$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft File: CHspwfvXREICrgAqSXEn_WbyStk.mft (raw, json) Hash identifier: +X4orPjyeeQ7xZfcByl8YIGNBES1UEPx1K8NIyYlKSU= Subject key identifier: B9:52:8A:8A:29:B9:91:5F:ED:96:ED:40:12:A7:01:26:93:35:F6:C4 Authority key identifier: 08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9 Certificate issuer: /CN=A91FAED9/serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9 Certificate serial: 0520 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft Manifest number: 0516 Signing time: Thu 26 Mar 2026 23:24:20 +0000 Manifest this update: Thu 26 Mar 2026 23:24:19 +0000 Manifest next update: Thu 02 Apr 2026 23:24:19 +0000 Files and hashes: 1: CHspwfvXREICrgAqSXEn_WbyStk.crl (hash: o8OYQ+K2aDXBxAvbhhGC956ZREG+YVPgOzv9uUZUy3g=) 2: D3C965FA45F611EC9FB3BB49C4F9AE02.roa (hash: ux98ZA0wQgB4FkaCCMLS/K2q+Dgh8iXTzVCbgOOhli4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 23:24:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1312 (0x520) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAED9, serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9 Validity Not Before: Mar 26 23:24:19 2026 GMT Not After : Apr 2 23:24:19 2026 GMT Subject: CN=69c5c024-2105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:56:e5:d4:d8:38:13:66:4b:f3:da:29:f9:68: 4f:a1:b7:19:f5:83:af:67:52:20:6c:ec:e1:df:0e: 01:74:f6:e8:df:41:eb:e7:c1:bb:01:fc:81:2d:bb: d1:22:fa:ff:b3:66:30:23:c3:7d:1e:90:f1:eb:36: 0e:79:76:af:37:d0:29:ad:d1:06:f4:a6:2e:d1:d1: 4f:dc:15:dd:26:1d:84:2d:f3:59:e7:93:86:fd:33: a4:5e:96:e9:fa:e9:e9:ac:9d:de:ec:bd:89:d9:a4: 6e:36:9f:21:08:60:75:5c:80:3b:73:ce:a4:79:15: 04:7e:53:d6:33:19:63:c4:50:36:6c:06:71:a7:2f: cf:6b:a7:59:df:00:23:55:ab:ba:77:65:41:70:60: 16:34:86:1c:c6:4b:a8:91:10:11:64:1c:f4:e4:16: 82:5b:7a:09:f2:3e:06:b0:50:ce:cb:83:a8:bd:65: e8:6c:30:61:11:23:b2:ac:c7:94:ff:bd:cd:ab:d2: d6:d4:ed:cd:33:e7:ce:11:09:82:f1:01:7c:ee:99: 2a:d5:95:4a:1b:16:da:23:c1:66:31:f3:94:d5:43: ab:14:50:74:47:44:ec:88:89:56:7c:84:c3:b7:09: e1:8e:1a:90:df:98:63:20:d9:1d:cb:c7:e5:c9:a5: 18:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:52:8A:8A:29:B9:91:5F:ED:96:ED:40:12:A7:01:26:93:35:F6:C4 X509v3 Authority Key Identifier: keyid:08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:c9:c4:ad:29:38:b1:b2:f6:18:63:9d:bf:cf:f1:fe:b0:17: 3d:34:a7:10:d5:2b:8c:9e:47:fe:4a:be:5f:22:cb:e3:74:a0: 99:fe:35:0f:4f:96:f1:22:96:ef:1d:e0:1b:62:68:bb:15:e2: 71:28:2c:e0:66:19:23:a7:dc:29:4a:13:e1:e2:2f:84:3e:a5: 6e:be:7c:d0:fa:a1:7c:63:da:2e:71:17:07:2f:26:06:b5:b2: 7f:9d:ee:64:0c:f4:53:ae:01:e4:48:37:40:1c:61:68:15:d2: 6f:73:54:7b:f3:76:68:fb:bf:50:30:d3:e6:ed:40:79:4e:55: 76:da:e5:8d:c7:10:3f:c3:72:79:f6:2c:89:b8:73:ae:83:b2: 6b:fb:62:5b:13:dd:56:85:eb:bd:f3:3f:d4:48:ff:5a:20:22: da:3c:53:3f:70:7e:20:3d:9d:22:5c:a5:6b:b6:50:42:11:2e: c9:55:64:7e:83:5c:98:8b:cd:99:ab:01:6b:78:f4:b9:f8:b1: e1:5a:06:b3:6f:f7:c0:cc:80:0a:0e:31:4a:cc:28:1d:71:c0: 63:19:7d:fe:78:e4:54:31:a9:ed:d6:0f:e4:28:eb:61:1b:7c: 7b:7c:98:9b:d5:ee:f7:da:e3:45:59:42:cd:8c:29:fb:5d:93: 00:d8:f8:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFFRDkxMTAvBgNVBAUTKDA4N0IyOUMxRkJENzQ0NDIwMkFFMDAyQTQ5NzEyN0ZE NjZGMjRBRDkwHhcNMjYwMzI2MjMyNDE5WhcNMjYwNDAyMjMyNDE5WjAYMRYwFAYD VQQDEw02OWM1YzAyNC0yMTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFbl1Ng4E2ZL89op+WhPobcZ9YOvZ1IgbOzh3w4BdPbo30Hr58G7AfyBLbvR Ivr/s2YwI8N9HpDx6zYOeXavN9AprdEG9KYu0dFP3BXdJh2ELfNZ55OG/TOkXpbp +unprJ3e7L2J2aRuNp8hCGB1XIA7c86keRUEflPWMxljxFA2bAZxpy/Pa6dZ3wAj Vau6d2VBcGAWNIYcxkuokRARZBz05BaCW3oJ8j4GsFDOy4OovWXobDBhESOyrMeU /73Nq9LW1O3NM+fOEQmC8QF87pkq1ZVKGxbaI8FmMfOU1UOrFFB0R0TsiIlWfITD twnhjhqQ35hjINkdy8flyaUYlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLlSioop uZFf7ZbtQBKnASaTNfbEMB8GA1UdIwQYMBaAFAh7KcH710RCAq4AKklxJ/1m8krZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUVEOS82QTc2NUFBQTQ1 REMxMUVDQThBMzE0NkRDNEY5QUUwMi9DSHNwd2Z2WFJFSUNyZ0FxU1hFbl9XYnlT dGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NIc3B3ZnZYUkVJQ3JnQXFTWEVuX1dieVN0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUVEOS82QTc2NUFBQTQ1REMxMUVDQThBMzE0NkRDNEY5QUUwMi9DSHNwd2Z2WFJF SUNyZ0FxU1hFbl9XYnlTdGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHcnErSk4sbL2GGOdv8/x/rAXPTSnENUrjJ5H/kq+XyLL43Sgmf41D0+W8SKW 7x3gG2JouxXicSgs4GYZI6fcKUoT4eIvhD6lbr580PqhfGPaLnEXBy8mBrWyf53u ZAz0U64B5Eg3QBxhaBXSb3NUe/N2aPu/UDDT5u1AeU5VdtrljccQP8NyefYsibhz roOya/tiWxPdVoXrvfM/1Ej/WiAi2jxTP3B+ID2dIlyla7ZQQhEuyVVkfoNcmIvN masBa3j0ufix4VoGs2/3wMyACg4xSswoHXHAYxl9/njkVDGp7dYP5CjrYRt8e3yY m9Xu99rjRVlCzYwp+12TANj4nw== -----END CERTIFICATE-----Generated at Sat Mar 28 12:11:52 2026 by rpki-client