$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft File: cwYbqQQBgewK602PbgA_g4_JxI8.mft (raw, json) Hash identifier: Rh9WOjmkVOvsXFTaIjB1k6nA2qkQw2t7yOi3GY+p7Ck= Subject key identifier: F4:53:9B:6C:8C:29:3F:C5:B9:E4:48:EC:B0:4E:F1:D4:1C:1C:F8:0E Authority key identifier: 73:06:1B:A9:04:01:81:EC:0A:EB:4D:8F:6E:00:3F:83:8F:C9:C4:8F Certificate issuer: /CN=A91B65AC/serialNumber=73061BA9040181EC0AEB4D8F6E003F838FC9C48F Certificate serial: 018B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft Manifest number: 0185 Signing time: Sun 05 Apr 2026 03:59:13 +0000 Manifest this update: Sun 05 Apr 2026 03:59:12 +0000 Manifest next update: Sun 12 Apr 2026 03:59:12 +0000 Files and hashes: 1: cwYbqQQBgewK602PbgA_g4_JxI8.crl (hash: HtSDXG3C14YCE5+wq3EzA2f8iiNfVFw7muGTNdODhS4=) 2: 7D2E766CE5AF11EE9A0A642FC4F9AE02.roa (hash: kbTV9f4IWgZK9S4apMSRBWK1zjlS8Xrya9owJXlI6Ns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.crl rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:59:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 395 (0x18b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B65AC, serialNumber=73061BA9040181EC0AEB4D8F6E003F838FC9C48F Validity Not Before: Apr 5 03:59:12 2026 GMT Not After : Apr 12 03:59:12 2026 GMT Subject: CN=69d1de11-1785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:19:95:e4:e6:15:bf:76:b6:0d:7e:04:a4:6b: aa:cc:26:f0:7c:a0:90:7d:36:6b:82:e4:5e:df:30: b4:ac:e9:e2:7a:e8:55:d7:e5:d6:f9:33:0c:74:46: 44:6b:bf:e2:99:8f:69:d6:6f:d7:91:0e:7f:a8:07: f6:95:d8:b6:7b:d4:fc:b2:29:e0:83:a8:b4:e8:1f: 57:3c:b8:49:34:46:cf:4e:5f:f5:4e:6d:a1:a0:98: 7f:68:6a:50:df:17:0b:e1:20:c4:38:de:ae:bb:3d: 6e:0d:6d:fc:3d:31:36:11:85:ff:39:38:eb:6d:6f: 25:9a:66:9a:f8:d2:be:24:bd:f6:0e:59:ff:a7:35: 29:79:00:0a:9a:e4:44:7d:e7:34:e3:ba:76:91:d9: 16:4b:fe:b8:1b:60:a9:73:a8:d9:7b:68:c9:54:57: 91:5f:8b:0c:ac:02:55:b9:92:fc:e5:20:24:cb:02: 45:7e:ca:02:92:73:7c:5c:13:26:48:72:87:01:24: 18:bb:82:38:5a:38:d8:6b:45:c2:ff:d0:04:1d:24: b6:e2:a4:2b:03:bf:10:86:fa:45:ba:f6:a2:8d:8a: de:25:16:16:c5:24:9c:1b:9d:7a:bd:40:8f:62:cd: f5:d4:22:73:a8:47:02:9a:6d:f3:2a:fd:3a:c6:26: c9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:53:9B:6C:8C:29:3F:C5:B9:E4:48:EC:B0:4E:F1:D4:1C:1C:F8:0E X509v3 Authority Key Identifier: keyid:73:06:1B:A9:04:01:81:EC:0A:EB:4D:8F:6E:00:3F:83:8F:C9:C4:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:05:c4:55:98:b6:83:bd:17:ca:8f:4d:72:79:8c:6a:ee:43: a5:fc:93:11:71:28:32:da:f2:22:84:66:f6:a3:b0:a0:e9:25: 4a:fd:d8:b7:1a:55:5f:5c:32:27:11:f2:06:6f:d5:c2:ca:f9: 03:49:5b:99:60:24:ed:8f:8c:a2:aa:9c:fb:89:01:73:e9:1c: 6c:a7:c7:d0:83:e9:33:48:fa:c1:62:3f:41:a2:9b:be:6d:79: 37:71:15:01:21:4e:00:75:85:b2:10:de:f1:a5:99:cf:24:2d: 85:62:ff:0c:28:c2:9b:9a:6a:86:c8:25:09:12:70:f3:6d:e1: 4e:3a:3d:5c:56:87:ee:f1:58:89:ed:a7:d7:7c:c1:63:aa:44: 27:b7:bf:57:13:1f:93:cd:0e:43:0e:df:5f:77:85:50:e5:b7: 92:06:90:41:ef:ac:86:a5:0b:11:cd:c3:ac:e7:39:1a:a1:c6: a8:ec:85:bc:fb:43:6d:be:14:e3:64:59:f6:d4:69:55:94:1d: f7:59:bd:a0:24:b2:f6:4b:30:cb:f7:fe:d1:f0:a4:2f:d4:fe: 11:a0:dc:5d:87:fe:93:29:d8:3b:ae:40:7d:99:1a:de:e7:c2: 61:38:8d:d2:50:09:7c:23:48:0b:e5:3c:74:48:57:12:8d:51: 07:88:3f:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1QUMxMTAvBgNVBAUTKDczMDYxQkE5MDQwMTgxRUMwQUVCNEQ4RjZFMDAzRjgz OEZDOUM0OEYwHhcNMjYwNDA1MDM1OTEyWhcNMjYwNDEyMDM1OTEyWjAYMRYwFAYD VQQDEw02OWQxZGUxMS0xNzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhmV5OYVv3a2DX4EpGuqzCbwfKCQfTZrguRe3zC0rOnieuhV1+XW+TMMdEZE a7/imY9p1m/XkQ5/qAf2ldi2e9T8singg6i06B9XPLhJNEbPTl/1Tm2hoJh/aGpQ 3xcL4SDEON6uuz1uDW38PTE2EYX/OTjrbW8lmmaa+NK+JL32Dln/pzUpeQAKmuRE fec047p2kdkWS/64G2Cpc6jZe2jJVFeRX4sMrAJVuZL85SAkywJFfsoCknN8XBMm SHKHASQYu4I4WjjYa0XC/9AEHSS24qQrA78QhvpFuvaijYreJRYWxSScG516vUCP Ys311CJzqEcCmm3zKv06xibJuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPRTm2yM KT/FueRI7LBO8dQcHPgOMB8GA1UdIwQYMBaAFHMGG6kEAYHsCutNj24AP4OPycSP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjVBQy9ENEYzREI5RUUx RTAxMUVFQUY2RTFFNjhDNEY5QUUwMi9jd1licVFRQmdld0s2MDJQYmdBX2c0X0p4 STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N3WWJxUVFCZ2V3SzYwMlBiZ0FfZzRfSnhJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjVBQy9ENEYzREI5RUUxRTAxMUVFQUY2RTFFNjhDNEY5QUUwMi9jd1licVFRQmdl d0s2MDJQYmdBX2c0X0p4STgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHAXEVZi2g70Xyo9NcnmMau5DpfyTEXEoMtryIoRm9qOwoOklSv3YtxpVX1wy JxHyBm/Vwsr5A0lbmWAk7Y+Moqqc+4kBc+kcbKfH0IPpM0j6wWI/QaKbvm15N3EV ASFOAHWFshDe8aWZzyQthWL/DCjCm5pqhsglCRJw823hTjo9XFaH7vFYie2n13zB Y6pEJ7e/VxMfk80OQw7fX3eFUOW3kgaQQe+shqULEc3DrOc5GqHGqOyFvPtDbb4U 42RZ9tRpVZQd91m9oCSy9kswy/f+0fCkL9T+EaDcXYf+kynYO65AfZka3ufCYTiN 0lAJfCNIC+U8dEhXEo1RB4g/sw== -----END CERTIFICATE-----Generated at Mon Apr 6 11:28:25 2026 by rpki-client