$ rpki-client -vvf rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.mft File: 2KPIZydtR_ptDvLogh8Ps9MZcb8.mft (raw, json) Hash identifier: w+HynFbC9DBsBpi3zVB3vOwlVV2LGX8gMRBFlDV61qo= Subject key identifier: 46:F5:71:14:34:B5:B1:66:2F:B3:1E:49:31:3B:F8:9F:6C:65:C9:D7 Authority key identifier: D8:A3:C8:67:27:6D:47:FA:6D:0E:F2:E8:82:1F:0F:B3:D3:19:71:BF Certificate issuer: /CN=A91278E5/serialNumber=D8A3C867276D47FA6D0EF2E8821F0FB3D31971BF Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2KPIZydtR_ptDvLogh8Ps9MZcb8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.mft Manifest number: 06 Signing time: Wed 25 Mar 2026 08:22:05 +0000 Manifest this update: Wed 25 Mar 2026 08:22:05 +0000 Manifest next update: Wed 01 Apr 2026 08:22:05 +0000 Files and hashes: 1: 2KPIZydtR_ptDvLogh8Ps9MZcb8.crl (hash: kFUSO7etnNraSx5JQ51W9KDXKZur95iVR04+4M4hR+U=) 2: 1C7AB64E21BE11F191732FC01B3D8C67.roa (hash: VkCR5thgem73gdzuOjRPxScIE5IryV7vWPHF+kNveak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.crl rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2KPIZydtR_ptDvLogh8Ps9MZcb8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91278E5, serialNumber=D8A3C867276D47FA6D0EF2E8821F0FB3D31971BF Validity Not Before: Mar 25 08:22:05 2026 GMT Not After : Apr 1 08:22:05 2026 GMT Subject: CN=69c39b2d-8c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bb:a8:4a:e5:f5:b8:20:6f:d7:58:b5:cd:b7: 5b:f0:92:79:b3:77:81:33:88:31:16:aa:95:87:64: aa:1d:d6:a8:48:65:5d:17:13:52:69:0e:22:34:a9: 70:ba:b4:ba:b4:9b:a0:8b:db:76:44:b2:d9:3b:82: 63:d1:54:a2:bc:70:46:b2:4c:7b:64:49:cb:e5:e3: e8:fd:73:b7:d9:cb:5e:a7:2b:11:9e:59:1b:26:cb: a2:7d:42:c0:c0:86:5c:d8:b5:d6:b1:4b:74:b1:d8: 27:73:6a:78:0c:7a:0a:09:aa:2d:2e:f1:f4:ae:ec: 5a:5c:91:13:f4:2a:fb:96:fb:60:29:0d:9b:10:10: f9:61:5c:29:e2:2a:e6:9d:79:24:a5:d1:1e:1f:67: df:7c:56:2a:59:98:3e:eb:2b:36:2d:74:4a:e9:1e: 11:37:1a:21:5c:b0:73:24:99:2f:2c:67:cf:b6:38: f6:e4:1b:85:63:7d:ee:29:fd:76:a1:76:0c:4e:40: 94:bd:47:26:1f:cd:c2:2a:e8:29:39:5c:5b:cd:52: 4f:01:d1:91:51:d6:d2:7e:b3:e0:b9:d2:43:08:03: 92:da:36:a7:e0:50:6f:08:4e:b6:79:b9:b9:89:66: 4c:6c:4d:11:c8:92:f2:ad:c2:15:e7:25:dd:b4:b7: de:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F5:71:14:34:B5:B1:66:2F:B3:1E:49:31:3B:F8:9F:6C:65:C9:D7 X509v3 Authority Key Identifier: keyid:D8:A3:C8:67:27:6D:47:FA:6D:0E:F2:E8:82:1F:0F:B3:D3:19:71:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2KPIZydtR_ptDvLogh8Ps9MZcb8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:cc:2e:03:99:ef:83:aa:b0:76:a8:d4:d3:88:dc:fe:3a:a0: ec:66:bf:54:64:0c:95:9d:4a:44:59:ba:d3:fa:fa:b6:43:93: a6:85:f6:e4:da:52:e5:ee:e6:68:6f:ba:89:a7:18:eb:1a:7f: 58:0f:58:5e:e8:5b:38:36:37:be:14:a6:53:c1:53:9d:81:ca: db:d0:39:97:c1:95:d0:65:0b:b4:0d:7d:1e:aa:52:1c:6d:ca: 9f:f9:bd:8c:5e:2c:3c:9e:41:a5:e9:51:78:59:81:f0:35:30: 7e:c3:d9:ab:e9:2a:5f:f5:ec:38:c7:ab:e0:ec:0c:b3:5d:d2: 24:c7:b6:41:b4:8b:ef:9d:2a:8c:06:fc:73:b6:28:4d:8f:5f: bb:85:ff:91:cd:bc:39:42:12:df:55:b2:51:25:d3:d0:b6:c9: e8:49:50:3f:d6:6c:57:6a:47:4f:eb:be:24:25:7f:d1:7f:96: 94:f4:5d:65:0f:4d:e6:6d:d4:cd:68:a7:55:89:2f:9f:ea:0f: 1d:62:6f:80:63:64:d1:ae:76:7a:c2:7f:35:d4:f8:99:7d:7c: 05:5e:62:bf:fe:8d:50:9f:3f:27:45:9f:98:0a:76:79:5e:b9: b0:bb:b0:0b:f6:e9:c2:10:e9:96:45:e4:9f:5f:55:2d:be:17: 1e:fe:e8:3d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NzhFNTExMC8GA1UEBRMoRDhBM0M4NjcyNzZENDdGQTZEMEVGMkU4ODIxRjBGQjNE MzE5NzFCRjAeFw0yNjAzMjUwODIyMDVaFw0yNjA0MDEwODIyMDVaMBgxFjAUBgNV BAMTDTY5YzM5YjJkLThjMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsu6hK5fW4IG/XWLXNt1vwknmzd4EziDEWqpWHZKod1qhIZV0XE1JpDiI0qXC6 tLq0m6CL23ZEstk7gmPRVKK8cEayTHtkScvl4+j9c7fZy16nKxGeWRsmy6J9QsDA hlzYtdaxS3Sx2CdzangMegoJqi0u8fSu7FpckRP0KvuW+2ApDZsQEPlhXCniKuad eSSl0R4fZ998VipZmD7rKzYtdErpHhE3GiFcsHMkmS8sZ8+2OPbkG4Vjfe4p/Xah dgxOQJS9RyYfzcIq6Ck5XFvNUk8B0ZFR1tJ+s+C50kMIA5LaNqfgUG8ITrZ5ubmJ ZkxsTRHIkvKtwhXnJd20t94xAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQURvVxFDS1 sWYvsx5JMTv4n2xlydcwHwYDVR0jBBgwFoAU2KPIZydtR/ptDvLogh8Ps9MZcb8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3OEU1L0NCMkY4RUE0MjFC RDExRjE4MTMxNjRCRTFCM0Q4QzY3LzJLUElaeWR0Ul9wdER2TG9naDhQczlNWmNi OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMktQSVp5ZHRSX3B0RHZMb2doOFBzOU1aY2I4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 OEU1L0NCMkY4RUE0MjFCRDExRjE4MTMxNjRCRTFCM0Q4QzY3LzJLUElaeWR0Ul9w dER2TG9naDhQczlNWmNiOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB+zC4Dme+DqrB2qNTTiNz+OqDsZr9UZAyVnUpEWbrT+vq2Q5Omhfbk2lLl7uZo b7qJpxjrGn9YD1he6Fs4Nje+FKZTwVOdgcrb0DmXwZXQZQu0DX0eqlIcbcqf+b2M Xiw8nkGl6VF4WYHwNTB+w9mr6Spf9ew4x6vg7AyzXdIkx7ZBtIvvnSqMBvxztihN j1+7hf+Rzbw5QhLfVbJRJdPQtsnoSVA/1mxXakdP674kJX/Rf5aU9F1lD03mbdTN aKdViS+f6g8dYm+AY2TRrnZ6wn811PiZfXwFXmK//o1Qnz8nRZ+YCnZ5Xrmwu7AL 9unCEOmWReSfX1Utvhce/ug9 -----END CERTIFICATE-----Generated at Thu Mar 26 00:27:47 2026 by rpki-client