$ rpki-client -vvf rpki.apnic.net/member_repository/A916B32E/8F4A0B96000F11F1B9492C613F6F56BC/kWVolTFx5je1xQUy4yMbNrnGjLs.mft File: kWVolTFx5je1xQUy4yMbNrnGjLs.mft (raw, json) Hash identifier: aBKhRMaS2xOwGbSYIGFC5rs5oQcBdPoInXoWoeuvOdo= Subject key identifier: 2B:88:36:38:2B:01:E6:2C:23:A2:02:A1:2D:A4:89:66:69:85:E8:BE Authority key identifier: 91:65:68:95:31:71:E6:37:B5:C5:05:32:E3:23:1B:36:B9:C6:8C:BB Certificate issuer: /CN=A916B32E/serialNumber=916568953171E637B5C50532E3231B36B9C68CBB Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWVolTFx5je1xQUy4yMbNrnGjLs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B32E/8F4A0B96000F11F1B9492C613F6F56BC/kWVolTFx5je1xQUy4yMbNrnGjLs.mft Manifest number: 20 Signing time: Wed 25 Mar 2026 08:05:00 +0000 Manifest this update: Wed 25 Mar 2026 08:04:59 +0000 Manifest next update: Wed 01 Apr 2026 08:04:59 +0000 Files and hashes: 1: kWVolTFx5je1xQUy4yMbNrnGjLs.crl (hash: uZOk+JVBTx6XgCoxbkl1XEymrIJEATHsue5MMr/9Q6Q=) 2: CBA294E6000F11F1A395F9D03F6F56BC.roa (hash: BBDbRoixJKzhVVWxn7HnnCoQyaB7k6vp+1hEJeGWIeM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B32E/8F4A0B96000F11F1B9492C613F6F56BC/kWVolTFx5je1xQUy4yMbNrnGjLs.crl rsync://rpki.apnic.net/member_repository/A916B32E/8F4A0B96000F11F1B9492C613F6F56BC/kWVolTFx5je1xQUy4yMbNrnGjLs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWVolTFx5je1xQUy4yMbNrnGjLs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:04:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B32E, serialNumber=916568953171E637B5C50532E3231B36B9C68CBB Validity Not Before: Mar 25 08:04:59 2026 GMT Not After : Apr 1 08:04:59 2026 GMT Subject: CN=69c3972c-f6af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d2:4c:bf:2c:5d:49:9d:48:c1:df:18:96:e4: 1a:0e:72:d5:ea:44:ca:58:d2:1a:fc:60:65:0b:55: a4:53:95:6f:54:2c:ae:31:a6:12:25:91:e2:96:25: a4:06:1e:90:f4:38:23:8f:3f:bb:c5:1c:f7:be:9e: d3:56:95:a1:26:b5:d7:94:f6:b5:06:a8:f3:0d:2d: f3:6f:ab:02:78:61:02:43:37:55:a4:41:6e:8a:c4: cc:01:7a:7b:05:fa:b0:0c:0c:92:57:46:42:7a:5a: 19:90:d9:6b:74:cb:36:29:3d:27:4b:af:8f:c2:18: 93:4e:02:10:47:4a:51:4f:73:33:10:9f:2f:c2:01: 03:9b:54:5d:5b:38:73:18:ec:10:09:7f:ee:d4:ef: dc:3a:f8:b2:ae:d4:ce:64:ac:3d:0f:8d:d7:eb:ea: 66:91:97:43:85:9b:0d:16:02:9a:2e:d0:9a:b6:66: 7c:33:e8:ed:d7:45:1d:a4:a0:a7:77:9f:6a:88:6b: e4:f6:a2:a2:cb:16:a3:cf:fc:63:5a:94:b6:03:f5: d0:41:cf:e6:60:8e:91:bb:5e:44:53:e1:d3:43:aa: 7d:28:ef:82:d1:93:cc:3d:4e:62:94:7a:00:cc:62: f4:73:79:f7:18:66:1c:94:67:73:20:17:44:63:8f: 28:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:88:36:38:2B:01:E6:2C:23:A2:02:A1:2D:A4:89:66:69:85:E8:BE X509v3 Authority Key Identifier: keyid:91:65:68:95:31:71:E6:37:B5:C5:05:32:E3:23:1B:36:B9:C6:8C:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B32E/8F4A0B96000F11F1B9492C613F6F56BC/kWVolTFx5je1xQUy4yMbNrnGjLs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWVolTFx5je1xQUy4yMbNrnGjLs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B32E/8F4A0B96000F11F1B9492C613F6F56BC/kWVolTFx5je1xQUy4yMbNrnGjLs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:df:78:db:2f:05:f3:e5:d3:66:59:08:47:bf:44:55:5f:89: 26:51:ce:96:60:69:d9:39:05:b9:3b:e8:54:fe:33:c9:b5:d3: db:67:99:5d:c9:e3:44:68:66:cd:75:76:af:27:74:50:db:8b: 2c:82:64:ae:a5:bc:d2:33:03:46:c3:5a:65:cc:65:10:95:6f: 6a:d1:33:f5:f3:e9:5b:fb:92:95:18:bd:dc:fb:bd:a8:8f:42: 99:78:32:c1:76:10:6a:78:73:ff:1b:2c:00:61:f7:c8:d8:c3: 2b:bf:54:ad:15:95:35:37:e3:77:55:9e:0a:50:15:67:c7:12: 72:d1:0b:33:5c:f6:ec:eb:4d:d2:08:03:88:19:86:64:5a:df: b1:03:f7:d5:2a:67:18:c5:68:d0:0c:20:e3:a0:60:41:b2:b5: 7c:f8:0b:d6:7b:d8:d1:8f:ce:e9:e3:ce:e3:60:08:cc:eb:60: 8c:22:26:0b:3d:02:61:50:ca:d5:52:20:cf:e3:18:60:eb:1b: d7:00:d2:b9:44:5a:d1:04:4f:a4:e7:b0:01:85:74:f1:d3:76: 20:4d:f3:b5:34:2d:8e:a7:08:1b:a1:25:e7:65:8c:d6:57:e6: 29:4a:fb:86:f4:91:6b:53:53:95:a4:83:33:2f:36:ec:f4:70: a3:07:8d:27 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QjMyRTExMC8GA1UEBRMoOTE2NTY4OTUzMTcxRTYzN0I1QzUwNTMyRTMyMzFCMzZC OUM2OENCQjAeFw0yNjAzMjUwODA0NTlaFw0yNjA0MDEwODA0NTlaMBgxFjAUBgNV BAMTDTY5YzM5NzJjLWY2YWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDj0ky/LF1JnUjB3xiW5BoOctXqRMpY0hr8YGULVaRTlW9ULK4xphIlkeKWJaQG HpD0OCOPP7vFHPe+ntNWlaEmtdeU9rUGqPMNLfNvqwJ4YQJDN1WkQW6KxMwBensF +rAMDJJXRkJ6WhmQ2Wt0yzYpPSdLr4/CGJNOAhBHSlFPczMQny/CAQObVF1bOHMY 7BAJf+7U79w6+LKu1M5krD0Pjdfr6maRl0OFmw0WApou0Jq2Znwz6O3XRR2koKd3 n2qIa+T2oqLLFqPP/GNalLYD9dBBz+ZgjpG7XkRT4dNDqn0o74LRk8w9TmKUegDM YvRzefcYZhyUZ3MgF0RjjyhXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUK4g2OCsB 5iwjogKhLaSJZmmF6L4wHwYDVR0jBBgwFoAUkWVolTFx5je1xQUy4yMbNrnGjLsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCMzJFLzhGNEEwQjk2MDAw RjExRjFCOTQ5MkM2MTNGNkY1NkJDL2tXVm9sVEZ4NWplMXhRVXk0eU1iTnJuR2pM cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva1dWb2xURng1amUxeFFVeTR5TWJOcm5HakxzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC MzJFLzhGNEEwQjk2MDAwRjExRjFCOTQ5MkM2MTNGNkY1NkJDL2tXVm9sVEZ4NWpl MXhRVXk0eU1iTnJuR2pMcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBd33jbLwXz5dNmWQhHv0RVX4kmUc6WYGnZOQW5O+hU/jPJtdPbZ5ldyeNEaGbN dXavJ3RQ24ssgmSupbzSMwNGw1plzGUQlW9q0TP18+lb+5KVGL3c+72oj0KZeDLB dhBqeHP/GywAYffI2MMrv1StFZU1N+N3VZ4KUBVnxxJy0QszXPbs603SCAOIGYZk Wt+xA/fVKmcYxWjQDCDjoGBBsrV8+AvWe9jRj87p487jYAjM62CMIiYLPQJhUMrV UiDP4xhg6xvXANK5RFrRBE+k57ABhXTx03YgTfO1NC2OpwgboSXnZYzWV+YpSvuG 9JFrU1OVpIMzLzbs9HCjB40n -----END CERTIFICATE-----Generated at Fri Mar 27 00:15:53 2026 by rpki-client