$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft File: CpU4Un2lMv4x11DRNpblzq8qm88.mft (raw, json) Hash identifier: 7fkAbojWmehJznz6EujG/6TVrkTodt8MuDPVJ1lU/H0= Subject key identifier: 8A:35:D4:6E:DD:44:7B:5D:9E:26:9D:A3:3C:9E:01:F4:DA:97:4B:76 Authority key identifier: 0A:95:38:52:7D:A5:32:FE:31:D7:50:D1:36:96:E5:CE:AF:2A:9B:CF Certificate issuer: /CN=A91C2677/serialNumber=0A9538527DA532FE31D750D13696E5CEAF2A9BCF Certificate serial: 022F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft Manifest number: 022B Signing time: Wed 25 Mar 2026 02:04:09 +0000 Manifest this update: Wed 25 Mar 2026 02:04:08 +0000 Manifest next update: Wed 01 Apr 2026 02:04:08 +0000 Files and hashes: 1: CpU4Un2lMv4x11DRNpblzq8qm88.crl (hash: 9ckv9Ge7648KBTot/7sRFtJRVhLWTfSS8WjKkiuTTXg=) 2: 5A1F332618A211EEB9517111C4F9AE02.roa (hash: oP7yfPUopKTY379R1+NbnqkO2F627ZT0pvcHFpcrXM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.crl rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:04:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 559 (0x22f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2677, serialNumber=0A9538527DA532FE31D750D13696E5CEAF2A9BCF Validity Not Before: Mar 25 02:04:08 2026 GMT Not After : Apr 1 02:04:08 2026 GMT Subject: CN=69c34299-5ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ba:09:c1:7b:09:0f:a9:ea:d5:6e:73:3d:41: b0:37:09:c4:fd:5e:33:5f:4d:6d:3e:e6:58:e8:22: 29:8e:65:04:b5:9b:80:6f:0a:b7:95:32:7b:22:b3: 8a:1e:a7:bb:db:46:18:0a:15:04:91:be:98:74:72: 4c:7a:92:c8:d4:66:d7:29:e3:f8:c0:5b:ff:42:81: 0b:f7:15:ce:73:ba:5a:84:c5:0b:b1:1d:07:ed:b3: a3:68:76:c3:43:3e:f6:00:65:99:d3:95:99:5d:75: 1c:d5:a9:95:79:eb:bc:f7:a9:be:2f:58:51:0f:0e: 6a:9a:3b:1c:7d:61:08:cf:b3:92:40:1a:69:3e:b9: 11:e3:3d:4c:c5:13:d2:ee:f6:7b:b8:23:8a:05:7a: 27:0c:e3:94:81:2a:02:3c:00:aa:6c:77:26:a9:b2: fd:83:56:85:48:48:74:d4:4f:9f:6b:b6:b6:f3:5f: e0:1a:7e:55:80:6b:4d:08:42:ff:71:80:c0:78:3c: 2f:b4:52:bb:6d:d6:3e:df:cf:b0:e6:fe:52:ba:38: 68:76:66:a8:fd:ab:c3:85:fb:b0:dd:10:f6:fb:02: 5a:04:2a:f3:a7:4f:ad:57:cb:93:2c:dd:e4:be:04: 51:06:f7:53:e5:bb:14:87:99:75:30:a2:6b:d5:7f: 53:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:35:D4:6E:DD:44:7B:5D:9E:26:9D:A3:3C:9E:01:F4:DA:97:4B:76 X509v3 Authority Key Identifier: keyid:0A:95:38:52:7D:A5:32:FE:31:D7:50:D1:36:96:E5:CE:AF:2A:9B:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:55:a6:b5:f1:76:fb:d9:c9:8a:72:2e:e6:27:dd:0b:12:e0: fe:b0:f8:bb:25:f7:aa:7b:ba:85:64:ef:72:6b:82:ce:8d:81: 2d:6b:8e:71:78:38:ed:c7:3d:04:28:9b:12:21:97:e4:a3:e2: fe:18:cd:bf:09:e7:b8:18:46:42:c1:5c:a2:63:0a:40:8b:f5: 62:e6:52:7c:5d:fa:28:3e:d4:11:8f:2d:6f:56:ac:07:70:63: db:ec:d7:69:52:00:8c:13:bc:d6:60:0a:9a:0e:00:cb:17:3f: 20:59:39:74:31:03:36:1a:18:63:77:ef:69:43:a8:85:c6:a2: 31:0d:74:13:14:1f:7e:23:9e:85:8e:49:8c:95:5a:8a:4b:df: a5:be:c1:93:09:67:63:c4:e6:ad:fb:88:9b:51:91:6d:03:b9: 03:bf:94:74:9e:d8:50:20:7b:6e:d2:86:cf:48:fc:97:ed:16: 4e:17:e7:93:5f:f6:f1:e0:ee:28:22:75:2e:74:3c:d9:6c:73: 7c:a9:67:e2:0e:ae:91:41:8b:21:4b:8e:c7:ac:e5:28:07:27: b1:92:4d:56:41:24:82:02:3a:cf:7c:0a:7a:bf:70:34:71:e1: 41:1f:1b:d0:95:6c:e8:dc:9f:51:13:d8:0f:13:14:83:3f:8c: 24:74:b3:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI2NzcxMTAvBgNVBAUTKDBBOTUzODUyN0RBNTMyRkUzMUQ3NTBEMTM2OTZFNUNF QUYyQTlCQ0YwHhcNMjYwMzI1MDIwNDA4WhcNMjYwNDAxMDIwNDA4WjAYMRYwFAYD VQQDEw02OWMzNDI5OS01Y2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsboJwXsJD6nq1W5zPUGwNwnE/V4zX01tPuZY6CIpjmUEtZuAbwq3lTJ7IrOK Hqe720YYChUEkb6YdHJMepLI1GbXKeP4wFv/QoEL9xXOc7pahMULsR0H7bOjaHbD Qz72AGWZ05WZXXUc1amVeeu896m+L1hRDw5qmjscfWEIz7OSQBppPrkR4z1MxRPS 7vZ7uCOKBXonDOOUgSoCPACqbHcmqbL9g1aFSEh01E+fa7a281/gGn5VgGtNCEL/ cYDAeDwvtFK7bdY+38+w5v5Sujhodmao/avDhfuw3RD2+wJaBCrzp0+tV8uTLN3k vgRRBvdT5bsUh5l1MKJr1X9TRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIo11G7d RHtdniadozyeAfTal0t2MB8GA1UdIwQYMBaAFAqVOFJ9pTL+MddQ0TaW5c6vKpvP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjY3Ny82NDU3REZEOEQ4 MzcxMUVEOEMwOTY2MjlDNEY5QUUwMi9DcFU0VW4ybE12NHgxMURSTnBibHpxOHFt ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NwVTRVbjJsTXY0eDExRFJOcGJsenE4cW04OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjY3Ny82NDU3REZEOEQ4MzcxMUVEOEMwOTY2MjlDNEY5QUUwMi9DcFU0VW4ybE12 NHgxMURSTnBibHpxOHFtODgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb1WmtfF2+9nJinIu5ifdCxLg/rD4uyX3qnu6hWTvcmuCzo2BLWuOcXg47cc9 BCibEiGX5KPi/hjNvwnnuBhGQsFcomMKQIv1YuZSfF36KD7UEY8tb1asB3Bj2+zX aVIAjBO81mAKmg4Ayxc/IFk5dDEDNhoYY3fvaUOohcaiMQ10ExQffiOehY5JjJVa ikvfpb7BkwlnY8TmrfuIm1GRbQO5A7+UdJ7YUCB7btKGz0j8l+0WThfnk1/28eDu KCJ1LnQ82WxzfKln4g6ukUGLIUuOx6zlKAcnsZJNVkEkggI6z3wKer9wNHHhQR8b 0JVs6NyfURPYDxMUgz+MJHSzow== -----END CERTIFICATE-----Generated at Thu Mar 26 04:26:36 2026 by rpki-client