$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft File: K8iorLUs8M9_MTaUMA9ThmhiN60.mft (raw, json) Hash identifier: +1/NuNgEZMktbdDJi2l57rjYn79mHyoFFXAoFO2RmrI= Subject key identifier: C6:D7:F4:57:63:4F:D5:C2:AD:13:4D:7C:79:32:73:E7:73:B1:FD:94 Authority key identifier: 2B:C8:A8:AC:B5:2C:F0:CF:7F:31:36:94:30:0F:53:86:68:62:37:AD Certificate issuer: /CN=A91B0549/serialNumber=2BC8A8ACB52CF0CF7F313694300F5386686237AD Certificate serial: 0C0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft Manifest number: 0C04 Signing time: Tue 24 Mar 2026 18:38:50 +0000 Manifest this update: Tue 24 Mar 2026 18:38:50 +0000 Manifest next update: Tue 31 Mar 2026 18:38:50 +0000 Files and hashes: 1: K8iorLUs8M9_MTaUMA9ThmhiN60.crl (hash: kEjH/QlWjUlwwuebPdkHoAx4enXtQF9+tWMpEnTRO7o=) 2: 7A629E90303211EA9DAB6581C4F9AE02.roa (hash: bPIRgHEZY9rLQvrwabu6nPsfSsBA8Z8Wnu5AlQzU9KI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.crl rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:38:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3087 (0xc0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0549, serialNumber=2BC8A8ACB52CF0CF7F313694300F5386686237AD Validity Not Before: Mar 24 18:38:50 2026 GMT Not After : Mar 31 18:38:50 2026 GMT Subject: CN=69c2da3a-2e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:58:e1:cd:86:19:fa:59:0d:4f:e1:7d:e0:b0: 8f:f4:9a:e4:d7:e2:70:97:5c:47:0e:46:31:d9:b9: 64:5d:dc:30:78:46:58:b5:54:b0:dd:d9:c3:e0:41: e8:cc:31:ef:23:61:28:e1:3f:79:a3:ad:50:70:e0: fa:50:26:ea:67:89:38:71:a0:12:b1:b2:59:51:f5: d4:64:87:f5:3d:88:c9:e9:f0:eb:3b:e5:9b:6b:16: 08:a5:49:cb:11:42:29:53:ba:93:18:93:09:05:c8: 6d:5c:6c:f6:46:8e:1d:74:02:8b:ea:79:dc:17:6b: 48:03:88:14:20:f3:f1:5d:fc:b8:90:bb:a7:95:28: 01:5d:f6:75:57:dd:4b:01:01:03:31:03:00:22:02: 3c:0e:10:7f:1e:cf:9e:15:ed:b2:e5:c0:2f:a2:97: 06:31:2c:13:4f:7e:3f:64:da:c3:c0:d0:9f:fd:00: e0:9b:4f:19:07:63:34:57:b0:29:55:50:56:a4:03: 18:02:c2:30:7b:eb:1f:c9:ef:ff:74:51:5f:fd:bc: 87:a0:42:4f:ad:5e:02:62:ef:54:6c:5b:95:dd:dc: 3e:4b:77:8d:a5:d9:b5:18:10:67:f1:70:bc:70:a5: 4a:3c:cb:3a:62:e4:73:49:36:d2:da:ab:ac:17:91: 0c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D7:F4:57:63:4F:D5:C2:AD:13:4D:7C:79:32:73:E7:73:B1:FD:94 X509v3 Authority Key Identifier: keyid:2B:C8:A8:AC:B5:2C:F0:CF:7F:31:36:94:30:0F:53:86:68:62:37:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:ff:f2:8d:29:18:b0:c8:0b:05:13:ca:79:d4:5b:54:5f:66: 5d:4f:73:5b:77:49:22:15:ca:47:89:dd:4e:5d:c7:63:a0:31: 59:db:74:85:b7:7c:50:61:c7:f5:54:15:ff:b3:e2:a4:4a:f6: 8f:f1:d7:1a:0c:1e:7a:40:d2:9b:18:7a:af:52:10:71:50:d3: 3c:48:d3:71:3b:d3:20:d9:d4:e9:7a:1c:77:60:35:06:41:c4: 0c:41:69:b8:27:44:64:96:dc:81:1c:88:25:fa:d8:07:29:f0: d5:72:be:1b:e7:21:f9:04:8e:4f:9b:9f:71:da:f4:44:c8:84: 17:ff:05:09:87:bb:9a:6e:77:fe:0c:2b:f5:38:da:b6:0e:84: 7a:49:54:88:7b:9c:d8:f5:cb:bb:b3:29:cc:9e:70:2e:43:a2: b8:7a:0e:11:76:ae:38:5a:20:13:6d:46:86:0b:79:14:06:dc: e6:97:d3:49:8b:c4:25:8b:87:79:b7:92:7e:d6:34:0b:c7:6f: 5a:2f:20:c6:ff:0a:7c:3d:5b:21:e7:81:08:78:eb:3d:30:85: 4d:40:e5:6d:fb:c7:1a:b1:f3:06:02:b0:ab:77:32:e7:d2:f2: f3:40:26:80:3d:36:48:3f:8a:eb:28:2c:5a:34:19:3a:1e:fe: 86:62:24:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA1NDkxMTAvBgNVBAUTKDJCQzhBOEFDQjUyQ0YwQ0Y3RjMxMzY5NDMwMEY1Mzg2 Njg2MjM3QUQwHhcNMjYwMzI0MTgzODUwWhcNMjYwMzMxMTgzODUwWjAYMRYwFAYD VQQDEw02OWMyZGEzYS0yZTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ljhzYYZ+lkNT+F94LCP9Jrk1+Jwl1xHDkYx2blkXdwweEZYtVSw3dnD4EHo zDHvI2Eo4T95o61QcOD6UCbqZ4k4caASsbJZUfXUZIf1PYjJ6fDrO+WbaxYIpUnL EUIpU7qTGJMJBchtXGz2Ro4ddAKL6nncF2tIA4gUIPPxXfy4kLunlSgBXfZ1V91L AQEDMQMAIgI8DhB/Hs+eFe2y5cAvopcGMSwTT34/ZNrDwNCf/QDgm08ZB2M0V7Ap VVBWpAMYAsIwe+sfye//dFFf/byHoEJPrV4CYu9UbFuV3dw+S3eNpdm1GBBn8XC8 cKVKPMs6YuRzSTbS2qusF5EM3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMbX9Fdj T9XCrRNNfHkyc+dzsf2UMB8GA1UdIwQYMBaAFCvIqKy1LPDPfzE2lDAPU4ZoYjet MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDU0OS8xQzZGNEFEQzMw MzExMUVBODg2RDUxN0NDNEY5QUUwMi9LOGlvckxVczhNOV9NVGFVTUE5VGhtaGlO NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s4aW9yTFVzOE05X01UYVVNQTlUaG1oaU42MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDU0OS8xQzZGNEFEQzMwMzExMUVBODg2RDUxN0NDNEY5QUUwMi9LOGlvckxVczhN OV9NVGFVTUE5VGhtaGlONjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY//yjSkYsMgLBRPKedRbVF9mXU9zW3dJIhXKR4ndTl3HY6AxWdt0hbd8UGHH 9VQV/7PipEr2j/HXGgweekDSmxh6r1IQcVDTPEjTcTvTINnU6Xocd2A1BkHEDEFp uCdEZJbcgRyIJfrYBynw1XK+G+ch+QSOT5ufcdr0RMiEF/8FCYe7mm53/gwr9Tja tg6EeklUiHuc2PXLu7MpzJ5wLkOiuHoOEXauOFogE21Ghgt5FAbc5pfTSYvEJYuH ebeSftY0C8dvWi8gxv8KfD1bIeeBCHjrPTCFTUDlbfvHGrHzBgKwq3cy59Ly80Am gD02SD+K6ygsWjQZOh7+hmIkkQ== -----END CERTIFICATE-----Generated at Thu Mar 26 07:27:58 2026 by rpki-client