$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft File: CJx_ANge3WTbq20DcSKyoh8NO-Y.mft (raw, json) Hash identifier: ypH/JDDFgZ76Ef/kwGD3GP+sP9JxjJePtBr9jC4sn84= Subject key identifier: 59:92:51:F1:66:92:29:A3:07:75:9E:8B:5E:92:19:48:02:B7:85:0A Authority key identifier: 08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6 Certificate issuer: /CN=A91BB5F2/serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6 Certificate serial: 0285 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft Manifest number: 027D Signing time: Sun 01 Mar 2026 02:26:18 +0000 Manifest this update: Sun 01 Mar 2026 02:26:17 +0000 Manifest next update: Sun 08 Mar 2026 02:26:17 +0000 Files and hashes: 1: CJx_ANge3WTbq20DcSKyoh8NO-Y.crl (hash: qsL6/9CKRUhKUhiYAemGrEQtTGNjxFLSlpWNyUq2VH4=) 2: D173DA3043B911EDB6AA2D5FC4F9AE02.roa (hash: FNYorUcrDZxaoz80iDO589JZkm4kbfGRGurVB7ty8DM=) 3: D1FD204C43B911EDB6AA2D5FC4F9AE02.roa (hash: BP/glgq2z1dVEQeJ08W20vuLvcBOY54eQXp8HeomvRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 02:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 645 (0x285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB5F2, serialNumber=089C7F00D81EDD64DBAB6D037122B2A21F0D3BE6 Validity Not Before: Mar 1 02:26:17 2026 GMT Not After : Mar 8 02:26:17 2026 GMT Subject: CN=69a3a3ca-be0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ca:2b:83:e6:24:97:4f:d1:41:0b:51:5d:41: 56:31:f4:14:3b:2b:07:17:5e:27:89:d8:95:d3:02: b7:a3:f7:0b:4c:53:1d:f8:bc:62:eb:7b:fd:34:cb: 1a:4b:85:ea:07:c8:e0:91:1f:ef:09:f7:9e:b3:14: 98:33:28:47:05:12:c9:d9:bc:5f:d8:1e:3b:32:3e: d8:67:3b:68:00:45:df:b0:42:46:59:d1:b3:bd:e0: f7:1d:34:e0:70:ff:6a:f2:40:21:88:13:31:59:8e: 0d:f2:91:d3:e8:64:63:5b:c6:e3:7f:83:59:f2:04: 4a:b4:1c:b5:c7:8e:f5:80:48:70:6a:3d:ff:38:ca: a2:95:7b:6b:35:d3:7c:c7:0f:03:ea:63:9a:f4:d4: 13:d7:87:26:f9:b1:d5:a4:29:6c:57:ae:67:1a:ac: 40:37:c6:4d:d4:aa:b6:e7:a0:57:2a:53:93:36:e9: a5:bf:fa:19:96:d5:25:8d:e9:bf:8f:66:59:4e:c1: 29:fa:40:3a:ad:e7:fc:e1:8f:d0:61:07:8d:b8:e2: 8f:e5:3e:a2:83:6e:e4:66:66:67:30:cc:86:4c:72: 04:f5:7b:ea:79:c8:18:f7:ad:17:fa:e1:e1:66:a2: 54:fd:62:3f:cb:81:08:6b:39:12:e1:33:66:5d:71: 4a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:92:51:F1:66:92:29:A3:07:75:9E:8B:5E:92:19:48:02:B7:85:0A X509v3 Authority Key Identifier: keyid:08:9C:7F:00:D8:1E:DD:64:DB:AB:6D:03:71:22:B2:A2:1F:0D:3B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CJx_ANge3WTbq20DcSKyoh8NO-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5F2/4AEED91C43B711ED98FF455EC4F9AE02/CJx_ANge3WTbq20DcSKyoh8NO-Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:5c:3c:9e:8a:59:49:dc:cc:4c:2d:00:7a:65:fd:70:a9:d6: b1:ce:cb:ce:13:cb:4a:ed:83:f9:d8:a2:a5:99:37:75:45:31: 11:12:2b:34:b5:05:b4:c8:af:f2:54:9d:e0:f8:93:56:71:7c: 79:54:79:d7:09:27:52:84:d1:60:f1:bb:c7:12:1b:49:f5:4d: b5:e5:5d:60:e4:9f:d4:98:e4:9b:6e:36:56:d1:6e:c0:a7:a9: 49:49:e9:c4:cd:2c:c3:83:d5:b2:2d:31:d7:84:2b:25:ff:d6: c9:06:86:17:08:97:c4:47:20:40:f8:2b:62:d2:9c:ac:24:14: be:00:fe:5f:7b:86:07:6c:78:5a:f1:9f:16:51:42:8b:25:88: d6:bd:b7:79:fc:67:1e:22:57:2e:36:2e:9a:f1:46:ce:3f:a4: 6d:56:a5:07:ff:8a:53:f7:69:38:1d:c9:de:ae:b6:f0:8b:96: 0f:9e:46:4c:58:3d:57:8b:ec:f0:aa:0c:57:d3:aa:4c:4e:28: b6:28:59:d3:94:e8:ac:43:08:bf:31:d1:36:ff:fb:fe:45:8a: 2d:27:3b:67:28:90:cb:a7:10:06:ca:08:81:17:94:1b:c1:eb: a8:a7:25:82:a6:74:be:36:e4:9d:4b:6e:a0:2d:c3:8f:a2:8a: f5:c6:ba:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1RjIxMTAvBgNVBAUTKDA4OUM3RjAwRDgxRURENjREQkFCNkQwMzcxMjJCMkEy MUYwRDNCRTYwHhcNMjYwMzAxMDIyNjE3WhcNMjYwMzA4MDIyNjE3WjAYMRYwFAYD VQQDDA02OWEzYTNjYS1iZTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoMorg+Ykl0/RQQtRXUFWMfQUOysHF14nidiV0wK3o/cLTFMd+Lxi63v9NMsa S4XqB8jgkR/vCfeesxSYMyhHBRLJ2bxf2B47Mj7YZztoAEXfsEJGWdGzveD3HTTg cP9q8kAhiBMxWY4N8pHT6GRjW8bjf4NZ8gRKtBy1x471gEhwaj3/OMqilXtrNdN8 xw8D6mOa9NQT14cm+bHVpClsV65nGqxAN8ZN1Kq256BXKlOTNumlv/oZltUljem/ j2ZZTsEp+kA6ref84Y/QYQeNuOKP5T6ig27kZmZnMMyGTHIE9XvqecgY960X+uHh ZqJU/WI/y4EIazkS4TNmXXFKcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFmSUfFm kimjB3Wei16SGUgCt4UKMB8GA1UdIwQYMBaAFAicfwDYHt1k26ttA3EisqIfDTvm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjVGMi80QUVFRDkxQzQz QjcxMUVEOThGRjQ1NUVDNEY5QUUwMi9DSnhfQU5nZTNXVGJxMjBEY1NLeW9oOE5P LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NKeF9BTmdlM1dUYnEyMERjU0t5b2g4Tk8tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjVGMi80QUVFRDkxQzQzQjcxMUVEOThGRjQ1NUVDNEY5QUUwMi9DSnhfQU5nZTNX VGJxMjBEY1NLeW9oOE5PLVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmFw8nopZSdzMTC0AemX9cKnWsc7LzhPLSu2D+diipZk3dUUxERIrNLUFtMiv 8lSd4PiTVnF8eVR51wknUoTRYPG7xxIbSfVNteVdYOSf1Jjkm242VtFuwKepSUnp xM0sw4PVsi0x14QrJf/WyQaGFwiXxEcgQPgrYtKcrCQUvgD+X3uGB2x4WvGfFlFC iyWI1r23efxnHiJXLjYumvFGzj+kbValB/+KU/dpOB3J3q628IuWD55GTFg9V4vs 8KoMV9OqTE4otihZ05TorEMIvzHRNv/7/kWKLSc7ZyiQy6cQBsoIgReUG8HrqKcl gqZ0vjbknUtuoC3Dj6KK9ca6vg== -----END CERTIFICATE-----Generated at Sun Mar 1 20:39:57 2026 by rpki-client