$ rpki-client -vvf rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft File: kSlbu3W_quuVMbObNux1Id3jDWM.mft (raw, json) Hash identifier: YBSGxmB61hcDnRM05XpvPapYK+gwFU/jUKhuUtaSyxg= Subject key identifier: 8E:10:BA:C1:77:8F:3D:D6:61:C4:5B:3E:1C:DF:D9:57:43:2F:C6:3E Authority key identifier: 91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63 Certificate issuer: /CN=A911D9B2/serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63 Certificate serial: 01F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft Manifest number: 01D5 Signing time: Fri 27 Mar 2026 03:27:46 +0000 Manifest this update: Fri 27 Mar 2026 03:27:45 +0000 Manifest next update: Fri 03 Apr 2026 03:27:45 +0000 Files and hashes: 1: kSlbu3W_quuVMbObNux1Id3jDWM.crl (hash: G71VfW5RobtUXLRhAVXY9mniGtBf47BIVWdu2p3zMok=) 2: 48B227F4E8D111F089B2D8B5616F56BC.roa (hash: WkyL76qiMF9RZhUkNMb3RMO30+J1U+zYYA70lfRZGcY=) 3: 59962840D01911EE96596B16C4F9AE02.roa (hash: y1hStzic/YZJ1I+8JzXAyWcd1KU9dmVU0MUq2vt+Xgs=) 4: 11A28878915611EE83F61C41C4F9AE02.roa (hash: RMJ3MtQdHxz76LVbzxDYjdiseR/569W+/vsBpB/W5j4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 03:27:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 496 (0x1f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D9B2, serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63 Validity Not Before: Mar 27 03:27:45 2026 GMT Not After : Apr 3 03:27:45 2026 GMT Subject: CN=69c5f932-db67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ed:49:b8:97:97:12:aa:41:40:b6:da:5c:99: 63:b8:20:ff:ed:a4:6f:c7:44:39:1b:ba:6d:17:05: 34:3e:86:0c:ba:90:78:ba:6c:4b:0b:93:3f:62:e2: 6b:98:7d:22:fb:e1:f8:06:e2:9f:78:3a:25:cc:54: 99:e0:fb:ab:94:1d:fd:3a:cc:f0:fb:95:b3:dc:fa: af:7c:61:6e:5b:b7:92:9d:9b:bb:4a:61:12:f1:93: c8:13:5f:46:45:34:75:ec:78:57:7d:56:01:0b:a7: 3b:2c:9e:f6:ed:c3:a1:98:83:9f:f3:97:6e:d1:cd: 6b:d8:0e:d5:8c:08:2d:33:6f:6a:7e:bd:ed:c1:8c: f8:3d:7a:07:0a:28:33:01:4c:84:fa:56:5b:c0:16: 33:b4:48:87:38:d6:32:b7:09:d3:48:e1:7a:8f:cb: 06:8f:07:b3:4f:aa:fa:fd:80:01:48:30:ea:50:78: 88:53:99:28:40:a3:43:58:dc:26:9f:14:1a:4c:2a: 9f:f0:57:b6:38:fd:58:df:46:d7:bb:f4:56:9c:24: fe:78:81:62:1e:af:b4:f2:bc:65:00:bf:3d:55:22: 1c:d2:98:75:53:b9:3a:81:a5:f1:d0:dc:9d:d2:68: 34:2e:be:04:eb:5a:16:25:fa:83:6f:9a:4e:08:81: 57:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:10:BA:C1:77:8F:3D:D6:61:C4:5B:3E:1C:DF:D9:57:43:2F:C6:3E X509v3 Authority Key Identifier: keyid:91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:6f:4f:20:28:51:3f:96:36:5a:7f:30:4f:d0:ae:cb:3f:66: 41:8e:c9:7d:a9:fe:64:57:de:28:a4:01:8c:29:c5:f0:a5:b0: 88:dd:65:a4:04:25:84:0e:dd:31:84:f8:5c:7f:44:b3:f4:2f: a2:98:7b:b6:8e:36:af:34:ed:66:cf:89:ec:80:ae:84:a3:8b: ad:4e:01:1e:16:1b:08:a8:af:0f:c5:5b:3b:1e:92:0a:36:cd: aa:10:03:b7:70:9d:7c:f5:85:9b:34:b6:f7:09:2f:03:9b:7f: 5e:10:7d:26:1e:7f:21:61:05:72:eb:5e:96:7e:03:11:6b:5a: 39:67:60:ba:45:54:94:7e:30:c0:5f:64:ec:d6:4d:49:76:48: ac:4a:01:90:df:c1:d2:54:d9:9e:f5:86:41:94:5d:8c:ed:1e: 23:d8:1b:45:71:67:89:0a:7a:e0:ea:ac:a4:a9:75:0a:25:04: 36:da:2a:30:d4:6a:43:82:66:ee:6d:1a:fc:7b:fd:c8:35:63: a8:ec:a2:84:aa:f4:8c:0f:d1:1f:c0:52:2a:36:af:4d:89:4f: 4f:86:9d:a1:a0:6f:df:90:c2:91:bf:a5:a1:63:c6:97:4c:f3: e9:d7:70:52:9b:86:22:1c:de:6d:ac:d1:c1:f9:79:5d:5a:26: 05:a1:42:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ5QjIxMTAvBgNVBAUTKDkxMjk1QkJCNzVCRkFBRUI5NTMxQjM5QjM2RUM3NTIx RERFMzBENjMwHhcNMjYwMzI3MDMyNzQ1WhcNMjYwNDAzMDMyNzQ1WjAYMRYwFAYD VQQDEw02OWM1ZjkzMi1kYjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuu1JuJeXEqpBQLbaXJljuCD/7aRvx0Q5G7ptFwU0PoYMupB4umxLC5M/YuJr mH0i++H4BuKfeDolzFSZ4PurlB39Oszw+5Wz3PqvfGFuW7eSnZu7SmES8ZPIE19G RTR17HhXfVYBC6c7LJ727cOhmIOf85du0c1r2A7VjAgtM29qfr3twYz4PXoHCigz AUyE+lZbwBYztEiHONYytwnTSOF6j8sGjwezT6r6/YABSDDqUHiIU5koQKNDWNwm nxQaTCqf8Fe2OP1Y30bXu/RWnCT+eIFiHq+08rxlAL89VSIc0ph1U7k6gaXx0Nyd 0mg0Lr4E61oWJfqDb5pOCIFXLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI4QusF3 jz3WYcRbPhzf2VdDL8Y+MB8GA1UdIwQYMBaAFJEpW7t1v6rrlTGzmzbsdSHd4w1j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDlCMi8wQTZGM0I0Mjkx NTUxMUVFQTRDMEY2NjhDNEY5QUUwMi9rU2xidTNXX3F1dVZNYk9iTnV4MUlkM2pE V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTbGJ1M1dfcXV1Vk1iT2JOdXgxSWQzakRXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDlCMi8wQTZGM0I0MjkxNTUxMUVFQTRDMEY2NjhDNEY5QUUwMi9rU2xidTNXX3F1 dVZNYk9iTnV4MUlkM2pEV00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlG9PIChRP5Y2Wn8wT9Cuyz9mQY7Jfan+ZFfeKKQBjCnF8KWwiN1lpAQlhA7d MYT4XH9Es/Qvoph7to42rzTtZs+J7ICuhKOLrU4BHhYbCKivD8VbOx6SCjbNqhAD t3CdfPWFmzS29wkvA5t/XhB9Jh5/IWEFcuteln4DEWtaOWdgukVUlH4wwF9k7NZN SXZIrEoBkN/B0lTZnvWGQZRdjO0eI9gbRXFniQp64OqspKl1CiUENtoqMNRqQ4Jm 7m0a/Hv9yDVjqOyihKr0jA/RH8BSKjavTYlPT4adoaBv35DCkb+loWPGl0zz6ddw UpuGIhzebazRwfl5XVomBaFC2A== -----END CERTIFICATE-----Generated at Sat Mar 28 10:38:07 2026 by rpki-client