$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft File: cOo3wZMr00-ztIWaNIMaEOYR0PY.mft (raw, json) Hash identifier: iwghNCK2r/I+N9BCQhbptoFJQ91iMj+YjIEZBuAljFM= Subject key identifier: C2:B6:50:5D:FD:3A:7F:B9:16:A8:B3:02:95:75:8A:DE:34:6C:2C:91 Authority key identifier: 70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 Certificate issuer: /CN=A91BA1BF/serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6 Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft Manifest number: 01C0 Signing time: Fri 13 Mar 2026 02:55:41 +0000 Manifest this update: Fri 13 Mar 2026 02:55:40 +0000 Manifest next update: Fri 20 Mar 2026 02:55:40 +0000 Files and hashes: 1: cOo3wZMr00-ztIWaNIMaEOYR0PY.crl (hash: gxRLFk2KWhh+3yG+7nCliZu2vCR58bh4W2shTfG2SKw=) 2: 7C58D40872CD11EE81C60650C4F9AE02.roa (hash: i5njb+AFTyE4wRcj7a5fOISm22GZg63OOThKMD1y9Ls=) 3: BC630BAE84FC11EE9887345FC4F9AE02.roa (hash: S4KMnGrW45erDoNlmpjKyxDJPIiWWrvViUDoh+MBKjI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 02:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA1BF, serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6 Validity Not Before: Mar 13 02:55:40 2026 GMT Not After : Mar 20 02:55:40 2026 GMT Subject: CN=69b37cad-9c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5e:7e:bd:d5:3c:9a:29:bc:a5:62:c1:2f:1c: 48:2e:38:02:0a:40:31:36:18:3b:c7:7d:a8:9c:49: e8:36:6b:3d:b9:21:21:a6:60:e1:0e:6c:8f:95:84: 09:cc:8a:40:df:ba:f3:93:fd:37:b1:c0:6f:d5:ca: 27:84:34:1e:34:c4:b7:62:1e:fd:84:c9:5b:c8:ae: b6:b9:b2:55:54:60:67:bd:a2:f8:f1:cd:d3:b0:ce: b2:8a:34:20:ef:dc:b4:d0:f7:e2:38:47:00:56:f9: 6e:97:28:40:ef:b5:34:bd:ab:55:da:9a:8b:2c:bc: 67:01:1b:4d:80:1c:91:04:7e:27:57:17:b3:c2:43: 3a:ac:1a:aa:38:3b:f2:dc:4e:2b:50:d3:e9:09:0c: 1f:e3:68:be:d6:e7:43:c9:d4:ba:63:f8:00:97:b5: 77:f7:34:ca:4f:5f:06:c2:10:7b:c5:52:32:f1:cb: 7a:42:0f:04:ab:fb:23:6c:00:a8:d2:98:25:52:93: 7b:b1:0a:dc:4c:d5:3c:a3:e9:c3:58:58:31:a0:ab: f5:4b:8e:c5:1b:c2:41:47:a2:cd:65:26:01:fa:df: 76:0a:a9:ed:4c:d4:34:84:9f:7e:47:5d:72:a9:30: 07:7e:54:50:15:97:63:1a:2b:06:53:10:a5:52:bd: e3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B6:50:5D:FD:3A:7F:B9:16:A8:B3:02:95:75:8A:DE:34:6C:2C:91 X509v3 Authority Key Identifier: keyid:70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:7e:eb:c3:79:61:b9:5f:20:17:1e:4f:63:2c:ad:7c:55:e0: c4:ba:86:4d:fa:05:d0:f9:17:65:f5:56:20:b5:5d:57:ea:17: ec:3d:f2:16:22:bd:31:d1:e4:dc:8b:11:ee:f7:6b:f7:72:53: 7f:cd:85:35:de:be:22:08:33:53:28:11:42:f0:c8:00:cf:46: fa:0a:7f:ba:a1:5f:ed:b4:b8:ea:f4:51:08:d5:89:61:08:ec: 5f:f3:b1:23:64:b6:b8:2f:16:9a:42:85:5d:70:3e:50:51:c1: c5:ff:af:c4:cc:5a:67:64:f6:e1:e2:c3:3b:18:4b:94:ad:6f: 79:ed:af:c8:e9:a0:58:39:12:41:4d:8b:b9:ad:c1:7f:f7:81: 02:b7:8d:aa:44:3d:0c:02:2e:2d:3a:8b:0c:f0:7b:8f:48:e9: c6:ea:04:f6:cc:3b:06:ab:68:af:63:66:e9:6e:bb:c6:01:3a: e0:7a:1d:cb:46:ea:42:45:d2:48:00:48:72:89:c3:d8:fe:c6: c9:9e:41:0d:e7:7f:02:bc:60:20:f9:91:d6:88:58:d2:79:fc: ba:85:1a:57:55:46:e8:56:b4:16:59:df:76:a2:e5:83:a5:4b: d9:be:58:e0:74:76:f3:1d:9f:4e:56:18:fa:e3:f0:c7:53:ec: 21:7b:71:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkExQkYxMTAvBgNVBAUTKDcwRUEzN0MxOTMyQkQzNEZCM0I0ODU5QTM0ODMxQTEw RTYxMUQwRjYwHhcNMjYwMzEzMDI1NTQwWhcNMjYwMzIwMDI1NTQwWjAYMRYwFAYD VQQDEw02OWIzN2NhZC05YzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAul5+vdU8mim8pWLBLxxILjgCCkAxNhg7x32onEnoNms9uSEhpmDhDmyPlYQJ zIpA37rzk/03scBv1conhDQeNMS3Yh79hMlbyK62ubJVVGBnvaL48c3TsM6yijQg 79y00PfiOEcAVvlulyhA77U0vatV2pqLLLxnARtNgByRBH4nVxezwkM6rBqqODvy 3E4rUNPpCQwf42i+1udDydS6Y/gAl7V39zTKT18GwhB7xVIy8ct6Qg8Eq/sjbACo 0pglUpN7sQrcTNU8o+nDWFgxoKv1S47FG8JBR6LNZSYB+t92CqntTNQ0hJ9+R11y qTAHflRQFZdjGisGUxClUr3jkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMK2UF39 On+5FqizApV1it40bCyRMB8GA1UdIwQYMBaAFHDqN8GTK9NPs7SFmjSDGhDmEdD2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTFCRi84NEUxMEE0Mjcy Q0MxMUVFQjc5NDVBNERDNEY5QUUwMi9jT28zd1pNcjAwLXp0SVdhTklNYUVPWVIw UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NPbzN3Wk1yMDAtenRJV2FOSU1hRU9ZUjBQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTFCRi84NEUxMEE0MjcyQ0MxMUVFQjc5NDVBNERDNEY5QUUwMi9jT28zd1pNcjAw LXp0SVdhTklNYUVPWVIwUFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY37rw3lhuV8gFx5PYyytfFXgxLqGTfoF0PkXZfVWILVdV+oX7D3yFiK9MdHk 3IsR7vdr93JTf82FNd6+IggzUygRQvDIAM9G+gp/uqFf7bS46vRRCNWJYQjsX/Ox I2S2uC8WmkKFXXA+UFHBxf+vxMxaZ2T24eLDOxhLlK1vee2vyOmgWDkSQU2Lua3B f/eBAreNqkQ9DAIuLTqLDPB7j0jpxuoE9sw7Bqtor2Nm6W67xgE64Hody0bqQkXS SABIconD2P7GyZ5BDed/ArxgIPmR1ohY0nn8uoUaV1VG6Fa0FlnfdqLlg6VL2b5Y 4HR28x2fTlYY+uPwx1PsIXtxBg== -----END CERTIFICATE-----Generated at Fri Mar 13 08:41:46 2026 by rpki-client