$ rpki-client -vvf rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft File: pkvkSssA5L2uRJGw-gzXCZ0scnw.mft (raw, json) Hash identifier: hYWnoi2SWMmP+Mum4QnJBNt7mdzdtIAPhbIT1Xqur3w= Subject key identifier: D6:82:B3:6E:65:96:0C:35:1C:D4:24:90:8A:87:CD:F3:3D:8A:F8:E9 Authority key identifier: A6:4B:E4:4A:CB:00:E4:BD:AE:44:91:B0:FA:0C:D7:09:9D:2C:72:7C Certificate issuer: /CN=A91288D9/serialNumber=A64BE44ACB00E4BDAE4491B0FA0CD7099D2C727C Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft Manifest number: FB Signing time: Tue 24 Mar 2026 18:50:56 +0000 Manifest this update: Tue 24 Mar 2026 18:50:55 +0000 Manifest next update: Tue 31 Mar 2026 18:50:55 +0000 Files and hashes: 1: pkvkSssA5L2uRJGw-gzXCZ0scnw.crl (hash: V1AMoVDi5WQ3gOp95MPObNXoiQoIZeelWww06nUXbSQ=) 2: 8D431594FFDF11EF8DF72930C4F9AE02.roa (hash: pkoy3XTlYyZ8zRpQAksJG/nCLkfVOV6ccFZKSXm/Z5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.crl rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:50:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91288D9, serialNumber=A64BE44ACB00E4BDAE4491B0FA0CD7099D2C727C Validity Not Before: Mar 24 18:50:55 2026 GMT Not After : Mar 31 18:50:55 2026 GMT Subject: CN=69c2dd10-e556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:27:56:c5:a3:00:f2:32:50:1f:98:5c:5e:13: 43:81:23:c6:47:d4:34:e6:37:6d:2b:da:10:1d:c1: 1b:72:ce:0c:c8:68:ad:fe:2e:6c:c8:c5:8b:15:04: 97:98:6b:93:ac:76:d5:2a:82:d7:02:d5:12:28:74: f5:fe:5c:58:58:19:d9:1d:5c:83:a8:4a:4d:d5:cd: 3a:cf:46:1d:96:6d:0c:27:de:fb:45:d0:5b:48:61: f2:28:32:e7:60:db:8a:87:cd:ef:17:c2:36:29:95: 73:8d:50:b6:a2:b8:f0:cf:ec:a6:0d:e1:6a:e3:b4: 1e:d0:19:87:74:9c:d7:c3:68:ea:89:49:20:2f:ac: 22:db:ed:4b:ba:27:fe:db:9b:61:09:9c:38:61:a9: ba:45:2e:c7:8b:da:da:a9:8b:0e:51:13:10:6a:34: 5a:05:bc:54:d6:7e:c1:2d:be:a7:03:27:f7:aa:cb: 11:7a:f0:42:0a:01:04:77:91:c1:5c:0e:b7:db:1a: 79:d6:1e:0c:8c:40:ea:02:f4:19:93:86:f9:61:48: ff:0e:3f:1b:01:f1:4e:85:51:04:1f:19:44:cc:95: b2:7c:3f:7d:88:8d:02:d3:1c:c1:4e:dc:f9:19:24: 87:05:ac:03:9f:79:be:64:70:7e:22:b6:9d:60:95: ce:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:82:B3:6E:65:96:0C:35:1C:D4:24:90:8A:87:CD:F3:3D:8A:F8:E9 X509v3 Authority Key Identifier: keyid:A6:4B:E4:4A:CB:00:E4:BD:AE:44:91:B0:FA:0C:D7:09:9D:2C:72:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ba:7e:9c:d1:47:0d:0f:e1:60:bb:f3:63:4e:d6:2b:39:75: b5:ff:0f:0b:7c:d8:92:c3:e9:d8:38:e3:11:b0:67:cb:67:a9: 8e:b1:31:9d:a1:cb:b9:0e:94:d3:48:af:b6:bf:38:6e:dd:fb: 26:bd:39:25:b3:ea:f3:c7:4c:d2:b9:dc:c3:01:93:7b:f2:7f: 4d:e2:19:09:e5:93:c1:2e:c2:d0:1b:ca:0f:63:85:e4:5f:cc: 0a:01:f7:db:3c:65:f3:d8:f4:d0:3b:98:af:22:50:18:cb:49: 71:08:ad:38:bb:ea:d8:ea:6b:b1:05:6a:e1:78:47:ca:f0:9e: fb:7e:c1:5d:d8:16:8f:22:08:49:d3:c3:db:1d:17:10:0b:67: 04:32:f7:06:4e:69:7f:49:1a:44:b1:52:6a:57:6d:68:6d:0b: 06:eb:de:c5:fe:5f:94:b6:b7:57:fa:9a:71:5e:59:7e:39:46: 1b:62:26:eb:11:ae:b2:ae:3a:6d:ed:9e:52:ff:e2:9e:a0:6b: f5:22:f6:3c:94:ce:4b:22:de:9e:f1:24:9c:b8:b1:a0:58:7a: 94:2f:96:cd:46:4f:63:33:32:a8:5d:75:ae:6c:9a:89:48:84: bd:99:ed:84:e2:67:b4:46:ea:2d:4d:8a:50:c0:fb:b7:7b:a7: 5a:c4:77:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg4RDkxMTAvBgNVBAUTKEE2NEJFNDRBQ0IwMEU0QkRBRTQ0OTFCMEZBMENENzA5 OUQyQzcyN0MwHhcNMjYwMzI0MTg1MDU1WhcNMjYwMzMxMTg1MDU1WjAYMRYwFAYD VQQDEw02OWMyZGQxMC1lNTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2SdWxaMA8jJQH5hcXhNDgSPGR9Q05jdtK9oQHcEbcs4MyGit/i5syMWLFQSX mGuTrHbVKoLXAtUSKHT1/lxYWBnZHVyDqEpN1c06z0Ydlm0MJ977RdBbSGHyKDLn YNuKh83vF8I2KZVzjVC2orjwz+ymDeFq47Qe0BmHdJzXw2jqiUkgL6wi2+1Luif+ 25thCZw4Yam6RS7Hi9raqYsOURMQajRaBbxU1n7BLb6nAyf3qssRevBCCgEEd5HB XA632xp51h4MjEDqAvQZk4b5YUj/Dj8bAfFOhVEEHxlEzJWyfD99iI0C0xzBTtz5 GSSHBawDn3m+ZHB+IradYJXOsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNaCs25l lgw1HNQkkIqHzfM9ivjpMB8GA1UdIwQYMBaAFKZL5ErLAOS9rkSRsPoM1wmdLHJ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODhEOS9GODNFM0ZDRUFE QkMxMUVGQjMwMjk4M0VDNEY5QUUwMi9wa3ZrU3NzQTVMMnVSSkd3LWd6WENaMHNj bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BrdmtTc3NBNUwydVJKR3ctZ3pYQ1owc2Nudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODhEOS9GODNFM0ZDRUFEQkMxMUVGQjMwMjk4M0VDNEY5QUUwMi9wa3ZrU3NzQTVM MnVSSkd3LWd6WENaMHNjbncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAerp+nNFHDQ/hYLvzY07WKzl1tf8PC3zYksPp2DjjEbBny2epjrExnaHLuQ6U 00ivtr84bt37Jr05JbPq88dM0rncwwGTe/J/TeIZCeWTwS7C0BvKD2OF5F/MCgH3 2zxl89j00DuYryJQGMtJcQitOLvq2OprsQVq4XhHyvCe+37BXdgWjyIISdPD2x0X EAtnBDL3Bk5pf0kaRLFSaldtaG0LBuvexf5flLa3V/qacV5ZfjlGG2Im6xGusq46 be2eUv/inqBr9SL2PJTOSyLenvEknLixoFh6lC+WzUZPYzMyqF11rmyaiUiEvZnt hOJntEbqLU2KUMD7t3unWsR3Tg== -----END CERTIFICATE-----Generated at Thu Mar 26 12:04:08 2026 by rpki-client