$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft File: ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft (raw, json) Hash identifier: huIwY7BCiVeCN0WBfrmwHZmOoPA/sz0Fnq5gj5dHQs0= Subject key identifier: 85:E8:33:22:A4:94:4D:76:AA:0D:71:BA:91:96:B7:74:52:B5:C3:EE Authority key identifier: 92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4 Certificate issuer: /CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4 Certificate serial: 0236 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft Manifest number: 021B Signing time: Wed 25 Mar 2026 02:19:49 +0000 Manifest this update: Wed 25 Mar 2026 02:19:48 +0000 Manifest next update: Wed 01 Apr 2026 02:19:48 +0000 Files and hashes: 1: ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl (hash: qYpDHbiQJ7tXIBShl1qLMRAjGq2gs6G5GJLdvi6W3Co=) 2: E5925096093911EEABCFA170C4F9AE02.roa (hash: ucyrKnTlK2iDm4DuHOeL+U4zeBMeJNSh02G8/fv5S2s=) 3: 9F79846406E911EE88450147C4F9AE02.roa (hash: W6M6q3YZzfwNDproFxfiAx2KAQGrtoWb8gbJ72DA1Xs=) 4: 9EE8F55206E911EE88450147C4F9AE02.roa (hash: Mz2axKz0cOaA7k7YNeejdSe53HW1Qw2U0ROhNzZhy8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:19:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 566 (0x236) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1818, serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4 Validity Not Before: Mar 25 02:19:48 2026 GMT Not After : Apr 1 02:19:48 2026 GMT Subject: CN=69c34645-deab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:01:d6:04:1c:66:d6:84:4c:8c:6f:85:fc:56: 09:58:c2:f2:9b:82:dd:39:ee:d6:c4:fa:54:9d:a1: 76:8a:38:c3:ef:ea:3e:8f:a5:e7:e0:de:c7:3c:78: 89:fc:fc:c3:74:d9:ac:54:d9:f6:10:54:9b:8d:6b: 49:02:4e:32:29:c2:27:40:3b:61:cc:f6:ac:d8:d1: 0f:f3:d4:48:93:33:8d:75:c8:d3:a6:44:38:70:d6: ba:c1:43:c7:1e:a0:e0:70:b2:13:c2:7f:7b:40:e3: bb:b2:63:4a:ac:31:21:42:fa:86:5e:ea:a5:9d:d1: 0c:82:08:64:a4:0f:c8:25:39:39:b7:8e:d4:3b:81: 81:65:1e:a8:f4:67:bb:2d:f3:2d:1c:29:f5:23:2d: 07:a9:16:42:d0:08:01:06:7d:6d:a7:29:3d:76:0b: 47:13:b2:3b:b8:42:50:28:d4:bc:cd:0b:f4:59:fc: 7a:7b:a4:32:23:ac:e6:4f:1c:2f:31:92:cb:ef:e7: 0f:91:7e:6a:98:c9:cd:93:4a:c9:bb:fc:4c:bf:9a: 4f:26:63:cd:b9:b4:27:90:2c:de:82:07:de:f5:42: 29:1f:5a:5a:d2:82:1d:a3:e1:53:45:24:84:33:23: f1:26:9d:fb:3b:9a:88:a2:bf:23:50:cc:c4:66:81: f3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E8:33:22:A4:94:4D:76:AA:0D:71:BA:91:96:B7:74:52:B5:C3:EE X509v3 Authority Key Identifier: keyid:92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:78:79:47:34:03:02:48:7f:f7:81:ef:97:84:1e:02:0d:d0: 74:75:e4:b2:db:49:e0:ae:8a:df:49:28:1a:82:9c:13:2a:c6: df:3b:d1:66:14:16:ec:58:f6:e9:04:25:cc:82:3d:64:47:ad: 10:43:50:90:7d:4d:83:cf:20:f6:9d:ca:c2:2e:d6:ee:3b:64: df:f4:8b:0e:2c:57:02:d5:e1:5f:83:66:f7:fa:80:e1:b2:5f: f9:cf:52:af:fe:a3:d8:f1:3f:72:44:c0:e3:d3:64:b7:a5:13: 6e:ad:ae:6c:99:7b:09:54:2e:9d:21:f4:e1:ff:75:0a:98:ae: 6d:72:68:7d:61:df:49:f2:29:dc:76:38:21:e4:07:d1:c3:ab: 50:5e:7b:c8:16:c6:1f:10:17:b2:9c:19:be:58:09:32:70:7b: 82:4e:6f:84:1c:fc:9a:3b:51:00:03:3c:3a:62:bd:1d:bd:da: 72:6d:c2:5c:60:a9:ed:1a:47:11:82:5c:74:88:39:c0:53:d6: 4b:01:fc:04:2d:42:76:14:d2:a8:3f:fe:bf:b3:f0:45:cc:81: d1:2c:c3:7f:51:b7:3a:25:23:41:c3:fe:d0:d7:c8:f7:85:b9: 52:72:c7:63:7a:da:83:fd:62:67:94:32:a1:79:09:0c:ee:64: d9:07:50:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE4MTgxMTAvBgNVBAUTKDkyRDQ1NkU5OUI2MERDRUQxNDhDOTNENTk0QjZGNDMx MjcwQTI0QzQwHhcNMjYwMzI1MDIxOTQ4WhcNMjYwNDAxMDIxOTQ4WjAYMRYwFAYD VQQDEw02OWMzNDY0NS1kZWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoAHWBBxm1oRMjG+F/FYJWMLym4LdOe7WxPpUnaF2ijjD7+o+j6Xn4N7HPHiJ /PzDdNmsVNn2EFSbjWtJAk4yKcInQDthzPas2NEP89RIkzONdcjTpkQ4cNa6wUPH HqDgcLITwn97QOO7smNKrDEhQvqGXuqlndEMgghkpA/IJTk5t47UO4GBZR6o9Ge7 LfMtHCn1Iy0HqRZC0AgBBn1tpyk9dgtHE7I7uEJQKNS8zQv0Wfx6e6QyI6zmTxwv MZLL7+cPkX5qmMnNk0rJu/xMv5pPJmPNubQnkCzeggfe9UIpH1pa0oIdo+FTRSSE MyPxJp37O5qIor8jUMzEZoHz/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIXoMyKk lE12qg1xupGWt3RStcPuMB8GA1UdIwQYMBaAFJLUVumbYNztFIyT1ZS29DEnCiTE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTgxOC82OEVBNzNFQzA2 OUMxMUVFOEM2Njc4MTJDNEY5QUUwMi9rdFJXNlp0ZzNPMFVqSlBWbExiME1TY0tK TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t0Ulc2WnRnM08wVWpKUFZsTGIwTVNjS0pNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTgxOC82OEVBNzNFQzA2OUMxMUVFOEM2Njc4MTJDNEY5QUUwMi9rdFJXNlp0ZzNP MFVqSlBWbExiME1TY0tKTVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAHh5RzQDAkh/94Hvl4QeAg3QdHXksttJ4K6K30koGoKcEyrG3zvRZhQW7Fj2 6QQlzII9ZEetEENQkH1Ng88g9p3Kwi7W7jtk3/SLDixXAtXhX4Nm9/qA4bJf+c9S r/6j2PE/ckTA49Nkt6UTbq2ubJl7CVQunSH04f91CpiubXJofWHfSfIp3HY4IeQH 0cOrUF57yBbGHxAXspwZvlgJMnB7gk5vhBz8mjtRAAM8OmK9Hb3acm3CXGCp7RpH EYJcdIg5wFPWSwH8BC1CdhTSqD/+v7PwRcyB0SzDf1G3OiUjQcP+0NfI94W5UnLH Y3rag/1iZ5QyoXkJDO5k2QdQJQ== -----END CERTIFICATE-----Generated at Thu Mar 26 00:51:43 2026 by rpki-client