$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft File: CROi4pwkcA4hQx4EweNJf9X5qAA.mft (raw, json) Hash identifier: HjEvQASYyVK1586pwM18TbLlpSFuEGLqJ62PvfZgtvI= Subject key identifier: CC:5C:16:93:23:92:7F:59:00:09:D1:3D:22:A9:BA:19:D5:82:94:BA Authority key identifier: 09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 Certificate issuer: /CN=A91D65C2/serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Certificate serial: 01B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft Manifest number: 01A2 Signing time: Sat 21 Mar 2026 03:19:17 +0000 Manifest this update: Sat 21 Mar 2026 03:19:16 +0000 Manifest next update: Sat 28 Mar 2026 03:19:16 +0000 Files and hashes: 1: CROi4pwkcA4hQx4EweNJf9X5qAA.crl (hash: 2atS1Gapq1rirW3mbyv8YKU9u+sy0JInlFntBrDb1/E=) 2: AA134FD6BD1411EE95F45624C4F9AE02.roa (hash: 4+f/wed5Wlr64aPRJYraL7pD2Y7PbosJxrF3nMpUHpM=) 3: C3A53484B06011EEA1D18B7FC4F9AE02.roa (hash: WHu7Po3iuSGpMUahf46gbHaY1bGGSyPBy/TPYTAU2lQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:19:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D65C2, serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Validity Not Before: Mar 21 03:19:16 2026 GMT Not After : Mar 28 03:19:16 2026 GMT Subject: CN=69be0e35-fd17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1c:59:34:a5:fc:ec:23:dd:39:ef:a3:83:65: b6:9f:73:25:c6:8b:4e:8a:08:36:fe:1c:64:a8:f7: 2b:4e:be:d3:02:b6:41:c0:23:61:bc:a5:d6:aa:ce: 52:5d:22:59:af:c0:a9:82:03:2a:83:a2:40:25:8a: 79:ce:80:49:8f:a9:26:9c:bf:ce:97:b1:35:8d:6c: 41:45:93:e0:13:47:42:e3:61:1c:52:11:88:45:a7: 79:1f:79:cb:58:2b:b5:7a:e7:c9:81:d6:39:c4:f5: e7:55:c8:1e:20:c8:10:41:b7:22:da:9b:b8:bf:db: 5e:66:4b:3f:cd:eb:88:83:0c:61:88:2c:3c:13:07: 61:bc:d4:9f:90:9b:42:c9:09:81:6b:dc:bb:4b:ef: d5:19:46:d1:be:ce:43:89:db:7f:27:c0:3a:0c:00: da:b8:70:33:94:11:16:e4:6e:ef:86:08:a8:64:cc: 71:52:35:fe:d9:b1:33:5b:b2:e8:0c:16:25:59:31: 4f:b5:e2:e2:25:af:f0:1b:a1:ea:85:5c:0c:d2:52: 11:c5:0a:bb:16:20:41:38:23:34:84:72:e4:45:8d: 6a:0e:28:bc:51:10:14:c2:8b:18:6f:c3:86:a8:62: 59:10:ea:64:a3:70:c8:36:24:21:03:0d:40:18:65: d8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:5C:16:93:23:92:7F:59:00:09:D1:3D:22:A9:BA:19:D5:82:94:BA X509v3 Authority Key Identifier: keyid:09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:39:bd:36:1a:f2:7a:7e:98:52:1a:be:da:24:04:ca:2e:0b: 68:4f:06:fd:98:32:a7:7b:84:3c:cd:68:f9:9f:f0:1c:5f:ff: e2:7e:a6:0f:ca:d2:2d:ce:45:7a:f9:93:fe:aa:23:4b:be:a6: cc:cd:51:fb:c1:95:89:9c:51:bf:c0:04:85:d7:fb:9b:51:8d: 2f:96:37:0c:33:33:bf:b7:16:e6:bc:4e:f0:b3:3d:71:c2:51: d2:d9:bc:72:50:c4:b9:a1:dd:16:30:de:74:16:19:b2:16:ca: 2d:a8:fd:a1:e3:40:b9:6f:18:2d:d8:f0:8d:ad:e8:29:6c:dc: 3d:30:b0:89:f3:9c:8c:6d:92:53:aa:48:40:1f:1b:16:61:b4: 3b:6f:d9:6d:4d:ce:e3:e2:45:c0:c2:6a:db:87:a3:b3:33:bc: e1:5e:df:28:ce:c5:82:c4:6b:0c:b2:1d:75:cd:8e:6d:1d:96: a6:1e:8c:50:36:fe:a2:84:f0:9a:cd:ca:74:e3:b8:2e:a1:ac: bc:ed:59:84:a5:af:f9:a2:d4:d4:c5:15:3f:fb:92:dd:10:9d: db:5a:d2:56:73:72:c3:e6:94:33:f9:bb:74:b2:4b:bc:34:86: 20:53:ae:3b:e0:1f:ba:de:60:98:bc:b5:00:8c:65:59:cb:07: b0:9b:7b:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1QzIxMTAvBgNVBAUTKDA5MTNBMkUyOUMyNDcwMEUyMTQzMUUwNEMxRTM0OTdG RDVGOUE4MDAwHhcNMjYwMzIxMDMxOTE2WhcNMjYwMzI4MDMxOTE2WjAYMRYwFAYD VQQDEw02OWJlMGUzNS1mZDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxxZNKX87CPdOe+jg2W2n3MlxotOigg2/hxkqPcrTr7TArZBwCNhvKXWqs5S XSJZr8CpggMqg6JAJYp5zoBJj6kmnL/Ol7E1jWxBRZPgE0dC42EcUhGIRad5H3nL WCu1eufJgdY5xPXnVcgeIMgQQbci2pu4v9teZks/zeuIgwxhiCw8EwdhvNSfkJtC yQmBa9y7S+/VGUbRvs5Didt/J8A6DADauHAzlBEW5G7vhgioZMxxUjX+2bEzW7Lo DBYlWTFPteLiJa/wG6HqhVwM0lIRxQq7FiBBOCM0hHLkRY1qDii8URAUwosYb8OG qGJZEOpko3DINiQhAw1AGGXY8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMxcFpMj kn9ZAAnRPSKpuhnVgpS6MB8GA1UdIwQYMBaAFAkTouKcJHAOIUMeBMHjSX/V+agA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjVDMi83NkVFNzk1Q0Iw NjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NBNGhReDRFd2VOSmY5WDVx QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NST2k0cHdrY0E0aFF4NEV3ZU5KZjlYNXFBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjVDMi83NkVFNzk1Q0IwNjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NB NGhReDRFd2VOSmY5WDVxQUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANTm9Nhryen6YUhq+2iQEyi4LaE8G/Zgyp3uEPM1o+Z/wHF//4n6mD8rSLc5F evmT/qojS76mzM1R+8GViZxRv8AEhdf7m1GNL5Y3DDMzv7cW5rxO8LM9ccJR0tm8 clDEuaHdFjDedBYZshbKLaj9oeNAuW8YLdjwja3oKWzcPTCwifOcjG2SU6pIQB8b FmG0O2/ZbU3O4+JFwMJq24ejszO84V7fKM7FgsRrDLIddc2ObR2Wph6MUDb+ooTw ms3KdOO4LqGsvO1ZhKWv+aLU1MUVP/uS3RCd21rSVnNyw+aUM/m7dLJLvDSGIFOu O+Afut5gmLy1AIxlWcsHsJt7Qg== -----END CERTIFICATE-----Generated at Sat Mar 21 18:40:53 2026 by rpki-client