$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft File: cnQCOx-0p0kyj11N-DsN0_B_6UI.mft (raw, json) Hash identifier: tEexPTt0PjQxkg2W4NnlTwhJsHEBOIo+niTpnWnvY7Y= Subject key identifier: D1:87:0F:79:B2:F8:32:01:69:FC:E1:B7:80:B3:63:10:E5:DD:65:FA Authority key identifier: 72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42 Certificate issuer: /CN=A91FFDF3/serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942 Certificate serial: 0702 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft Manifest number: 0702 Signing time: Thu 26 Mar 2026 21:47:15 +0000 Manifest this update: Thu 26 Mar 2026 21:47:15 +0000 Manifest next update: Thu 02 Apr 2026 21:47:15 +0000 Files and hashes: 1: cnQCOx-0p0kyj11N-DsN0_B_6UI.crl (hash: KmihiAHAQpxCVDHIF3P/bngObJOtPSFik60pz+s4NLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.crl rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 21:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1794 (0x702) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFDF3, serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942 Validity Not Before: Mar 26 21:47:15 2026 GMT Not After : Apr 2 21:47:15 2026 GMT Subject: CN=69c5a963-6022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d9:44:8c:f4:b4:ad:1f:0a:2d:82:3f:56:15: 31:05:dc:ca:12:8c:32:b2:dd:a4:35:fb:8a:14:ca: 78:4f:12:fa:1c:8a:33:87:1c:9d:82:ce:3a:e5:66: d7:2e:1d:b7:3f:2c:32:a6:51:f5:ac:dc:b6:b6:19: 2c:8f:be:a7:e9:24:18:52:e0:4d:16:fb:02:7d:bf: 87:ab:21:fe:c6:25:89:2f:68:23:af:56:20:04:39: 58:d5:9d:e9:50:f6:72:8b:54:d7:1a:c7:86:d9:05: 2c:b1:5a:4e:e6:8a:06:5e:00:0a:13:5e:fb:69:e8: 8e:6a:6c:d5:4b:19:4d:a2:df:b2:49:b5:25:78:da: cb:83:11:07:1d:a5:5b:63:6f:d9:87:58:50:b7:3e: f1:ce:1c:1d:53:c7:b2:1a:f7:19:9a:a2:19:c2:20: 85:ba:cb:69:2e:ab:8e:b5:59:c3:9f:5c:23:4d:c9: 65:ae:e5:91:80:b5:dd:57:db:fd:73:d0:74:fd:25: cd:3b:bc:0d:46:ed:9a:5a:55:99:03:fe:ae:14:77: ff:d6:c6:41:85:ef:4f:1a:8b:98:89:ef:a1:31:e7: fd:33:38:a2:fe:ea:cb:48:b6:86:07:05:23:38:24: 86:28:36:37:6d:b1:e4:30:a0:2a:0f:02:41:88:35: 59:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:87:0F:79:B2:F8:32:01:69:FC:E1:B7:80:B3:63:10:E5:DD:65:FA X509v3 Authority Key Identifier: keyid:72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:4e:5b:9e:f2:ba:4d:a7:3b:08:a0:e5:1f:5a:de:a8:23:d1: 09:38:68:3b:41:8a:bd:10:56:f5:29:b5:c4:05:b9:ba:4c:75: 77:95:e7:30:86:b3:ef:c9:a0:4f:be:67:c0:22:49:74:71:7d: 6c:a5:77:d6:4a:1b:73:4b:e3:dc:aa:aa:6c:81:84:e7:fe:49: 87:cb:e8:1d:22:15:e5:59:6c:9d:0a:d2:74:8b:98:78:0a:06: 9f:5a:57:08:89:32:29:ff:bd:b9:fe:73:62:b8:d1:e9:02:af: 78:de:b4:18:5a:26:70:a2:23:cc:da:c0:57:71:57:bd:7a:6a: 82:d8:a8:8e:67:4a:00:8f:f0:49:97:1d:c8:1a:ae:6f:a4:62: 03:b7:a5:e4:20:e5:44:58:b0:4b:b9:27:14:b3:09:f1:6b:86: 5f:19:cf:f2:7a:0d:76:33:61:d0:1d:d1:28:ac:67:5a:92:dd: 73:e6:f6:e2:00:ae:98:aa:88:6a:ab:04:0f:91:eb:9d:bb:04: 3c:e2:13:7b:38:f4:7e:6c:fe:67:dc:5c:d2:73:ed:ce:1a:a4: e1:4f:89:63:c9:6d:5e:ac:c2:06:03:aa:f6:08:52:d6:03:e3: 60:8d:1e:42:7e:92:0b:bb:f0:54:9f:2a:19:d2:65:9b:5a:88: fd:c0:2f:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZERjMxMTAvBgNVBAUTKDcyNzQwMjNCMUZCNEE3NDkzMjhGNUQ0REY4M0IwREQz RjA3RkU5NDIwHhcNMjYwMzI2MjE0NzE1WhcNMjYwNDAyMjE0NzE1WjAYMRYwFAYD VQQDEw02OWM1YTk2My02MDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9lEjPS0rR8KLYI/VhUxBdzKEowyst2kNfuKFMp4TxL6HIozhxydgs465WbX Lh23PywyplH1rNy2thksj76n6SQYUuBNFvsCfb+HqyH+xiWJL2gjr1YgBDlY1Z3p UPZyi1TXGseG2QUssVpO5ooGXgAKE177aeiOamzVSxlNot+ySbUleNrLgxEHHaVb Y2/Zh1hQtz7xzhwdU8eyGvcZmqIZwiCFustpLquOtVnDn1wjTcllruWRgLXdV9v9 c9B0/SXNO7wNRu2aWlWZA/6uFHf/1sZBhe9PGouYie+hMef9Mzii/urLSLaGBwUj OCSGKDY3bbHkMKAqDwJBiDVZbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNGHD3my +DIBafzht4CzYxDl3WX6MB8GA1UdIwQYMBaAFHJ0AjsftKdJMo9dTfg7DdPwf+lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkRGMy83NTdEQjc4ODdE NzExMUVCODJEM0Q2NjFDNEY5QUUwMi9jblFDT3gtMHAwa3lqMTFOLURzTjBfQl82 VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NuUUNPeC0wcDBreWoxMU4tRHNOMF9CXzZVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkRGMy83NTdEQjc4ODdENzExMUVCODJEM0Q2NjFDNEY5QUUwMi9jblFDT3gtMHAw a3lqMTFOLURzTjBfQl82VUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK05bnvK6Tac7CKDlH1reqCPRCThoO0GKvRBW9Sm1xAW5ukx1d5XnMIaz78mg T75nwCJJdHF9bKV31kobc0vj3KqqbIGE5/5Jh8voHSIV5VlsnQrSdIuYeAoGn1pX CIkyKf+9uf5zYrjR6QKveN60GFomcKIjzNrAV3FXvXpqgtiojmdKAI/wSZcdyBqu b6RiA7el5CDlRFiwS7knFLMJ8WuGXxnP8noNdjNh0B3RKKxnWpLdc+b24gCumKqI aqsED5HrnbsEPOITezj0fmz+Z9xc0nPtzhqk4U+JY8ltXqzCBgOq9ghS1gPjYI0e Qn6SC7vwVJ8qGdJlm1qI/cAvNg== -----END CERTIFICATE-----Generated at Sat Mar 28 12:13:08 2026 by rpki-client