$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft File: CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft (raw, json) Hash identifier: qQVhf29S1Et5/86GSMyOU0QMLkFJSjsYwbA89cSIsbA= Subject key identifier: B1:2B:F8:29:4C:0C:A6:3F:49:C5:04:EA:3A:73:EA:E7:94:78:ED:25 Authority key identifier: 09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5 Certificate issuer: /CN=A91C612E/serialNumber=0955D91F2CAA52BB4F7C70F0E656F24314EAFBD5 Certificate serial: 0CA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft Manifest number: 14BB Signing time: Sat 04 Apr 2026 18:14:57 +0000 Manifest this update: Sat 04 Apr 2026 18:14:57 +0000 Manifest next update: Sat 11 Apr 2026 18:14:57 +0000 Files and hashes: 1: CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl (hash: 4Goig1d1i93bXusLDZQ5eI1vVA/ZCZEO+UOIrucgQz4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3239 (0xca7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C612E, serialNumber=0955D91F2CAA52BB4F7C70F0E656F24314EAFBD5 Validity Not Before: Apr 4 18:14:57 2026 GMT Not After : Apr 11 18:14:57 2026 GMT Subject: CN=69d15521-251e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d2:17:78:0d:9b:07:3f:76:9d:e4:13:f2:dd: 8c:75:d4:be:4a:d3:cc:f3:2d:ef:17:07:cf:11:65: 16:48:66:dc:71:0c:10:73:91:47:70:de:ae:67:ca: e4:e3:02:bc:47:ae:af:05:04:4d:ac:81:ab:f3:d9: fc:d0:52:ab:42:b7:a8:3d:19:f9:e1:e4:38:0b:59: 19:18:50:95:57:05:f8:a8:aa:14:74:ed:5a:e7:16: 6e:fa:c1:bf:5a:d7:01:e3:78:7e:8b:5b:76:f6:eb: 70:8a:ef:48:9e:e0:c8:bd:38:56:2c:5b:4c:12:d8: f8:12:85:7d:7f:69:1b:1d:61:9c:67:03:59:15:30: 23:25:a9:a8:e2:0b:71:35:25:fb:1e:be:62:5a:16: aa:d4:1e:47:ad:a5:58:86:56:36:40:ba:80:1a:0f: e5:60:41:a7:f0:57:94:10:e9:03:09:77:e5:c1:ef: d3:7c:00:77:55:b3:ca:c6:e2:8b:48:ca:ea:23:5b: c4:11:68:b0:60:06:42:75:70:a8:69:56:4c:73:71: a6:73:f5:81:9d:b8:06:22:a9:3e:3e:35:e6:f0:8c: 15:48:0c:c6:00:51:b9:69:aa:8c:b4:bd:ef:ae:d2: 3a:fb:45:6d:a3:f7:a3:5d:c2:3d:38:5b:12:c8:b0: 1e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:2B:F8:29:4C:0C:A6:3F:49:C5:04:EA:3A:73:EA:E7:94:78:ED:25 X509v3 Authority Key Identifier: keyid:09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:91:46:b4:fb:03:35:f7:7e:f6:5b:0f:ea:76:a5:fe:38:4f: 13:e8:da:bb:e6:f7:3c:62:15:40:95:d6:50:b8:dd:2a:d9:25: 47:d6:2f:bb:9d:32:58:49:6c:36:cc:9b:97:2b:4f:c2:b3:9b: 13:a1:6c:fe:aa:69:13:c1:6f:c7:6e:b6:88:3e:3c:a3:4b:06: 3d:8c:39:e9:33:ca:09:94:a9:d7:3f:43:3b:46:24:b2:bd:c9: eb:74:bd:64:9e:f1:47:5f:dd:e5:99:5c:49:7b:e5:a3:ce:b8: e7:6b:94:94:66:5a:6e:44:52:f7:1f:6e:bc:40:fe:6b:4b:cd: ae:ea:87:1a:99:c8:2f:bc:ab:2c:54:b6:74:f5:31:4f:e7:9a: 75:2b:54:55:1b:f8:27:ed:2c:25:f2:49:f7:2c:19:61:36:39: ae:0d:36:60:c0:41:71:59:8a:3e:81:51:28:1f:29:dc:00:7c: 6b:85:b0:8d:75:4a:5f:b4:59:65:1f:43:a2:ae:0c:88:53:2b: ba:fd:f2:47:15:6d:5a:67:18:7e:25:fb:99:1b:42:53:23:ac: 15:9f:d2:bc:53:08:25:51:ef:a5:96:18:c4:54:cb:38:8e:c5: a0:11:f9:df:02:fe:b2:1f:99:03:e4:73:23:05:8f:69:f5:dc: a3:9d:d5:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYxMkUxMTAvBgNVBAUTKDA5NTVEOTFGMkNBQTUyQkI0RjdDNzBGMEU2NTZGMjQz MTRFQUZCRDUwHhcNMjYwNDA0MTgxNDU3WhcNMjYwNDExMTgxNDU3WjAYMRYwFAYD VQQDEw02OWQxNTUyMS0yNTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNIXeA2bBz92neQT8t2MddS+StPM8y3vFwfPEWUWSGbccQwQc5FHcN6uZ8rk 4wK8R66vBQRNrIGr89n80FKrQreoPRn54eQ4C1kZGFCVVwX4qKoUdO1a5xZu+sG/ WtcB43h+i1t29utwiu9InuDIvThWLFtMEtj4EoV9f2kbHWGcZwNZFTAjJamo4gtx NSX7Hr5iWhaq1B5HraVYhlY2QLqAGg/lYEGn8FeUEOkDCXflwe/TfAB3VbPKxuKL SMrqI1vEEWiwYAZCdXCoaVZMc3Gmc/WBnbgGIqk+PjXm8IwVSAzGAFG5aaqMtL3v rtI6+0Vto/ejXcI9OFsSyLAeTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLEr+ClM DKY/ScUE6jpz6ueUeO0lMB8GA1UdIwQYMBaAFAlV2R8sqlK7T3xw8OZW8kMU6vvV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjEyRS82NUJDMTdEMjBC NjExMUVBQUYwNDJGNjhDNEY5QUUwMi9DVlhaSHl5cVVydFBmSER3NWxieVF4VHEt OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWWFpIeXlxVXJ0UGZIRHc1bGJ5UXhUcS05VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjEyRS82NUJDMTdEMjBCNjExMUVBQUYwNDJGNjhDNEY5QUUwMi9DVlhaSHl5cVVy dFBmSER3NWxieVF4VHEtOVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcJFGtPsDNfd+9lsP6nal/jhPE+jau+b3PGIVQJXWULjdKtklR9Yvu50yWEls NsyblytPwrObE6Fs/qppE8Fvx262iD48o0sGPYw56TPKCZSp1z9DO0Yksr3J63S9 ZJ7xR1/d5ZlcSXvlo86452uUlGZabkRS9x9uvED+a0vNruqHGpnIL7yrLFS2dPUx T+eadStUVRv4J+0sJfJJ9ywZYTY5rg02YMBBcVmKPoFRKB8p3AB8a4WwjXVKX7RZ ZR9Doq4MiFMruv3yRxVtWmcYfiX7mRtCUyOsFZ/SvFMIJVHvpZYYxFTLOI7FoBH5 3wL+sh+ZA+RzIwWPafXco53VEw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:43:54 2026 by rpki-client