$ rpki-client -vvf rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft File: 11KsJgWV3m0QKce5SPSUl-SD6s4.mft (raw, json) Hash identifier: nCy7OCAgIeJod/yZYx2Am5eO0R5WNwhjrouXK+hbSe8= Subject key identifier: FE:6B:E8:B2:CB:D9:AF:02:2B:9A:DE:B8:66:6B:11:1E:94:4E:A9:46 Authority key identifier: D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE Certificate issuer: /CN=A91383B0/serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE Certificate serial: 2C42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft Manifest number: 2C42 Signing time: Tue 24 Mar 2026 15:28:46 +0000 Manifest this update: Tue 24 Mar 2026 15:28:46 +0000 Manifest next update: Tue 31 Mar 2026 15:28:46 +0000 Files and hashes: 1: 11KsJgWV3m0QKce5SPSUl-SD6s4.crl (hash: XqPs/kFGQ6ttH52YQp07Aez8QzbHn4A5ExsU15gxQas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:28:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11330 (0x2c42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383B0, serialNumber=D752AC260595DE6D1029C7B948F49497E483EACE Validity Not Before: Mar 24 15:28:46 2026 GMT Not After : Mar 31 15:28:46 2026 GMT Subject: CN=69c2adae-2a8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2f:72:45:8e:1b:a0:2f:d0:60:99:2c:6d:02: 8a:75:fa:8c:22:79:8a:48:a2:27:98:9f:38:dd:63: 39:77:63:51:d5:55:8f:2d:42:b1:12:3e:f8:d5:93: c8:0c:41:5d:0d:88:1a:ab:b0:f7:5b:56:a5:d2:65: 71:0b:4a:6a:28:da:02:25:3b:09:69:5e:38:8a:d1: 6e:aa:5b:2b:b6:9e:4e:87:f7:d9:f0:f7:2f:20:4f: be:72:d6:42:5f:3c:ec:a1:54:e9:f4:6e:a7:c4:8c: 47:b6:d7:73:13:b2:b1:74:a7:f2:bd:ec:a8:6e:9d: 67:ff:b1:3b:7f:48:6f:39:c1:a3:25:58:eb:16:0a: 5b:8b:48:d4:ed:b1:07:2f:85:df:52:a7:99:5b:95: 15:3d:65:59:1f:9f:19:45:67:3a:bb:7c:56:3b:26: 5d:08:1e:6d:59:4f:19:f4:28:d3:28:65:ae:7e:72: 19:f1:fb:5a:4d:8b:47:03:08:0b:e5:1f:66:b2:95: 2f:38:d1:8b:3b:56:d7:f8:5f:80:84:e7:53:66:ff: 6b:37:71:dc:f5:d0:d3:90:0a:cc:f4:fa:9a:2a:21: f1:e3:8b:33:d3:f3:c2:b3:6c:99:15:28:d1:46:54: 14:be:34:72:3e:4b:8e:20:a2:b7:9f:e4:0e:6d:cf: d5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:6B:E8:B2:CB:D9:AF:02:2B:9A:DE:B8:66:6B:11:1E:94:4E:A9:46 X509v3 Authority Key Identifier: keyid:D7:52:AC:26:05:95:DE:6D:10:29:C7:B9:48:F4:94:97:E4:83:EA:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/11KsJgWV3m0QKce5SPSUl-SD6s4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/3D3FE9B6DBC211E38F55144F5911EA32/11KsJgWV3m0QKce5SPSUl-SD6s4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:e6:e0:51:c5:ba:fe:07:de:c7:37:19:14:74:4a:c8:1d:7d: f3:84:e2:38:ff:ad:59:60:6b:a2:d2:62:f4:c2:5d:2c:dd:fe: d7:6e:e7:65:d8:60:32:a7:e0:03:ca:b5:9e:24:60:e0:55:c4: ec:83:bd:0a:13:26:60:9c:da:23:c1:29:88:6c:77:c4:e9:f6: d8:87:0a:5a:40:33:78:cd:35:11:d4:50:bf:8e:90:9a:3e:a0: 08:64:1f:bb:58:8a:34:4f:7a:10:19:27:f7:8c:84:a7:56:cd: 43:e8:28:29:ea:a3:b0:54:b4:8a:c4:9e:39:82:42:e4:ec:02: 9b:85:94:50:27:77:6c:c6:1d:6b:44:23:f4:72:89:0a:73:6c: bd:36:4b:52:60:98:0d:ce:a3:62:fb:5a:7d:99:11:44:b8:9e: 8b:10:79:da:73:e4:94:05:61:32:bc:f7:eb:ff:e8:78:43:bd: 7b:17:c0:94:c2:36:b9:e4:1e:52:89:df:2f:b1:b2:61:9e:ab: b8:85:d3:ba:c2:13:9b:65:af:64:42:a4:1d:69:64:d2:f1:16: 85:86:97:d2:f0:81:75:08:86:52:95:58:51:1e:54:34:36:65: 24:28:7d:22:c8:79:41:4c:0c:ba:da:91:53:16:94:1d:0c:7b: fa:9a:17:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzQjAxMTAvBgNVBAUTKEQ3NTJBQzI2MDU5NURFNkQxMDI5QzdCOTQ4RjQ5NDk3 RTQ4M0VBQ0UwHhcNMjYwMzI0MTUyODQ2WhcNMjYwMzMxMTUyODQ2WjAYMRYwFAYD VQQDEw02OWMyYWRhZS0yYThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyi9yRY4boC/QYJksbQKKdfqMInmKSKInmJ843WM5d2NR1VWPLUKxEj741ZPI DEFdDYgaq7D3W1al0mVxC0pqKNoCJTsJaV44itFuqlsrtp5Oh/fZ8PcvIE++ctZC XzzsoVTp9G6nxIxHttdzE7KxdKfyveyobp1n/7E7f0hvOcGjJVjrFgpbi0jU7bEH L4XfUqeZW5UVPWVZH58ZRWc6u3xWOyZdCB5tWU8Z9CjTKGWufnIZ8ftaTYtHAwgL 5R9mspUvONGLO1bX+F+AhOdTZv9rN3Hc9dDTkArM9PqaKiHx44sz0/PCs2yZFSjR RlQUvjRyPkuOIKK3n+QObc/VVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP5r6LLL 2a8CK5reuGZrER6UTqlGMB8GA1UdIwQYMBaAFNdSrCYFld5tECnHuUj0lJfkg+rO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCMC8zRDNGRTlCNkRC QzIxMUUzOEY1NTE0NEY1OTExRUEzMi8xMUtzSmdXVjNtMFFLY2U1U1BTVWwtU0Q2 czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzExS3NKZ1dWM20wUUtjZTVTUFNVbC1TRDZzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNCMC8zRDNGRTlCNkRCQzIxMUUzOEY1NTE0NEY1OTExRUEzMi8xMUtzSmdXVjNt MFFLY2U1U1BTVWwtU0Q2czQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIebgUcW6/gfexzcZFHRKyB1984TiOP+tWWBrotJi9MJdLN3+127nZdhgMqfg A8q1niRg4FXE7IO9ChMmYJzaI8EpiGx3xOn22IcKWkAzeM01EdRQv46Qmj6gCGQf u1iKNE96EBkn94yEp1bNQ+goKeqjsFS0isSeOYJC5OwCm4WUUCd3bMYda0Qj9HKJ CnNsvTZLUmCYDc6jYvtafZkRRLieixB52nPklAVhMrz36//oeEO9exfAlMI2ueQe UonfL7GyYZ6ruIXTusITm2WvZEKkHWlk0vEWhYaX0vCBdQiGUpVYUR5UNDZlJCh9 Ish5QUwMutqRUxaUHQx7+poXJQ== -----END CERTIFICATE-----Generated at Thu Mar 26 17:31:13 2026 by rpki-client