$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft File: Cv4rIK3mucMLixgR0V8dDVdN494.mft (raw, json) Hash identifier: TaZzgTaEkAWD1LGaF39GIKLeNtKVCSaLAkDFYb5dZJM= Subject key identifier: 77:CA:2D:70:A8:AE:51:29:20:7F:78:BD:CF:07:F5:02:ED:77:6A:0D Authority key identifier: 0A:FE:2B:20:AD:E6:B9:C3:0B:8B:18:11:D1:5F:1D:0D:57:4D:E3:DE Certificate issuer: /CN=A91EC98B/serialNumber=0AFE2B20ADE6B9C30B8B1811D15F1D0D574DE3DE Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft Manifest number: 10 Signing time: Sun 01 Mar 2026 10:37:01 +0000 Manifest this update: Sun 01 Mar 2026 10:37:01 +0000 Manifest next update: Sun 08 Mar 2026 10:37:01 +0000 Files and hashes: 1: Cv4rIK3mucMLixgR0V8dDVdN494.crl (hash: kLdTIeXPZlgYrdQ8A9cIEWsFLh1G9OmSlk58464iqL0=) 2: 32A5FD8C036611F1A426A4772D3D8C67.roa (hash: rAKQfqzwQK5IzLFhXtLBp7YYHEkrei2qYSNZ5UbT8L0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.crl rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:37:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC98B, serialNumber=0AFE2B20ADE6B9C30B8B1811D15F1D0D574DE3DE Validity Not Before: Mar 1 10:37:01 2026 GMT Not After : Mar 8 10:37:01 2026 GMT Subject: CN=69a416cd-f952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6e:f3:75:1c:96:b4:ec:33:b9:88:09:31:bd: d1:bf:a6:2f:a8:6a:1a:c8:07:8d:3f:90:ff:d3:9c: 6a:67:6b:c5:77:57:8d:6d:93:a0:e5:31:86:85:87: fb:15:86:95:cb:74:a4:19:ba:1d:fb:7f:2f:bf:5e: 4f:09:76:fa:0c:ac:f6:2d:83:a7:f8:bf:45:87:d4: 6c:31:f1:70:cb:c0:16:29:65:a4:4a:cc:ee:51:1f: 1f:31:3c:7a:84:6d:af:14:c4:bd:c5:76:f3:42:05: ce:b4:e8:71:cc:26:49:ce:4a:ef:be:75:51:8c:02: aa:d5:86:59:fc:ca:06:4d:0a:1a:98:e4:c4:3b:c4: 75:d4:1d:08:84:3a:68:e2:77:71:97:43:8e:2e:f2: 02:f4:a4:68:e8:d1:8c:02:d4:de:36:3e:fd:a9:11: ab:4d:99:14:5f:0d:6e:20:63:19:e6:bb:ce:22:9b: a4:89:35:f6:cb:df:a3:dd:d5:34:75:37:05:b2:7f: 38:c0:d8:8b:d6:67:0b:9a:22:b6:b7:e1:fc:52:cb: 84:c8:89:93:8d:5a:77:6f:71:cd:f7:90:70:e6:08: 1c:49:fd:77:b6:f9:5a:1a:29:2a:c7:a6:88:f1:14: 3d:23:d5:ea:9f:ac:e0:cb:2c:da:83:e9:66:ec:b0: e0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:CA:2D:70:A8:AE:51:29:20:7F:78:BD:CF:07:F5:02:ED:77:6A:0D X509v3 Authority Key Identifier: keyid:0A:FE:2B:20:AD:E6:B9:C3:0B:8B:18:11:D1:5F:1D:0D:57:4D:E3:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:e9:cd:65:86:0a:f2:7e:49:c7:17:9c:ce:fa:3c:e9:b9:7b: 60:90:12:9d:db:08:33:fa:97:83:de:98:e9:75:cc:2d:1a:e4: aa:97:1b:7e:fd:40:5d:f2:f4:aa:c3:e2:0b:c2:5a:c8:24:2a: df:6f:78:6c:87:e5:b6:c6:73:72:24:c8:8d:92:fd:99:14:91: a8:e4:d8:0d:5d:08:ea:ab:0f:80:fd:9b:31:1a:f7:95:23:a4: 1d:ac:ba:10:93:18:04:8b:db:37:5c:c3:e4:3d:3f:bd:f0:2a: a1:fe:7b:d5:56:8b:c2:9e:04:69:9c:a5:b5:05:e4:ab:74:8f: e0:7e:f5:0c:68:1b:d4:55:0b:6b:09:c0:41:75:33:e8:8b:32: d5:c4:fc:2b:dc:6a:3d:f1:ca:bf:5c:f8:64:cd:43:00:6c:1d: ed:d9:b5:b2:2c:5b:d1:5f:d8:75:a1:38:59:86:b3:82:d4:c2: 36:49:53:ae:fd:dd:0d:53:94:db:60:5d:1d:3b:6d:eb:c1:d4: 8a:ba:48:0f:d8:d8:88:06:e7:a1:c4:02:fa:d0:8d:90:70:d9: 1e:f9:ca:76:17:b3:bb:84:a3:97:af:60:74:b0:10:d8:07:08: 8c:7b:56:e9:b5:df:cc:6d:97:0f:36:e8:af:90:ba:7e:4d:57: e9:9e:e1:2e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF Qzk4QjExMC8GA1UEBRMoMEFGRTJCMjBBREU2QjlDMzBCOEIxODExRDE1RjFEMEQ1 NzRERTNERTAeFw0yNjAzMDExMDM3MDFaFw0yNjAzMDgxMDM3MDFaMBgxFjAUBgNV BAMTDTY5YTQxNmNkLWY5NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgbvN1HJa07DO5iAkxvdG/pi+oahrIB40/kP/TnGpna8V3V41tk6DlMYaFh/sV hpXLdKQZuh37fy+/Xk8JdvoMrPYtg6f4v0WH1Gwx8XDLwBYpZaRKzO5RHx8xPHqE ba8UxL3FdvNCBc606HHMJknOSu++dVGMAqrVhln8ygZNChqY5MQ7xHXUHQiEOmji d3GXQ44u8gL0pGjo0YwC1N42Pv2pEatNmRRfDW4gYxnmu84im6SJNfbL36Pd1TR1 NwWyfzjA2IvWZwuaIra34fxSy4TIiZONWndvcc33kHDmCBxJ/Xe2+VoaKSrHpojx FD0j1eqfrODLLNqD6WbssOABAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUd8otcKiu USkgf3i9zwf1Au13ag0wHwYDVR0jBBgwFoAUCv4rIK3mucMLixgR0V8dDVdN494w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDOThCLzc0MTA3Q0VFMDM2 NTExRjFCOTg1NzhENDJDM0Q4QzY3L0N2NHJJSzNtdWNNTGl4Z1IwVjhkRFZkTjQ5 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ3Y0cklLM211Y01MaXhnUjBWOGREVmRONDk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD OThCLzc0MTA3Q0VFMDM2NTExRjFCOTg1NzhENDJDM0Q4QzY3L0N2NHJJSzNtdWNN TGl4Z1IwVjhkRFZkTjQ5NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBw6c1lhgryfknHF5zO+jzpuXtgkBKd2wgz+peD3pjpdcwtGuSqlxt+/UBd8vSq w+ILwlrIJCrfb3hsh+W2xnNyJMiNkv2ZFJGo5NgNXQjqqw+A/ZsxGveVI6QdrLoQ kxgEi9s3XMPkPT+98Cqh/nvVVovCngRpnKW1BeSrdI/gfvUMaBvUVQtrCcBBdTPo izLVxPwr3Go98cq/XPhkzUMAbB3t2bWyLFvRX9h1oThZhrOC1MI2SVOu/d0NU5Tb YF0dO23rwdSKukgP2NiIBuehxAL60I2QcNke+cp2F7O7hKOXr2B0sBDYBwiMe1bp td/MbZcPNuivkLp+TVfpnuEu -----END CERTIFICATE-----Generated at Mon Mar 2 02:16:51 2026 by rpki-client