$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft File: plb2DT8RZBpXG9H_rSRg3UV2My0.mft (raw, json) Hash identifier: o+q3OzqzpHHThZD88OemDWPR2E7zi1U1bXIFCj/ZHYw= Subject key identifier: F4:D7:DC:5F:4A:5F:94:F3:11:09:DB:FB:35:D3:44:6A:16:FF:94:69 Authority key identifier: A6:56:F6:0D:3F:11:64:1A:57:1B:D1:FF:AD:24:60:DD:45:76:33:2D Certificate issuer: /CN=A919986F/serialNumber=A656F60D3F11641A571BD1FFAD2460DD4576332D Certificate serial: 28CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft Manifest number: 28BB Signing time: Tue 24 Mar 2026 15:32:29 +0000 Manifest this update: Tue 24 Mar 2026 15:32:28 +0000 Manifest next update: Tue 31 Mar 2026 15:32:28 +0000 Files and hashes: 1: plb2DT8RZBpXG9H_rSRg3UV2My0.crl (hash: 8lZ9tEYJ10Q4A6YP8jvvqGY0XObE6kFkBg22wHEP2IA=) 2: 27F621183B5D11EB97506B7AC4F9AE02.roa (hash: LoCmdUsK6L+TshugdKCnyVfyQSooI4RUEUwWon0yLJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.crl rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:32:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10447 (0x28cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919986F, serialNumber=A656F60D3F11641A571BD1FFAD2460DD4576332D Validity Not Before: Mar 24 15:32:28 2026 GMT Not After : Mar 31 15:32:28 2026 GMT Subject: CN=69c2ae8d-f483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:96:7b:36:7a:03:e9:71:4c:7f:5a:4b:27:38: 44:f8:6d:07:17:57:ba:c5:70:d3:5a:d4:ec:95:82: 74:35:4e:05:b2:9e:8d:84:fc:aa:59:37:56:82:62: 6d:e0:b1:3b:f7:b4:4d:d4:df:ec:f9:74:86:0e:4d: bb:28:22:2e:17:a6:a9:91:e2:1f:13:51:c9:6a:39: 4b:fb:2b:c9:1e:c3:8c:a1:ae:5e:b4:e3:86:ac:29: 3b:f3:c7:42:ea:4a:31:4e:b1:c7:da:c5:e8:b6:aa: 16:d2:14:62:e8:8f:d5:e3:4b:2e:f1:20:5c:80:2a: 08:3d:b3:06:79:f1:65:a6:45:5a:fb:5e:20:a1:1b: e2:2f:bf:f2:39:08:6d:90:91:06:7c:cd:b0:c1:b6: 1c:cf:ce:d2:b3:16:6d:16:8d:d2:17:d8:e2:62:26: 47:9b:fa:55:e9:29:f8:18:36:c7:83:7a:81:c7:cc: a5:46:7c:6c:7b:f7:9c:c3:8b:55:3f:e4:7b:3b:99: 0b:6c:bb:4a:59:75:a8:bd:78:c5:fc:0b:83:d0:e2: 35:ca:f7:4a:29:e3:2c:01:40:da:61:2f:88:60:59: 04:6c:9e:67:9e:b0:10:77:bc:18:a3:78:7f:ab:0b: 95:17:6c:25:ed:bf:f7:5c:f5:2e:31:08:cf:11:5f: 98:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D7:DC:5F:4A:5F:94:F3:11:09:DB:FB:35:D3:44:6A:16:FF:94:69 X509v3 Authority Key Identifier: keyid:A6:56:F6:0D:3F:11:64:1A:57:1B:D1:FF:AD:24:60:DD:45:76:33:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:9e:93:5e:79:0b:c1:74:ec:ca:1f:a3:45:c5:58:b1:8e:7f: 4e:91:3a:b6:3d:a2:0b:89:a3:05:d8:8d:1f:4f:e3:4b:d5:19: 95:ec:05:2a:e9:7d:ad:0b:2d:d5:81:b0:36:81:05:48:da:ea: 10:d4:1d:c2:02:1e:e9:7d:1e:a4:dc:02:f2:88:97:8a:8c:ad: 21:b2:0f:56:0e:8f:c7:2c:e7:4c:62:ae:a8:09:9d:b0:53:e0: a1:b0:aa:3e:b5:be:12:ca:1c:b6:1e:5b:e8:13:2b:59:81:9c: 9d:66:99:ba:62:a8:82:ce:fa:9d:60:37:45:ff:e4:81:40:dc: 45:29:99:64:2c:b0:e2:67:84:c1:a3:92:06:85:4b:10:53:be: 4e:fd:7d:7b:4d:a1:05:32:0c:f7:c6:0d:17:81:f3:5c:9d:5f: 74:e8:5c:a5:b4:a3:a1:88:42:3e:90:2d:1d:40:0e:9a:a6:77: 95:18:22:5a:4f:ff:43:6f:d1:94:16:69:9c:33:bc:97:42:d5: 47:53:d3:58:b8:aa:d9:42:d0:0f:34:ca:63:2e:ec:1a:67:d7: 36:8b:f5:b5:6f:e5:4e:77:37:6b:c7:87:4a:10:5d:d4:0e:e0: 90:ab:ec:e6:18:59:cc:b7:2f:4e:93:ca:dd:14:19:21:b0:8b: 80:4d:35:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4NkYxMTAvBgNVBAUTKEE2NTZGNjBEM0YxMTY0MUE1NzFCRDFGRkFEMjQ2MERE NDU3NjMzMkQwHhcNMjYwMzI0MTUzMjI4WhcNMjYwMzMxMTUzMjI4WjAYMRYwFAYD VQQDEw02OWMyYWU4ZC1mNDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpZ7NnoD6XFMf1pLJzhE+G0HF1e6xXDTWtTslYJ0NU4Fsp6NhPyqWTdWgmJt 4LE797RN1N/s+XSGDk27KCIuF6apkeIfE1HJajlL+yvJHsOMoa5etOOGrCk788dC 6koxTrHH2sXotqoW0hRi6I/V40su8SBcgCoIPbMGefFlpkVa+14goRviL7/yOQht kJEGfM2wwbYcz87SsxZtFo3SF9jiYiZHm/pV6Sn4GDbHg3qBx8ylRnxse/ecw4tV P+R7O5kLbLtKWXWovXjF/AuD0OI1yvdKKeMsAUDaYS+IYFkEbJ5nnrAQd7wYo3h/ qwuVF2wl7b/3XPUuMQjPEV+YhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPTX3F9K X5TzEQnb+zXTRGoW/5RpMB8GA1UdIwQYMBaAFKZW9g0/EWQaVxvR/60kYN1FdjMt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg2Ri9FQzg3MEI4NjhG MkExMUU0QkY5OEI0MzJDNEY5QUUwMi9wbGIyRFQ4UlpCcFhHOUhfclNSZzNVVjJN eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BsYjJEVDhSWkJwWEc5SF9yU1JnM1VWMk15MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg2Ri9FQzg3MEI4NjhGMkExMUU0QkY5OEI0MzJDNEY5QUUwMi9wbGIyRFQ4UlpC cFhHOUhfclNSZzNVVjJNeTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWJ6TXnkLwXTsyh+jRcVYsY5/TpE6tj2iC4mjBdiNH0/jS9UZlewFKul9rQst 1YGwNoEFSNrqENQdwgIe6X0epNwC8oiXioytIbIPVg6PxyznTGKuqAmdsFPgobCq PrW+Esocth5b6BMrWYGcnWaZumKogs76nWA3Rf/kgUDcRSmZZCyw4meEwaOSBoVL EFO+Tv19e02hBTIM98YNF4HzXJ1fdOhcpbSjoYhCPpAtHUAOmqZ3lRgiWk//Q2/R lBZpnDO8l0LVR1PTWLiq2ULQDzTKYy7sGmfXNov1tW/lTnc3a8eHShBd1A7gkKvs 5hhZzLcvTpPK3RQZIbCLgE01+g== -----END CERTIFICATE-----Generated at Thu Mar 26 14:26:10 2026 by rpki-client