$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft File: cxFBrwp5OqMW733dLxsF-JHFZrI.mft (raw, json) Hash identifier: /LGjChIhXdnUsOZ+oX8CBV1CbyzgqOHn2fJ1eH8jP3M= Subject key identifier: 7B:66:F0:85:C6:A7:53:B9:FE:4F:76:95:E3:8B:24:3B:C9:57:35:E1 Authority key identifier: 73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2 Certificate issuer: /CN=A91CDE0E/serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2 Certificate serial: 1715 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft Manifest number: 1707 Signing time: Mon 02 Mar 2026 01:40:03 +0000 Manifest this update: Mon 02 Mar 2026 01:40:01 +0000 Manifest next update: Mon 09 Mar 2026 01:40:01 +0000 Files and hashes: 1: cxFBrwp5OqMW733dLxsF-JHFZrI.crl (hash: 2apaADJS6RlKUVe/dqMUfqWHzkhoEfzfkUof1m8FAv4=) 2: E940EF3464B611EA9B743415C4F9AE02.roa (hash: Y6ZAD+rA9y34d9ugsvcjGacV31nqvDcvZSHYb1SHDaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5909 (0x1715) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDE0E, serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2 Validity Not Before: Mar 2 01:40:01 2026 GMT Not After : Mar 9 01:40:01 2026 GMT Subject: CN=69a4ea72-a295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6c:51:f5:5a:d9:da:ce:ac:62:3c:8c:b8:32: 49:74:62:6b:85:08:35:c8:03:ff:d3:4d:19:ab:02: 58:b4:24:21:3d:a0:5c:26:de:a6:d1:4b:df:48:65: 45:d0:6e:fc:82:03:49:96:17:f1:ac:10:cd:10:36: 0e:1a:c7:c8:2a:db:ca:2c:a1:3b:62:39:a5:28:c6: fd:41:89:84:fa:26:65:d7:f6:6b:87:c2:16:60:d3: ef:79:bd:d6:8a:eb:0b:3d:a6:07:fa:87:f6:a7:d1: ab:69:77:c4:fc:97:80:f8:45:cd:e5:b0:4d:ff:6b: 9c:b1:e9:19:d4:cd:41:05:e9:99:93:0a:59:9e:e5: 75:27:64:45:32:f6:1c:3d:06:5d:29:f0:2a:d2:77: 1a:43:cf:af:b1:8a:59:4c:8f:a5:6a:7f:49:f8:f7: c1:ee:ae:c2:a4:98:33:75:e4:03:05:95:50:61:07: 9b:e6:5e:dc:04:cb:2c:97:a8:8a:71:5c:b6:fa:9b: 65:65:40:23:8c:c8:f0:61:91:e2:5c:20:f7:69:90: 2e:8f:c7:92:fd:65:96:9a:57:fc:2f:b7:06:7c:9c: 49:e8:45:62:b3:08:0a:a7:a4:60:b1:4f:93:00:6c: 83:03:d6:ab:33:41:0e:45:91:96:54:ad:ad:29:b7: 5f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:66:F0:85:C6:A7:53:B9:FE:4F:76:95:E3:8B:24:3B:C9:57:35:E1 X509v3 Authority Key Identifier: keyid:73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:94:32:42:2d:a4:55:9f:e6:dd:46:b4:50:f0:3f:d4:98:50: 6e:fc:f7:8a:83:00:a1:58:2f:47:87:71:03:f3:04:43:48:c5: d2:46:88:43:cd:9e:af:0f:e9:95:6d:35:f8:3b:03:d1:3b:70: bd:36:81:79:c4:14:be:d7:62:bb:aa:bb:30:ec:ec:5f:66:f0: f4:a8:1c:fb:12:fa:cc:c0:18:79:8a:3b:11:59:e0:b8:64:ea: 04:d7:e6:d3:bd:98:7c:70:b0:fc:c8:50:f8:61:70:05:8d:5f: 07:f4:08:57:c1:2c:28:5a:ba:18:cc:60:a9:79:a8:1a:20:92: 91:02:45:08:92:f6:4e:8f:90:c1:c8:ef:48:68:50:96:72:95: af:7a:e4:03:95:0a:f8:b9:bb:e8:63:47:dc:a3:e9:74:85:75: ee:1d:d2:44:91:d3:ce:97:36:39:65:7f:8f:49:50:fe:47:ef: 42:c2:e9:8e:2a:96:b3:5e:0b:81:3e:08:37:96:27:69:26:70: c8:7a:9a:e9:01:c7:38:2d:fe:ef:5f:60:07:d0:d1:c6:fd:4c: c0:45:88:e1:90:11:8d:6b:54:05:8e:11:27:10:aa:75:7c:25: 42:27:ab:98:0e:f4:99:81:92:0e:d6:7a:51:a8:8b:9c:20:b1: 7e:3b:2d:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RFMEUxMTAvBgNVBAUTKDczMTE0MUFGMEE3OTNBQTMxNkVGN0RERDJGMUIwNUY4 OTFDNTY2QjIwHhcNMjYwMzAyMDE0MDAxWhcNMjYwMzA5MDE0MDAxWjAYMRYwFAYD VQQDEw02OWE0ZWE3Mi1hMjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2xR9VrZ2s6sYjyMuDJJdGJrhQg1yAP/000ZqwJYtCQhPaBcJt6m0UvfSGVF 0G78ggNJlhfxrBDNEDYOGsfIKtvKLKE7YjmlKMb9QYmE+iZl1/Zrh8IWYNPveb3W iusLPaYH+of2p9GraXfE/JeA+EXN5bBN/2ucsekZ1M1BBemZkwpZnuV1J2RFMvYc PQZdKfAq0ncaQ8+vsYpZTI+lan9J+PfB7q7CpJgzdeQDBZVQYQeb5l7cBMssl6iK cVy2+ptlZUAjjMjwYZHiXCD3aZAuj8eS/WWWmlf8L7cGfJxJ6EViswgKp6RgsU+T AGyDA9arM0EORZGWVK2tKbdfEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHtm8IXG p1O5/k92leOLJDvJVzXhMB8GA1UdIwQYMBaAFHMRQa8KeTqjFu993S8bBfiRxWay MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREUwRS82RTFFN0RFNDA1 N0MxMUU4ODJGRThFMjhDNEY5QUUwMi9jeEZCcndwNU9xTVc3MzNkTHhzRi1KSEZa ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4RkJyd3A1T3FNVzczM2RMeHNGLUpIRlpySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REUwRS82RTFFN0RFNDA1N0MxMUU4ODJGRThFMjhDNEY5QUUwMi9jeEZCcndwNU9x TVc3MzNkTHhzRi1KSEZackkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL5QyQi2kVZ/m3Ua0UPA/1JhQbvz3ioMAoVgvR4dxA/MEQ0jF0kaIQ82erw/p lW01+DsD0TtwvTaBecQUvtdiu6q7MOzsX2bw9Kgc+xL6zMAYeYo7EVnguGTqBNfm 072YfHCw/MhQ+GFwBY1fB/QIV8EsKFq6GMxgqXmoGiCSkQJFCJL2To+QwcjvSGhQ lnKVr3rkA5UK+Lm76GNH3KPpdIV17h3SRJHTzpc2OWV/j0lQ/kfvQsLpjiqWs14L gT4IN5YnaSZwyHqa6QHHOC3+719gB9DRxv1MwEWI4ZARjWtUBY4RJxCqdXwlQier mA70mYGSDtZ6UaiLnCCxfjst0A== -----END CERTIFICATE-----Generated at Mon Mar 2 16:53:08 2026 by rpki-client