$ rpki-client -vvf rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft File: CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft (raw, json) Hash identifier: /5SKEgT2KXKS3BecSGIOap35Cmk6FAkjEv2l4tJtvsc= Subject key identifier: 2E:99:61:EF:76:66:27:20:90:90:71:96:84:82:DE:33:7C:78:84:CB Authority key identifier: 0A:08:8A:19:BB:DB:61:DE:D1:91:6C:86:0A:B2:B8:BE:E1:86:ED:CD Certificate issuer: /CN=A91777B9/serialNumber=0A088A19BBDB61DED1916C860AB2B8BEE186EDCD Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft Manifest number: 010F Signing time: Sun 01 Mar 2026 06:58:49 +0000 Manifest this update: Sun 01 Mar 2026 06:58:49 +0000 Manifest next update: Sun 08 Mar 2026 06:58:49 +0000 Files and hashes: 1: CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl (hash: /a2cr34hTOdmmSLjTGLZQPxjchgsrlc4unx+7O3fEgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91777B9, serialNumber=0A088A19BBDB61DED1916C860AB2B8BEE186EDCD Validity Not Before: Mar 1 06:58:49 2026 GMT Not After : Mar 8 06:58:49 2026 GMT Subject: CN=69a3e3a9-6a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3b:96:b9:4b:2a:fa:9e:cd:44:59:9f:0f:23: b8:ad:1f:e1:52:50:8c:bb:42:94:32:0d:64:c2:35: 1b:6f:99:eb:b1:a5:5a:b2:1c:9a:a7:6e:fd:4c:02: 2d:d2:7b:f4:74:2b:61:b5:65:f0:a7:99:b8:1f:76: 8b:f6:f2:48:f0:db:6a:38:ed:fa:52:b9:34:02:fe: b8:3a:fe:68:be:3a:41:98:36:92:f9:11:0b:ab:76: ff:20:93:33:2e:93:0c:d4:0c:07:9d:5f:15:04:0c: 27:ae:88:3d:1b:81:3e:31:aa:93:63:e5:b6:28:12: 26:4e:05:af:6c:8d:87:15:04:40:58:45:38:0d:70: 31:37:d4:7c:b1:de:03:e3:fb:4a:33:07:d3:6d:8c: 08:9e:c6:a9:5a:88:aa:c6:68:df:78:f2:88:f5:e9: f0:8f:be:90:73:78:56:f6:a9:8e:5f:22:2d:f5:87: a0:a8:0e:c6:d4:82:79:38:63:f9:12:81:7a:2b:81: 2e:1b:3a:45:aa:fc:06:91:a9:fc:ed:61:9f:b1:2a: e1:4c:3b:70:9a:31:02:7a:7a:b1:2b:0b:48:07:bc: 46:f4:e6:ab:34:2e:20:06:81:9d:cb:86:8b:7b:70: 7e:a0:00:3e:a3:4e:cd:10:73:bf:5a:64:75:a8:8a: f4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:99:61:EF:76:66:27:20:90:90:71:96:84:82:DE:33:7C:78:84:CB X509v3 Authority Key Identifier: keyid:0A:08:8A:19:BB:DB:61:DE:D1:91:6C:86:0A:B2:B8:BE:E1:86:ED:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:b5:7e:e1:e1:02:6d:40:16:c9:4f:86:d2:26:56:c4:bf:5e: 8d:d1:63:5f:d4:57:74:c7:de:cd:71:8b:67:55:81:e3:c3:9a: 4b:0c:44:b4:86:98:65:17:2c:eb:37:cf:8e:71:c3:f9:1d:4c: a3:69:49:29:45:c7:06:1e:7b:7a:0a:26:78:7a:70:f1:35:5e: e8:77:2b:f2:23:d1:8f:f8:20:aa:c8:2d:4e:f6:cd:c9:ad:bc: 97:ec:ad:ea:61:ba:7c:c2:0e:70:44:29:95:9b:04:fc:5b:6e: 09:4e:12:d2:ef:4a:72:e1:1a:62:1e:1e:70:c3:5f:b7:e5:f9: ad:d9:36:c9:8c:2c:66:5f:e0:89:a6:3c:90:11:af:64:28:6e: 91:ab:13:1c:d7:83:6f:20:42:cc:ae:75:2a:e1:0c:3f:03:67: 79:0d:f1:3d:53:6e:44:9a:50:44:fd:c6:12:10:8e:9d:0a:fd: 0f:c6:86:a5:b2:d1:03:7a:90:c7:01:2e:63:85:24:9f:39:aa: b2:20:a4:54:3c:88:66:aa:c7:80:dc:e2:43:5c:7d:b7:66:ca: 6d:4b:78:00:5e:5b:ce:fb:a3:ff:f7:9d:5c:7d:1a:ff:28:84: 3e:28:a9:ff:77:29:e3:d5:32:07:c8:0f:20:18:d8:e8:fb:fd: 00:28:b4:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc3QjkxMTAvBgNVBAUTKDBBMDg4QTE5QkJEQjYxREVEMTkxNkM4NjBBQjJCOEJF RTE4NkVEQ0QwHhcNMjYwMzAxMDY1ODQ5WhcNMjYwMzA4MDY1ODQ5WjAYMRYwFAYD VQQDEw02OWEzZTNhOS02YThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DuWuUsq+p7NRFmfDyO4rR/hUlCMu0KUMg1kwjUbb5nrsaVashyap279TAIt 0nv0dCthtWXwp5m4H3aL9vJI8NtqOO36Urk0Av64Ov5ovjpBmDaS+RELq3b/IJMz LpMM1AwHnV8VBAwnrog9G4E+MaqTY+W2KBImTgWvbI2HFQRAWEU4DXAxN9R8sd4D 4/tKMwfTbYwInsapWoiqxmjfePKI9enwj76Qc3hW9qmOXyIt9YegqA7G1IJ5OGP5 EoF6K4EuGzpFqvwGkan87WGfsSrhTDtwmjECenqxKwtIB7xG9OarNC4gBoGdy4aL e3B+oAA+o07NEHO/WmR1qIr0cQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC6ZYe92 ZicgkJBxloSC3jN8eITLMB8GA1UdIwQYMBaAFAoIihm722He0ZFshgqyuL7hhu3N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzdCOS9EQjUxN0IwODc1 QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9DZ2lLR2J2YllkN1JrV3lHQ3JLNHZ1R0c3 YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnaUtHYnZiWWQ3UmtXeUdDcks0dnVHRzdjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzdCOS9EQjUxN0IwODc1QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9DZ2lLR2J2Yllk N1JrV3lHQ3JLNHZ1R0c3YzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX7V+4eECbUAWyU+G0iZWxL9ejdFjX9RXdMfezXGLZ1WB48OaSwxEtIaYZRcs 6zfPjnHD+R1Mo2lJKUXHBh57egomeHpw8TVe6Hcr8iPRj/ggqsgtTvbNya28l+yt 6mG6fMIOcEQplZsE/FtuCU4S0u9KcuEaYh4ecMNft+X5rdk2yYwsZl/giaY8kBGv ZChukasTHNeDbyBCzK51KuEMPwNneQ3xPVNuRJpQRP3GEhCOnQr9D8aGpbLRA3qQ xwEuY4UknzmqsiCkVDyIZqrHgNziQ1x9t2bKbUt4AF5bzvuj//edXH0a/yiEPiip /3cp49UyB8gPIBjY6Pv9ACi0Gg== -----END CERTIFICATE-----Generated at Mon Mar 2 00:47:14 2026 by rpki-client