$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft File: E1-CL_RWQDka60bEN1QQAmBpOlc.mft (raw, json) Hash identifier: H2htfa8pq/BCF0sTwdrCO9HgbMtjGdmDyKtWuNqiJaA= Subject key identifier: 76:3C:35:CC:70:16:BD:5C:C9:C3:D8:F8:CD:C3:0B:4A:FC:9E:4A:3F Authority key identifier: 13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57 Certificate issuer: /CN=A91C9484/serialNumber=135F822FF45640391AEB46C43754100260693A57 Certificate serial: 25A0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft Manifest number: 25A0 Signing time: Tue 24 Mar 2026 14:46:35 +0000 Manifest this update: Tue 24 Mar 2026 14:46:34 +0000 Manifest next update: Tue 31 Mar 2026 14:46:34 +0000 Files and hashes: 1: E1-CL_RWQDka60bEN1QQAmBpOlc.crl (hash: FvO4o55bKm+BTpXE33xePiCjkqDDOJodkFATxJoebeM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:46:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9632 (0x25a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9484, serialNumber=135F822FF45640391AEB46C43754100260693A57 Validity Not Before: Mar 24 14:46:34 2026 GMT Not After : Mar 31 14:46:34 2026 GMT Subject: CN=69c2a3cb-849d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d9:51:d1:07:98:7a:da:9d:d7:c2:3b:98:b5: 3c:9f:f1:33:de:18:c2:df:01:23:0e:bc:8c:2e:21: 60:12:04:41:3e:e3:ee:43:a6:46:81:d4:3e:a6:35: 41:26:84:a8:5d:0b:54:50:2e:31:f7:b1:4d:cb:9b: 01:31:ef:f6:ac:94:15:f1:14:c8:79:02:a4:58:d1: 80:4a:95:68:39:88:f3:49:43:43:0a:96:ec:91:5a: 8a:9c:fa:02:05:8f:71:91:cf:54:1e:0b:1b:2b:b4: 99:a5:84:b2:9c:12:6d:f5:5d:3b:67:5b:12:52:c9: e4:db:57:ef:da:f9:86:5d:b5:ec:69:8b:6c:16:c7: de:dc:12:72:19:08:cc:fa:d8:86:1a:bd:68:e1:a7: aa:e4:df:8a:6e:3f:31:a0:9f:c8:1a:0f:00:ad:6e: 65:2c:4b:6b:dd:9b:30:0c:13:f4:d2:f9:63:54:1d: 94:04:71:ac:58:10:ba:14:30:c1:e7:02:8c:ee:a4: 6a:bb:e0:c4:40:83:42:5d:67:d3:d3:4e:96:ea:e4: bc:1b:cd:fd:ef:dc:8e:4f:cb:97:24:50:3e:fd:11: ff:8a:5f:f4:a7:e6:62:f4:a4:96:9e:5b:01:dd:4e: 9d:29:c7:2e:f9:25:97:52:2f:9f:2d:a8:e8:67:4b: ae:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:3C:35:CC:70:16:BD:5C:C9:C3:D8:F8:CD:C3:0B:4A:FC:9E:4A:3F X509v3 Authority Key Identifier: keyid:13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:a6:90:b8:bd:b5:8e:04:dd:b8:87:95:cc:7a:81:0e:12:5e: f8:e4:a9:40:89:e8:4f:11:0f:2e:f3:88:87:dc:13:0f:5a:de: c5:a1:18:fa:e8:f2:d1:52:40:65:98:a6:a8:67:ab:20:a6:81: fc:3a:03:d1:1e:11:ab:5a:68:a1:14:20:59:b1:d4:1b:de:05: a0:19:2e:c8:43:20:b7:42:53:31:4a:3b:9d:96:c2:ba:68:f4: 67:08:be:d3:9e:60:83:ae:3d:d9:9f:96:dd:28:0d:44:32:24: 1a:10:15:ad:33:98:1b:30:80:ab:0b:45:7a:f0:b1:6e:e9:38: 56:6f:47:fb:6a:e9:ce:3f:0e:f6:4a:db:8e:21:39:a8:57:8d: 0f:84:19:63:86:f6:d1:6f:6a:29:aa:63:64:5b:a1:11:a4:8b: 00:d1:ef:39:a9:4c:b4:9d:c9:e3:42:f7:0e:f2:5c:b8:3d:77: 79:b7:79:d8:eb:f5:73:d4:71:92:b3:91:71:a3:37:93:15:83: 87:93:42:f2:94:15:42:67:5f:ff:97:a7:72:a5:4a:d7:56:a8: 9c:3b:29:0f:a9:31:70:70:18:38:86:a2:da:ce:9c:89:66:bd: 5e:b5:4c:d8:66:15:da:7c:6e:43:5e:e1:cc:66:42:0b:4a:95: 02:72:b7:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0ODQxMTAvBgNVBAUTKDEzNUY4MjJGRjQ1NjQwMzkxQUVCNDZDNDM3NTQxMDAy NjA2OTNBNTcwHhcNMjYwMzI0MTQ0NjM0WhcNMjYwMzMxMTQ0NjM0WjAYMRYwFAYD VQQDEw02OWMyYTNjYi04NDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhNlR0QeYetqd18I7mLU8n/Ez3hjC3wEjDryMLiFgEgRBPuPuQ6ZGgdQ+pjVB JoSoXQtUUC4x97FNy5sBMe/2rJQV8RTIeQKkWNGASpVoOYjzSUNDCpbskVqKnPoC BY9xkc9UHgsbK7SZpYSynBJt9V07Z1sSUsnk21fv2vmGXbXsaYtsFsfe3BJyGQjM +tiGGr1o4aeq5N+Kbj8xoJ/IGg8ArW5lLEtr3ZswDBP00vljVB2UBHGsWBC6FDDB 5wKM7qRqu+DEQINCXWfT006W6uS8G83979yOT8uXJFA+/RH/il/0p+Zi9KSWnlsB 3U6dKccu+SWXUi+fLajoZ0uupQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHY8Ncxw Fr1cycPY+M3DC0r8nko/MB8GA1UdIwQYMBaAFBNfgi/0VkA5GutGxDdUEAJgaTpX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQ4NC8wQTBGODVGQzI5 MEUxMUU1OTNCRkM2MjZDNEY5QUUwMi9FMS1DTF9SV1FEa2E2MGJFTjFRUUFtQnBP bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0UxLUNMX1JXUURrYTYwYkVOMVFRQW1CcE9sYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTQ4NC8wQTBGODVGQzI5MEUxMUU1OTNCRkM2MjZDNEY5QUUwMi9FMS1DTF9SV1FE a2E2MGJFTjFRUUFtQnBPbGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkqaQuL21jgTduIeVzHqBDhJe+OSpQInoTxEPLvOIh9wTD1rexaEY+ujy0VJA ZZimqGerIKaB/DoD0R4Rq1pooRQgWbHUG94FoBkuyEMgt0JTMUo7nZbCumj0Zwi+ 055gg6492Z+W3SgNRDIkGhAVrTOYGzCAqwtFevCxbuk4Vm9H+2rpzj8O9krbjiE5 qFeND4QZY4b20W9qKapjZFuhEaSLANHvOalMtJ3J40L3DvJcuD13ebd52Ov1c9Rx krORcaM3kxWDh5NC8pQVQmdf/5encqVK11aonDspD6kxcHAYOIai2s6ciWa9XrVM 2GYV2nxuQ17hzGZCC0qVAnK3tw== -----END CERTIFICATE-----Generated at Thu Mar 26 14:10:14 2026 by rpki-client