$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft File: cM9awmFE6NdDsVID4mwiBG-iQHo.mft (raw, json) Hash identifier: MZ+fuAOu7h7+OBe7BCe291yfS+3BCZn/XKVMv1ctHKo= Subject key identifier: BF:7B:6B:00:DF:6C:6A:16:20:D5:C9:D3:5E:A0:3E:C5:6E:FF:41:82 Authority key identifier: 70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A Certificate issuer: /CN=A91DB128/serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A Certificate serial: 0234 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft Manifest number: 022B Signing time: Wed 25 Mar 2026 02:06:03 +0000 Manifest this update: Wed 25 Mar 2026 02:06:02 +0000 Manifest next update: Wed 01 Apr 2026 02:06:02 +0000 Files and hashes: 1: cM9awmFE6NdDsVID4mwiBG-iQHo.crl (hash: pNyZAKD7aPHO4R0l6lVDIwDl477m5xmdAZKuwr5skEM=) 2: ABD7D9FCDDEC11EDB14EDA32C4F9AE02.roa (hash: 1MNwMcMX/YIxSKpmegVgnjdToRlQxDirMalIhcpKaow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.crl rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:06:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB128, serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A Validity Not Before: Mar 25 02:06:02 2026 GMT Not After : Apr 1 02:06:02 2026 GMT Subject: CN=69c3430b-c0ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5c:87:cb:38:5b:8f:6e:68:ca:66:0d:34:41: 87:bd:30:72:e4:f1:b0:b9:73:cc:6a:95:7e:9b:47: 4e:a6:ed:1a:36:41:71:dc:d0:47:13:a3:48:83:89: 0c:4e:8c:a1:e4:73:72:fb:5c:81:7e:d8:65:22:8a: 90:d4:5d:1a:77:35:31:dc:3e:e3:11:0a:b5:5f:8f: 00:19:7e:6a:1f:79:c6:5a:1e:6a:c6:d6:19:0a:e3: 4d:3d:79:d0:66:94:74:3a:6c:3a:b4:df:e9:76:c5: 07:6f:59:22:51:b2:3e:24:91:e8:1f:35:ed:64:49: 1e:5f:1b:b1:f6:f5:cf:b5:86:0a:b8:90:7b:2b:d7: d5:36:24:9f:36:6f:7b:4b:53:80:ba:69:f8:a0:71: 50:ab:3d:3b:3d:17:62:ab:3d:55:88:ed:9a:8a:76: 68:00:f6:21:9e:5e:20:ea:5f:4a:74:fb:a5:c6:99: e3:92:c6:b4:bb:ea:db:c8:de:f0:00:88:a5:ad:7d: 4b:68:c5:16:79:3f:e6:75:40:72:71:a0:6f:30:4b: 9c:ce:77:b9:6c:d3:5b:b1:19:87:93:be:1f:91:11: 18:3f:35:98:1e:10:bd:b1:5f:4f:de:d9:94:bf:71: db:a7:f0:46:5d:2c:e1:bb:61:11:c3:e0:99:cc:c7: 5c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7B:6B:00:DF:6C:6A:16:20:D5:C9:D3:5E:A0:3E:C5:6E:FF:41:82 X509v3 Authority Key Identifier: keyid:70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:63:68:50:75:5c:4c:b1:c6:15:63:86:95:47:9b:53:43:57: 6d:98:67:15:ec:cd:bf:a1:47:b0:26:70:87:51:98:a0:fb:9b: 6b:e0:a0:22:02:e1:73:c3:00:46:92:1c:c1:86:b9:69:d3:ec: 7a:42:a3:c9:af:7d:46:73:da:28:93:43:2b:50:27:22:58:25: e6:3e:d2:a3:ce:d1:0c:f6:44:eb:e2:80:72:32:b3:5c:e5:4f: 4d:58:ea:d4:03:cf:b0:d8:01:1b:80:85:de:e7:fa:3f:a5:20: 3d:cd:ad:6b:96:cf:d3:39:d6:63:1a:91:fd:61:e8:54:a6:30: 30:b7:0a:5e:8d:3e:1d:27:af:1c:f4:8e:56:5f:22:ca:7d:30: d2:f4:b2:dc:a9:f5:2b:8f:3e:0c:60:3e:4a:2b:22:32:78:5d: 86:26:33:58:04:d6:d5:a6:ab:50:1e:b0:7f:2c:1a:19:26:ba: 66:47:ad:29:12:28:b5:65:ac:4b:01:88:39:fe:f3:7c:e7:d4: ad:90:14:47:93:8e:11:08:b8:cd:90:33:04:f3:4e:cc:bf:ac: cf:dc:55:92:53:b5:2c:9a:b3:44:a0:90:01:a8:3c:bc:75:2c: 10:f2:5b:26:58:e2:ea:5c:0b:d2:06:17:86:b5:3f:25:9c:d8: f9:7f:ae:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIxMjgxMTAvBgNVBAUTKDcwQ0Y1QUMyNjE0NEU4RDc0M0IxNTIwM0UyNkMyMjA0 NkZBMjQwN0EwHhcNMjYwMzI1MDIwNjAyWhcNMjYwNDAxMDIwNjAyWjAYMRYwFAYD VQQDEw02OWMzNDMwYi1jMGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFyHyzhbj25oymYNNEGHvTBy5PGwuXPMapV+m0dOpu0aNkFx3NBHE6NIg4kM Toyh5HNy+1yBfthlIoqQ1F0adzUx3D7jEQq1X48AGX5qH3nGWh5qxtYZCuNNPXnQ ZpR0Omw6tN/pdsUHb1kiUbI+JJHoHzXtZEkeXxux9vXPtYYKuJB7K9fVNiSfNm97 S1OAumn4oHFQqz07PRdiqz1ViO2ainZoAPYhnl4g6l9KdPulxpnjksa0u+rbyN7w AIilrX1LaMUWeT/mdUBycaBvMEuczne5bNNbsRmHk74fkREYPzWYHhC9sV9P3tmU v3Hbp/BGXSzhu2ERw+CZzMdcCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL97awDf bGoWINXJ016gPsVu/0GCMB8GA1UdIwQYMBaAFHDPWsJhROjXQ7FSA+JsIgRvokB6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjEyOC83QkYyM0FDNERE RTgxMUVEQkY4Qzk3M0FDNEY5QUUwMi9jTTlhd21GRTZOZERzVklENG13aUJHLWlR SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNOWF3bUZFNk5kRHNWSUQ0bXdpQkctaVFIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjEyOC83QkYyM0FDNERERTgxMUVEQkY4Qzk3M0FDNEY5QUUwMi9jTTlhd21GRTZO ZERzVklENG13aUJHLWlRSG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArGNoUHVcTLHGFWOGlUebU0NXbZhnFezNv6FHsCZwh1GYoPuba+CgIgLhc8MA RpIcwYa5adPsekKjya99RnPaKJNDK1AnIlgl5j7So87RDPZE6+KAcjKzXOVPTVjq 1APPsNgBG4CF3uf6P6UgPc2ta5bP0znWYxqR/WHoVKYwMLcKXo0+HSevHPSOVl8i yn0w0vSy3Kn1K48+DGA+SisiMnhdhiYzWATW1aarUB6wfywaGSa6ZketKRIotWWs SwGIOf7zfOfUrZAUR5OOEQi4zZAzBPNOzL+sz9xVklO1LJqzRKCQAag8vHUsEPJb Jlji6lwL0gYXhrU/JZzY+X+unw== -----END CERTIFICATE-----Generated at Thu Mar 26 07:15:48 2026 by rpki-client