$ rpki-client -vvf rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft File: khLuorkaMmYPdScf7IWJswnDifA.mft (raw, json) Hash identifier: ZzNI7Y4Dcd/pnxJIFWpUMy4uf8slVT0y0vT1u/wqChQ= Subject key identifier: F3:D7:AD:10:BC:65:88:C3:97:D6:A6:AC:E8:E6:46:57:A9:89:15:8D Authority key identifier: 92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0 Certificate issuer: /CN=A91999F5/serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0 Certificate serial: 0441 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft Manifest number: 0435 Signing time: Wed 25 Mar 2026 00:00:14 +0000 Manifest this update: Wed 25 Mar 2026 00:00:13 +0000 Manifest next update: Wed 01 Apr 2026 00:00:13 +0000 Files and hashes: 1: khLuorkaMmYPdScf7IWJswnDifA.crl (hash: +MSCmqNZXFxNCv/IZAjr1k81eMkxSpCtj49ljCeJWeY=) 2: F84777FCD9DC11EDA4083A71C4F9AE02.roa (hash: 2dklAfTnHhtRgzsOUzlnr7mFdnQGrY5LhPyI2dkyTlU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1089 (0x441) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91999F5, serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0 Validity Not Before: Mar 25 00:00:13 2026 GMT Not After : Apr 1 00:00:13 2026 GMT Subject: CN=69c3258d-3b3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a1:02:fa:c4:fc:bf:60:69:b6:25:aa:00:e3: 42:d4:6e:86:b4:e5:76:cc:f0:da:95:5c:fe:67:a7: 32:9a:31:8a:99:3c:08:c6:2d:50:b7:0f:37:e0:28: f7:f9:43:32:9b:34:30:38:8e:92:ff:e6:59:3a:db: 56:0d:fa:09:f2:58:b0:ad:6f:e8:75:c8:b3:30:0b: 4e:41:d3:9e:d7:82:bc:ab:3f:9a:ca:62:14:de:ec: 03:ae:e1:72:ba:0f:f2:1e:05:09:c7:af:48:df:10: 87:f8:d0:12:af:00:e2:dc:f9:59:e2:0c:52:02:d3: dd:35:a5:bb:23:3c:9f:5c:c1:2c:1d:2b:8c:17:1f: 0e:86:1c:93:0f:22:3a:84:06:b4:09:f8:f8:cc:1c: b0:1b:8f:3c:32:7b:ce:58:8c:80:7b:21:c5:ab:57: b8:24:15:85:f9:af:58:d7:c0:e2:2c:09:fe:59:26: 24:81:ce:d3:b4:01:8d:1c:6a:89:51:2d:7a:9f:49: 60:65:e0:e8:8f:2f:18:c7:8c:ca:dc:a6:eb:02:40: ab:d6:43:6b:36:55:29:24:48:33:c4:96:fc:ec:31: ce:c8:5c:a6:ff:38:39:78:1d:3f:5e:5c:b2:ed:6a: 7e:b2:da:1d:83:56:b8:1e:71:8a:94:2a:3a:75:7e: f9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D7:AD:10:BC:65:88:C3:97:D6:A6:AC:E8:E6:46:57:A9:89:15:8D X509v3 Authority Key Identifier: keyid:92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:cb:e5:e5:7b:fa:70:e2:d8:24:2b:fe:80:64:88:10:1b:17: ce:61:11:f2:78:dd:66:35:c3:69:ee:1c:bd:04:9a:0d:c3:34: 3b:b6:32:44:72:b8:bd:64:a2:6b:3b:c2:11:f8:df:c0:77:a2: cf:29:c8:a7:77:4d:61:10:e5:40:17:49:64:89:ca:3e:fd:2d: 41:1b:14:98:f9:74:d6:aa:c0:d2:7b:e9:de:5f:5e:fe:c3:54: d2:b0:91:b0:ce:51:91:55:9f:18:9d:8c:19:0a:4b:87:37:c6: 8d:99:a9:bf:dd:d4:8f:78:e5:d1:f4:cf:f3:70:47:df:c3:01: 3d:a1:dd:42:98:84:66:1e:23:5d:0b:b5:d4:a6:16:02:87:bb: ea:5c:3f:2c:69:76:e5:50:39:20:9b:ca:54:9e:76:9d:f0:0b: 54:b1:f2:63:e4:ef:0c:7f:8c:74:85:e1:65:e2:1b:a9:ad:4a: 1c:f7:f1:ab:45:58:43:74:8f:45:b5:c4:66:9d:ad:c3:4f:f1: fa:df:32:c3:c3:d9:96:48:62:b1:c6:01:aa:e8:2f:f9:d8:41: a0:0f:e6:00:c4:35:14:c0:6d:d5:2a:a7:08:64:88:6b:24:d1: ba:64:64:02:d7:84:de:f0:bb:fd:8e:84:ed:08:09:e5:61:5f: 75:07:95:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk5RjUxMTAvBgNVBAUTKDkyMTJFRUEyQjkxQTMyNjYwRjc1MjcxRkVDODU4OUIz MDlDMzg5RjAwHhcNMjYwMzI1MDAwMDEzWhcNMjYwNDAxMDAwMDEzWjAYMRYwFAYD VQQDEw02OWMzMjU4ZC0zYjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA46EC+sT8v2BptiWqAONC1G6GtOV2zPDalVz+Z6cymjGKmTwIxi1Qtw834Cj3 +UMymzQwOI6S/+ZZOttWDfoJ8liwrW/odcizMAtOQdOe14K8qz+aymIU3uwDruFy ug/yHgUJx69I3xCH+NASrwDi3PlZ4gxSAtPdNaW7IzyfXMEsHSuMFx8OhhyTDyI6 hAa0Cfj4zBywG488MnvOWIyAeyHFq1e4JBWF+a9Y18DiLAn+WSYkgc7TtAGNHGqJ US16n0lgZeDojy8Yx4zK3KbrAkCr1kNrNlUpJEgzxJb87DHOyFym/zg5eB0/Xlyy 7Wp+stodg1a4HnGKlCo6dX75EwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPPXrRC8 ZYjDl9amrOjmRlepiRWNMB8GA1UdIwQYMBaAFJIS7qK5GjJmD3UnH+yFibMJw4nw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTlGNS82QTNEQjU3ODlG NzkxMUVDOUNCNDdBMEFDNEY5QUUwMi9raEx1b3JrYU1tWVBkU2NmN0lXSnN3bkRp ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2toTHVvcmthTW1ZUGRTY2Y3SVdKc3duRGlmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTlGNS82QTNEQjU3ODlGNzkxMUVDOUNCNDdBMEFDNEY5QUUwMi9raEx1b3JrYU1t WVBkU2NmN0lXSnN3bkRpZkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf8vl5Xv6cOLYJCv+gGSIEBsXzmER8njdZjXDae4cvQSaDcM0O7YyRHK4vWSi azvCEfjfwHeizynIp3dNYRDlQBdJZInKPv0tQRsUmPl01qrA0nvp3l9e/sNU0rCR sM5RkVWfGJ2MGQpLhzfGjZmpv93Uj3jl0fTP83BH38MBPaHdQpiEZh4jXQu11KYW Aoe76lw/LGl25VA5IJvKVJ52nfALVLHyY+TvDH+MdIXhZeIbqa1KHPfxq0VYQ3SP RbXEZp2tw0/x+t8yw8PZlkhiscYBqugv+dhBoA/mAMQ1FMBt1SqnCGSIayTRumRk AteE3vC7/Y6E7QgJ5WFfdQeV8A== -----END CERTIFICATE-----Generated at Thu Mar 26 02:01:12 2026 by rpki-client