$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft File: cwYbqQQBgewK602PbgA_g4_JxI8.mft (raw, json) Hash identifier: VF924sk2czWopAEaI4jLeeUCSJX1xepufA07kkCzgiA= Subject key identifier: 73:2E:5B:47:32:53:99:1C:E7:00:F4:25:12:AE:3D:55:E5:EC:A7:9B Authority key identifier: 73:06:1B:A9:04:01:81:EC:0A:EB:4D:8F:6E:00:3F:83:8F:C9:C4:8F Certificate issuer: /CN=A91B65AC/serialNumber=73061BA9040181EC0AEB4D8F6E003F838FC9C48F Certificate serial: 0185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft Manifest number: 017F Signing time: Wed 25 Mar 2026 03:52:19 +0000 Manifest this update: Wed 25 Mar 2026 03:52:18 +0000 Manifest next update: Wed 01 Apr 2026 03:52:18 +0000 Files and hashes: 1: cwYbqQQBgewK602PbgA_g4_JxI8.crl (hash: R0Zx2oM+rpzRaVl2xLY+eyKJK7u1wxtO9UKjWXk00gs=) 2: 7D2E766CE5AF11EE9A0A642FC4F9AE02.roa (hash: kbTV9f4IWgZK9S4apMSRBWK1zjlS8Xrya9owJXlI6Ns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.crl rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B65AC, serialNumber=73061BA9040181EC0AEB4D8F6E003F838FC9C48F Validity Not Before: Mar 25 03:52:18 2026 GMT Not After : Apr 1 03:52:18 2026 GMT Subject: CN=69c35bf2-187a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a4:36:4f:d8:b3:45:ee:18:56:bd:5f:bd:96: 90:01:7c:cb:4a:50:1a:b8:fd:50:59:0e:a7:9f:a6: 54:87:3c:35:01:a9:d7:ab:9e:d3:05:9f:ad:d5:89: 24:99:37:1a:a7:22:9f:f3:45:37:ad:17:91:7e:33: 29:bd:b9:d5:1d:d1:44:36:04:13:5e:20:d8:80:3b: 45:d5:4f:ca:56:cd:77:6d:26:e6:b0:24:ca:ee:70: 21:97:b1:2b:b8:8b:1d:b4:64:bc:d5:a8:2f:1f:0b: 40:60:a7:f2:5b:99:67:79:93:4b:34:a9:c3:00:c0: a7:48:f2:ef:88:c3:49:d0:53:9e:06:a2:2f:4d:4c: 89:fe:07:a2:d3:1a:b3:dc:e7:bc:b5:39:a4:c8:91: e4:a9:47:69:77:62:d0:a8:23:80:0e:e9:c9:5d:d5: 1f:35:38:34:40:f3:2a:ed:40:a8:46:1d:ea:7b:86: 37:b2:31:64:8f:3c:c8:36:a5:00:31:54:f6:dc:43: b6:7a:27:8e:99:a7:db:c9:9b:ee:70:a7:00:d0:be: 8c:c2:91:ff:63:8c:d0:fe:15:7b:4c:93:46:51:d6: 2e:42:33:10:7b:44:2f:8a:ef:59:48:b9:70:ed:97: 40:10:31:b2:60:94:3c:51:78:6f:dc:61:31:de:bc: d1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2E:5B:47:32:53:99:1C:E7:00:F4:25:12:AE:3D:55:E5:EC:A7:9B X509v3 Authority Key Identifier: keyid:73:06:1B:A9:04:01:81:EC:0A:EB:4D:8F:6E:00:3F:83:8F:C9:C4:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:27:df:ca:dd:dc:d6:8c:bf:0b:4d:fd:ab:2f:5b:4e:b3:6f: 2e:70:ac:72:df:6a:d9:6d:5e:bd:ea:e5:d4:5a:7d:e6:6b:fd: 40:eb:1a:00:1a:65:fb:15:03:e4:0d:13:fd:fd:68:69:ad:1a: 27:2b:7f:12:74:f4:ec:ab:ce:5e:d7:ee:ab:b1:b5:36:cb:66: 43:e2:d3:e7:ed:31:d0:1c:d8:66:4d:f2:d2:50:5c:58:69:16: c9:b0:76:ec:f8:f1:ad:36:a6:1b:c8:1c:e1:8f:0a:cb:22:d6: ec:9c:d6:da:52:0b:c2:e4:68:69:8d:96:69:ab:90:c0:a5:9c: 30:ac:21:b0:13:7f:25:c6:62:0a:85:d1:35:ac:53:22:64:4f: 47:0e:b0:be:cc:36:d9:a2:78:a1:b8:3d:95:94:73:06:06:c3: d4:7e:a8:7a:42:8d:00:39:a2:18:64:4b:35:91:e7:77:38:50: 69:a3:60:3c:26:4a:07:9d:9c:30:29:f4:1b:84:92:fc:f0:ba: 98:74:c1:43:d8:5c:05:4c:d5:8c:c6:90:ff:e2:ae:be:19:2a: d9:34:64:7d:9b:68:fb:43:5a:75:c4:4e:e9:07:2d:d3:74:67: b5:60:e5:2c:75:f8:d8:1d:39:11:d2:96:e8:50:7f:7d:e2:21: 53:51:db:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1QUMxMTAvBgNVBAUTKDczMDYxQkE5MDQwMTgxRUMwQUVCNEQ4RjZFMDAzRjgz OEZDOUM0OEYwHhcNMjYwMzI1MDM1MjE4WhcNMjYwNDAxMDM1MjE4WjAYMRYwFAYD VQQDEw02OWMzNWJmMi0xODdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnqQ2T9izRe4YVr1fvZaQAXzLSlAauP1QWQ6nn6ZUhzw1AanXq57TBZ+t1Ykk mTcapyKf80U3rReRfjMpvbnVHdFENgQTXiDYgDtF1U/KVs13bSbmsCTK7nAhl7Er uIsdtGS81agvHwtAYKfyW5lneZNLNKnDAMCnSPLviMNJ0FOeBqIvTUyJ/gei0xqz 3Oe8tTmkyJHkqUdpd2LQqCOADunJXdUfNTg0QPMq7UCoRh3qe4Y3sjFkjzzINqUA MVT23EO2eieOmafbyZvucKcA0L6MwpH/Y4zQ/hV7TJNGUdYuQjMQe0Qviu9ZSLlw 7ZdAEDGyYJQ8UXhv3GEx3rzRhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHMuW0cy U5kc5wD0JRKuPVXl7KebMB8GA1UdIwQYMBaAFHMGG6kEAYHsCutNj24AP4OPycSP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjVBQy9ENEYzREI5RUUx RTAxMUVFQUY2RTFFNjhDNEY5QUUwMi9jd1licVFRQmdld0s2MDJQYmdBX2c0X0p4 STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N3WWJxUVFCZ2V3SzYwMlBiZ0FfZzRfSnhJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjVBQy9ENEYzREI5RUUxRTAxMUVFQUY2RTFFNjhDNEY5QUUwMi9jd1licVFRQmdl d0s2MDJQYmdBX2c0X0p4STgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALCffyt3c1oy/C039qy9bTrNvLnCsct9q2W1everl1Fp95mv9QOsaABpl+xUD 5A0T/f1oaa0aJyt/EnT07KvOXtfuq7G1NstmQ+LT5+0x0BzYZk3y0lBcWGkWybB2 7PjxrTamG8gc4Y8KyyLW7JzW2lILwuRoaY2WaauQwKWcMKwhsBN/JcZiCoXRNaxT ImRPRw6wvsw22aJ4obg9lZRzBgbD1H6oekKNADmiGGRLNZHndzhQaaNgPCZKB52c MCn0G4SS/PC6mHTBQ9hcBUzVjMaQ/+Kuvhkq2TRkfZto+0NadcRO6Qct03RntWDl LHX42B05EdKW6FB/feIhU1HbQA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:27:36 2026 by rpki-client