$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft File: CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft (raw, json) Hash identifier: v4UhcnMkD6VdvF+I1a1HcJLQLVun9rgRfMdnELsVPro= Subject key identifier: A7:3F:E3:70:FA:A3:A6:15:90:66:7D:D4:D2:B6:CD:7D:1B:E1:65:FA Authority key identifier: 09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5 Certificate issuer: /CN=A91C612E/serialNumber=0955D91F2CAA52BB4F7C70F0E656F24314EAFBD5 Certificate serial: 0CA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft Manifest number: 14A9 Signing time: Tue 24 Mar 2026 18:15:10 +0000 Manifest this update: Tue 24 Mar 2026 18:15:09 +0000 Manifest next update: Tue 31 Mar 2026 18:15:09 +0000 Files and hashes: 1: CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl (hash: O5X0TcsH1mlwSUVw32ZV9M2uAXMQBtQzhrRYO1t+Exk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3233 (0xca1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C612E, serialNumber=0955D91F2CAA52BB4F7C70F0E656F24314EAFBD5 Validity Not Before: Mar 24 18:15:09 2026 GMT Not After : Mar 31 18:15:09 2026 GMT Subject: CN=69c2d4ae-1778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:84:0e:37:94:a9:ed:87:68:07:88:57:41:19: cc:36:0c:05:9d:e9:5c:e3:88:27:60:ac:80:a8:eb: 1d:ad:f2:a2:d5:5b:ba:93:4d:ed:03:81:40:6d:0a: d1:b1:82:f8:7f:1f:2c:16:97:79:30:75:bc:f0:4d: 48:a5:2f:c7:3a:ec:cf:7a:c6:9e:f1:4c:f2:69:66: 8c:42:50:8a:28:f5:5b:1d:19:20:c6:d8:93:b4:0e: f2:cd:a5:a6:e7:89:1c:da:48:77:b5:6e:40:45:a2: 8d:60:fe:77:96:b4:e7:9b:22:76:50:f0:9f:17:7d: 7f:61:1e:c2:44:57:6f:e9:be:44:b7:d4:2d:f0:69: 9e:fa:36:97:1b:b8:cd:11:9c:fd:2f:f6:89:63:fa: 89:19:9c:68:3c:5e:9a:ef:7b:6f:07:24:4d:5d:a2: 42:82:e9:85:c3:4e:19:e2:95:12:2b:5d:79:d6:8e: 1a:7c:ef:dc:07:da:4f:3d:90:aa:74:c5:a3:61:c1: b5:6d:b8:b2:24:00:9d:98:ee:91:06:85:61:ee:81: cb:91:76:e5:11:d8:3f:25:00:21:71:e2:99:b9:fd: 87:92:e8:9a:6b:83:71:6d:4a:0e:86:31:99:3e:ee: c8:76:7f:3c:f0:20:b0:21:bc:b9:89:98:12:9b:1e: e4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3F:E3:70:FA:A3:A6:15:90:66:7D:D4:D2:B6:CD:7D:1B:E1:65:FA X509v3 Authority Key Identifier: keyid:09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:4d:d3:48:e7:94:dc:01:41:d9:05:d9:f2:29:40:e5:35:a8: 22:36:98:1a:9b:ba:3e:03:25:b5:60:88:4b:d3:4a:97:0a:9c: 64:51:c0:ef:35:63:45:88:53:81:63:71:1c:41:2b:57:53:63: 78:6f:00:49:ff:ae:2c:d7:10:46:7c:94:bd:85:aa:00:3c:6f: b3:cb:4f:0b:ba:6e:98:47:be:55:b5:09:81:3e:f0:91:03:df: a3:63:37:9d:20:ee:ee:f7:5a:97:7a:f7:9b:e6:f8:0c:2d:61: 99:a5:0f:5f:64:48:72:1f:ac:ec:31:a3:c1:f8:ec:0c:09:f1: 03:79:da:55:e7:1d:98:e3:a5:e8:93:3d:4e:a9:48:8d:a0:e1: c0:3c:6b:77:01:c3:c2:57:c4:41:13:40:68:d0:e8:ea:8f:d7: 6e:b3:2e:13:6d:28:d0:02:c1:0b:40:b7:e1:25:0d:0c:c9:c6: e2:6f:ee:5f:b5:64:6c:b6:4a:d7:98:d8:3d:f8:86:69:56:ea: e5:21:52:22:ce:af:23:2b:b1:4f:e7:f8:24:a2:e7:34:80:1f: 11:21:af:61:49:b6:2a:f4:31:80:32:4e:a6:53:a7:9e:28:b2: 97:da:8a:c3:ca:85:35:f0:ca:e4:87:2e:66:d2:a2:68:86:4b: ed:17:83:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYxMkUxMTAvBgNVBAUTKDA5NTVEOTFGMkNBQTUyQkI0RjdDNzBGMEU2NTZGMjQz MTRFQUZCRDUwHhcNMjYwMzI0MTgxNTA5WhcNMjYwMzMxMTgxNTA5WjAYMRYwFAYD VQQDEw02OWMyZDRhZS0xNzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyoQON5Sp7YdoB4hXQRnMNgwFnelc44gnYKyAqOsdrfKi1Vu6k03tA4FAbQrR sYL4fx8sFpd5MHW88E1IpS/HOuzPesae8UzyaWaMQlCKKPVbHRkgxtiTtA7yzaWm 54kc2kh3tW5ARaKNYP53lrTnmyJ2UPCfF31/YR7CRFdv6b5Et9Qt8Gme+jaXG7jN EZz9L/aJY/qJGZxoPF6a73tvByRNXaJCgumFw04Z4pUSK1151o4afO/cB9pPPZCq dMWjYcG1bbiyJACdmO6RBoVh7oHLkXblEdg/JQAhceKZuf2Hkuiaa4NxbUoOhjGZ Pu7Idn888CCwIby5iZgSmx7knQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKc/43D6 o6YVkGZ91NK2zX0b4WX6MB8GA1UdIwQYMBaAFAlV2R8sqlK7T3xw8OZW8kMU6vvV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjEyRS82NUJDMTdEMjBC NjExMUVBQUYwNDJGNjhDNEY5QUUwMi9DVlhaSHl5cVVydFBmSER3NWxieVF4VHEt OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWWFpIeXlxVXJ0UGZIRHc1bGJ5UXhUcS05VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjEyRS82NUJDMTdEMjBCNjExMUVBQUYwNDJGNjhDNEY5QUUwMi9DVlhaSHl5cVVy dFBmSER3NWxieVF4VHEtOVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZU3TSOeU3AFB2QXZ8ilA5TWoIjaYGpu6PgMltWCIS9NKlwqcZFHA7zVjRYhT gWNxHEErV1NjeG8ASf+uLNcQRnyUvYWqADxvs8tPC7pumEe+VbUJgT7wkQPfo2M3 nSDu7vdal3r3m+b4DC1hmaUPX2RIch+s7DGjwfjsDAnxA3naVecdmOOl6JM9TqlI jaDhwDxrdwHDwlfEQRNAaNDo6o/XbrMuE20o0ALBC0C34SUNDMnG4m/uX7VkbLZK 15jYPfiGaVbq5SFSIs6vIyuxT+f4JKLnNIAfESGvYUm2KvQxgDJOplOnniiyl9qK w8qFNfDK5IcuZtKiaIZL7ReDoA== -----END CERTIFICATE-----Generated at Thu Mar 26 07:31:36 2026 by rpki-client