$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft File: CROi4pwkcA4hQx4EweNJf9X5qAA.mft (raw, json) Hash identifier: qUZ0YYiBh2kZrWbCMos/IL9KPbew0ZpdZ1yz+czZmuY= Subject key identifier: 5B:8C:5B:26:64:97:18:B9:5D:51:5D:29:DB:15:05:12:E9:33:0D:C4 Authority key identifier: 09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 Certificate issuer: /CN=A91D65C2/serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Certificate serial: 01A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft Manifest number: 0198 Signing time: Mon 02 Mar 2026 01:17:21 +0000 Manifest this update: Mon 02 Mar 2026 01:17:19 +0000 Manifest next update: Mon 09 Mar 2026 01:17:19 +0000 Files and hashes: 1: CROi4pwkcA4hQx4EweNJf9X5qAA.crl (hash: vdhoedsIGPrHGc4l+ab38DebMKF9EomR6rbVqIdONy8=) 2: AA134FD6BD1411EE95F45624C4F9AE02.roa (hash: 4+f/wed5Wlr64aPRJYraL7pD2Y7PbosJxrF3nMpUHpM=) 3: C3A53484B06011EEA1D18B7FC4F9AE02.roa (hash: WHu7Po3iuSGpMUahf46gbHaY1bGGSyPBy/TPYTAU2lQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 423 (0x1a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D65C2, serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Validity Not Before: Mar 2 01:17:19 2026 GMT Not After : Mar 9 01:17:19 2026 GMT Subject: CN=69a4e521-e629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:16:83:aa:3b:6b:f7:a4:ba:85:06:de:66:b5: 96:93:f6:66:fb:d2:b4:bc:32:3e:5f:3d:ff:26:47: 18:be:2c:6d:f2:ed:2e:53:33:2b:60:e6:39:a3:e5: fa:8c:92:2b:32:0c:a6:b6:07:d0:6e:cf:37:45:6b: a0:2b:91:1d:13:f2:b2:ba:92:7a:cc:df:98:5c:09: 44:b9:df:7c:62:47:10:32:f6:93:e6:64:f5:d6:5e: 15:08:25:e6:10:4e:0f:bc:b8:7c:ad:5e:92:20:fb: bc:61:72:e0:1d:e4:e1:c0:09:57:a9:82:94:40:55: 16:42:30:be:51:e9:76:94:ac:13:17:35:b0:f2:a3: f6:41:12:29:c7:40:4a:46:72:8d:aa:29:bd:07:96: af:02:9a:cd:38:6f:ae:5d:88:d8:dc:b9:06:91:47: 45:c1:0e:2e:00:ca:ab:6d:ef:8e:50:56:c3:05:fa: bb:ae:ab:cb:70:dd:4c:5f:98:3b:28:b8:e7:7a:dd: 4e:9e:ab:3e:6c:b6:3c:39:de:f7:af:c2:c4:fc:60: 30:c1:be:d5:52:7d:06:a7:7a:f1:60:da:e2:ac:9d: d3:86:f1:50:56:87:b6:b6:35:ab:11:6a:96:8f:89: d9:01:8d:e7:46:33:96:dc:8a:bb:48:c2:5f:0a:40: 51:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:8C:5B:26:64:97:18:B9:5D:51:5D:29:DB:15:05:12:E9:33:0D:C4 X509v3 Authority Key Identifier: keyid:09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:af:9b:16:ce:a1:31:4e:fa:f4:bb:b6:52:3e:44:5b:af:52: 05:0d:f0:34:36:09:f0:d7:b8:bf:ed:b9:6d:b6:d3:e7:1e:36: 8f:c6:b5:bd:89:94:38:ab:0d:49:21:fd:f3:eb:30:1f:18:bf: f0:db:94:f2:01:a3:13:b9:b1:aa:b1:43:ee:55:7f:72:c5:7f: 5a:9b:07:f8:e0:7b:e3:8e:75:3e:d5:99:cf:37:a6:24:a9:a0: 9c:e1:c2:35:65:17:46:96:15:5f:66:85:aa:55:d7:e9:55:61: b7:f9:1e:e9:bf:61:93:cd:d7:a6:c9:69:58:b0:1c:df:a2:79: ab:5d:53:46:3d:f0:43:b5:97:5d:70:89:a3:09:9c:d4:7e:f9: 64:17:e0:33:f1:23:27:07:88:22:6e:2f:04:73:45:bb:fa:5a: f9:6c:42:8b:18:85:1d:f3:e6:cb:ef:aa:f0:f4:ca:7f:d3:b2: 83:09:e1:37:4a:39:f2:94:8b:40:fe:82:af:01:9a:7f:ae:12: e0:c4:6e:25:41:84:f9:1c:8d:db:86:9c:96:72:e1:a6:8f:29: db:39:14:3e:5b:d6:6f:3e:e3:c9:86:1b:74:6a:48:3a:a1:62: 50:44:ca:6d:b9:89:4d:ff:6d:a4:33:87:c7:e6:3a:bd:7f:c0: 67:4d:06:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1QzIxMTAvBgNVBAUTKDA5MTNBMkUyOUMyNDcwMEUyMTQzMUUwNEMxRTM0OTdG RDVGOUE4MDAwHhcNMjYwMzAyMDExNzE5WhcNMjYwMzA5MDExNzE5WjAYMRYwFAYD VQQDEw02OWE0ZTUyMS1lNjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxaDqjtr96S6hQbeZrWWk/Zm+9K0vDI+Xz3/JkcYvixt8u0uUzMrYOY5o+X6 jJIrMgymtgfQbs83RWugK5EdE/KyupJ6zN+YXAlEud98YkcQMvaT5mT11l4VCCXm EE4PvLh8rV6SIPu8YXLgHeThwAlXqYKUQFUWQjC+Uel2lKwTFzWw8qP2QRIpx0BK RnKNqim9B5avAprNOG+uXYjY3LkGkUdFwQ4uAMqrbe+OUFbDBfq7rqvLcN1MX5g7 KLjnet1Onqs+bLY8Od73r8LE/GAwwb7VUn0Gp3rxYNrirJ3ThvFQVoe2tjWrEWqW j4nZAY3nRjOW3Iq7SMJfCkBRRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFuMWyZk lxi5XVFdKdsVBRLpMw3EMB8GA1UdIwQYMBaAFAkTouKcJHAOIUMeBMHjSX/V+agA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjVDMi83NkVFNzk1Q0Iw NjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NBNGhReDRFd2VOSmY5WDVx QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NST2k0cHdrY0E0aFF4NEV3ZU5KZjlYNXFBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjVDMi83NkVFNzk1Q0IwNjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NB NGhReDRFd2VOSmY5WDVxQUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm6+bFs6hMU769Lu2Uj5EW69SBQ3wNDYJ8Ne4v+25bbbT5x42j8a1vYmUOKsN SSH98+swHxi/8NuU8gGjE7mxqrFD7lV/csV/WpsH+OB74451PtWZzzemJKmgnOHC NWUXRpYVX2aFqlXX6VVht/ke6b9hk83XpslpWLAc36J5q11TRj3wQ7WXXXCJowmc 1H75ZBfgM/EjJweIIm4vBHNFu/pa+WxCixiFHfPmy++q8PTKf9OygwnhN0o58pSL QP6CrwGaf64S4MRuJUGE+RyN24aclnLhpo8p2zkUPlvWbz7jyYYbdGpIOqFiUETK bbmJTf9tpDOHx+Y6vX/AZ00G1Q== -----END CERTIFICATE-----Generated at Mon Mar 2 10:57:35 2026 by rpki-client