$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft File: 2K83cS1WsbaT720D40bADPPwST4.mft (raw, json) Hash identifier: ThraB7GE6kVVYxbz0pgA0BxaTweGVL1TPjhjndychlk= Subject key identifier: 70:9C:39:1C:9E:5D:26:6D:5A:41:62:72:10:64:85:5A:56:99:13:34 Authority key identifier: D8:AF:37:71:2D:56:B1:B6:93:EF:6D:03:E3:46:C0:0C:F3:F0:49:3E Certificate issuer: /CN=A91A86D0/serialNumber=D8AF37712D56B1B693EF6D03E346C00CF3F0493E Certificate serial: 100E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft Manifest number: 0FF0 Signing time: Tue 24 Mar 2026 17:22:02 +0000 Manifest this update: Tue 24 Mar 2026 17:22:01 +0000 Manifest next update: Tue 31 Mar 2026 17:22:01 +0000 Files and hashes: 1: 2K83cS1WsbaT720D40bADPPwST4.crl (hash: +jusPN1OQWBOFZVj2aeSSDQWSz3HP5gcBetqk/6upg8=) 2: CC99502E382F11EEAB87A63EC4F9AE02.roa (hash: 1K8MV4sIj8T9zYYuz63dsbeo/qY6X7HrLn7VydAG5JM=) 3: F0F0DEC2C43411F0836DBC7DC4F9AE02.roa (hash: LMzi/nUop3Zg3Ri+ttMW1AIJQZt36oNcqeMlHwO8Bco=) 4: AFCF76ECC43411F0982E427DC4F9AE02.roa (hash: jArh+Kx+M9ITkZfnTl8gN4nLiWXlDhetGK8juVgx8K0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.crl rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4110 (0x100e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A86D0, serialNumber=D8AF37712D56B1B693EF6D03E346C00CF3F0493E Validity Not Before: Mar 24 17:22:01 2026 GMT Not After : Mar 31 17:22:01 2026 GMT Subject: CN=69c2c83a-d1b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:dc:19:c3:0a:5a:2d:37:82:54:97:e7:f5:4e: 51:a5:3e:c1:67:cb:73:01:03:b2:2c:1a:22:24:70: 50:9a:f5:ba:94:2e:03:ef:92:b0:f5:43:72:06:4b: 68:e5:de:a4:fa:e0:9a:da:21:6f:c6:7f:3f:2f:cc: 91:8b:56:3b:4d:19:ef:37:a2:c1:16:47:00:13:59: 75:4a:77:d8:82:f6:4f:0e:1d:b8:b2:15:38:c8:32: c3:a6:49:e9:6b:c8:6a:4c:fd:a8:d8:f2:a3:2e:d3: 58:42:7e:41:b4:46:21:4c:36:39:b7:05:01:4a:8d: ee:bd:b1:ff:80:23:02:4c:31:4d:63:48:18:53:84: 1c:a2:1a:0e:d8:a3:91:9a:d8:7f:bf:59:9b:aa:f3: 0f:f5:7d:41:3f:e6:8f:fc:7c:08:c4:a7:74:59:a0: 1f:ea:67:22:a7:e7:9e:d0:e2:f3:9e:40:00:4a:d3: c2:c8:6c:56:65:a4:b9:20:62:32:a7:8b:67:35:6e: ac:04:48:2c:6a:9f:47:88:72:a0:3c:cb:73:dd:e7: ed:6a:33:88:3b:a5:92:e8:7b:8d:5a:c2:ab:9f:1e: 28:77:6e:51:53:70:ee:47:fd:79:5e:95:08:4f:db: 69:c2:c1:46:8f:d3:5f:06:cc:40:b6:93:39:24:c6: b1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:9C:39:1C:9E:5D:26:6D:5A:41:62:72:10:64:85:5A:56:99:13:34 X509v3 Authority Key Identifier: keyid:D8:AF:37:71:2D:56:B1:B6:93:EF:6D:03:E3:46:C0:0C:F3:F0:49:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:ad:5d:0d:34:37:87:f8:cf:81:85:89:da:57:6c:1f:17:2e: dc:69:a5:aa:d6:8c:09:9a:60:88:b2:75:5b:37:14:97:39:8a: d5:f3:e5:63:10:ef:bc:b7:c3:82:e1:20:5a:08:f0:76:a9:fc: c0:b8:a8:c5:28:17:ca:a1:59:0c:8f:ea:68:40:d7:e2:76:ea: aa:63:99:7c:bf:1a:b5:f2:2e:89:33:4a:e4:77:28:4d:b1:71: 05:78:39:50:d4:9d:fe:98:24:b6:50:be:b0:45:3f:1c:df:c8: 8b:41:43:c5:95:f7:5b:95:7d:24:b6:b5:7b:3b:4c:b4:cb:8c: 1b:6b:a4:46:44:84:49:1b:99:a0:04:42:40:6b:c2:dc:02:ea: 40:13:53:16:c0:29:94:9b:7a:3e:e6:8f:a7:9d:dc:9b:42:a5: c5:a3:1e:86:9e:cc:6f:19:65:75:d8:45:61:07:7b:6c:3e:d9: f0:f4:c0:61:d0:c3:e5:70:2e:3d:06:1c:8d:ff:16:bc:02:4b: 2b:6f:6f:89:ae:58:96:b6:1c:87:75:20:62:cb:d7:48:6b:fb: 2d:01:c8:8b:96:35:d5:68:c7:e0:73:e6:68:dd:6b:45:e9:9b: 34:96:14:9a:24:b7:69:8b:a2:55:cf:a5:27:64:93:23:0a:81: 78:d2:8b:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2RDAxMTAvBgNVBAUTKEQ4QUYzNzcxMkQ1NkIxQjY5M0VGNkQwM0UzNDZDMDBD RjNGMDQ5M0UwHhcNMjYwMzI0MTcyMjAxWhcNMjYwMzMxMTcyMjAxWjAYMRYwFAYD VQQDEw02OWMyYzgzYS1kMWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9wZwwpaLTeCVJfn9U5RpT7BZ8tzAQOyLBoiJHBQmvW6lC4D75Kw9UNyBkto 5d6k+uCa2iFvxn8/L8yRi1Y7TRnvN6LBFkcAE1l1SnfYgvZPDh24shU4yDLDpknp a8hqTP2o2PKjLtNYQn5BtEYhTDY5twUBSo3uvbH/gCMCTDFNY0gYU4QcohoO2KOR mth/v1mbqvMP9X1BP+aP/HwIxKd0WaAf6mcip+ee0OLznkAAStPCyGxWZaS5IGIy p4tnNW6sBEgsap9HiHKgPMtz3eftajOIO6WS6HuNWsKrnx4od25RU3DuR/15XpUI T9tpwsFGj9NfBsxAtpM5JMaxKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHCcORye XSZtWkFichBkhVpWmRM0MB8GA1UdIwQYMBaAFNivN3EtVrG2k+9tA+NGwAzz8Ek+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODZEMC9GQTc4QjA0NDZG Q0UxMUU5ODhDNDRCM0VDNEY5QUUwMi8ySzgzY1MxV3NiYVQ3MjBENDBiQURQUHdT VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJLODNjUzFXc2JhVDcyMEQ0MGJBRFBQd1NUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODZEMC9GQTc4QjA0NDZGQ0UxMUU5ODhDNDRCM0VDNEY5QUUwMi8ySzgzY1MxV3Ni YVQ3MjBENDBiQURQUHdTVDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGa1dDTQ3h/jPgYWJ2ldsHxcu3GmlqtaMCZpgiLJ1WzcUlzmK1fPlYxDvvLfD guEgWgjwdqn8wLioxSgXyqFZDI/qaEDX4nbqqmOZfL8atfIuiTNK5HcoTbFxBXg5 UNSd/pgktlC+sEU/HN/Ii0FDxZX3W5V9JLa1eztMtMuMG2ukRkSESRuZoARCQGvC 3ALqQBNTFsAplJt6PuaPp53cm0KlxaMehp7MbxllddhFYQd7bD7Z8PTAYdDD5XAu PQYcjf8WvAJLK29via5YlrYch3UgYsvXSGv7LQHIi5Y11WjH4HPmaN1rRembNJYU miS3aYuiVc+lJ2STIwqBeNKLAQ== -----END CERTIFICATE-----Generated at Thu Mar 26 08:27:52 2026 by rpki-client