$ rpki-client -vvf rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft File: CBKglmLws-NPK1pRwz6OknA-Q2k.mft (raw, json) Hash identifier: f3KGNUvohdcEraHXnEXi9dfsex4s23gpYyHu5StCKeY= Subject key identifier: F8:D5:A7:C6:9B:B0:47:22:86:7E:1B:4D:76:B6:B2:71:C4:3E:4D:3E Authority key identifier: 08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69 Certificate issuer: /CN=A91547EC/serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft Manifest number: 5D Signing time: Sun 01 Mar 2026 09:28:21 +0000 Manifest this update: Sun 01 Mar 2026 09:28:21 +0000 Manifest next update: Sun 08 Mar 2026 09:28:21 +0000 Files and hashes: 1: CBKglmLws-NPK1pRwz6OknA-Q2k.crl (hash: dQ+XbvPkeLatc5UQxmsaYRATlbPC1ReJ8hC6TjYyJps=) 2: 7CB1102487DD11F0A89FB377C4F9AE02.roa (hash: 7Tw7MUa2YgJbW9fiP2QoyuCg4X9lbUhL25iL2lzhjcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91547EC, serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369 Validity Not Before: Mar 1 09:28:21 2026 GMT Not After : Mar 8 09:28:21 2026 GMT Subject: CN=69a406b5-49f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d7:71:8d:38:71:1d:8e:f4:cb:f4:e2:55:98: bd:cc:14:0a:ea:c0:1d:ad:ed:14:61:b3:86:f7:d8: 05:51:22:b9:e1:e4:18:fe:e3:2f:5b:57:7e:51:28: fc:b9:a3:43:68:ae:24:44:de:1e:07:4e:f1:c3:45: 14:a3:df:50:71:cc:81:49:a9:4a:a0:35:bd:4f:d8: e9:95:4c:d8:49:8c:14:da:37:4a:10:23:2d:e5:2a: e0:d6:f8:f2:a3:df:90:17:1b:f2:7c:f6:89:ab:75: 15:1b:32:8d:c6:26:59:08:7b:d5:7d:85:c4:ed:1f: 8d:dd:b7:3e:eb:17:d7:51:0c:88:fc:6b:91:d9:7c: 62:f6:6f:86:b8:34:41:a7:ab:8f:a4:88:a9:60:e7: cc:8f:5e:d5:4a:74:5e:de:ce:c6:57:3c:cf:fd:e7: d4:51:35:0b:dc:4a:3a:e6:61:c0:10:8c:55:10:4e: aa:14:e5:07:b6:4a:4e:b7:fd:6b:4f:56:52:95:a5: 0f:5a:d0:23:8e:84:04:a3:8d:e0:90:81:6c:22:71: 9e:40:02:bf:40:c6:b2:b3:5f:1d:fd:b9:13:f2:e0: 70:0f:c2:6a:03:f0:2f:5b:c0:92:a2:36:bc:06:0d: 3f:d4:24:6e:e0:f5:84:72:2c:8c:81:0a:63:77:e1: 48:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D5:A7:C6:9B:B0:47:22:86:7E:1B:4D:76:B6:B2:71:C4:3E:4D:3E X509v3 Authority Key Identifier: keyid:08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:b0:4c:2b:aa:08:2b:6b:9e:a6:62:2e:d9:0a:7a:c8:e4:1d: cd:a3:49:83:f6:6f:25:11:f9:01:ea:4d:14:99:e9:3f:b3:6c: 07:7d:22:2f:cf:2e:e7:b0:32:87:2d:d9:2c:b0:a8:8d:ac:d8: dd:84:92:ad:a9:36:2c:09:38:cf:04:04:31:72:58:d4:06:5b: 2e:f6:7d:2d:3c:ad:ce:1e:50:da:75:c7:4a:2c:41:08:63:9f: d2:39:1d:ac:7d:e1:06:6b:47:a0:21:ef:04:fe:9b:9b:64:55: 35:aa:7e:a5:83:c9:a2:4c:fc:e4:3f:d9:4d:e0:cd:92:b7:b0: 4a:ae:11:ce:0e:4d:0b:91:46:70:f3:95:56:04:9a:d9:17:4b: c6:23:bd:0b:ca:16:bf:73:99:9d:ea:cb:b6:1c:fb:a0:9d:4f: 81:38:01:c1:b7:ed:4b:ab:b4:85:c0:37:be:0a:0e:c5:58:09: 23:a9:af:5e:89:aa:c8:3d:3f:0a:66:62:8f:06:00:8c:ad:96: ee:a8:fb:67:0e:25:11:cc:0f:99:de:ad:80:47:b0:04:73:aa: 2c:d5:d0:96:f1:c6:70:e0:f8:c0:4e:d4:8d:4d:e7:5a:75:95: d0:f4:a9:9a:5f:53:86:ca:91:d5:27:a2:f4:0d:0f:14:54:fa: 8b:5b:2a:2d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDdFQzExMC8GA1UEBRMoMDgxMkEwOTY2MkYwQjNFMzRGMkI1QTUxQzMzRThFOTI3 MDNFNDM2OTAeFw0yNjAzMDEwOTI4MjFaFw0yNjAzMDgwOTI4MjFaMBgxFjAUBgNV BAMTDTY5YTQwNmI1LTQ5ZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDh13GNOHEdjvTL9OJVmL3MFArqwB2t7RRhs4b32AVRIrnh5Bj+4y9bV35RKPy5 o0NoriRE3h4HTvHDRRSj31BxzIFJqUqgNb1P2OmVTNhJjBTaN0oQIy3lKuDW+PKj 35AXG/J89omrdRUbMo3GJlkIe9V9hcTtH43dtz7rF9dRDIj8a5HZfGL2b4a4NEGn q4+kiKlg58yPXtVKdF7ezsZXPM/959RRNQvcSjrmYcAQjFUQTqoU5Qe2Sk63/WtP VlKVpQ9a0COOhASjjeCQgWwicZ5AAr9AxrKzXx39uRPy4HAPwmoD8C9bwJKiNrwG DT/UJG7g9YRyLIyBCmN34UhVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+NWnxpuw RyKGfhtNdrayccQ+TT4wHwYDVR0jBBgwFoAUCBKglmLws+NPK1pRwz6OknA+Q2kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0N0VDLzI1NjM1N0M4ODdE RDExRjBCNzRDRkU3NkM0RjlBRTAyL0NCS2dsbUx3cy1OUEsxcFJ3ejZPa25BLVEy ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ0JLZ2xtTHdzLU5QSzFwUnd6Nk9rbkEtUTJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 N0VDLzI1NjM1N0M4ODdERDExRjBCNzRDRkU3NkM0RjlBRTAyL0NCS2dsbUx3cy1O UEsxcFJ3ejZPa25BLVEyay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCTsEwrqggra56mYi7ZCnrI5B3No0mD9m8lEfkB6k0Umek/s2wHfSIvzy7nsDKH LdkssKiNrNjdhJKtqTYsCTjPBAQxcljUBlsu9n0tPK3OHlDadcdKLEEIY5/SOR2s feEGa0egIe8E/pubZFU1qn6lg8miTPzkP9lN4M2St7BKrhHODk0LkUZw85VWBJrZ F0vGI70Lyha/c5md6su2HPugnU+BOAHBt+1Lq7SFwDe+Cg7FWAkjqa9eiarIPT8K ZmKPBgCMrZbuqPtnDiURzA+Z3q2AR7AEc6os1dCW8cZw4PjATtSNTedadZXQ9Kma X1OGypHVJ6L0DQ8UVPqLWyot -----END CERTIFICATE-----Generated at Mon Mar 2 00:17:57 2026 by rpki-client