$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft File: ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft (raw, json) Hash identifier: OKpQ4WMWQtS0oxVCRv12SBczKKWzq85AflirwSWIiHw= Subject key identifier: 09:15:4A:A9:AB:F8:EB:A8:F7:35:4E:8A:36:0D:2F:14:05:27:76:A8 Authority key identifier: 72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7 Certificate issuer: /CN=A91CC1E9/serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7 Certificate serial: 0240 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft Manifest number: 022D Signing time: Wed 25 Mar 2026 02:11:07 +0000 Manifest this update: Wed 25 Mar 2026 02:11:07 +0000 Manifest next update: Wed 01 Apr 2026 02:11:07 +0000 Files and hashes: 1: ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl (hash: QQ0ojzudjSIEQhoD2Xz/S54r1UMhgfI1V0nfEaJAdGc=) 2: 2AB990CAF0A911ED80D2CB35C4F9AE02.roa (hash: vqGdVaaDYf6gNLNH5VIBJ2NRjMzmVVMM9ASsA3cNz2A=) 3: 1333404E5A0D11EF8810E217C4F9AE02.roa (hash: 4mVa0DqBaCflYNU9bhCT5eYUo2wiGhZvFPJW9PpsrbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:11:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 576 (0x240) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC1E9, serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7 Validity Not Before: Mar 25 02:11:07 2026 GMT Not After : Apr 1 02:11:07 2026 GMT Subject: CN=69c3443b-4669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fb:f4:1f:71:13:18:08:30:86:eb:de:e8:2b: ab:a9:40:e5:69:22:6c:d4:bd:fe:65:ed:29:4f:3f: 96:17:10:ac:46:ce:9c:d4:c1:8a:6e:79:12:12:69: 8d:3c:17:ec:8a:ab:f5:3c:8e:29:7b:d5:3c:4a:3d: 79:14:1d:04:66:fb:50:c2:36:ca:d2:49:64:ad:c5: e9:e7:13:0a:3a:f8:10:47:89:df:c4:81:fb:06:32: a9:e9:92:ae:4e:4d:e4:77:e6:97:05:2e:49:ce:f8: 84:52:6d:03:8b:43:99:db:40:49:7a:37:fe:6d:0f: b4:25:52:7e:e8:b1:c6:d9:c3:0e:e4:63:d3:fc:28: fd:93:16:90:46:c8:70:ce:12:43:89:e6:f6:5f:0f: d4:74:e3:ed:b8:82:c3:55:59:19:2a:fa:55:1d:89: 07:a2:4b:74:a7:51:8d:63:fa:ae:06:d7:d7:22:e6: 6e:f0:52:3f:c6:75:4a:83:48:01:e7:55:c0:1b:c7: fc:e3:35:1a:b6:87:d6:16:e9:99:e2:4c:0e:e5:93: d0:50:3f:a2:ff:e5:3a:75:6d:a3:21:4d:0c:3a:e4: 34:4d:1c:df:78:d0:33:41:31:00:af:ee:25:55:ea: f2:b1:b8:9d:73:89:e4:c8:6e:09:df:ea:fd:41:97: cc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:15:4A:A9:AB:F8:EB:A8:F7:35:4E:8A:36:0D:2F:14:05:27:76:A8 X509v3 Authority Key Identifier: keyid:72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:01:c9:70:68:fb:c7:f9:36:45:fd:aa:64:ef:f8:32:f9:88: 6b:ba:d1:ec:55:88:03:15:2a:c2:a8:df:e0:1d:30:7c:79:83: 6a:12:f0:45:e8:4e:a9:ff:7d:89:86:ef:30:11:7a:e7:f3:f4: f4:b1:d7:a2:2e:a7:f9:b4:40:7f:50:e5:cf:ee:94:da:dd:82: 08:9a:31:1f:f2:12:34:a1:45:6b:a1:d3:cf:d5:8f:fb:56:ab: 18:44:ac:a4:0a:06:18:43:82:c6:fc:02:aa:d7:06:db:00:34: 53:f8:3c:89:41:46:31:f5:9d:e4:c8:09:bc:32:e4:cd:90:d2: 27:03:77:53:25:4a:47:4e:ba:df:97:f7:58:ab:70:c0:98:5a: cb:87:75:c0:0f:79:e1:98:42:26:be:4e:6d:9e:14:aa:b2:10: 47:5a:c0:2d:d8:2a:2b:c1:81:bd:a6:19:a7:9e:dd:db:c8:b1: 35:ab:d8:56:03:e0:6d:1c:dc:8c:3b:b0:2a:05:ff:20:79:86: 98:e2:f8:a7:87:78:4b:9e:c0:45:d6:ba:7c:26:4f:81:c1:ec: 87:b2:c1:ae:c2:c2:22:3b:ed:e2:78:bc:94:5c:51:66:53:5f: a6:47:66:78:5c:90:26:d8:9d:bd:a1:c9:a9:0f:dd:d2:c3:5a: bc:49:4f:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MxRTkxMTAvBgNVBAUTKDcyRDE1NzQzRjU5QzgzQTVDMTk1QTVFNkRCMUVBNDY0 NzYzNEJFRjcwHhcNMjYwMzI1MDIxMTA3WhcNMjYwNDAxMDIxMTA3WjAYMRYwFAYD VQQDEw02OWMzNDQzYi00NjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPv0H3ETGAgwhuve6CurqUDlaSJs1L3+Ze0pTz+WFxCsRs6c1MGKbnkSEmmN PBfsiqv1PI4pe9U8Sj15FB0EZvtQwjbK0klkrcXp5xMKOvgQR4nfxIH7BjKp6ZKu Tk3kd+aXBS5JzviEUm0Di0OZ20BJejf+bQ+0JVJ+6LHG2cMO5GPT/Cj9kxaQRshw zhJDieb2Xw/UdOPtuILDVVkZKvpVHYkHokt0p1GNY/quBtfXIuZu8FI/xnVKg0gB 51XAG8f84zUatofWFumZ4kwO5ZPQUD+i/+U6dW2jIU0MOuQ0TRzfeNAzQTEAr+4l Verysbidc4nkyG4J3+r9QZfMZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAkVSqmr +Ouo9zVOijYNLxQFJ3aoMB8GA1UdIwQYMBaAFHLRV0P1nIOlwZWl5tsepGR2NL73 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzFFOS9CQkNENUQyQ0VG Q0MxMUVEQjI5QkIwNkNDNEY5QUUwMi9jdEZYUV9XY2c2WEJsYVhtMng2a1pIWTB2 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N0RlhRX1djZzZYQmxhWG0yeDZrWkhZMHZ2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzFFOS9CQkNENUQyQ0VGQ0MxMUVEQjI5QkIwNkNDNEY5QUUwMi9jdEZYUV9XY2c2 WEJsYVhtMng2a1pIWTB2dmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzwHJcGj7x/k2Rf2qZO/4MvmIa7rR7FWIAxUqwqjf4B0wfHmDahLwRehOqf99 iYbvMBF65/P09LHXoi6n+bRAf1Dlz+6U2t2CCJoxH/ISNKFFa6HTz9WP+1arGESs pAoGGEOCxvwCqtcG2wA0U/g8iUFGMfWd5MgJvDLkzZDSJwN3UyVKR06635f3WKtw wJhay4d1wA954ZhCJr5ObZ4UqrIQR1rALdgqK8GBvaYZp57d28ixNavYVgPgbRzc jDuwKgX/IHmGmOL4p4d4S57ARda6fCZPgcHsh7LBrsLCIjvt4ni8lFxRZlNfpkdm eFyQJtidvaHJqQ/d0sNavElP2A== -----END CERTIFICATE-----Generated at Thu Mar 26 02:25:38 2026 by rpki-client