$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft File: kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft (raw, json) Hash identifier: +28g5KBKxWNiAkDZvFx8DDts3BPoXHXs+YyZDLDSVQM= Subject key identifier: 35:F9:F9:C4:94:70:A1:53:48:A6:11:4E:51:4C:00:50:0A:B0:C7:95 Authority key identifier: 90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 Certificate issuer: /CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Certificate serial: 29D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft Manifest number: 28D2 Signing time: Thu 26 Mar 2026 15:38:52 +0000 Manifest this update: Thu 26 Mar 2026 15:38:51 +0000 Manifest next update: Thu 02 Apr 2026 15:38:51 +0000 Files and hashes: 1: kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl (hash: hY6yMLJAPwHC5gWIDB3/1ncpqYMtY8+zC3/7Rm3pHvo=) 2: BD3FF814A49811EEAD789D2AC4F9AE02.roa (hash: Q8fywLVcYI72bpER/jVkoIMpEUoDOPdG+CfgHKA2VuQ=) 3: 45163F62D61E11EEB0DF364BC4F9AE02.roa (hash: egN1g3VmLDqnrfKYkekF1hIKzthJeO8aMjScFqOjh/k=) 4: 4971496EAE1B11EF8FFE0422C4F9AE02.roa (hash: OCIUxyS/b5tLlrfDuZU5t1QbT6abuQsHqTZkHSU5t1M=) 5: CCF0C1920EBA11ECB2C2867AC4F9AE02.roa (hash: nWS9s+HK5wPDrPuEICFs+8KocJdOwtwcQLtIUKC+IaA=) 6: C6FF76A0000C11F1BBD3B1413E6F56BC.roa (hash: Vmx4U8sYtrtvs8ITU+lcZl+6PgMDKzh+1nwm+4PN1nI=) 7: 28E35E4898F211ED9FB5D80DC4F9AE02.roa (hash: b0UCq+eUPG0Zw3G9HvUdvsx8LonrZenua0MeaBXzxdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10707 (0x29d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150F66, serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Validity Not Before: Mar 26 15:38:51 2026 GMT Not After : Apr 2 15:38:51 2026 GMT Subject: CN=69c5530c-48ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:56:0b:b5:61:d6:0c:5e:a8:c2:1c:b2:c8:18: 01:44:8f:6c:6f:c0:de:43:93:8b:16:15:78:49:57: 95:f5:25:fd:af:c0:e1:b1:48:1b:62:81:fa:31:6b: 42:26:7d:ef:1e:1c:5a:61:2d:ce:68:9e:fe:1a:f2: ba:6e:0d:9e:4b:d2:71:36:67:51:e2:81:0b:bb:7a: be:17:03:cd:5e:cc:15:be:6c:2a:a1:26:9f:79:5f: b3:99:48:74:3e:9f:85:9b:fc:4d:a0:ba:0c:77:9c: 29:a4:68:4b:e2:6d:63:ba:04:27:0a:74:19:ea:72: 31:e9:e0:a9:a6:64:dd:b4:cf:43:8d:e0:ef:78:82: ac:32:01:fc:6a:08:2d:00:ef:f4:3a:1c:b7:ce:58: d2:d5:38:4b:91:0d:47:26:b0:09:17:5e:de:c6:d1: fa:4c:5b:68:2f:c9:e0:6a:35:f1:44:a8:83:43:4a: 88:b9:7f:15:71:30:c0:aa:97:73:42:90:8f:4d:d8: b3:1e:ab:75:d9:df:76:ee:c4:ae:cc:a9:be:2d:a8: ec:f6:05:c0:3b:63:94:c3:82:95:0e:3b:95:3a:70: 4e:cb:43:cc:c8:43:fc:00:2f:2d:11:fc:ff:f4:49: d0:d1:3b:b7:36:ef:3f:e8:8c:16:18:a2:91:d8:db: 57:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F9:F9:C4:94:70:A1:53:48:A6:11:4E:51:4C:00:50:0A:B0:C7:95 X509v3 Authority Key Identifier: keyid:90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:f7:88:c7:95:9e:16:15:cb:ab:e0:2c:e0:cd:bf:6f:2e:63: 2d:6f:47:fa:90:bc:48:2d:ca:c4:23:6b:e3:a2:69:25:17:aa: e9:83:7f:5a:61:62:de:f9:7f:8f:f9:e7:80:13:94:04:02:a1: 91:36:41:f6:b0:77:25:cb:d9:d8:e3:e3:25:6c:7e:d9:fd:81: 1d:a9:9e:e8:d0:05:1b:d5:29:95:1a:c5:4b:e1:b2:ca:c0:96: c8:36:ea:07:17:68:66:ed:b4:5d:f8:35:f0:c6:da:35:56:a4: fb:d4:5e:3b:66:fb:fd:cc:d3:95:01:eb:4d:45:ef:ad:f2:9c: db:f9:27:22:18:54:0f:fd:ed:e3:79:d5:97:42:df:79:ab:f7: 9d:3a:00:4c:70:25:5a:9a:38:92:58:2c:47:03:6c:b9:62:54: 5f:00:f2:ef:b8:1f:2a:fb:7c:70:98:d6:c5:70:87:ab:55:96: 6c:28:5c:bb:ff:5d:cb:de:51:d4:23:9c:99:2b:1c:56:cf:23: 3e:bb:78:e2:17:f8:05:89:88:9e:48:df:98:22:9d:f1:a1:ae: 4e:89:34:98:1b:bc:be:1c:99:29:d6:28:7e:2b:50:60:c9:a9: 33:7f:e6:8f:fa:03:ba:f3:67:fc:8a:af:b5:b6:bc:8c:89:12: 76:06:0b:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBGNjYxMTAvBgNVBAUTKDkwMDlFNzQxOTZENDhCMDM5NjRGMUZDNTZDRkU0NDZF QzUwNDhDRjcwHhcNMjYwMzI2MTUzODUxWhcNMjYwNDAyMTUzODUxWjAYMRYwFAYD VQQDEw02OWM1NTMwYy00OGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1YLtWHWDF6owhyyyBgBRI9sb8DeQ5OLFhV4SVeV9SX9r8DhsUgbYoH6MWtC Jn3vHhxaYS3OaJ7+GvK6bg2eS9JxNmdR4oELu3q+FwPNXswVvmwqoSafeV+zmUh0 Pp+Fm/xNoLoMd5wppGhL4m1jugQnCnQZ6nIx6eCppmTdtM9DjeDveIKsMgH8aggt AO/0Ohy3zljS1ThLkQ1HJrAJF17extH6TFtoL8ngajXxRKiDQ0qIuX8VcTDAqpdz QpCPTdizHqt12d927sSuzKm+Lajs9gXAO2OUw4KVDjuVOnBOy0PMyEP8AC8tEfz/ 9EnQ0Tu3Nu8/6IwWGKKR2NtXFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDX5+cSU cKFTSKYRTlFMAFAKsMeVMB8GA1UdIwQYMBaAFJAJ50GW1IsDlk8fxWz+RG7FBIz3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEY2Ni9CQzFEQzFGNkMx NzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3T1dUeF9GYlA1RWJzVUVq UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tBbm5RWmJVaXdPV1R4X0ZiUDVFYnNVRWpQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEY2Ni9CQzFEQzFGNkMxNzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3 T1dUeF9GYlA1RWJzVUVqUGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABPeIx5WeFhXLq+As4M2/by5jLW9H+pC8SC3KxCNr46JpJReq6YN/WmFi3vl/ j/nngBOUBAKhkTZB9rB3JcvZ2OPjJWx+2f2BHame6NAFG9UplRrFS+GyysCWyDbq BxdoZu20Xfg18MbaNVak+9ReO2b7/czTlQHrTUXvrfKc2/knIhhUD/3t43nVl0Lf eav3nToATHAlWpo4klgsRwNsuWJUXwDy77gfKvt8cJjWxXCHq1WWbChcu/9dy95R 1COcmSscVs8jPrt44hf4BYmInkjfmCKd8aGuTok0mBu8vhyZKdYofitQYMmpM3/m j/oDuvNn/Iqvtba8jIkSdgYLDQ== -----END CERTIFICATE-----Generated at Thu Mar 26 20:58:21 2026 by rpki-client