$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft File: CekFd0f2O6Ciga54ATZozt6kCrQ.mft (raw, json) Hash identifier: z4uHX8pWn9Y490gVveiq6SDpBGMLzzOKsg/lkz3A5mw= Subject key identifier: B4:77:14:70:09:7C:55:33:9F:45:31:20:CB:04:E9:95:2B:07:D5:7A Authority key identifier: 09:E9:05:77:47:F6:3B:A0:A2:81:AE:78:01:36:68:CE:DE:A4:0A:B4 Certificate issuer: /CN=A91CDAFB/serialNumber=09E9057747F63BA0A281AE78013668CEDEA40AB4 Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft Manifest number: 020E Signing time: Fri 27 Mar 2026 02:26:13 +0000 Manifest this update: Fri 27 Mar 2026 02:26:13 +0000 Manifest next update: Fri 03 Apr 2026 02:26:13 +0000 Files and hashes: 1: CekFd0f2O6Ciga54ATZozt6kCrQ.crl (hash: L61kN9jK0kvN0wSMQiPwL4a569ysTr7CUqZpKukuB1s=) 2: 2815D106041A11EEA67A6B4DC4F9AE02.roa (hash: OYerZcew/z3W1QIzxa4XrF+WiLMIJxrcPO1hXH0kxM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.crl rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 02:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDAFB, serialNumber=09E9057747F63BA0A281AE78013668CEDEA40AB4 Validity Not Before: Mar 27 02:26:13 2026 GMT Not After : Apr 3 02:26:13 2026 GMT Subject: CN=69c5eac5-2223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b4:04:8f:2f:df:53:6a:6e:39:48:31:d9:3a: f3:4b:67:39:4a:86:6b:3d:3f:e1:21:d9:3a:51:11: b3:5f:ed:77:16:47:a3:35:8f:70:68:e1:17:8b:69: 66:38:96:ad:19:43:64:c9:52:f6:09:93:87:82:14: 59:cd:cf:22:26:0b:23:a0:c9:8e:6c:03:3c:03:aa: 6f:86:44:da:26:ab:09:eb:71:ae:13:78:83:d0:f1: e9:f3:55:50:3a:e5:76:bc:ad:7f:77:e9:bd:3d:09: 89:d5:16:7f:25:5f:ce:16:7f:9c:ec:8b:e3:56:5d: 16:47:5e:3f:aa:a2:88:0c:bb:dd:b2:b8:26:47:92: 97:c7:54:87:01:4b:7f:bf:71:34:35:05:27:46:0f: fb:02:e4:e5:3e:68:01:2a:63:2b:b0:c8:64:59:a6: f2:26:66:8f:ed:bb:2b:dc:63:fa:48:43:17:68:96: dd:b8:59:3f:ff:29:97:9e:ab:70:1e:9b:7f:67:b2: 42:41:eb:65:ce:8b:4e:e2:61:21:c5:48:89:85:74: 95:41:99:46:09:fc:4a:12:59:03:bb:83:3a:f3:6b: 49:11:0c:e6:03:d1:58:dd:db:18:fa:ba:b3:c4:94: 8b:d1:c7:1a:b6:86:fc:6a:ee:38:29:64:4e:7c:80: cb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:77:14:70:09:7C:55:33:9F:45:31:20:CB:04:E9:95:2B:07:D5:7A X509v3 Authority Key Identifier: keyid:09:E9:05:77:47:F6:3B:A0:A2:81:AE:78:01:36:68:CE:DE:A4:0A:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:42:8a:49:f9:cb:a9:41:1c:3c:28:53:cc:ad:5d:1d:da:77: e1:ad:35:0f:c4:22:a3:bd:d2:34:da:cc:e8:7b:24:51:6d:58: f4:f0:a3:2e:f1:77:90:ba:26:68:a4:a3:d1:b3:e5:cb:2b:15: 13:0c:d9:0e:14:ee:5f:20:53:74:9d:a3:65:b7:5e:d2:08:80: 86:8e:bc:d7:cf:f0:40:fb:a4:a4:f3:06:ba:6e:cf:58:cf:fc: 28:de:90:7a:ce:75:0e:86:cd:9d:a7:eb:7c:4c:3a:92:17:f2: 83:6e:3b:6a:84:08:b9:7c:4f:8a:99:70:2f:8f:f5:6e:1d:71: 27:44:92:89:ec:cb:d7:d2:0f:01:98:c2:5e:9d:db:79:5b:8a: 5d:83:64:99:ee:dd:e6:f6:ba:94:b3:a0:f4:47:55:46:60:a0: 75:07:70:4c:72:b5:fb:93:8c:35:e3:58:1d:f4:c2:ed:55:3a: 81:ce:79:25:5a:b2:3f:e0:d1:f0:4a:a5:59:2d:81:e7:94:16: 91:a5:54:e7:8d:8d:10:f6:27:84:ec:a7:21:d1:3e:9f:71:2f: 08:86:4e:50:d2:bd:5a:37:e2:a5:f6:04:04:b9:4e:d9:31:b0: 9f:8b:0e:0e:1a:08:15:29:45:54:6e:f1:ef:48:fe:ae:9a:d6: 8e:75:e0:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RBRkIxMTAvBgNVBAUTKDA5RTkwNTc3NDdGNjNCQTBBMjgxQUU3ODAxMzY2OENF REVBNDBBQjQwHhcNMjYwMzI3MDIyNjEzWhcNMjYwNDAzMDIyNjEzWjAYMRYwFAYD VQQDEw02OWM1ZWFjNS0yMjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsbQEjy/fU2puOUgx2TrzS2c5SoZrPT/hIdk6URGzX+13FkejNY9waOEXi2lm OJatGUNkyVL2CZOHghRZzc8iJgsjoMmObAM8A6pvhkTaJqsJ63GuE3iD0PHp81VQ OuV2vK1/d+m9PQmJ1RZ/JV/OFn+c7IvjVl0WR14/qqKIDLvdsrgmR5KXx1SHAUt/ v3E0NQUnRg/7AuTlPmgBKmMrsMhkWabyJmaP7bsr3GP6SEMXaJbduFk//ymXnqtw Hpt/Z7JCQetlzotO4mEhxUiJhXSVQZlGCfxKElkDu4M682tJEQzmA9FY3dsY+rqz xJSL0ccatob8au44KWROfIDLyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLR3FHAJ fFUzn0UxIMsE6ZUrB9V6MB8GA1UdIwQYMBaAFAnpBXdH9jugooGueAE2aM7epAq0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREFGQi9FQzBGNkEzODAz NDExMUVFQTUyMTUyNDdDNEY5QUUwMi9DZWtGZDBmMk82Q2lnYTU0QVRab3p0NmtD clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Nla0ZkMGYyTzZDaWdhNTRBVFpvenQ2a0NyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REFGQi9FQzBGNkEzODAzNDExMUVFQTUyMTUyNDdDNEY5QUUwMi9DZWtGZDBmMk82 Q2lnYTU0QVRab3p0NmtDclEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAkKKSfnLqUEcPChTzK1dHdp34a01D8Qio73SNNrM6HskUW1Y9PCjLvF3kLom aKSj0bPlyysVEwzZDhTuXyBTdJ2jZbde0giAho6818/wQPukpPMGum7PWM/8KN6Q es51DobNnafrfEw6khfyg247aoQIuXxPiplwL4/1bh1xJ0SSiezL19IPAZjCXp3b eVuKXYNkme7d5va6lLOg9EdVRmCgdQdwTHK1+5OMNeNYHfTC7VU6gc55JVqyP+DR 8EqlWS2B55QWkaVU542NEPYnhOynIdE+n3EvCIZOUNK9WjfipfYEBLlO2TGwn4sO DhoIFSlFVG7x70j+rprWjnXgtw== -----END CERTIFICATE-----Generated at Sat Mar 28 13:41:11 2026 by rpki-client