$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft File: CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft (raw, json) Hash identifier: ffABIaatr3GQ8AVegaDaFkbdAMq4royMp3nj97LUwO0= Subject key identifier: B4:40:0D:89:99:49:CD:87:60:C8:43:34:34:1C:97:46:4D:01:32:9B Authority key identifier: 0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F Certificate issuer: /CN=A91FFE9F/serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F Certificate serial: 0FD0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft Manifest number: 0FA8 Signing time: Mon 02 Mar 2026 01:33:01 +0000 Manifest this update: Mon 02 Mar 2026 01:33:00 +0000 Manifest next update: Mon 09 Mar 2026 01:33:00 +0000 Files and hashes: 1: CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl (hash: yS3htzawvwtwK4soqyOy+NqWo61ry74nfwRplJ5tV50=) 2: 6153EE40A64911EEA2F9C24AC4F9AE02.roa (hash: J+h7thUDMvy+uyt/ymdd3k7Vj2Gd/6WvQSyp7AsNJMM=) 3: D927A2DAA64A11EE8316D651C4F9AE02.roa (hash: X520qcNus4TvBvTw4nMYN+cpkZ/KOdP/5ckBbIgl0V8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4048 (0xfd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFE9F, serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F Validity Not Before: Mar 2 01:33:00 2026 GMT Not After : Mar 9 01:33:00 2026 GMT Subject: CN=69a4e8cd-597d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3e:e2:89:f5:57:1d:b5:dc:14:44:2a:a1:ce: ed:4d:b0:65:b8:dd:91:57:bd:f6:4e:a6:e4:ff:12: 31:f8:40:cc:81:0e:73:f8:b3:00:20:b2:37:76:60: 9d:31:0a:dc:2e:6f:e9:10:fc:5e:2a:7e:cf:e8:c6: fb:07:f3:7f:77:5a:67:5b:ad:4b:af:8c:5e:b5:08: 3a:3c:ea:d3:f1:14:11:6b:14:32:e9:0f:51:d7:69: 48:67:46:60:bb:17:7f:2a:e6:01:bc:f4:28:08:ff: ab:fc:db:c4:cf:e9:73:82:35:93:b9:18:d2:b1:e1: 67:da:60:2b:95:02:bc:8d:8a:bd:01:4e:1d:bb:23: 77:e2:9d:26:1e:f7:32:14:a9:54:e9:86:b4:4d:d9: 42:42:b3:cb:e1:4e:39:cf:41:15:a4:ae:61:ac:37: 1f:5e:2b:a2:05:ff:9c:e8:45:74:ff:54:41:97:e3: 4b:c0:64:28:b9:20:0e:50:50:80:f4:6f:d5:14:13: 2c:55:47:65:ba:7e:2b:a0:a9:25:f8:5e:31:6c:89: c9:b8:e7:3d:87:c9:f7:c1:22:eb:a8:80:d5:68:8a: 84:83:bf:a3:83:92:ab:89:cd:e4:b5:e0:e9:d9:57: 77:3e:4d:49:db:36:57:dc:f3:17:21:22:6e:4b:f9: b6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:40:0D:89:99:49:CD:87:60:C8:43:34:34:1C:97:46:4D:01:32:9B X509v3 Authority Key Identifier: keyid:0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:21:32:c0:d4:b0:a9:83:bc:a7:98:4e:b1:cd:be:8b:34:ff: d6:47:6b:a2:c4:0e:85:8b:45:be:a0:c9:47:e1:8f:2b:db:6a: d4:9e:09:09:a2:96:b1:a5:cd:72:7d:28:05:d4:06:69:14:cd: bc:fa:53:bd:9e:ac:79:28:b9:ac:b3:11:3a:fa:ef:49:a4:d7: 5b:1c:dc:96:a4:7e:11:3a:8c:69:47:87:7d:3b:ad:2a:f9:23: 95:9b:d9:e1:78:a8:20:a2:03:da:cd:50:04:9f:33:42:33:60: 24:3e:16:32:0f:21:bf:ea:cf:95:6d:db:31:d1:17:ff:c5:34: cc:cd:d3:f3:0d:e0:c7:40:f2:07:2a:6e:7b:d2:82:6f:56:3f: e0:06:6d:04:d9:f7:95:ee:24:f9:c6:ab:5a:73:42:35:d3:b2: a5:ec:fb:cc:4a:d7:ee:c8:7f:cf:5d:aa:3a:5e:a5:11:24:19: 7c:54:31:0d:77:73:74:2c:65:a8:ba:5a:23:17:ee:a7:84:f2: 71:79:3d:42:08:77:d0:8e:d1:1b:b9:04:c3:99:70:3b:85:90: d2:79:55:d3:a5:e1:54:72:a1:01:6c:35:39:67:a3:96:ee:46: c2:c1:74:cb:42:96:d4:9c:45:db:c5:60:55:3e:7e:13:2d:c8: d9:ba:4e:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZFOUYxMTAvBgNVBAUTKDBCMDk1MjM2MjM0RTY5MzVCQUEzNDFFMzIzNUEzREI0 NzNBQ0M2N0YwHhcNMjYwMzAyMDEzMzAwWhcNMjYwMzA5MDEzMzAwWjAYMRYwFAYD VQQDEw02OWE0ZThjZC01OTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxz7iifVXHbXcFEQqoc7tTbBluN2RV732Tqbk/xIx+EDMgQ5z+LMAILI3dmCd MQrcLm/pEPxeKn7P6Mb7B/N/d1pnW61Lr4xetQg6POrT8RQRaxQy6Q9R12lIZ0Zg uxd/KuYBvPQoCP+r/NvEz+lzgjWTuRjSseFn2mArlQK8jYq9AU4duyN34p0mHvcy FKlU6Ya0TdlCQrPL4U45z0EVpK5hrDcfXiuiBf+c6EV0/1RBl+NLwGQouSAOUFCA 9G/VFBMsVUdlun4roKkl+F4xbInJuOc9h8n3wSLrqIDVaIqEg7+jg5Kric3kteDp 2Vd3Pk1J2zZX3PMXISJuS/m2iwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLRADYmZ Sc2HYMhDNDQcl0ZNATKbMB8GA1UdIwQYMBaAFAsJUjYjTmk1uqNB4yNaPbRzrMZ/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkU5Ri84QkUwNjNFMDdC MTYxMUU5OTk0OUFDNTFDNEY5QUUwMi9Dd2xTTmlOT2FUVzZvMEhqSTFvOXRIT3N4 bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N3bFNOaU5PYVRXNm8wSGpJMW85dEhPc3huOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkU5Ri84QkUwNjNFMDdCMTYxMUU5OTk0OUFDNTFDNEY5QUUwMi9Dd2xTTmlOT2FU VzZvMEhqSTFvOXRIT3N4bjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABCEywNSwqYO8p5hOsc2+izT/1kdrosQOhYtFvqDJR+GPK9tq1J4JCaKWsaXN cn0oBdQGaRTNvPpTvZ6seSi5rLMROvrvSaTXWxzclqR+ETqMaUeHfTutKvkjlZvZ 4XioIKID2s1QBJ8zQjNgJD4WMg8hv+rPlW3bMdEX/8U0zM3T8w3gx0DyBypue9KC b1Y/4AZtBNn3le4k+carWnNCNdOypez7zErX7sh/z12qOl6lESQZfFQxDXdzdCxl qLpaIxfup4TycXk9Qgh30I7RG7kEw5lwO4WQ0nlV06XhVHKhAWw1OWejlu5GwsF0 y0KW1JxF28VgVT5+Ey3I2bpOww== -----END CERTIFICATE-----Generated at Mon Mar 2 15:58:34 2026 by rpki-client