$ rpki-client -vvf rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft File: kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft (raw, json) Hash identifier: N7ncS0/792V4diRiNvxOEeMISbTDtCjP6jr/xvP88Vc= Subject key identifier: 23:CF:D6:74:05:DE:E5:70:77:40:97:A3:DA:95:E2:BC:A3:AB:8B:F4 Authority key identifier: 91:2A:B3:9F:C7:BB:CB:EF:1C:F2:67:E9:D3:F7:19:C9:A4:F0:A1:14 Certificate issuer: /CN=A91478C3/serialNumber=912AB39FC7BBCBEF1CF267E9D3F719C9A4F0A114 Certificate serial: 0EFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft Manifest number: 0EEF Signing time: Tue 24 Mar 2026 17:29:19 +0000 Manifest this update: Tue 24 Mar 2026 17:29:18 +0000 Manifest next update: Tue 31 Mar 2026 17:29:18 +0000 Files and hashes: 1: kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl (hash: IwGE0vvM1JqLHJRK1d5es/SCMyfs1aGhxoLgysqS9ac=) 2: 36477FF69D2E11E99A95DC2AC4F9AE02.roa (hash: 7Zntvgptxi7t6rq+AQ6AjwkrN9jO9paj8Ccr/LfGYDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:29:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3834 (0xefa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91478C3, serialNumber=912AB39FC7BBCBEF1CF267E9D3F719C9A4F0A114 Validity Not Before: Mar 24 17:29:18 2026 GMT Not After : Mar 31 17:29:18 2026 GMT Subject: CN=69c2c9ef-9c47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:03:f4:22:4a:4a:3a:53:2f:c9:1f:6d:28:27: 8e:3e:69:59:58:36:d7:1e:16:a8:8e:8b:f1:b8:eb: 03:99:04:3f:3a:5b:68:c8:50:b7:88:36:93:dd:88: b8:6a:66:a2:2a:26:e9:58:3e:10:bc:7d:e9:04:60: db:b5:23:1b:ca:90:f4:5e:e7:1d:eb:83:9d:e9:fb: dd:86:17:aa:67:f4:4c:3a:c5:79:1c:25:bb:91:43: 3a:e1:61:c8:d1:0b:be:99:15:12:ae:db:d8:4d:c1: 9e:77:3f:f6:6c:10:ca:f5:ce:43:88:8b:0c:37:4e: 7f:9d:93:d7:e7:6c:5d:e3:cc:b6:26:1a:41:7e:32: b2:41:2d:05:b3:d0:8c:32:f5:80:3d:9d:4a:d1:49: 84:81:7e:69:21:ac:1e:9a:be:09:a5:f4:bc:73:18: 02:63:43:b6:ce:df:ea:3e:54:e9:52:bc:92:fd:68: ce:97:89:46:fe:7c:78:c8:31:d0:d6:fe:2a:33:a2: 1d:6f:4d:6f:36:d5:7d:8f:24:8d:e1:11:7d:8d:ec: 3a:41:82:ce:9d:48:28:ed:18:c4:80:0f:58:70:4f: 35:87:f2:70:e1:c0:c5:2a:49:b1:02:5e:05:f4:8f: 28:9b:f2:07:7b:5a:bf:1f:dc:1b:1b:3d:3a:13:28: 30:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:CF:D6:74:05:DE:E5:70:77:40:97:A3:DA:95:E2:BC:A3:AB:8B:F4 X509v3 Authority Key Identifier: keyid:91:2A:B3:9F:C7:BB:CB:EF:1C:F2:67:E9:D3:F7:19:C9:A4:F0:A1:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:40:1e:10:5a:04:2b:b0:a2:e5:bd:c4:a5:16:48:16:2c:f4: ae:fd:7d:57:75:16:90:c7:9a:88:da:b8:be:3b:3e:41:b3:09: 40:12:ff:b5:fc:f1:d9:fa:5f:12:06:dc:ab:67:7a:59:65:ca: e0:41:1b:f3:ad:a2:32:6e:78:b0:0e:45:6d:6c:fb:0a:fe:bf: 33:da:0f:98:d5:46:ce:1e:80:67:13:3f:f2:16:c8:52:cd:d7: 07:16:3a:ad:20:79:9a:15:64:df:6f:92:69:28:ab:95:25:99: 9c:0c:52:e0:45:87:fa:13:bc:30:1d:81:52:d5:2a:4e:c7:ff: e0:d0:e3:38:19:cd:41:5f:5d:3f:21:45:74:89:9d:31:3b:76: 0e:a8:72:b3:31:9e:d5:c5:2a:51:00:e5:73:e6:bf:b4:87:12: 89:92:0d:65:19:2b:b6:63:17:5f:71:1f:4f:3b:55:5e:20:d9: b5:89:63:a5:88:55:1e:42:10:3f:30:79:de:a2:9d:ec:26:be: 53:36:f0:e3:0a:86:b7:40:3b:bb:15:a8:dd:64:ce:75:cf:39: e9:03:d1:ec:e5:b9:6d:7d:94:d9:ad:c8:e9:4e:d5:41:86:cb: 97:63:3a:2b:72:a1:ec:0a:70:6f:02:c0:ed:8b:29:fd:6c:c0: 2e:f1:5a:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4QzMxMTAvBgNVBAUTKDkxMkFCMzlGQzdCQkNCRUYxQ0YyNjdFOUQzRjcxOUM5 QTRGMEExMTQwHhcNMjYwMzI0MTcyOTE4WhcNMjYwMzMxMTcyOTE4WjAYMRYwFAYD VQQDEw02OWMyYzllZi05YzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjAP0IkpKOlMvyR9tKCeOPmlZWDbXHhaojovxuOsDmQQ/OltoyFC3iDaT3Yi4 amaiKibpWD4QvH3pBGDbtSMbypD0Xucd64Od6fvdhheqZ/RMOsV5HCW7kUM64WHI 0Qu+mRUSrtvYTcGedz/2bBDK9c5DiIsMN05/nZPX52xd48y2JhpBfjKyQS0Fs9CM MvWAPZ1K0UmEgX5pIawemr4JpfS8cxgCY0O2zt/qPlTpUryS/WjOl4lG/nx4yDHQ 1v4qM6Idb01vNtV9jySN4RF9jew6QYLOnUgo7RjEgA9YcE81h/Jw4cDFKkmxAl4F 9I8om/IHe1q/H9wbGz06EygwUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCPP1nQF 3uVwd0CXo9qV4ryjq4v0MB8GA1UdIwQYMBaAFJEqs5/Hu8vvHPJn6dP3Gcmk8KEU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzhDMy9FM0Q5MTk0QzlE MkMxMUU5ODAyMjE4MjlDNEY5QUUwMi9rU3F6bjhlN3ktOGM4bWZwMF9jWnlhVHdv UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTcXpuOGU3eS04YzhtZnAwX2NaeWFUd29SUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzhDMy9FM0Q5MTk0QzlEMkMxMUU5ODAyMjE4MjlDNEY5QUUwMi9rU3F6bjhlN3kt OGM4bWZwMF9jWnlhVHdvUlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYEAeEFoEK7Ci5b3EpRZIFiz0rv19V3UWkMeaiNq4vjs+QbMJQBL/tfzx2fpf Egbcq2d6WWXK4EEb862iMm54sA5FbWz7Cv6/M9oPmNVGzh6AZxM/8hbIUs3XBxY6 rSB5mhVk32+SaSirlSWZnAxS4EWH+hO8MB2BUtUqTsf/4NDjOBnNQV9dPyFFdImd MTt2DqhyszGe1cUqUQDlc+a/tIcSiZINZRkrtmMXX3EfTztVXiDZtYljpYhVHkIQ PzB53qKd7Ca+Uzbw4wqGt0A7uxWo3WTOdc856QPR7OW5bX2U2a3I6U7VQYbLl2M6 K3Kh7ApwbwLA7Ysp/WzALvFaTg== -----END CERTIFICATE-----Generated at Thu Mar 26 06:58:45 2026 by rpki-client