fb:9d:77:44:29:d3:d7:70:67:93:6f:d8:db:40:59:8f:b6:99: 3b:f7:c7:0e:17:56:eb:e7:77:b9:e4:ce:68:d4:7d:49:af:23: b2:70:37:88:d3:20:dc:71:a7:56:fa:e2:50:d4:1c:6b:b1:f1: 1a:76:a2:c7:eb:11:2e:9a:b4:56:d7:0d:41:30:0b:21:bf:18: 5b:c8:f2:a9:32:0d:59:de:6a:15:74:e2:ba:e5:a7:00:59:3c: 10:c1:e3:52:5c:dc:6f:b8:16:dd:9e:7c:e1:08:db:f0:6b:34: cb:a2:3d:e7:a6:e6:98:b7:60:a0:b3:98:c7:08:09:bd:26:f4: c1:dd:10:bf:da:e6:11:b4:90:c3:ee:fc:91:15:73:c8:58:2a: 74:be:e8:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICChAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIxRjYxMTAvBgNVBAUTKDA4MUNFNUE2NzAzNkVGODU0Njk5MEJGNTk0Q0NENjMy ODA3NDA1MUQwHhcNMjYwMzI0MTkzNzI1WhcNMjYwMzMxMTkzNzI1WjAYMRYwFAYD VQQDEw02OWMyZTdmNS1kM2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApD9zUNJ4W48oYbW6C/ZEHLKrH35dZXiE1H0Kmvrd8wpSWa8A8PUPMn/xY0XR piAtigGDO0unsyGsMj3r7p6MlpN63FivxkNSxM4iWfRR+vIg7SdCTz2sInaA7RAr mqe8/tzhtkhxWTnEympo889Mq8O6iRNtenSCzFHGaUQLrI9U5jbRQGMlBxf2v/KG 5mRE39SFD78Z2VjtzHNqNLegvvrFGglN47Hj2aK799smCJgyTAjAOR7UJl7X4aMF x8v+l/xJAmRCgzOfa9s9SGaF0YFNojjq+nMXMsUBqfjZTpLwUC6POcs+Fg0s/dGl 1BtZNW2/upytokkeDHRwGLS5NwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ/jhZYR A8HTgBFYMwC8p2sguCx/MB8GA1UdIwQYMBaAFAgc5aZwNu+FRpkL9ZTM1jKAdAUd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjFGNi8wRjE0MDE1MDk0 QzkxMUVBQjFEQjYyN0NDNEY5QUUwMi9DQnpscG5BMjc0VkdtUXYxbE16V01vQjBC UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NCemxwbkEyNzRWR21RdjFsTXpXTW9CMEJSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjFGNi8wRjE0MDE1MDk0QzkxMUVBQjFEQjYyN0NDNEY5QUUwMi9DQnpscG5BMjc0 VkdtUXYxbE16V01vQjBCUjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHQ83XssWZ/kxYzi4pEFzV8pA6O3RKGwT973mcxaZjfFULa3ayrR5vmXOtI/u E/58QWpv4I+mzW/EWbPdgM2vPjfzy7DW8PWPlBtO3pKLcw6aXJD6tzNFLccnP/d3 hkxDNjh3roIZbR9degHU+513RCnT13Bnk2/Y20BZj7aZO/fHDhdW6+d3ueTOaNR9 Sa8jsnA3iNMg3HGnVvriUNQca7HxGnaix+sRLpq0VtcNQTALIb8YW8jyqTINWd5q FXTiuuWnAFk8EMHjUlzcb7gW3Z584Qjb8Gs0y6I956bmmLdgoLOYxwgJvSb0wd0Q v9rmEbSQw+78kRVzyFgqdL7ovg== -----END CERTIFICATE-----Generated at Thu Mar 26 06:22:26 2026 by rpki-client