$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft File: CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft (raw, json) Hash identifier: J6Um1bvsL1ZU51SJvbANRb3HgTD75CnM1d/jXXgNbUM= Subject key identifier: 93:C7:4B:C7:DC:3E:20:90:79:77:37:2E:E3:A4:04:83:E2:18:E1:CD Authority key identifier: 08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F Certificate issuer: /CN=A91B8D33/serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F Certificate serial: 01FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft Manifest number: 01EB Signing time: Wed 25 Mar 2026 02:45:02 +0000 Manifest this update: Wed 25 Mar 2026 02:45:01 +0000 Manifest next update: Wed 01 Apr 2026 02:45:01 +0000 Files and hashes: 1: CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl (hash: p5ZX43PZMLwrAgjZQpgTkR4o3EZFbMw64H7z+CTyRuk=) 2: 86D7DAE6D1C211EF9AA9410EC4F9AE02.roa (hash: w4ebJqxqcYTakZgYgczYh31d+UQ4emy9J0fYQLqlsn0=) 3: E62F8796D1BD11EFBCCC0B68C4F9AE02.roa (hash: C+zKPU7xS4ZOCm7vmpXaLXUhKiAqHKCATTbpyOC3iPI=) 4: C698E13ED1BD11EF9C00D867C4F9AE02.roa (hash: gcd1uORIwB588IprBp+ptXbcFbF7rS1AehPmjHP27TY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 510 (0x1fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8D33, serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F Validity Not Before: Mar 25 02:45:01 2026 GMT Not After : Apr 1 02:45:01 2026 GMT Subject: CN=69c34c2e-7e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:74:e6:0c:b9:fd:d2:70:cd:6f:aa:d7:76:a9: e0:8a:d7:5d:a9:fc:f6:95:11:dc:76:09:96:ce:e1: 19:89:aa:24:00:da:63:0e:32:54:b9:ee:dd:89:c6: 6e:0f:2e:24:ad:80:c3:3d:76:76:53:b0:b5:ad:63: 1f:03:92:d7:ef:aa:3e:9a:75:ec:09:b2:ad:92:93: eb:0e:7e:82:1d:4c:63:79:74:01:5d:50:62:74:70: 65:c0:78:de:92:eb:e0:ed:c1:72:21:5d:1f:30:7f: 8f:cd:d4:61:f1:2b:a2:d7:9e:76:71:7a:02:c0:a1: cf:c7:a0:80:f5:65:81:96:cc:58:f2:b7:5e:bd:05: 10:f3:4c:9e:2e:a2:5c:f6:a7:7f:80:9d:0b:53:2d: d0:46:44:cb:a4:f3:ac:36:49:f8:b0:2c:9e:bb:a5: 18:3c:b8:f0:df:8a:eb:03:a1:88:f3:61:12:b5:dd: 37:f0:ee:84:9c:7c:cc:09:dd:08:51:0e:01:21:b7: 36:7b:22:2d:13:cc:89:d1:eb:2e:d4:dd:5c:0a:5d: c1:f4:8f:4c:62:06:d5:dd:b0:f8:f5:74:3e:b7:3a: 2a:89:a2:e4:0b:90:06:c5:1b:04:f8:38:c6:af:2b: 49:57:2b:a2:0d:81:e9:77:ab:34:a8:8e:4c:15:dc: 26:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C7:4B:C7:DC:3E:20:90:79:77:37:2E:E3:A4:04:83:E2:18:E1:CD X509v3 Authority Key Identifier: keyid:08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:cc:2d:dc:d1:68:03:55:b5:9d:e2:02:25:a3:7f:d4:16:73: fc:df:e0:89:22:8d:5b:e4:54:86:f4:05:6f:59:e1:7d:96:bd: 55:14:d8:3c:53:85:85:7b:c0:87:55:0a:cb:bb:59:b9:5c:cd: a1:d8:4b:81:c9:f7:3c:1e:30:71:57:a2:47:ab:7c:a9:16:6b: 1b:d2:f6:3e:3c:64:19:2a:b7:2b:6d:c2:4e:1b:ae:e0:89:60: 54:20:4d:64:35:62:5d:00:d4:2b:07:d9:de:45:48:bd:d6:7a: 16:7a:5a:ae:8f:79:3a:c1:24:bf:b7:a8:98:9c:e0:c8:58:bb: b9:8f:27:20:86:f0:5f:70:7c:d2:50:c4:02:84:51:6a:b0:53: ff:c3:3b:79:65:c9:31:dd:11:10:7a:2a:0c:c0:60:2b:7a:48: 7f:c9:96:bf:d8:4f:c8:0c:b5:d8:52:5e:66:81:e7:6a:18:81: 90:50:cd:56:c2:12:f7:3e:bd:80:d7:6f:34:87:87:06:df:f4: f7:90:89:ea:6d:97:79:a2:6b:c7:e2:7b:7f:75:c1:c9:24:07: 4c:e2:00:79:9f:0b:70:09:0e:05:04:b7:3d:f0:6c:8b:19:b8: e3:82:7d:11:f6:9c:d4:84:c6:ea:ec:97:b3:35:8b:13:5e:e9: b0:69:19:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhEMzMxMTAvBgNVBAUTKDA4RDY4Q0Y0NTAwNzQ1Mzc1RkYyQ0M1ODRCQTVGQkU1 NzdCRUUzM0YwHhcNMjYwMzI1MDI0NTAxWhcNMjYwNDAxMDI0NTAxWjAYMRYwFAYD VQQDEw02OWMzNGMyZS03ZTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzHTmDLn90nDNb6rXdqngitddqfz2lRHcdgmWzuEZiaokANpjDjJUue7dicZu Dy4krYDDPXZ2U7C1rWMfA5LX76o+mnXsCbKtkpPrDn6CHUxjeXQBXVBidHBlwHje kuvg7cFyIV0fMH+PzdRh8Sui1552cXoCwKHPx6CA9WWBlsxY8rdevQUQ80yeLqJc 9qd/gJ0LUy3QRkTLpPOsNkn4sCyeu6UYPLjw34rrA6GI82EStd038O6EnHzMCd0I UQ4BIbc2eyItE8yJ0esu1N1cCl3B9I9MYgbV3bD49XQ+tzoqiaLkC5AGxRsE+DjG rytJVyuiDYHpd6s0qI5MFdwmEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJPHS8fc PiCQeXc3LuOkBIPiGOHNMB8GA1UdIwQYMBaAFAjWjPRQB0U3X/LMWEul++V3vuM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEQzMy81OTYyNjcxMDQ3 NzcxMUVFQTZCRDUzN0VDNEY5QUUwMi9DTmFNOUZBSFJUZGY4c3hZUzZYNzVYZS00 ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOYU05RkFIUlRkZjhzeFlTNlg3NVhlLTR6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEQzMy81OTYyNjcxMDQ3NzcxMUVFQTZCRDUzN0VDNEY5QUUwMi9DTmFNOUZBSFJU ZGY4c3hZUzZYNzVYZS00ejgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqMwt3NFoA1W1neICJaN/1BZz/N/giSKNW+RUhvQFb1nhfZa9VRTYPFOFhXvA h1UKy7tZuVzNodhLgcn3PB4wcVeiR6t8qRZrG9L2PjxkGSq3K23CThuu4IlgVCBN ZDViXQDUKwfZ3kVIvdZ6Fnparo95OsEkv7eomJzgyFi7uY8nIIbwX3B80lDEAoRR arBT/8M7eWXJMd0REHoqDMBgK3pIf8mWv9hPyAy12FJeZoHnahiBkFDNVsIS9z69 gNdvNIeHBt/095CJ6m2XeaJrx+J7f3XBySQHTOIAeZ8LcAkOBQS3PfBsixm444J9 Efac1ITG6uyXszWLE17psGkZ+Q== -----END CERTIFICATE-----Generated at Thu Mar 26 18:19:24 2026 by rpki-client