$ rpki-client -vvf rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft File: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft (raw, json) Hash identifier: ZJUBAIBIcMngv0cqzhUM0GjsmvGbvapQ57yA4KFmjSg= Subject key identifier: 70:5C:E8:64:08:23:EE:36:71:29:E3:D5:EB:AF:46:72:6C:21:9A:49 Authority key identifier: 0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 Certificate issuer: /CN=A91D890E/serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Certificate serial: 09C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft Manifest number: 09BE Signing time: Tue 24 Mar 2026 19:42:57 +0000 Manifest this update: Tue 24 Mar 2026 19:42:56 +0000 Manifest next update: Tue 31 Mar 2026 19:42:56 +0000 Files and hashes: 1: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl (hash: NbrRI6sVxpUqq/4Hfs7iKVVRu5B497Ywtz+u2WVEcdw=) 2: FDAEEFB0A12A11EAB063A548C4F9AE02.roa (hash: cNrjBilbrF0h5gqh8r2I8xpeSdxfHL1i6pc3sR9uCdw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:42:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2503 (0x9c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D890E, serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Validity Not Before: Mar 24 19:42:56 2026 GMT Not After : Mar 31 19:42:56 2026 GMT Subject: CN=69c2e941-0f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:03:c7:10:20:8d:87:ff:9d:1d:53:27:76:c1: c3:38:c6:81:d5:c8:13:a4:7e:2d:c0:d1:0b:95:43: 69:a3:3e:23:ce:41:ca:14:55:a4:b2:fd:d3:5c:61: 50:a0:dd:f2:fe:14:b2:6f:1d:0e:b5:56:2f:7d:00: 03:00:b7:0c:3e:ea:d0:5a:e1:c4:33:81:25:80:ca: 95:ac:c4:47:3a:b5:f8:90:1c:d8:82:80:57:2f:47: 76:e5:6e:c0:ed:c3:32:63:d5:bf:f3:43:e3:af:bc: d0:21:f4:4f:94:9e:c9:57:2b:0a:b9:43:a8:14:0d: 2e:ad:ed:d1:0e:36:ac:f5:51:86:70:a4:ea:d7:a6: 47:da:00:85:55:d2:d2:2a:b4:32:30:dd:1d:ef:0f: 64:29:2c:42:19:a1:2e:eb:ed:f1:0a:6b:a6:59:6e: b8:5d:0b:b3:c9:ed:37:ba:2d:7d:26:db:6c:63:5b: 51:83:10:a6:4e:0a:4b:dd:d0:d6:a1:d9:72:44:65: 78:8b:42:de:5e:88:82:4e:5f:9f:4e:59:4e:e9:64: 33:37:9b:31:6d:ef:d5:a0:97:3e:c5:a4:83:bb:4d: 1d:ac:1d:70:99:83:32:1c:d3:b9:bf:8d:3a:f2:f7: 7f:70:da:05:5e:c3:91:ea:d2:68:ba:ca:ac:bd:b6: 16:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:5C:E8:64:08:23:EE:36:71:29:E3:D5:EB:AF:46:72:6C:21:9A:49 X509v3 Authority Key Identifier: keyid:0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:75:13:2e:ad:7f:e6:86:4c:6c:e0:b9:22:92:00:3a:f6:ff: 3f:f9:7a:8d:83:5c:bd:c7:84:3c:18:90:17:0b:ba:1f:82:5c: fd:60:e7:da:b4:7a:f6:cb:09:34:91:c0:ee:55:69:34:b8:ba: c8:d0:f6:09:ad:ca:19:1f:8f:65:09:f5:a4:0b:bb:55:ed:95: 36:e3:36:0c:47:66:c4:5e:63:08:f1:97:a4:70:9f:09:69:e2: 4d:cf:dc:72:38:75:72:3b:0a:cc:b0:36:8a:e7:f5:92:54:fe: d0:01:93:2a:57:56:92:25:a3:39:ed:2a:45:5e:f2:23:f6:8e: f8:b3:54:1a:49:51:32:c3:8e:71:e5:67:77:c9:bc:0b:dc:f5: e6:8e:0b:35:d3:6d:c5:d9:02:7d:70:e4:ae:f7:49:1d:cb:19: a2:c2:86:26:33:fe:33:de:36:99:30:41:8a:cc:92:7d:2d:1c: 65:dc:43:7b:11:53:0a:fd:9f:1b:d7:e3:bb:96:08:36:ae:14: 89:20:1b:bb:5b:93:72:a0:e7:14:af:40:e0:c1:8c:cc:7a:b8: 31:f9:0e:b9:14:7b:7d:da:23:0e:bd:17:00:f5:e2:9d:d8:73: 38:4a:b3:60:9e:95:8b:cd:75:4e:1c:9b:5e:5c:9a:2d:d7:da: 7d:8a:86:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MEUxMTAvBgNVBAUTKDBCMDIyQjFFQTM0QzAzN0M1MUY2NTdGQzNFMEQ4NEEz QzYxODY4MjIwHhcNMjYwMzI0MTk0MjU2WhcNMjYwMzMxMTk0MjU2WjAYMRYwFAYD VQQDEw02OWMyZTk0MS0wZjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoQPHECCNh/+dHVMndsHDOMaB1cgTpH4twNELlUNpoz4jzkHKFFWksv3TXGFQ oN3y/hSybx0OtVYvfQADALcMPurQWuHEM4ElgMqVrMRHOrX4kBzYgoBXL0d25W7A 7cMyY9W/80Pjr7zQIfRPlJ7JVysKuUOoFA0ure3RDjas9VGGcKTq16ZH2gCFVdLS KrQyMN0d7w9kKSxCGaEu6+3xCmumWW64XQuzye03ui19JttsY1tRgxCmTgpL3dDW odlyRGV4i0LeXoiCTl+fTllO6WQzN5sxbe/VoJc+xaSDu00drB1wmYMyHNO5v406 8vd/cNoFXsOR6tJousqsvbYW9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHBc6GQI I+42cSnj1euvRnJsIZpJMB8GA1UdIwQYMBaAFAsCKx6jTAN8UfZX/D4NhKPGGGgi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkwRS84RDQxMzVGRUEx MjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEzeFI5bGY4UGcyRW84WVlh Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N3SXJIcU5NQTN4UjlsZjhQZzJFbzhZWWFDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODkwRS84RDQxMzVGRUExMjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEz eFI5bGY4UGcyRW84WVlhQ0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsXUTLq1/5oZMbOC5IpIAOvb/P/l6jYNcvceEPBiQFwu6H4Jc/WDn2rR69ssJ NJHA7lVpNLi6yND2Ca3KGR+PZQn1pAu7Ve2VNuM2DEdmxF5jCPGXpHCfCWniTc/c cjh1cjsKzLA2iuf1klT+0AGTKldWkiWjOe0qRV7yI/aO+LNUGklRMsOOceVnd8m8 C9z15o4LNdNtxdkCfXDkrvdJHcsZosKGJjP+M942mTBBisySfS0cZdxDexFTCv2f G9fju5YINq4UiSAbu1uTcqDnFK9A4MGMzHq4MfkOuRR7fdojDr0XAPXindhzOEqz YJ6Vi811ThybXlyaLdfafYqGdQ== -----END CERTIFICATE-----Generated at Thu Mar 26 06:52:41 2026 by rpki-client