$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft File: CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft (raw, json) Hash identifier: 1IkD5oUwiN2VjiJYdD0iYDpUMD98LI5Ex5ySG6ohVvA= Subject key identifier: 65:8A:19:C9:CB:48:8D:00:76:C8:0D:42:1D:9C:C9:6C:09:65:4A:E0 Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Certificate serial: 027E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft Manifest number: 0227 Signing time: Sun 15 Mar 2026 02:35:16 +0000 Manifest this update: Sun 15 Mar 2026 02:35:16 +0000 Manifest next update: Sun 22 Mar 2026 02:35:16 +0000 Files and hashes: 1: CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl (hash: EXRlyGPeF14Y+u8y4W6jxqJemzjv5+zGrBMk9IFVrH4=) 2: 063FA6B25B2811F09B9A3A54C4F9AE02.roa (hash: COnh5OBflDrTiNerSPEVrAoEkIl/6x/Vx+xkw8ZayhI=) 3: BACC6D0A4F7411F0A8124536C4F9AE02.roa (hash: /aJrSzZ6U1lc2HAZFype6jc3RKjfbA/DfLGY0OrC9MU=) 4: E07CB68455A211F0B55F5674C4F9AE02.roa (hash: HGRofWCBztru2v6NUmwkl0HXWbLS28Izp3PDhbuMMv0=) 5: D0F8C1B2558E11F0AA71D85AC4F9AE02.roa (hash: 4xwuTIhwlGL5yXXna5at0wbo22dMaJaAc9+Xfqmd1Y8=) 6: FBB6EA4E558B11F082FD5637C4F9AE02.roa (hash: 2FcVuaRaySm31VN4owwphmbBRzz94dcrhBnFrd+vqjo=) 7: 94BE094C7D0B11F0BC79D46DC4F9AE02.roa (hash: NEX3aRxV1Dqk6McmWh2C+0AJV5eYo9XBed68fWDSotg=) 8: DA6883FC0F8611F0955A002EC4F9AE02.roa (hash: vftcQ5vmTURf7Bgrq+lkXEdW/3ZqSPsCNqTs8qbLsJs=) 9: F88F98EA55A211F0978C8774C4F9AE02.roa (hash: 1RLy8hwgWzmLWf1HsKCN7QGvSAK8fTD8LT1ZMd/TIQU=) 10: 935296A6558B11F0BB2DB436C4F9AE02.roa (hash: oQTNR8UezgQA4tGlsLZvjgGgLBz+VcjntBI8Klr+/KA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 02:35:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 638 (0x27e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Validity Not Before: Mar 15 02:35:16 2026 GMT Not After : Mar 22 02:35:16 2026 GMT Subject: CN=69b61ae4-12c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a0:6a:4b:67:37:03:44:fd:35:64:57:9c:35: 01:95:d5:e5:72:ca:86:10:a5:48:be:d5:30:04:58: 7a:e7:b1:05:92:6f:4c:0b:cd:c3:8a:93:0a:2e:6a: e5:2b:58:d9:43:28:1b:7e:09:77:5c:70:8b:7c:1f: 7b:86:41:29:0a:dc:27:41:ef:e3:4d:6c:ad:f3:85: e0:d8:fc:79:22:07:37:10:10:94:5c:ab:37:e6:de: 50:fb:f6:9a:f5:4b:66:03:a4:29:3a:9a:82:8f:a6: ed:c7:26:79:62:20:d0:73:e4:5c:26:b6:2f:79:0b: 15:91:1e:45:fe:9f:48:cc:05:fe:be:20:ab:b2:2b: f9:14:dc:75:46:1c:2e:4b:ba:8d:4b:e7:a4:35:fd: c1:40:2a:c3:fa:d9:9b:a0:06:d4:bd:35:45:12:03: 57:67:e5:b2:af:89:9d:82:90:de:a9:d1:6c:00:f1: 9e:5b:b6:d4:75:99:47:c5:40:97:c5:d7:92:33:9a: a9:c1:4f:16:fd:1a:91:8b:63:9b:36:43:21:aa:98: 69:87:37:bf:29:3e:e9:0c:43:b0:c4:fa:83:29:83: 96:32:df:df:59:b1:17:14:43:3f:03:95:14:c3:3c: 32:a6:08:43:f1:62:be:7c:e9:30:56:a0:1a:e5:1c: c2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:8A:19:C9:CB:48:8D:00:76:C8:0D:42:1D:9C:C9:6C:09:65:4A:E0 X509v3 Authority Key Identifier: keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:f0:3b:25:a0:1c:b0:df:d0:2d:75:de:7b:10:cb:e9:cc:e0: e4:2c:44:c7:ad:b2:ad:ce:44:42:1b:a8:b5:ac:4e:55:64:23: 5f:81:83:9a:69:30:42:b7:00:fb:43:1f:44:51:60:bf:2e:b0: dd:7f:9d:41:40:38:bb:cc:a4:32:44:5f:06:28:ca:c3:2f:82: 85:3c:67:68:da:4c:5a:43:89:81:6d:4a:be:72:ad:3a:58:57: d3:23:56:50:b9:81:29:33:fe:00:cd:ef:30:02:77:4b:c1:0a: 23:e7:c1:2c:d9:8c:70:2f:e3:72:39:d9:a4:9d:2b:c8:5d:9e: 44:8e:ee:cb:b9:d5:7e:a7:dd:11:b4:22:3a:29:92:af:55:f9: cb:0f:44:49:5c:de:ec:e2:2f:e7:f5:96:7f:7d:84:ca:c0:fd: c6:7c:5d:3e:e1:09:88:20:7d:72:5e:ba:47:ec:6a:d6:83:70: 03:ba:09:2e:8f:8d:7f:7d:4f:8b:da:cf:9c:a3:b5:11:82:91: d9:11:6e:94:d2:c0:eb:26:96:59:55:19:c5:a5:41:11:2b:29: 29:4a:95:f5:e0:20:da:7b:8a:f5:a9:44:10:b7:3a:ea:0e:06: d9:c5:cc:90:c5:b0:f9:b1:0d:eb:02:c7:83:dd:69:78:16:78: c9:96:74:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB OTI2RUY2NkUwHhcNMjYwMzE1MDIzNTE2WhcNMjYwMzIyMDIzNTE2WjAYMRYwFAYD VQQDEw02OWI2MWFlNC0xMmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlaBqS2c3A0T9NWRXnDUBldXlcsqGEKVIvtUwBFh657EFkm9MC83DipMKLmrl K1jZQygbfgl3XHCLfB97hkEpCtwnQe/jTWyt84Xg2Px5Igc3EBCUXKs35t5Q+/aa 9UtmA6QpOpqCj6btxyZ5YiDQc+RcJrYveQsVkR5F/p9IzAX+viCrsiv5FNx1Rhwu S7qNS+ekNf3BQCrD+tmboAbUvTVFEgNXZ+Wyr4mdgpDeqdFsAPGeW7bUdZlHxUCX xdeSM5qpwU8W/RqRi2ObNkMhqphphze/KT7pDEOwxPqDKYOWMt/fWbEXFEM/A5UU wzwypghD8WK+fOkwVqAa5RzC3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGWKGcnL SI0AdsgNQh2cyWwJZUrgMB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTdBQS80MUYwRjk3RTUyQjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFw SVZkUXBJdkFNYTJwSnU5bTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE/A7JaAcsN/QLXXeexDL6czg5CxEx62yrc5EQhuotaxOVWQjX4GDmmkwQrcA +0MfRFFgvy6w3X+dQUA4u8ykMkRfBijKwy+ChTxnaNpMWkOJgW1KvnKtOlhX0yNW ULmBKTP+AM3vMAJ3S8EKI+fBLNmMcC/jcjnZpJ0ryF2eRI7uy7nVfqfdEbQiOimS r1X5yw9ESVze7OIv5/WWf32EysD9xnxdPuEJiCB9cl66R+xq1oNwA7oJLo+Nf31P i9rPnKO1EYKR2RFulNLA6yaWWVUZxaVBESspKUqV9eAg2nuK9alEELc66g4G2cXM kMWw+bEN6wLHg91peBZ4yZZ0BQ== -----END CERTIFICATE-----Generated at Sun Mar 15 22:50:37 2026 by rpki-client