$ rpki-client -vvf rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft File: K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft (raw, json) Hash identifier: xUIrzwGxT+Bdl6YzIM7WA+QxA+OPbFxBglki4UjU44A= Subject key identifier: BA:B4:51:5E:34:0D:12:40:21:69:56:15:6F:1A:8B:7E:02:A1:8B:BB Authority key identifier: 2B:CA:CF:61:65:B5:87:40:59:0E:59:71:84:33:D8:18:3F:F9:46:6D Certificate issuer: /CN=A9144DEA/serialNumber=2BCACF6165B58740590E59718433D8183FF9466D Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft Manifest number: 0133 Signing time: Fri 27 Mar 2026 04:58:50 +0000 Manifest this update: Fri 27 Mar 2026 04:58:50 +0000 Manifest next update: Fri 03 Apr 2026 04:58:50 +0000 Files and hashes: 1: K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl (hash: 1NXoT1yTMtoPxGeANNyHyoq0jSp/6fV8QGRTjlLE01s=) 2: DC10E79AABF211F0AF7B0010C4F9AE02.roa (hash: zrqCL04jUGgsbKaYOZp7KQyNgp8nrR3Fm1zIFrxXnuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144DEA, serialNumber=2BCACF6165B58740590E59718433D8183FF9466D Validity Not Before: Mar 27 04:58:50 2026 GMT Not After : Apr 3 04:58:50 2026 GMT Subject: CN=69c60e8a-a12f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:75:4d:8e:c9:75:b7:0e:f6:5d:fd:72:e5:fd: e9:ae:b1:53:ec:c7:7d:50:80:4e:8e:91:22:60:1c: c0:e9:af:01:ef:25:0a:be:e3:ae:92:f1:4b:4f:43: e2:ac:c8:16:7f:60:21:5b:6d:ff:4a:a2:0d:3b:e5: 81:66:9e:84:39:ba:0c:38:7a:56:8f:45:24:c2:a4: 05:7c:31:07:a2:b0:f0:5f:ff:2d:7a:58:c5:95:2a: 38:a2:32:b5:31:4b:f5:c4:60:70:7f:ba:2a:20:7d: d0:9a:21:81:60:6e:37:79:ff:f9:3b:13:28:0f:fe: a2:42:c6:68:8e:d4:56:6c:3d:e6:be:e7:0d:5b:ec: 6a:f5:ea:5f:de:18:0d:46:d6:4c:a2:65:c3:59:a3: 5b:0f:cb:ce:1d:e8:0d:48:46:62:25:da:a9:0f:e6: 37:a5:00:04:54:4a:3e:4f:c3:10:a3:e7:fa:bf:4b: f7:ac:74:d0:16:a2:0b:c1:c0:b0:46:db:71:94:df: 2d:37:d9:c5:90:f8:b4:61:1e:c0:04:f6:b9:02:e5: 6a:bf:85:4e:ab:e9:c0:f3:6e:9e:3b:51:f2:1f:4e: 90:78:96:60:44:dd:5f:cf:a7:80:8f:66:1e:45:e6: a4:94:c6:85:fc:7b:36:b8:28:0e:e8:cc:83:91:5d: 6a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B4:51:5E:34:0D:12:40:21:69:56:15:6F:1A:8B:7E:02:A1:8B:BB X509v3 Authority Key Identifier: keyid:2B:CA:CF:61:65:B5:87:40:59:0E:59:71:84:33:D8:18:3F:F9:46:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:de:b8:d7:dc:ab:23:01:a8:08:d6:cc:2b:ba:c9:55:d3:f0: a9:8f:22:d0:b6:a6:da:d3:75:c9:76:4f:e8:02:15:5b:53:09: e6:ae:87:7a:c3:9e:c3:8e:23:85:3b:ad:6a:f7:7f:0e:dc:df: 7f:7d:f2:e3:b8:06:2c:95:e0:cd:00:28:f1:96:32:9e:10:f2: e9:13:b5:df:a6:82:34:e4:c1:57:0f:df:68:85:ad:7c:6d:01: ad:58:c1:cf:9b:8a:e5:79:34:fd:e5:8c:31:33:ca:e9:91:97: c1:ea:a5:e4:53:ec:7d:57:45:63:f8:5f:a7:ec:cb:42:a1:64: fd:87:9c:6f:aa:65:55:15:e2:8c:f7:c4:54:e6:a0:0d:dc:dc: 11:2d:f0:63:6a:7c:33:4a:66:14:c3:4e:81:2a:09:b9:fb:b6: da:7a:28:2d:73:32:ed:76:55:24:80:d0:c5:25:a7:02:5e:fa: 4a:dc:e7:7b:77:24:05:a1:96:28:9a:52:92:3e:49:88:9b:72: a7:1f:87:68:bf:14:84:2d:4a:06:b1:05:0d:2c:b4:a6:d6:84: 61:5c:e1:85:9b:ba:55:92:e8:25:e8:43:a0:0a:78:60:2f:24: 12:1c:e1:74:be:f7:ef:27:4f:7c:e7:ae:26:25:f9:0f:cf:40: 88:93:c2:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRERUExMTAvBgNVBAUTKDJCQ0FDRjYxNjVCNTg3NDA1OTBFNTk3MTg0MzNEODE4 M0ZGOTQ2NkQwHhcNMjYwMzI3MDQ1ODUwWhcNMjYwNDAzMDQ1ODUwWjAYMRYwFAYD VQQDEw02OWM2MGU4YS1hMTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj3VNjsl1tw72Xf1y5f3prrFT7Md9UIBOjpEiYBzA6a8B7yUKvuOukvFLT0Pi rMgWf2AhW23/SqINO+WBZp6EOboMOHpWj0UkwqQFfDEHorDwX/8teljFlSo4ojK1 MUv1xGBwf7oqIH3QmiGBYG43ef/5OxMoD/6iQsZojtRWbD3mvucNW+xq9epf3hgN RtZMomXDWaNbD8vOHegNSEZiJdqpD+Y3pQAEVEo+T8MQo+f6v0v3rHTQFqILwcCw RttxlN8tN9nFkPi0YR7ABPa5AuVqv4VOq+nA826eO1HyH06QeJZgRN1fz6eAj2Ye ReaklMaF/Hs2uCgO6MyDkV1qaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLq0UV40 DRJAIWlWFW8ai34CoYu7MB8GA1UdIwQYMBaAFCvKz2FltYdAWQ5ZcYQz2Bg/+UZt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NERFQS8zQkY1RjJFMDVB RTExMUVGQTc1NjNDMkNDNEY5QUUwMi9LOHJQWVdXMWgwQlpEbGx4aERQWUdEXzVS bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s4clBZV1cxaDBCWkRsbHhoRFBZR0RfNVJtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NERFQS8zQkY1RjJFMDVBRTExMUVGQTc1NjNDMkNDNEY5QUUwMi9LOHJQWVdXMWgw QlpEbGx4aERQWUdEXzVSbTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbt6419yrIwGoCNbMK7rJVdPwqY8i0Lam2tN1yXZP6AIVW1MJ5q6HesOew44j hTutavd/Dtzff33y47gGLJXgzQAo8ZYynhDy6RO136aCNOTBVw/faIWtfG0BrVjB z5uK5Xk0/eWMMTPK6ZGXweql5FPsfVdFY/hfp+zLQqFk/Yecb6plVRXijPfEVOag DdzcES3wY2p8M0pmFMNOgSoJufu22nooLXMy7XZVJIDQxSWnAl76Stzne3ckBaGW KJpSkj5JiJtypx+HaL8UhC1KBrEFDSy0ptaEYVzhhZu6VZLoJehDoAp4YC8kEhzh dL737ydPfOeuJiX5D89AiJPCIQ== -----END CERTIFICATE-----Generated at Sat Mar 28 10:45:14 2026 by rpki-client