$ rpki-client -vvf rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft File: CBKglmLws-NPK1pRwz6OknA-Q2k.mft (raw, json) Hash identifier: Ln0ugAsevEsKbEDUoqiUMgs09XPdMIJONFaOGvpN/W8= Subject key identifier: 28:82:0C:48:FC:28:45:CD:57:F0:6D:94:40:E9:F4:59:2A:BF:C7:DE Authority key identifier: 08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69 Certificate issuer: /CN=A91547EC/serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft Manifest number: 5E Signing time: Tue 03 Mar 2026 07:42:28 +0000 Manifest this update: Tue 03 Mar 2026 07:42:28 +0000 Manifest next update: Tue 10 Mar 2026 07:42:28 +0000 Files and hashes: 1: CBKglmLws-NPK1pRwz6OknA-Q2k.crl (hash: 8CNh0ZpcMv6z6YsCs4hOVVOCjRzAua8CZfhx84uxZsA=) 2: 7CB1102487DD11F0A89FB377C4F9AE02.roa (hash: 7Tw7MUa2YgJbW9fiP2QoyuCg4X9lbUhL25iL2lzhjcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 07:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91547EC, serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369 Validity Not Before: Mar 3 07:42:28 2026 GMT Not After : Mar 10 07:42:28 2026 GMT Subject: CN=69a690e4-e134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ac:cd:91:de:74:6b:0c:18:fe:55:3e:b0:69: 55:53:28:4e:c8:35:a6:03:48:0b:ab:30:53:58:f3: 9f:4c:0f:c6:5c:83:f8:35:85:2f:8d:8b:a3:89:51: c8:bb:3e:2d:2d:d2:34:b7:6a:ed:d5:72:8c:b0:68: ec:ed:21:1b:5d:60:0f:29:d7:a1:88:b0:85:7d:73: 70:f6:d1:55:70:e1:a2:5f:09:25:1a:a1:97:2d:84: 22:a0:c1:19:a9:65:e3:a8:ae:8f:1c:4f:da:ed:b4: 59:08:05:cb:9c:89:d2:b8:b0:a7:b0:19:b8:08:5c: 01:cc:b0:6d:12:f9:29:c2:ec:6e:0c:d9:8a:a1:9c: cb:5c:18:f6:aa:de:91:f6:4e:ed:3e:36:ab:6d:c6: 6a:17:75:c3:0e:c6:ac:2c:0b:a3:5d:df:c8:36:87: 48:80:54:32:25:a6:2d:63:d1:6b:e3:63:93:10:cf: 52:1b:b7:fc:29:98:b0:ea:fd:a1:11:ad:89:26:23: 18:dc:0b:3d:0a:17:3f:e6:c7:7b:2e:a8:08:7c:ca: 9f:32:2f:f7:d4:e3:dc:2a:d8:cb:19:c1:6d:64:48: e2:5d:13:3c:6b:ca:de:45:b0:fb:00:0b:9a:0c:68: ae:7a:69:f9:2e:ee:c5:86:0b:5c:14:ca:29:f4:85: c5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:82:0C:48:FC:28:45:CD:57:F0:6D:94:40:E9:F4:59:2A:BF:C7:DE X509v3 Authority Key Identifier: keyid:08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:63:bb:0b:de:0c:60:f9:8f:55:cc:21:15:66:4f:ed:67:ce: 55:08:2c:be:fd:aa:de:00:26:f9:2e:e1:72:75:c0:7e:b8:13: 17:f0:36:72:46:a9:30:dd:27:73:cd:00:dc:07:be:c6:81:20: c1:78:0a:fc:a4:77:c9:11:ab:bb:a4:b7:e3:39:05:52:2d:7e: e8:72:15:a8:27:81:57:19:f7:e8:80:05:0a:b2:e9:5f:97:4e: 46:06:d3:7a:c6:ed:47:8a:f9:a8:f0:1f:a8:a9:6d:3f:f2:e3: da:0e:02:d1:11:a6:2c:97:e8:12:35:56:a3:f7:e3:05:85:6c: f8:73:1a:68:6b:20:b6:21:a3:d7:09:1d:ad:7c:e0:81:60:05: 01:29:8f:54:c7:6e:29:4c:0d:9f:a7:0c:64:f6:b9:a8:8f:63: df:f7:95:a4:29:a9:39:2e:f1:e7:ec:5b:eb:95:01:be:e0:df: e7:29:c3:3d:69:aa:5a:36:2c:62:a5:63:34:04:50:9a:36:c9: ec:81:23:fa:0f:71:b1:91:ca:f8:53:fa:62:20:a9:95:2f:5a: d0:ab:38:95:b7:d4:d7:d4:1d:9b:e3:be:5e:df:85:52:84:f6: 8b:1a:b4:b2:76:b3:e9:cc:47:e3:e9:a5:56:1d:e2:7a:d0:92: 8f:30:66:d6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDdFQzExMC8GA1UEBRMoMDgxMkEwOTY2MkYwQjNFMzRGMkI1QTUxQzMzRThFOTI3 MDNFNDM2OTAeFw0yNjAzMDMwNzQyMjhaFw0yNjAzMTAwNzQyMjhaMBgxFjAUBgNV BAMTDTY5YTY5MGU0LWUxMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvrM2R3nRrDBj+VT6waVVTKE7INaYDSAurMFNY859MD8Zcg/g1hS+Ni6OJUci7 Pi0t0jS3au3VcoywaOztIRtdYA8p16GIsIV9c3D20VVw4aJfCSUaoZcthCKgwRmp ZeOoro8cT9rttFkIBcucidK4sKewGbgIXAHMsG0S+SnC7G4M2YqhnMtcGPaq3pH2 Tu0+NqttxmoXdcMOxqwsC6Nd38g2h0iAVDIlpi1j0WvjY5MQz1Ibt/wpmLDq/aER rYkmIxjcCz0KFz/mx3suqAh8yp8yL/fU49wq2MsZwW1kSOJdEzxryt5FsPsAC5oM aK56afku7sWGC1wUyin0hcXlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKIIMSPwo Rc1X8G2UQOn0WSq/x94wHwYDVR0jBBgwFoAUCBKglmLws+NPK1pRwz6OknA+Q2kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0N0VDLzI1NjM1N0M4ODdE RDExRjBCNzRDRkU3NkM0RjlBRTAyL0NCS2dsbUx3cy1OUEsxcFJ3ejZPa25BLVEy ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ0JLZ2xtTHdzLU5QSzFwUnd6Nk9rbkEtUTJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 N0VDLzI1NjM1N0M4ODdERDExRjBCNzRDRkU3NkM0RjlBRTAyL0NCS2dsbUx3cy1O UEsxcFJ3ejZPa25BLVEyay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAeY7sL3gxg+Y9VzCEVZk/tZ85VCCy+/areACb5LuFydcB+uBMX8DZyRqkw3Sdz zQDcB77GgSDBeAr8pHfJEau7pLfjOQVSLX7ochWoJ4FXGffogAUKsulfl05GBtN6 xu1Hivmo8B+oqW0/8uPaDgLREaYsl+gSNVaj9+MFhWz4cxpoayC2IaPXCR2tfOCB YAUBKY9Ux24pTA2fpwxk9rmoj2Pf95WkKak5LvHn7FvrlQG+4N/nKcM9aapaNixi pWM0BFCaNsnsgSP6D3Gxkcr4U/piIKmVL1rQqziVt9TX1B2b475e34VShPaLGrSy drPpzEfj6aVWHeJ60JKPMGbW -----END CERTIFICATE-----Generated at Wed Mar 4 08:42:50 2026 by rpki-client