$ rpki-client -vvf rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft File: KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft (raw, json) Hash identifier: IwsJ4weFfeJs+jN4Ig3d25h3aEha5qxOYzFQ8kN8RIY= Subject key identifier: A9:9B:C9:B7:57:64:05:08:64:3E:BC:24:F3:8D:68:A0:E7:E4:2F:07 Authority key identifier: 2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B Certificate issuer: /CN=A91233D4/serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B Certificate serial: 0AF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft Manifest number: 0AE1 Signing time: Tue 24 Mar 2026 19:13:58 +0000 Manifest this update: Tue 24 Mar 2026 19:13:57 +0000 Manifest next update: Tue 31 Mar 2026 19:13:57 +0000 Files and hashes: 1: KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl (hash: fmWLg5st89FzMfH5FrRAiq7qaUG4b2+nLylKaY1opzQ=) 2: A1D479B878D411EAA8C57711C4F9AE02.roa (hash: obRBQ6LEWosfS1i2NAWPUNb1MMXwUPUFHNc2IZBZzak=) 3: A08B108A78D411EAA8C57711C4F9AE02.roa (hash: N/vJ3gYa2yZt4lT/pvPMJti4tbnPowjmmGAT5w4Jh4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:13:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2807 (0xaf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91233D4, serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B Validity Not Before: Mar 24 19:13:57 2026 GMT Not After : Mar 31 19:13:57 2026 GMT Subject: CN=69c2e275-28ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f9:d1:2a:07:0b:19:51:65:b7:51:0f:b9:9c: a1:cc:91:68:9a:7c:81:9c:66:19:94:67:0b:fc:e6: ee:81:37:94:0c:89:77:90:1b:d9:51:56:ea:43:b5: 72:7b:4b:60:06:8e:63:fa:e6:d1:7d:a6:21:1b:66: 60:e4:81:9c:56:b1:bb:c2:1f:de:2b:06:aa:3b:59: fe:38:7f:01:06:fc:38:e7:5e:a0:74:2a:06:49:94: 0d:b7:ce:e6:2f:f1:6e:0f:89:15:35:45:3d:5a:f5: 88:fa:e4:52:4e:11:9e:70:60:67:2e:ae:a7:30:a7: c5:50:eb:b8:83:3d:6a:de:2d:22:8d:40:65:35:71: 34:4e:e8:55:8d:ca:46:3e:65:f7:eb:c2:bb:37:cc: d7:a0:9a:4c:d7:db:2d:ef:5a:60:81:d3:07:ca:69: 3b:9d:f1:42:7f:ed:f4:97:65:5d:56:64:76:46:9c: 0f:2a:98:14:98:1f:50:0a:b4:63:5b:86:b2:0b:b5: bd:0f:dc:d5:8e:b8:fc:6e:85:17:e8:eb:ce:f5:bf: 1e:ea:f3:04:ee:c3:a8:f5:1c:4f:96:1b:88:0d:dc: a1:e7:7e:a4:4e:cc:49:09:ca:43:cc:0f:4a:0f:1d: c6:9c:65:20:c2:a1:2d:7e:c2:e3:62:2d:eb:aa:17: 39:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:9B:C9:B7:57:64:05:08:64:3E:BC:24:F3:8D:68:A0:E7:E4:2F:07 X509v3 Authority Key Identifier: keyid:2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:5d:8d:38:5f:c8:61:2d:b4:90:34:af:a7:49:cf:7c:a3:d8: 5e:6f:72:36:b4:f8:20:d8:cf:48:a0:38:f6:d4:15:84:10:7a: 96:cf:7e:e4:77:a6:b9:43:05:96:97:fe:db:3c:95:7e:07:7c: fb:fe:76:05:ad:50:42:d5:89:28:00:7e:2d:26:1d:cb:6f:f6: 33:b4:59:c1:bb:45:59:11:72:b6:e4:d0:b8:79:ae:14:77:14: 3a:59:bb:35:6f:56:34:d0:3e:5e:21:41:dd:ac:66:38:40:39: be:b7:87:b9:18:d9:21:04:ca:28:76:54:13:c6:de:dd:5d:2a: 52:fd:c1:76:1b:13:d3:14:11:3f:71:0e:27:48:19:89:56:cc: e5:0d:92:4b:97:af:8a:f0:81:55:7e:53:5c:25:c4:33:94:ca: 6d:42:3f:65:3c:af:52:4b:77:e2:ac:e1:e1:58:b7:67:84:57: cd:1e:34:63:f6:31:50:0e:05:2c:f4:69:d6:c4:9e:61:38:46: 6c:38:5f:cf:9c:35:65:a4:b9:78:3f:05:ef:52:1d:c1:88:7c: ba:0e:58:17:e2:2f:a2:50:35:34:3a:f1:fb:17:b7:01:3e:35: 6f:27:fe:11:3e:c6:7c:40:67:0c:39:03:2b:13:d7:04:79:33: 83:5d:ea:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMzRDQxMTAvBgNVBAUTKDJBOTNFMTQ1OTc2NjUwNjE5NURGRkM5OUI1MjMzNjJC RTVBQzBENkIwHhcNMjYwMzI0MTkxMzU3WhcNMjYwMzMxMTkxMzU3WjAYMRYwFAYD VQQDEw02OWMyZTI3NS0yOGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/nRKgcLGVFlt1EPuZyhzJFomnyBnGYZlGcL/ObugTeUDIl3kBvZUVbqQ7Vy e0tgBo5j+ubRfaYhG2Zg5IGcVrG7wh/eKwaqO1n+OH8BBvw4516gdCoGSZQNt87m L/FuD4kVNUU9WvWI+uRSThGecGBnLq6nMKfFUOu4gz1q3i0ijUBlNXE0TuhVjcpG PmX368K7N8zXoJpM19st71pggdMHymk7nfFCf+30l2VdVmR2RpwPKpgUmB9QCrRj W4ayC7W9D9zVjrj8boUX6OvO9b8e6vME7sOo9RxPlhuIDdyh536kTsxJCcpDzA9K Dx3GnGUgwqEtfsLjYi3rqhc5nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKmbybdX ZAUIZD68JPONaKDn5C8HMB8GA1UdIwQYMBaAFCqT4UWXZlBhld/8mbUjNivlrA1r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNENC8yNUEwNjE4MDZC MUYxMUVBODEzMEE2NUZDNEY5QUUwMi9LcFBoUlpkbVVHR1YzX3ladFNNMkstV3NE V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0twUGhSWmRtVUdHVjNfeVp0U00ySy1Xc0RXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzNENC8yNUEwNjE4MDZCMUYxMUVBODEzMEE2NUZDNEY5QUUwMi9LcFBoUlpkbVVH R1YzX3ladFNNMkstV3NEV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAil2NOF/IYS20kDSvp0nPfKPYXm9yNrT4INjPSKA49tQVhBB6ls9+5HemuUMF lpf+2zyVfgd8+/52Ba1QQtWJKAB+LSYdy2/2M7RZwbtFWRFytuTQuHmuFHcUOlm7 NW9WNNA+XiFB3axmOEA5vreHuRjZIQTKKHZUE8be3V0qUv3BdhsT0xQRP3EOJ0gZ iVbM5Q2SS5evivCBVX5TXCXEM5TKbUI/ZTyvUkt34qzh4Vi3Z4RXzR40Y/YxUA4F LPRp1sSeYThGbDhfz5w1ZaS5eD8F71IdwYh8ug5YF+IvolA1NDrx+xe3AT41byf+ ET7GfEBnDDkDKxPXBHkzg13qiw== -----END CERTIFICATE-----Generated at Thu Mar 26 01:01:06 2026 by rpki-client