$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft File: bCTOJGStN3HjLDMIGNG32gFMaQk.mft (raw, json) Hash identifier: x0a56Eu8BIhC9tcCFFjLid+GXIAr8Xmzwbt1BofTi9Q= Subject key identifier: 99:AB:85:09:A6:46:17:20:D6:DA:0D:0B:8D:ED:C0:58:84:5A:A3:32 Authority key identifier: 6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09 Certificate issuer: /CN=A91DC84C/serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909 Certificate serial: 0188 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft Manifest number: 0188 Signing time: Sun 01 Mar 2026 05:27:17 +0000 Manifest this update: Sun 01 Mar 2026 05:27:16 +0000 Manifest next update: Sun 08 Mar 2026 05:27:16 +0000 Files and hashes: 1: bCTOJGStN3HjLDMIGNG32gFMaQk.crl (hash: GkAv14a28MakL0t/G6ZTw1WXXdQ8hKhvCkDNJcLNpGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.crl rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 05:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 392 (0x188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC84C, serialNumber=6C24CE2464AD3771E32C330818D1B7DA014C6909 Validity Not Before: Mar 1 05:27:16 2026 GMT Not After : Mar 8 05:27:16 2026 GMT Subject: CN=69a3ce35-14ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2a:15:79:07:27:d6:eb:a9:b9:9b:24:dd:a2: 47:67:7f:fd:a6:86:27:36:2a:ef:25:17:99:e2:dc: a7:7a:2f:91:5b:cb:64:8f:33:8b:f7:91:b2:78:aa: d4:6c:b9:90:86:ed:53:33:86:a1:02:83:08:1a:ab: a5:ef:04:01:2e:91:5b:cd:50:ff:a7:1c:6c:94:2a: 95:74:c6:ee:ec:7e:0c:7c:8b:7b:a2:86:d3:a4:c7: 91:8a:fd:2f:1f:cf:a1:b1:96:3d:2a:ca:67:a6:ac: a2:13:8c:fc:30:e0:a9:75:e1:a9:c4:7e:a8:38:c0: ef:13:cc:eb:6a:33:ef:e4:01:92:f1:d0:4b:8e:30: bc:f2:8a:93:d6:78:e1:a6:c8:1c:bb:b4:e3:93:f6: 23:ef:11:4b:1e:3a:8e:67:f9:f0:ca:81:a6:c7:6c: 5b:2b:21:e9:32:7b:67:c9:04:7a:0d:ae:f6:3f:fd: 82:bb:c7:5b:24:18:bc:24:f4:ea:db:04:ac:9a:6a: 2b:cb:76:97:89:a8:38:49:51:f9:a1:a7:32:46:28: 87:e0:1c:1d:1d:a3:a9:a6:93:1c:57:e3:53:52:f5: 8b:1d:b0:42:59:4a:d1:b6:bf:ea:68:2b:8c:53:5c: 7a:78:55:ee:3b:b0:1d:e6:49:69:20:e2:67:50:42: 0d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AB:85:09:A6:46:17:20:D6:DA:0D:0B:8D:ED:C0:58:84:5A:A3:32 X509v3 Authority Key Identifier: keyid:6C:24:CE:24:64:AD:37:71:E3:2C:33:08:18:D1:B7:DA:01:4C:69:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCTOJGStN3HjLDMIGNG32gFMaQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC84C/F35B305EBF3111EEA79C8E3DC4F9AE02/bCTOJGStN3HjLDMIGNG32gFMaQk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:d9:3e:4f:d5:ec:b8:97:72:3a:64:35:eb:d1:db:fc:c1:fb: 62:59:7a:87:f8:ed:ab:b8:e1:c5:d7:90:b6:7e:7d:a4:39:35: fc:1a:2c:d2:d3:b6:84:29:6c:9b:2b:b7:ba:aa:11:29:b9:90: da:9c:86:ba:95:ab:6a:cd:59:75:ad:be:96:ed:27:9d:ab:68: ae:a4:23:8c:16:d1:45:d0:61:87:73:53:3d:de:19:5f:1a:a1: e4:36:30:54:bf:98:21:c3:09:a5:31:e8:b8:66:33:ce:0b:c6: 3a:dd:fb:5a:d9:a2:0d:93:37:e2:51:ef:ce:57:03:96:f1:fb: 10:42:b8:86:ab:67:e8:50:d1:6b:80:1f:ea:83:68:0d:10:8e: 1f:aa:3f:1d:59:1c:63:37:b3:18:f5:77:3a:cb:f5:22:9a:aa: 35:cc:a5:a2:56:d3:d6:8f:f5:ba:7f:28:9d:8b:59:06:a4:7d: 8e:e5:db:49:87:70:46:da:af:75:f7:8c:4a:e0:58:8b:c5:39: e3:a0:5f:fd:09:81:6a:5d:8c:01:da:d8:4c:ea:f5:94:80:fb: cb:6f:dd:be:b4:8c:1c:6e:3a:33:d1:37:3d:d9:88:38:15:85: 82:ed:d7:ef:00:e2:d1:36:c2:b1:dc:13:07:37:e7:6f:6e:16: 4a:78:ff:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4NEMxMTAvBgNVBAUTKDZDMjRDRTI0NjRBRDM3NzFFMzJDMzMwODE4RDFCN0RB MDE0QzY5MDkwHhcNMjYwMzAxMDUyNzE2WhcNMjYwMzA4MDUyNzE2WjAYMRYwFAYD VQQDEw02OWEzY2UzNS0xNGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCoVeQcn1uupuZsk3aJHZ3/9poYnNirvJReZ4tynei+RW8tkjzOL95GyeKrU bLmQhu1TM4ahAoMIGqul7wQBLpFbzVD/pxxslCqVdMbu7H4MfIt7oobTpMeRiv0v H8+hsZY9KspnpqyiE4z8MOCpdeGpxH6oOMDvE8zrajPv5AGS8dBLjjC88oqT1njh psgcu7Tjk/Yj7xFLHjqOZ/nwyoGmx2xbKyHpMntnyQR6Da72P/2Cu8dbJBi8JPTq 2wSsmmory3aXiag4SVH5oacyRiiH4BwdHaOpppMcV+NTUvWLHbBCWUrRtr/qaCuM U1x6eFXuO7Ad5klpIOJnUEINTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJmrhQmm Rhcg1toNC43twFiEWqMyMB8GA1UdIwQYMBaAFGwkziRkrTdx4ywzCBjRt9oBTGkJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzg0Qy9GMzVCMzA1RUJG MzExMUVFQTc5QzhFM0RDNEY5QUUwMi9iQ1RPSkdTdE4zSGpMRE1JR05HMzJnRk1h UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JDVE9KR1N0TjNIakxETUlHTkczMmdGTWFRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Qzg0Qy9GMzVCMzA1RUJGMzExMUVFQTc5QzhFM0RDNEY5QUUwMi9iQ1RPSkdTdE4z SGpMRE1JR05HMzJnRk1hUWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvtk+T9XsuJdyOmQ169Hb/MH7Yll6h/jtq7jhxdeQtn59pDk1/Bos0tO2hCls myu3uqoRKbmQ2pyGupWras1Zda2+lu0nnatorqQjjBbRRdBhh3NTPd4ZXxqh5DYw VL+YIcMJpTHouGYzzgvGOt37WtmiDZM34lHvzlcDlvH7EEK4hqtn6FDRa4Af6oNo DRCOH6o/HVkcYzezGPV3Osv1IpqqNcylolbT1o/1un8onYtZBqR9juXbSYdwRtqv dfeMSuBYi8U546Bf/QmBal2MAdrYTOr1lID7y2/dvrSMHG46M9E3PdmIOBWFgu3X 7wDi0TbCsdwTBzfnb24WSnj/Bg== -----END CERTIFICATE-----Generated at Sun Mar 1 20:26:34 2026 by rpki-client