$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft File: CptpgbEtWk0t827p0oCmWVwyUTY.mft (raw, json) Hash identifier: pP3z8AyRgKcSsMbcbUzIVwNnnuIcqiqGN2sVKGAu/k8= Subject key identifier: AF:E3:AB:3F:18:77:E4:D9:44:06:8C:41:6A:11:1F:95:AB:B9:6F:51 Authority key identifier: 0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36 Certificate issuer: /CN=A91EAC82/serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136 Certificate serial: 0B7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft Manifest number: 0B6D Signing time: Tue 24 Mar 2026 18:59:06 +0000 Manifest this update: Tue 24 Mar 2026 18:59:06 +0000 Manifest next update: Tue 31 Mar 2026 18:59:06 +0000 Files and hashes: 1: CptpgbEtWk0t827p0oCmWVwyUTY.crl (hash: t1+z/RLwdIEBBmT2rEAh3qIeYiUHkacJoBVAcLxG3yQ=) 2: 2FC13F564ED511EA945E3314C4F9AE02.roa (hash: ioS23iGIP3uzA+1OKUGYBP4QYkMLTLuRrz1j1/Q9s4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2940 (0xb7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAC82, serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136 Validity Not Before: Mar 24 18:59:06 2026 GMT Not After : Mar 31 18:59:06 2026 GMT Subject: CN=69c2defa-fc07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3a:d3:77:3c:df:e0:4e:08:ce:5e:8f:f3:77: b4:9e:b2:8a:fb:73:b0:c8:0d:b6:8d:f8:8b:5a:e8: 13:d6:fc:90:e6:85:2f:b0:65:cf:29:00:30:ca:54: 75:6e:53:a1:2c:bc:8c:95:3d:37:f2:0e:46:3b:45: 12:8b:46:e8:ba:84:91:4a:bc:f8:bc:75:38:87:30: d9:74:4f:dc:41:dd:1d:60:56:dd:39:df:c5:9e:e6: 34:dc:03:00:73:9e:68:6e:eb:d5:b5:12:c1:bd:6f: d3:c3:cf:18:22:d0:a6:04:0a:42:8d:27:08:82:ae: 69:2e:1a:e5:77:7f:e5:99:1b:96:2c:b3:fa:e8:ee: 48:79:5e:af:cb:be:8e:e3:c9:35:fc:0c:1c:2a:92: 1a:c1:d0:15:ab:fa:7b:11:9d:87:e2:1e:62:93:8a: aa:78:e7:22:fa:9b:3c:3e:0b:96:0c:f9:9a:d3:44: 54:bb:b6:ee:1a:27:d6:3a:af:b7:5b:fd:b3:2b:39: da:ab:77:11:72:e3:57:0d:7e:b3:83:24:2c:f8:6d: 40:11:c0:aa:49:7a:ff:c6:d2:c8:ad:71:b1:fd:ff: 56:8d:02:8f:0b:ae:9f:a8:9d:15:47:dd:2c:f3:8c: d3:f4:85:f8:48:7d:16:0b:ee:cd:71:ea:58:23:97: 5f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E3:AB:3F:18:77:E4:D9:44:06:8C:41:6A:11:1F:95:AB:B9:6F:51 X509v3 Authority Key Identifier: keyid:0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:df:79:f2:27:2f:d2:c6:3b:b1:bb:ca:fe:20:05:23:53:cf: 11:ed:52:65:5a:72:ac:f8:55:dd:bb:44:d6:b7:c2:0c:85:51: f6:65:a8:d7:0e:c5:d9:fa:5e:8f:5b:eb:74:03:b0:fa:5d:fa: a3:2e:ef:c4:b7:fd:13:6d:3d:a1:f7:d7:9b:37:80:ca:bd:ec: 59:ab:8c:b3:91:d4:99:53:99:4a:2b:b1:8b:c8:f9:30:39:44: 58:1b:3a:2d:42:92:aa:03:59:cb:f8:46:86:c4:d3:5d:55:3e: 2f:fd:d4:64:31:9d:f8:c7:ff:1c:03:54:11:ca:01:ef:98:82: 99:e2:4d:1e:03:6c:c4:3f:65:af:ef:c7:34:22:e4:a0:26:dc: d5:74:e2:d2:da:03:a8:09:bd:8b:00:ea:78:20:3b:72:5c:18: f1:7d:ef:e3:6f:50:ce:81:79:ac:a2:5a:83:d1:90:f6:ea:12: ca:4e:3c:24:f3:64:d2:06:c1:2b:97:5c:b8:fb:b7:e9:21:34: 98:ca:c9:75:24:4a:6a:b3:8c:a2:16:f4:6d:c2:6b:f2:6f:2e: 2f:99:11:25:1a:5b:e5:c7:19:d9:91:5e:fd:c1:ab:fb:20:33: e0:b7:42:92:18:fa:db:a2:75:7e:4b:1f:be:af:c0:96:d2:75: bb:c5:4b:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFDODIxMTAvBgNVBAUTKDBBOUI2OTgxQjEyRDVBNEQyREYzNkVFOUQyODBBNjU5 NUMzMjUxMzYwHhcNMjYwMzI0MTg1OTA2WhcNMjYwMzMxMTg1OTA2WjAYMRYwFAYD VQQDEw02OWMyZGVmYS1mYzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlzrTdzzf4E4Izl6P83e0nrKK+3OwyA22jfiLWugT1vyQ5oUvsGXPKQAwylR1 blOhLLyMlT038g5GO0USi0bouoSRSrz4vHU4hzDZdE/cQd0dYFbdOd/FnuY03AMA c55obuvVtRLBvW/Tw88YItCmBApCjScIgq5pLhrld3/lmRuWLLP66O5IeV6vy76O 48k1/AwcKpIawdAVq/p7EZ2H4h5ik4qqeOci+ps8PguWDPma00RUu7buGifWOq+3 W/2zKznaq3cRcuNXDX6zgyQs+G1AEcCqSXr/xtLIrXGx/f9WjQKPC66fqJ0VR90s 84zT9IX4SH0WC+7NcepYI5dfjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK/jqz8Y d+TZRAaMQWoRH5WruW9RMB8GA1UdIwQYMBaAFAqbaYGxLVpNLfNu6dKApllcMlE2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUM4Mi9DQkQ4OTNBMDRF RDMxMUVBQUQ3QkEyMTFDNEY5QUUwMi9DcHRwZ2JFdFdrMHQ4MjdwMG9DbVdWd3lV VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NwdHBnYkV0V2swdDgyN3Awb0NtV1Z3eVVUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUM4Mi9DQkQ4OTNBMDRFRDMxMUVBQUQ3QkEyMTFDNEY5QUUwMi9DcHRwZ2JFdFdr MHQ4MjdwMG9DbVdWd3lVVFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXN958icv0sY7sbvK/iAFI1PPEe1SZVpyrPhV3btE1rfCDIVR9mWo1w7F2fpe j1vrdAOw+l36oy7vxLf9E209offXmzeAyr3sWauMs5HUmVOZSiuxi8j5MDlEWBs6 LUKSqgNZy/hGhsTTXVU+L/3UZDGd+Mf/HANUEcoB75iCmeJNHgNsxD9lr+/HNCLk oCbc1XTi0toDqAm9iwDqeCA7clwY8X3v429QzoF5rKJag9GQ9uoSyk48JPNk0gbB K5dcuPu36SE0mMrJdSRKarOMohb0bcJr8m8uL5kRJRpb5ccZ2ZFe/cGr+yAz4LdC khj626J1fksfvq/AltJ1u8VLgg== -----END CERTIFICATE-----Generated at Thu Mar 26 16:07:32 2026 by rpki-client