$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft File: buWafawHoiW5GzRmrRoHRkk9jiQ.mft (raw, json) Hash identifier: 2G+K3fRFVMoOdN2d2w1V9PpBqKKIKDvL8rmu/iif6J4= Subject key identifier: 77:07:9B:F4:3E:34:7A:74:F9:9B:72:6C:60:75:D6:A5:9F:BB:2C:1B Authority key identifier: 6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24 Certificate issuer: /CN=A91E9D5D/serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24 Certificate serial: 0664 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft Manifest number: 065B Signing time: Tue 24 Mar 2026 22:21:28 +0000 Manifest this update: Tue 24 Mar 2026 22:21:28 +0000 Manifest next update: Tue 31 Mar 2026 22:21:28 +0000 Files and hashes: 1: buWafawHoiW5GzRmrRoHRkk9jiQ.crl (hash: 4fYjhN492iy/qnbNT/SGQ+tw6cChitY/ghANKyusn4k=) 2: 581F68DAD48A11EEB7A00557C4F9AE02.roa (hash: NDR9ZBlCPG6TNFjpWR6oUi6H3yAwo0tj9PuG9qFDBEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:21:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1636 (0x664) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9D5D, serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24 Validity Not Before: Mar 24 22:21:28 2026 GMT Not After : Mar 31 22:21:28 2026 GMT Subject: CN=69c30e68-8b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:49:eb:e0:21:f6:7b:53:95:be:04:3e:bc:94: fb:39:a1:74:2e:1d:58:1d:0c:f5:df:45:9a:f0:39: ac:66:96:4d:6c:dc:4b:5a:23:58:ec:17:48:69:87: 61:43:3c:60:50:27:46:e6:89:8b:0b:62:c0:fa:3c: 68:da:e7:ae:44:d7:50:20:12:f6:a3:f8:4f:9e:35: 53:00:c6:69:fc:48:29:1e:27:8a:64:e8:c2:3b:b1: 14:1b:73:30:e4:5e:ae:80:5e:16:28:46:26:2a:f8: 72:78:9f:f2:d9:c6:50:51:cf:72:5a:18:e9:fa:0f: a1:48:4d:94:6e:0c:67:f2:75:08:ca:88:1c:82:86: e2:1f:92:7c:90:26:a8:58:86:ba:e2:16:19:0b:e5: f4:4e:b8:1d:0a:c0:da:a2:da:b6:ce:57:bd:8a:ab: 79:09:30:4d:a5:5d:d5:93:79:64:e2:b6:2b:b5:14: 6e:e3:ce:cd:1a:38:d7:88:01:5a:a4:e4:cb:e7:11: a6:54:3f:6e:4e:a4:94:0c:08:10:b6:f8:89:3a:cf: 4c:2d:ea:06:bc:16:ff:e1:fe:eb:ee:29:2f:b8:dd: 52:0a:c6:70:1c:8b:18:69:f9:dc:c1:e2:19:85:7d: dc:e9:59:49:59:06:90:47:9f:db:b4:6d:50:70:7e: 0e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:07:9B:F4:3E:34:7A:74:F9:9B:72:6C:60:75:D6:A5:9F:BB:2C:1B X509v3 Authority Key Identifier: keyid:6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:60:97:63:4f:f6:6e:9a:9b:21:69:5b:f7:4c:b2:4b:ac:fd: ed:aa:d4:81:58:11:ce:0f:24:67:fe:fa:bf:1b:4a:cf:ce:39: b5:e1:17:bc:85:01:00:c7:27:45:a5:5b:bd:ee:e9:95:1a:a3: 5a:60:a3:68:b7:1c:7c:48:67:e8:4c:57:2a:6b:27:ac:b8:c0: 18:34:7d:77:64:c3:4c:3f:98:45:08:b9:56:d4:b4:12:6b:a2: 5e:c2:4c:15:89:b5:7e:fa:c1:b0:fe:f4:8b:28:ae:c2:12:d4: 1f:6f:14:7c:e2:48:21:52:92:ed:32:1d:45:2a:2a:70:37:e1: 37:f0:af:21:7a:17:8d:08:ea:51:ea:6c:7b:b6:31:d4:67:4a: 4a:f1:1b:7b:26:f4:79:76:13:ed:78:70:e9:94:35:7d:9b:ef: 62:ee:28:54:4a:f9:cf:13:0c:18:54:ac:7d:36:13:ae:5b:f0: 6f:1b:a5:b0:76:46:5b:6a:50:0b:4f:3f:a0:4b:ef:a3:cc:98: 6d:51:57:4f:ef:c1:df:db:4e:6d:f5:65:c4:bd:61:e4:6f:b8: 9c:d0:2b:04:8d:d8:82:1f:15:22:09:66:67:76:c3:2f:f9:00: 3b:83:e0:33:03:be:f8:e4:a0:cc:f9:df:ef:ae:9b:e1:1e:b4: 2b:fe:4d:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlENUQxMTAvBgNVBAUTKDZFRTU5QTdEQUMwN0EyMjVCOTFCMzQ2NkFEMUEwNzQ2 NDkzRDhFMjQwHhcNMjYwMzI0MjIyMTI4WhcNMjYwMzMxMjIyMTI4WjAYMRYwFAYD VQQDEw02OWMzMGU2OC04YjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0nr4CH2e1OVvgQ+vJT7OaF0Lh1YHQz130Wa8DmsZpZNbNxLWiNY7BdIaYdh QzxgUCdG5omLC2LA+jxo2ueuRNdQIBL2o/hPnjVTAMZp/EgpHieKZOjCO7EUG3Mw 5F6ugF4WKEYmKvhyeJ/y2cZQUc9yWhjp+g+hSE2Ubgxn8nUIyogcgobiH5J8kCao WIa64hYZC+X0TrgdCsDaotq2zle9iqt5CTBNpV3Vk3lk4rYrtRRu487NGjjXiAFa pOTL5xGmVD9uTqSUDAgQtviJOs9MLeoGvBb/4f7r7ikvuN1SCsZwHIsYafncweIZ hX3c6VlJWQaQR5/btG1QcH4OrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHcHm/Q+ NHp0+ZtybGB11qWfuywbMB8GA1UdIwQYMBaAFG7lmn2sB6IluRs0Zq0aB0ZJPY4k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUQ1RC80MDAxQTE2Q0M0 NUUxMUVCQjI5QjRDNENDNEY5QUUwMi9idVdhZmF3SG9pVzVHelJtclJvSFJrazlq aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J1V2FmYXdIb2lXNUd6Um1yUm9IUmtrOWppUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUQ1RC80MDAxQTE2Q0M0NUUxMUVCQjI5QjRDNENDNEY5QUUwMi9idVdhZmF3SG9p VzVHelJtclJvSFJrazlqaVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvWCXY0/2bpqbIWlb90yyS6z97arUgVgRzg8kZ/76vxtKz845teEXvIUBAMcn RaVbve7plRqjWmCjaLccfEhn6ExXKmsnrLjAGDR9d2TDTD+YRQi5VtS0EmuiXsJM FYm1fvrBsP70iyiuwhLUH28UfOJIIVKS7TIdRSoqcDfhN/CvIXoXjQjqUepse7Yx 1GdKSvEbeyb0eXYT7Xhw6ZQ1fZvvYu4oVEr5zxMMGFSsfTYTrlvwbxulsHZGW2pQ C08/oEvvo8yYbVFXT+/B39tObfVlxL1h5G+4nNArBI3Ygh8VIglmZ3bDL/kAO4Pg MwO++OSgzPnf766b4R60K/5NIA== -----END CERTIFICATE-----Generated at Fri Mar 27 01:00:18 2026 by rpki-client