$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft File: cClGBbAXy3lsrYhC9e-6P0SHB_U.mft (raw, json) Hash identifier: BJv/8G1VqITkCkmURnIhbRhApmTTi00EEEkmWjVAjO4= Subject key identifier: 1C:AE:60:FA:4E:25:CE:3C:39:D7:63:50:8D:AA:5F:FE:16:B8:CE:63 Authority key identifier: 70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5 Certificate issuer: /CN=A91E1C16/serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5 Certificate serial: 0697 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft Manifest number: 0678 Signing time: Tue 24 Mar 2026 22:18:59 +0000 Manifest this update: Tue 24 Mar 2026 22:18:58 +0000 Manifest next update: Tue 31 Mar 2026 22:18:58 +0000 Files and hashes: 1: cClGBbAXy3lsrYhC9e-6P0SHB_U.crl (hash: zGVrlVPqkMPrLD3YYtsX/+d6nRVeE7zeI4V4iNRhoRA=) 2: 2B6E7D32FC5311ECBCE27247C4F9AE02.roa (hash: sO9jgWfuXt49U8NY50liL44KJyvfnkkcwZOmOl+RZQk=) 3: 4FF82F28045E11EDB581B43EC4F9AE02.roa (hash: eQ771cE1MyFNmzNP+b1zAxMvpLWubN2mVv4gPyjfQoI=) 4: FA18CEA2F07A11EBBEBB415AC4F9AE02.roa (hash: SJNOZup/UrCByxrNytnlkYSdJsDVWtdVX5+3tE4Gk5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1687 (0x697) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1C16, serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5 Validity Not Before: Mar 24 22:18:58 2026 GMT Not After : Mar 31 22:18:58 2026 GMT Subject: CN=69c30dd2-96ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0e:eb:18:5a:02:c2:97:65:c3:59:59:bf:c4: 47:d8:99:e9:e0:24:3e:e7:a7:da:e8:be:fd:19:05: e1:94:91:4a:64:ff:6e:0b:80:f5:f9:7b:96:bd:e2: 3d:47:c6:68:4e:e3:6c:a8:3b:d0:28:f7:8b:c8:85: 36:0d:18:75:a6:15:09:fc:d0:61:b3:1c:a0:47:11: 1a:54:08:4d:56:0b:03:23:f3:5c:1f:dc:28:89:41: 54:b9:84:bb:3c:78:32:55:af:24:11:22:60:28:22: eb:38:bd:e0:f6:ac:d6:c9:6d:49:4e:7d:06:00:c4: 23:e8:b3:73:d1:54:2d:f1:f9:79:11:21:78:0a:74: bd:15:8d:2d:20:0d:5d:d3:6a:fb:d8:57:1e:47:f6: cd:55:05:43:69:20:a7:6c:58:a4:bf:06:80:46:13: 54:2b:1e:2b:8b:cd:75:8f:91:15:be:0e:29:65:45: 3d:76:fd:47:65:ca:5c:82:65:76:53:87:94:64:35: 03:5a:7e:1d:2d:c3:23:a9:61:5c:8b:38:62:17:86: 7c:50:06:45:99:97:cc:5e:de:c3:f1:15:09:9f:ed: 24:50:f6:04:a2:ab:db:a8:bd:0d:d0:0f:f0:a9:d5: 76:ff:cd:87:79:2f:64:7f:61:9b:26:ce:28:96:14: 34:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:AE:60:FA:4E:25:CE:3C:39:D7:63:50:8D:AA:5F:FE:16:B8:CE:63 X509v3 Authority Key Identifier: keyid:70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:98:31:0e:59:2e:47:8f:b8:4f:fe:c5:fb:02:a1:82:eb:76: 3d:2a:e1:84:23:c7:10:6f:4b:e1:db:d2:d1:83:3e:bc:c1:bd: a8:6c:10:46:f1:76:22:2c:9f:0f:f2:b7:6d:ea:c9:71:02:b6: af:28:0e:7f:1b:ae:9d:67:0a:96:82:d0:9e:95:b4:a2:e7:d9: f3:fb:06:95:1f:3c:86:2b:96:e6:76:4a:d8:35:da:9e:a2:75: cd:f4:b3:75:63:bb:85:2b:ad:30:75:42:b2:59:62:17:27:ff: 5c:15:08:d3:04:77:34:8a:0c:32:e0:39:9a:80:fe:78:23:66: 09:e9:1d:f4:82:d2:92:6b:e3:64:fe:2c:ef:bb:c4:16:8d:7d: 17:51:8e:4f:9e:2e:98:0d:0d:48:3e:71:d8:93:99:20:64:c7: 4b:b4:b6:24:0a:7a:ad:f9:fb:1e:84:6a:ef:4b:73:50:f6:8c: 68:cd:2f:d3:8d:30:43:0b:02:48:f2:21:87:98:41:4b:51:5c: cc:5a:5e:a9:fa:38:3a:9d:68:9f:52:90:d0:84:fe:6f:78:1a: aa:b6:e6:ef:6b:04:48:44:da:00:4c:83:6f:e2:97:60:d4:7c: 7e:4c:40:a6:e1:7e:3b:cd:27:65:b4:50:d9:cf:0f:fc:80:14: 35:35:cb:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFDMTYxMTAvBgNVBAUTKDcwMjk0NjA1QjAxN0NCNzk2Q0FEODg0MkY1RUZCQTNG NDQ4NzA3RjUwHhcNMjYwMzI0MjIxODU4WhcNMjYwMzMxMjIxODU4WjAYMRYwFAYD VQQDEw02OWMzMGRkMi05NmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAug7rGFoCwpdlw1lZv8RH2Jnp4CQ+56fa6L79GQXhlJFKZP9uC4D1+XuWveI9 R8ZoTuNsqDvQKPeLyIU2DRh1phUJ/NBhsxygRxEaVAhNVgsDI/NcH9woiUFUuYS7 PHgyVa8kESJgKCLrOL3g9qzWyW1JTn0GAMQj6LNz0VQt8fl5ESF4CnS9FY0tIA1d 02r72FceR/bNVQVDaSCnbFikvwaARhNUKx4ri811j5EVvg4pZUU9dv1HZcpcgmV2 U4eUZDUDWn4dLcMjqWFcizhiF4Z8UAZFmZfMXt7D8RUJn+0kUPYEoqvbqL0N0A/w qdV2/82HeS9kf2GbJs4olhQ0wwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFByuYPpO Jc48OddjUI2qX/4WuM5jMB8GA1UdIwQYMBaAFHApRgWwF8t5bK2IQvXvuj9Ehwf1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUMxNi84RjBDNkIwMEJF NjExMUVCQUVGMzVBNjFDNEY5QUUwMi9jQ2xHQmJBWHkzbHNyWWhDOWUtNlAwU0hC X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NDbEdCYkFYeTNsc3JZaEM5ZS02UDBTSEJfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUMxNi84RjBDNkIwMEJFNjExMUVCQUVGMzVBNjFDNEY5QUUwMi9jQ2xHQmJBWHkz bHNyWWhDOWUtNlAwU0hCX1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL5gxDlkuR4+4T/7F+wKhgut2PSrhhCPHEG9L4dvS0YM+vMG9qGwQRvF2Iiyf D/K3berJcQK2rygOfxuunWcKloLQnpW0oufZ8/sGlR88hiuW5nZK2DXanqJ1zfSz dWO7hSutMHVCslliFyf/XBUI0wR3NIoMMuA5moD+eCNmCekd9ILSkmvjZP4s77vE Fo19F1GOT54umA0NSD5x2JOZIGTHS7S2JAp6rfn7HoRq70tzUPaMaM0v040wQwsC SPIhh5hBS1FczFpeqfo4Op1on1KQ0IT+b3gaqrbm72sESETaAEyDb+KXYNR8fkxA puF+O80nZbRQ2c8P/IAUNTXLvA== -----END CERTIFICATE-----Generated at Thu Mar 26 07:52:20 2026 by rpki-client