$ rpki-client -vvf rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft File: KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft (raw, json) Hash identifier: 7HuEdP0ZN/+e0EpqaM45UIDKwvWiTHyVLvAZWFKSaUo= Subject key identifier: 25:41:93:F0:78:5B:7B:DE:09:5A:8D:8B:DA:9B:62:1A:65:7D:2E:CF Authority key identifier: 28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D Certificate issuer: /CN=A9195393/serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D Certificate serial: 0BAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft Manifest number: 0BA2 Signing time: Thu 26 Mar 2026 18:57:50 +0000 Manifest this update: Thu 26 Mar 2026 18:57:49 +0000 Manifest next update: Thu 02 Apr 2026 18:57:49 +0000 Files and hashes: 1: KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl (hash: Ok1GR1P00L044SH1d9qPAXbNJsi8OzizmhMDWKaKlbs=) 2: 784507FC9F4211ECB5BC4D14C4F9AE02.roa (hash: BflaMKPNzYcw7RJZL8ZElH/1dQPWbz3sqv57VUU34cI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2987 (0xbab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195393, serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D Validity Not Before: Mar 26 18:57:49 2026 GMT Not After : Apr 2 18:57:49 2026 GMT Subject: CN=69c581ae-32ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:99:92:b4:cb:58:e8:4a:59:ab:7e:d0:20:03: 41:2b:e1:2b:e8:28:e9:51:9d:9c:e0:67:c6:56:e2: ae:00:77:d6:9e:ca:8b:94:4d:27:2b:f4:bc:ca:2c: 00:74:77:69:17:24:7b:73:b9:2d:62:2c:ae:29:ee: 06:5f:a8:4e:4d:75:0b:bf:a3:da:76:f1:42:b0:de: 16:53:c8:fa:ab:a0:ac:a3:84:53:5e:28:3d:84:1b: 03:44:58:36:92:51:b8:88:9e:8e:99:7a:bf:f8:cf: 3f:59:0f:d0:9a:7c:4f:dd:11:1d:33:dd:0e:87:aa: eb:4f:cb:2f:da:de:55:56:66:f8:f4:40:8f:34:b6: 13:3d:a8:ee:21:53:87:28:97:fb:8c:38:65:c0:11: d7:7f:b4:a1:d8:ab:fa:ca:2b:bf:ed:d8:90:ce:d7: 45:57:99:95:75:61:8a:7b:62:93:ae:d4:a1:dd:95: da:bc:d0:6a:fb:04:12:a7:52:be:94:c7:e9:80:58: b4:2b:f5:78:1a:1d:52:a9:88:d2:90:ab:28:61:fa: f9:46:27:4a:0a:13:17:0a:d2:b0:f4:6a:93:62:dc: 7b:f2:ae:f9:ca:24:b1:41:76:dd:76:85:9d:f1:40: 81:9b:1e:e9:ab:06:bc:75:f4:16:ba:22:a2:06:83: f2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:41:93:F0:78:5B:7B:DE:09:5A:8D:8B:DA:9B:62:1A:65:7D:2E:CF X509v3 Authority Key Identifier: keyid:28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:d0:91:8d:13:01:1a:a2:ed:94:9b:91:29:39:0e:55:91:87: 1a:a9:bb:28:c4:54:f3:04:6b:45:76:1d:db:00:a4:e3:48:54: 64:e7:c9:ad:08:d5:da:63:68:be:28:55:53:d8:a6:0f:55:bf: 84:8f:88:9e:a5:5f:b6:a7:4a:a6:ae:a4:91:cd:a9:f7:af:16: f5:a4:c2:82:44:ba:59:40:2a:6b:a9:c6:5a:02:07:4e:d2:dc: 57:66:99:39:47:67:dc:29:34:f3:a8:f8:3c:46:8c:f3:74:57: 99:d4:e4:3f:d5:f8:52:ca:db:1c:79:af:ec:aa:03:82:f2:4d: 7d:1f:0b:62:84:42:7c:9a:e7:bf:37:c6:4e:c6:88:b0:b6:bf: e7:a9:33:89:dc:8a:61:fe:fc:0c:65:47:e8:f8:a2:d3:ba:9e: 47:fd:34:18:45:32:22:06:bf:1b:a6:91:ce:dd:51:d8:b5:f3: 9a:fe:ee:5c:0a:3d:60:7f:1f:20:cb:c1:bc:aa:80:42:f7:e8: f4:f8:ef:d6:98:74:a3:a3:7e:dd:1e:8e:67:a2:fa:f8:c2:80: fc:e7:4d:35:f8:f2:90:03:fa:8f:8c:c2:b4:2d:0f:43:ec:b8: 9b:14:b7:75:21:01:9b:9a:ca:34:0d:32:cf:49:71:16:40:50: b4:41:25:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzOTMxMTAvBgNVBAUTKDI4MEIyRTkzQjRBRkQyMDMyMEEzRDA4MkE1QjNDREEz QjAwRDJFMUQwHhcNMjYwMzI2MTg1NzQ5WhcNMjYwNDAyMTg1NzQ5WjAYMRYwFAYD VQQDEw02OWM1ODFhZS0zMmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZmStMtY6EpZq37QIANBK+Er6CjpUZ2c4GfGVuKuAHfWnsqLlE0nK/S8yiwA dHdpFyR7c7ktYiyuKe4GX6hOTXULv6PadvFCsN4WU8j6q6Cso4RTXig9hBsDRFg2 klG4iJ6OmXq/+M8/WQ/QmnxP3REdM90Oh6rrT8sv2t5VVmb49ECPNLYTPajuIVOH KJf7jDhlwBHXf7Sh2Kv6yiu/7diQztdFV5mVdWGKe2KTrtSh3ZXavNBq+wQSp1K+ lMfpgFi0K/V4Gh1SqYjSkKsoYfr5RidKChMXCtKw9GqTYtx78q75yiSxQXbddoWd 8UCBmx7pqwa8dfQWuiKiBoPyDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCVBk/B4 W3veCVqNi9qbYhplfS7PMB8GA1UdIwQYMBaAFCgLLpO0r9IDIKPQgqWzzaOwDS4d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM5My84ODZFODM0NDQz MTcxMUVBQUU4OEM3MjBDNEY5QUUwMi9LQXN1azdTdjBnTWdvOUNDcGJQTm83QU5M aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tBc3VrN1N2MGdNZ285Q0NwYlBObzdBTkxoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTM5My84ODZFODM0NDQzMTcxMUVBQUU4OEM3MjBDNEY5QUUwMi9LQXN1azdTdjBn TWdvOUNDcGJQTm83QU5MaDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo9CRjRMBGqLtlJuRKTkOVZGHGqm7KMRU8wRrRXYd2wCk40hUZOfJrQjV2mNo vihVU9imD1W/hI+InqVftqdKpq6kkc2p968W9aTCgkS6WUAqa6nGWgIHTtLcV2aZ OUdn3Ck086j4PEaM83RXmdTkP9X4UsrbHHmv7KoDgvJNfR8LYoRCfJrnvzfGTsaI sLa/56kzidyKYf78DGVH6Pii07qeR/00GEUyIga/G6aRzt1R2LXzmv7uXAo9YH8f IMvBvKqAQvfo9Pjv1ph0o6N+3R6OZ6L6+MKA/OdNNfjykAP6j4zCtC0PQ+y4mxS3 dSEBm5rKNA0yz0lxFkBQtEElCw== -----END CERTIFICATE-----Generated at Fri Mar 27 01:08:47 2026 by rpki-client