$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft File: CB6icKn0s2sOyJai0hSO5Ok-Xys.mft (raw, json) Hash identifier: 88s1Xyl0n/TW0KExxUtby9dzC4sZ0mNI9tGqtXDPbgY= Subject key identifier: 5C:73:A3:4E:35:48:05:9C:DB:F9:3B:76:01:FB:2E:C5:CD:63:DB:E6 Authority key identifier: 08:1E:A2:70:A9:F4:B3:6B:0E:C8:96:A2:D2:14:8E:E4:E9:3E:5F:2B Certificate issuer: /CN=A91BB921/serialNumber=081EA270A9F4B36B0EC896A2D2148EE4E93E5F2B Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft Manifest number: 01B8 Signing time: Sun 01 Mar 2026 04:41:59 +0000 Manifest this update: Sun 01 Mar 2026 04:41:59 +0000 Manifest next update: Sun 08 Mar 2026 04:41:59 +0000 Files and hashes: 1: CB6icKn0s2sOyJai0hSO5Ok-Xys.crl (hash: qsfjYq1+5h2LhpRj8aFD/8sIQI8sLWcaYNupFSGJG9A=) 2: 5A387584756311EEA256FD57C4F9AE02.roa (hash: WlVbAYT9fiHzzxm704tgTYSSn+rIKNtEXDFFKehNTaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.crl rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 04:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB921, serialNumber=081EA270A9F4B36B0EC896A2D2148EE4E93E5F2B Validity Not Before: Mar 1 04:41:59 2026 GMT Not After : Mar 8 04:41:59 2026 GMT Subject: CN=69a3c397-a537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:10:31:01:7e:a7:6c:82:5f:cc:5b:20:0f:bd: 51:71:20:8e:2d:c2:63:e3:e1:73:08:75:f3:18:39: e0:77:b6:d3:74:d8:5b:37:97:9c:b3:8d:19:ef:29: 58:f0:c0:73:f3:f4:04:25:d3:59:d1:ae:f9:f6:65: 3f:76:ab:9c:9d:cf:56:52:48:9f:b2:26:58:31:59: 4b:29:4b:27:bb:a9:91:63:bf:d3:d9:1d:15:34:5f: 3c:7e:99:1f:84:94:1c:de:32:55:f6:01:fe:f2:bc: f5:db:6d:05:ca:6c:f2:c3:20:86:19:10:e5:0d:96: d7:20:be:2a:77:f8:13:1b:b3:3e:8c:7b:e4:3d:c9: b4:99:53:d9:11:87:17:ea:cc:69:e9:fd:05:f4:a3: 84:bf:98:9c:b5:6f:a0:10:e2:a8:d3:65:da:9d:be: 6b:94:db:17:25:03:53:78:3f:1e:55:cf:0f:6b:3a: f4:9a:5e:2c:f6:cc:c2:06:e9:fb:b7:70:d4:e2:3b: 93:d1:44:42:cc:5f:68:93:2c:f8:97:5d:be:86:5e: 3a:d3:00:d0:04:db:14:ea:f5:3d:73:fd:03:1b:33: 85:75:a5:56:1b:c8:49:fd:af:9f:59:20:a4:8f:4e: 59:ac:61:dd:75:04:3a:b1:da:91:f8:12:2e:ef:63: 4c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:73:A3:4E:35:48:05:9C:DB:F9:3B:76:01:FB:2E:C5:CD:63:DB:E6 X509v3 Authority Key Identifier: keyid:08:1E:A2:70:A9:F4:B3:6B:0E:C8:96:A2:D2:14:8E:E4:E9:3E:5F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:3c:43:72:24:18:f4:4f:40:c8:3a:e3:6c:59:d8:f2:21:d4: 55:2e:a1:bf:1c:33:98:98:1c:c4:37:67:1c:5c:59:34:70:c4: 80:16:c9:c1:c8:fe:a1:64:00:bf:70:d5:cc:e4:2e:9e:e4:62: 5d:cd:c4:9b:da:da:ff:bc:3a:29:a2:15:9b:16:c8:7b:44:fe: ae:6a:d8:ea:86:27:cb:98:4b:b4:50:d1:3f:74:13:2c:e8:c1: a4:f3:e3:62:0f:f3:f0:86:be:72:6a:20:b9:50:51:4b:65:9f: f3:7f:dd:30:fc:60:51:c2:d2:6b:13:f6:59:c5:99:a8:f2:6a: dd:e2:c3:57:ff:01:92:7c:a6:d5:91:0e:3d:a9:3b:c7:cd:a1: b2:cf:19:47:e5:20:bd:bf:68:7a:0c:f1:5a:e1:7b:38:b5:91: 0b:d7:6c:ec:66:8c:61:e2:e1:16:bd:b6:47:95:08:f6:65:3a: 9e:83:7d:0e:5e:35:f5:6d:e4:f6:2f:89:58:59:8c:2b:36:64: e0:27:34:46:c9:c3:7a:20:1b:b8:ea:d8:75:52:a9:d0:15:90: bf:1a:e7:7c:a4:47:59:7f:98:20:60:16:57:6f:66:e2:17:74: b7:2e:2d:ac:6e:11:f5:9a:97:28:49:a9:09:ec:0e:ad:b9:f2: 70:64:f4:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI5MjExMTAvBgNVBAUTKDA4MUVBMjcwQTlGNEIzNkIwRUM4OTZBMkQyMTQ4RUU0 RTkzRTVGMkIwHhcNMjYwMzAxMDQ0MTU5WhcNMjYwMzA4MDQ0MTU5WjAYMRYwFAYD VQQDDA02OWEzYzM5Ny1hNTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthAxAX6nbIJfzFsgD71RcSCOLcJj4+FzCHXzGDngd7bTdNhbN5ecs40Z7ylY 8MBz8/QEJdNZ0a759mU/dqucnc9WUkifsiZYMVlLKUsnu6mRY7/T2R0VNF88fpkf hJQc3jJV9gH+8rz1220FymzywyCGGRDlDZbXIL4qd/gTG7M+jHvkPcm0mVPZEYcX 6sxp6f0F9KOEv5ictW+gEOKo02Xanb5rlNsXJQNTeD8eVc8Pazr0ml4s9szCBun7 t3DU4juT0URCzF9okyz4l12+hl460wDQBNsU6vU9c/0DGzOFdaVWG8hJ/a+fWSCk j05ZrGHddQQ6sdqR+BIu72NM9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFxzo041 SAWc2/k7dgH7LsXNY9vmMB8GA1UdIwQYMBaAFAgeonCp9LNrDsiWotIUjuTpPl8r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjkyMS9EREI4RTE0Qzc1 NjIxMUVFQkI4MjUyNTdDNEY5QUUwMi9DQjZpY0tuMHMyc095SmFpMGhTTzVPay1Y eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NCNmljS24wczJzT3lKYWkwaFNPNU9rLVh5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjkyMS9EREI4RTE0Qzc1NjIxMUVFQkI4MjUyNTdDNEY5QUUwMi9DQjZpY0tuMHMy c095SmFpMGhTTzVPay1YeXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHDxDciQY9E9AyDrjbFnY8iHUVS6hvxwzmJgcxDdnHFxZNHDEgBbJwcj+oWQA v3DVzOQunuRiXc3Em9ra/7w6KaIVmxbIe0T+rmrY6oYny5hLtFDRP3QTLOjBpPPj Yg/z8Ia+cmoguVBRS2Wf83/dMPxgUcLSaxP2WcWZqPJq3eLDV/8Bknym1ZEOPak7 x82hss8ZR+Ugvb9oegzxWuF7OLWRC9ds7GaMYeLhFr22R5UI9mU6noN9Dl419W3k 9i+JWFmMKzZk4Cc0RsnDeiAbuOrYdVKp0BWQvxrnfKRHWX+YIGAWV29m4hd0ty4t rG4R9ZqXKEmpCewOrbnycGT0eg== -----END CERTIFICATE-----Generated at Mon Mar 2 02:55:42 2026 by rpki-client