$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft File: RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft (raw, json) Hash identifier: 0OvDQT8BtSocyLnWayjJzHlC1PQa0+lD6YT1OnBFEdQ= Subject key identifier: B0:76:FD:55:70:CD:53:F8:56:27:19:90:39:2C:5A:F4:94:7A:27:02 Authority key identifier: 47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A Certificate issuer: /CN=A91CB8BA/serialNumber=470A93449E611FA9AD05A289D6188220B5FCFC3A Certificate serial: 0969 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft Manifest number: 0955 Signing time: Tue 24 Mar 2026 19:56:37 +0000 Manifest this update: Tue 24 Mar 2026 19:56:36 +0000 Manifest next update: Tue 31 Mar 2026 19:56:36 +0000 Files and hashes: 1: RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl (hash: kl/7/RF2as3Zk4RVgiPRJe7QHBPlBebFTEWHyxmvclE=) 2: 465DBB30BA8811EAAF996D39C4F9AE02.roa (hash: tEVppuvDqO2Igjts26bHGw8+2Z3qSj1DL7NhnyY1wWw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2409 (0x969) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8BA, serialNumber=470A93449E611FA9AD05A289D6188220B5FCFC3A Validity Not Before: Mar 24 19:56:36 2026 GMT Not After : Mar 31 19:56:36 2026 GMT Subject: CN=69c2ec75-1146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:53:08:f6:23:36:30:73:46:c3:30:8e:63:bb: e9:ea:f9:f5:12:f6:0f:9b:8a:79:9d:29:43:fc:3f: e1:a7:77:6d:8b:75:e6:1c:e2:7b:42:16:45:44:1e: 33:39:e3:43:40:c5:6e:cf:09:b8:d7:ba:c4:c0:23: 95:4a:2d:fe:1d:45:d4:28:bd:21:2c:ca:b6:76:5f: 63:f0:3d:8b:b3:68:f4:2e:57:a8:1c:8b:5a:f8:1c: af:d8:62:61:9f:e9:a7:b6:64:36:23:22:9c:5f:d9: cc:55:d8:ad:3d:0a:70:a6:11:6e:7e:a3:6c:1e:32: d9:93:cf:c9:a4:c9:1a:cb:56:39:5e:a2:a5:00:b4: 2e:09:54:4a:29:e9:6c:64:15:49:99:a6:c5:d8:2f: 12:93:25:94:df:dd:7c:dd:2d:64:3f:61:ca:57:b6: 3c:d5:de:38:d6:94:e6:ca:e2:90:44:90:3d:94:28: a2:80:3f:1e:b3:a6:55:21:43:c0:d3:a7:c4:a9:24: cd:8b:69:76:f5:7e:6b:1d:c5:78:65:40:53:cc:ea: 99:5c:5a:ca:84:72:76:fa:2e:13:29:32:ed:c9:ec: fd:07:3f:9e:ef:e2:80:f3:f2:e3:22:ec:71:a2:63: ae:29:31:62:ed:af:e5:45:fd:eb:b9:c1:04:f6:45: f7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:76:FD:55:70:CD:53:F8:56:27:19:90:39:2C:5A:F4:94:7A:27:02 X509v3 Authority Key Identifier: keyid:47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ca:28:42:52:0d:0b:92:ae:b6:87:bf:71:0c:6f:80:cb:4e: 4e:f7:e2:32:18:63:29:ce:3b:be:7c:12:2f:9d:9b:75:9c:aa: 45:17:4e:f0:2f:b8:0f:9e:19:08:42:06:a1:85:1c:90:b0:5e: f7:0b:82:0c:34:15:29:f5:f0:52:a2:90:10:30:8b:4f:fd:e8: 02:cd:e2:c1:aa:0d:aa:c5:dd:c8:58:a2:0c:92:21:8b:52:55: 28:b7:dd:d6:37:97:a6:99:66:0d:39:86:b4:f6:1c:2e:ee:24: cc:42:d2:1b:92:cb:4f:30:f1:26:ce:2f:82:63:21:8b:8a:a1: 67:24:2e:22:b5:d0:2c:57:0b:68:e9:ad:dd:e4:ef:aa:19:ba: 51:4e:64:78:fa:26:e5:dc:81:83:87:5f:94:06:d2:55:05:61: 16:a4:ad:d4:1f:3a:4f:ca:16:f0:aa:93:58:f7:ef:89:ae:48: 21:b9:73:9b:f4:91:ba:59:5c:e2:ee:ed:6f:92:de:48:18:7b: ae:60:73:30:c3:5a:b9:e1:78:de:0f:b1:59:c5:3a:59:37:86: 7c:54:0e:65:ca:b8:d7:b7:f0:eb:63:8f:3d:d9:73:8f:f9:c9: 73:e1:7d:74:6f:dd:f0:c3:dc:d9:a9:78:48:8b:52:59:54:64: f6:bc:ef:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QkExMTAvBgNVBAUTKDQ3MEE5MzQ0OUU2MTFGQTlBRDA1QTI4OUQ2MTg4MjIw QjVGQ0ZDM0EwHhcNMjYwMzI0MTk1NjM2WhcNMjYwMzMxMTk1NjM2WjAYMRYwFAYD VQQDEw02OWMyZWM3NS0xMTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlMI9iM2MHNGwzCOY7vp6vn1EvYPm4p5nSlD/D/hp3dti3XmHOJ7QhZFRB4z OeNDQMVuzwm417rEwCOVSi3+HUXUKL0hLMq2dl9j8D2Ls2j0LleoHIta+Byv2GJh n+mntmQ2IyKcX9nMVditPQpwphFufqNsHjLZk8/JpMkay1Y5XqKlALQuCVRKKels ZBVJmabF2C8SkyWU39183S1kP2HKV7Y81d441pTmyuKQRJA9lCiigD8es6ZVIUPA 06fEqSTNi2l29X5rHcV4ZUBTzOqZXFrKhHJ2+i4TKTLtyez9Bz+e7+KA8/LjIuxx omOuKTFi7a/lRf3rucEE9kX3gwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLB2/VVw zVP4VicZkDksWvSUeicCMB8GA1UdIwQYMBaAFEcKk0SeYR+prQWiidYYgiC1/Pw6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhCQS8yQjczMkU3MEJB ODUxMUVBQkE4MzhFMzBDNEY5QUUwMi9Sd3FUUko1aEg2bXRCYUtKMWhpQ0lMWDhf RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1J3cVRSSjVoSDZtdEJhS0oxaGlDSUxYOF9Eby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjhCQS8yQjczMkU3MEJBODUxMUVBQkE4MzhFMzBDNEY5QUUwMi9Sd3FUUko1aEg2 bXRCYUtKMWhpQ0lMWDhfRG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK8ooQlINC5Kutoe/cQxvgMtOTvfiMhhjKc47vnwSL52bdZyqRRdO8C+4D54Z CEIGoYUckLBe9wuCDDQVKfXwUqKQEDCLT/3oAs3iwaoNqsXdyFiiDJIhi1JVKLfd 1jeXpplmDTmGtPYcLu4kzELSG5LLTzDxJs4vgmMhi4qhZyQuIrXQLFcLaOmt3eTv qhm6UU5kePom5dyBg4dflAbSVQVhFqSt1B86T8oW8KqTWPfvia5IIblzm/SRullc 4u7tb5LeSBh7rmBzMMNaueF43g+xWcU6WTeGfFQOZcq417fw62OPPdlzj/nJc+F9 dG/d8MPc2al4SItSWVRk9rzv1A== -----END CERTIFICATE-----Generated at Thu Mar 26 14:31:10 2026 by rpki-client