$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft File: RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft (raw, json) Hash identifier: TVpZW2vUVLbgN1R2nXbuj/qky3ym+3jaBD5gVTCw/LI= Subject key identifier: C8:7D:D2:E1:33:EA:96:1F:95:4F:7F:02:D5:DC:D4:32:6F:6C:2D:19 Authority key identifier: 46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97 Certificate issuer: /CN=A91964B3/serialNumber=464854FB50A9903C5253418C583D0F31B841D597 Certificate serial: 10CE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft Manifest number: 10B4 Signing time: Thu 26 Mar 2026 14:24:39 +0000 Manifest this update: Thu 26 Mar 2026 14:24:39 +0000 Manifest next update: Thu 02 Apr 2026 14:24:39 +0000 Files and hashes: 1: RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl (hash: Nt9wEOpNhofRb7Pr4NilnDWCX+GoTrLh1Lf8rL46eXA=) 2: 23B68638C5DD11EABC58FD24C4F9AE02.roa (hash: FcrkIqa4XDgVdyeOamaFQqlLus8d1JT70DNswdpetnU=) 3: 1396434EC90A11EF8577744AC4F9AE02.roa (hash: dZjVpX0OHFb95lVF9Cf+7jCMCOq6ryMRIoLMcRSlevM=) 4: 5D563164AF3411EFB5B51A57C4F9AE02.roa (hash: QAfeG31AUJ9ysS7/jFhyhx6FaI+gxOiP1E4c7gwnNZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4302 (0x10ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91964B3, serialNumber=464854FB50A9903C5253418C583D0F31B841D597 Validity Not Before: Mar 26 14:24:39 2026 GMT Not After : Apr 2 14:24:39 2026 GMT Subject: CN=69c541a7-64aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:65:76:48:dd:eb:9c:c2:11:4a:ec:c7:ba:79: 5e:7f:6a:db:53:ea:55:2a:45:54:a1:47:6b:64:b5: 1f:35:2f:f7:50:bb:c0:6d:51:91:75:f8:23:10:5e: c8:41:b8:04:37:9f:6c:da:04:92:d3:11:3c:a1:37: 33:d9:42:b0:48:d1:3a:3f:80:3d:ff:7a:28:68:e6: e3:c5:6c:88:4d:f4:b1:c8:7f:f8:d5:e1:26:bc:4e: 23:5b:97:ac:59:4f:32:64:56:b6:1a:c1:c7:d5:ea: 7c:ec:69:22:3b:43:34:40:54:99:c0:2d:19:1b:80: bc:3a:e5:34:7a:7b:60:83:5b:46:62:57:4d:b1:c5: dc:e7:7f:75:cf:f9:3d:94:45:e1:a5:7a:52:f9:14: 32:3b:b2:b3:83:59:c7:ff:00:12:4d:5b:71:8d:be: d7:80:c2:4e:2e:8f:7a:49:49:1f:a7:7d:0e:c4:b3: e1:e2:94:d2:57:c3:b0:ea:71:a5:84:0b:0c:a2:1d: 26:fe:8f:a8:87:d4:fd:31:67:53:e3:54:44:11:c9: 92:e8:bc:f6:2e:5b:3d:76:d5:78:3c:0c:ef:4f:8d: d4:3a:19:da:6f:b3:e4:11:3b:1d:7f:8f:35:08:41: b5:54:ad:77:ef:ca:cf:f5:22:be:4f:4d:25:d2:73: 3f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:7D:D2:E1:33:EA:96:1F:95:4F:7F:02:D5:DC:D4:32:6F:6C:2D:19 X509v3 Authority Key Identifier: keyid:46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:08:79:3d:0f:53:e4:93:a1:80:e8:fe:3a:3d:f5:c3:92:78: 81:f1:8d:24:83:02:41:38:a2:05:db:96:b7:ba:3f:4a:35:f3: ee:51:81:2d:8c:d3:bd:81:39:04:51:13:ff:a3:08:aa:4f:20: 5e:9f:7c:2a:2f:ba:99:62:38:8c:61:be:b9:a1:ba:11:da:49: ad:46:32:2a:77:25:5b:7e:95:e6:f6:da:fd:0e:1f:87:8a:bf: 33:33:68:f1:06:aa:07:00:0c:92:6e:91:99:f9:0f:26:48:67: bb:9c:26:a1:c0:16:88:e2:e3:04:67:1e:51:d1:fc:fe:36:05: f7:7f:4a:5e:3e:e0:41:d0:6b:d1:ce:23:6b:b7:1f:c0:96:c7: b8:a1:f9:d7:70:52:23:df:36:83:52:78:48:13:f5:0b:52:e7: c6:b7:43:d9:98:72:e0:d6:79:7f:7c:f6:f4:27:da:93:11:b5: 4b:07:19:dc:b5:3b:72:f5:a2:60:1d:4a:89:c8:06:78:5f:23: 59:14:69:5b:93:63:93:b8:a9:f2:8d:16:fa:17:72:d7:82:f5: c8:e2:ed:24:0d:47:3c:94:8b:be:98:f9:2d:a3:59:e9:3d:d5: a6:a6:b0:b6:78:b0:b7:39:f0:05:e6:29:8f:38:fa:1f:04:0b: b0:bf:ff:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0QjMxMTAvBgNVBAUTKDQ2NDg1NEZCNTBBOTkwM0M1MjUzNDE4QzU4M0QwRjMx Qjg0MUQ1OTcwHhcNMjYwMzI2MTQyNDM5WhcNMjYwNDAyMTQyNDM5WjAYMRYwFAYD VQQDEw02OWM1NDFhNy02NGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArGV2SN3rnMIRSuzHunlef2rbU+pVKkVUoUdrZLUfNS/3ULvAbVGRdfgjEF7I QbgEN59s2gSS0xE8oTcz2UKwSNE6P4A9/3ooaObjxWyITfSxyH/41eEmvE4jW5es WU8yZFa2GsHH1ep87GkiO0M0QFSZwC0ZG4C8OuU0entgg1tGYldNscXc5391z/k9 lEXhpXpS+RQyO7Kzg1nH/wASTVtxjb7XgMJOLo96SUkfp30OxLPh4pTSV8Ow6nGl hAsMoh0m/o+oh9T9MWdT41REEcmS6Lz2Lls9dtV4PAzvT43UOhnab7PkETsdf481 CEG1VK1378rP9SK+T00l0nM/1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMh90uEz 6pYflU9/AtXc1DJvbC0ZMB8GA1UdIwQYMBaAFEZIVPtQqZA8UlNBjFg9DzG4QdWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjRCMy8yQTU5NDBGMjRC QjMxMUU5QUIxNTFDMTdDNEY5QUUwMi9Sa2hVLTFDcGtEeFNVMEdNV0QwUE1iaEIx WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JraFUtMUNwa0R4U1UwR01XRDBQTWJoQjFaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjRCMy8yQTU5NDBGMjRCQjMxMUU5QUIxNTFDMTdDNEY5QUUwMi9Sa2hVLTFDcGtE eFNVMEdNV0QwUE1iaEIxWmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIQh5PQ9T5JOhgOj+Oj31w5J4gfGNJIMCQTiiBduWt7o/SjXz7lGBLYzTvYE5 BFET/6MIqk8gXp98Ki+6mWI4jGG+uaG6EdpJrUYyKnclW36V5vba/Q4fh4q/MzNo 8QaqBwAMkm6RmfkPJkhnu5wmocAWiOLjBGceUdH8/jYF939KXj7gQdBr0c4ja7cf wJbHuKH513BSI982g1J4SBP1C1LnxrdD2Zhy4NZ5f3z29CfakxG1SwcZ3LU7cvWi YB1KicgGeF8jWRRpW5Njk7ip8o0W+hdy14L1yOLtJA1HPJSLvpj5LaNZ6T3Vpqaw tniwtznwBeYpjzj6HwQLsL//1g== -----END CERTIFICATE-----Generated at Thu Mar 26 23:49:52 2026 by rpki-client