$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft File: bLOCDaWkqEstlAm98H8lRf5tCxE.mft (raw, json) Hash identifier: QZjCB9fYgLaetJor4Mh0d0yQLuYzZxeK9zNglpudmH8= Subject key identifier: D2:96:FD:B2:8D:BB:34:3E:B7:FA:99:E9:BE:F1:F0:1E:28:9B:CA:FB Authority key identifier: 6C:B3:82:0D:A5:A4:A8:4B:2D:94:09:BD:F0:7F:25:45:FE:6D:0B:11 Certificate issuer: /CN=A91CB063/serialNumber=6CB3820DA5A4A84B2D9409BDF07F2545FE6D0B11 Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft Manifest number: DE Signing time: Wed 25 Mar 2026 05:47:12 +0000 Manifest this update: Wed 25 Mar 2026 05:47:12 +0000 Manifest next update: Wed 01 Apr 2026 05:47:12 +0000 Files and hashes: 1: bLOCDaWkqEstlAm98H8lRf5tCxE.crl (hash: 9Uzh5hPaPTjPjMeLzCOt64TNX04pXGHNUme1cJtmfJU=) 2: 3D3827F2D6EE11EFB955866CC4F9AE02.roa (hash: dLZc89hT0kFC1Ci+nYsBzRKUkAeStH1fXJ1563XLN9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.crl rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:47:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB063, serialNumber=6CB3820DA5A4A84B2D9409BDF07F2545FE6D0B11 Validity Not Before: Mar 25 05:47:12 2026 GMT Not After : Apr 1 05:47:12 2026 GMT Subject: CN=69c376e0-b503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c1:a2:50:6b:b0:32:b2:c8:0a:96:9f:e0:da: 3b:c9:65:0f:d4:2b:d1:88:62:c9:67:b0:00:ae:86: 52:58:4b:09:3f:5d:8f:60:e5:e8:5f:55:d0:39:72: 30:3a:f9:12:f7:94:0d:22:fd:ab:17:7c:39:11:56: 26:bf:de:6c:e1:b6:9c:cd:2f:4c:a4:17:6d:50:75: 0b:a1:9f:7a:11:87:e4:94:99:a7:98:79:1b:ca:bb: 75:65:eb:14:76:f6:51:3e:65:d8:eb:89:89:fe:52: c2:79:8e:e4:f3:ff:c5:67:8e:9c:88:a7:ee:5c:80: eb:af:e2:12:d0:4b:85:a8:d2:8d:66:7d:2d:65:4a: 3c:c8:9b:32:c9:a8:3a:fc:92:0f:1b:b7:25:52:9e: ff:88:7e:09:17:4a:de:e4:ca:46:00:9b:b5:d9:64: 47:bb:28:85:8d:54:08:5b:ca:10:28:5f:50:f3:08: 0e:17:16:23:ab:81:01:2c:02:4a:6c:38:0b:c8:60: d1:c2:50:e9:ad:c6:53:bf:be:96:a2:4f:16:ac:79: a6:cd:9f:32:8e:94:b2:5e:71:34:cf:2d:f5:8f:7d: c0:d9:7e:f9:1e:e3:11:c9:f9:54:20:89:b2:c0:6a: 73:24:eb:07:7f:58:41:48:ba:dc:61:e5:84:bd:22: b1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:96:FD:B2:8D:BB:34:3E:B7:FA:99:E9:BE:F1:F0:1E:28:9B:CA:FB X509v3 Authority Key Identifier: keyid:6C:B3:82:0D:A5:A4:A8:4B:2D:94:09:BD:F0:7F:25:45:FE:6D:0B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLOCDaWkqEstlAm98H8lRf5tCxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB063/6C0F9610D6ED11EF9D9BF36AC4F9AE02/bLOCDaWkqEstlAm98H8lRf5tCxE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:06:6f:89:8d:47:24:60:22:a2:d5:73:57:44:b7:0f:39:8a: 42:5f:a4:7b:b9:a9:ec:ec:dc:32:00:02:80:e7:4f:20:53:9d: e9:ad:fb:56:1e:b6:d7:cd:49:f8:81:77:9e:54:b1:5a:03:83: 28:44:fa:0c:57:46:f6:f6:58:fc:b4:22:98:98:8c:e3:20:d8: 98:78:e1:1c:75:0e:80:ae:29:98:f0:0c:a1:56:02:3c:8e:c8: 22:e6:dc:64:28:3a:29:35:93:d5:9e:3a:ef:6f:1c:a8:85:b6: dc:c2:9f:ed:57:84:9d:d0:b9:ab:e0:2a:21:ff:2a:96:6e:6c: 30:02:32:32:04:1e:21:31:ab:54:f3:c6:dd:41:91:99:93:26: cf:3c:84:3b:77:9b:8f:ec:39:72:32:66:47:73:8c:d8:09:c0: 4c:2e:46:23:b4:81:b7:6f:ca:d1:0e:48:d2:10:b1:e1:64:cf: bc:11:a8:cc:68:83:bc:a0:39:16:11:bd:f9:f0:f0:6c:05:30: 00:18:49:cd:0c:9c:80:11:24:70:5c:79:15:8c:96:65:33:3a: 74:92:57:be:ec:3f:0f:61:32:df:5a:5a:e6:a6:9c:64:60:df: 38:d3:ba:d8:56:b3:76:79:4e:bd:eb:c0:08:49:1d:71:27:72: 4d:7d:91:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwNjMxMTAvBgNVBAUTKDZDQjM4MjBEQTVBNEE4NEIyRDk0MDlCREYwN0YyNTQ1 RkU2RDBCMTEwHhcNMjYwMzI1MDU0NzEyWhcNMjYwNDAxMDU0NzEyWjAYMRYwFAYD VQQDEw02OWMzNzZlMC1iNTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8GiUGuwMrLICpaf4No7yWUP1CvRiGLJZ7AAroZSWEsJP12PYOXoX1XQOXIw OvkS95QNIv2rF3w5EVYmv95s4baczS9MpBdtUHULoZ96EYfklJmnmHkbyrt1ZesU dvZRPmXY64mJ/lLCeY7k8//FZ46ciKfuXIDrr+IS0EuFqNKNZn0tZUo8yJsyyag6 /JIPG7clUp7/iH4JF0re5MpGAJu12WRHuyiFjVQIW8oQKF9Q8wgOFxYjq4EBLAJK bDgLyGDRwlDprcZTv76Wok8WrHmmzZ8yjpSyXnE0zy31j33A2X75HuMRyflUIImy wGpzJOsHf1hBSLrcYeWEvSKxrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNKW/bKN uzQ+t/qZ6b7x8B4om8r7MB8GA1UdIwQYMBaAFGyzgg2lpKhLLZQJvfB/JUX+bQsR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA2My82QzBGOTYxMEQ2 RUQxMUVGOUQ5QkYzNkFDNEY5QUUwMi9iTE9DRGFXa3FFc3RsQW05OEg4bFJmNXRD eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JMT0NEYVdrcUVzdGxBbTk4SDhsUmY1dEN4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjA2My82QzBGOTYxMEQ2RUQxMUVGOUQ5QkYzNkFDNEY5QUUwMi9iTE9DRGFXa3FF c3RsQW05OEg4bFJmNXRDeEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWwZviY1HJGAiotVzV0S3DzmKQl+ke7mp7OzcMgACgOdPIFOd6a37Vh62181J +IF3nlSxWgODKET6DFdG9vZY/LQimJiM4yDYmHjhHHUOgK4pmPAMoVYCPI7IIubc ZCg6KTWT1Z46728cqIW23MKf7VeEndC5q+AqIf8qlm5sMAIyMgQeITGrVPPG3UGR mZMmzzyEO3ebj+w5cjJmR3OM2AnATC5GI7SBt2/K0Q5I0hCx4WTPvBGozGiDvKA5 FhG9+fDwbAUwABhJzQycgBEkcFx5FYyWZTM6dJJXvuw/D2Ey31pa5qacZGDfONO6 2FazdnlOvevACEkdcSdyTX2Rpw== -----END CERTIFICATE-----Generated at Fri Mar 27 06:21:10 2026 by rpki-client