$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft File: kbKJkWte97NoabO6gQwkWzZOQ8A.mft (raw, json) Hash identifier: xPhRHcf/aixOQxL1FMDkT+sKNxg3y7yjoasz2RU9jWc= Subject key identifier: 79:FE:89:18:07:90:AB:B8:92:94:FE:E7:FA:BD:36:49:44:D6:55:68 Authority key identifier: 91:B2:89:91:6B:5E:F7:B3:68:69:B3:BA:81:0C:24:5B:36:4E:43:C0 Certificate issuer: /CN=A91B2D56/serialNumber=91B289916B5EF7B36869B3BA810C245B364E43C0 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft Manifest number: 44 Signing time: Wed 25 Mar 2026 07:33:58 +0000 Manifest this update: Wed 25 Mar 2026 07:33:58 +0000 Manifest next update: Wed 01 Apr 2026 07:33:58 +0000 Files and hashes: 1: kbKJkWte97NoabO6gQwkWzZOQ8A.crl (hash: FVuPvc6tUpuWxdCB4d4zruhca+LLh/Qbcb1J4TxbJEQ=) 2: 436251B0C52311F0A1118818C4F9AE02.roa (hash: HfEZG4t3DF1Mxy+ybb6Jvu5Sd5lj1h6Aq1UoSU2rExQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.crl rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D56, serialNumber=91B289916B5EF7B36869B3BA810C245B364E43C0 Validity Not Before: Mar 25 07:33:58 2026 GMT Not After : Apr 1 07:33:58 2026 GMT Subject: CN=69c38fe6-6799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:27:1a:d1:e6:6b:25:3c:8f:bb:6f:03:cd:36: 7f:48:ee:e9:dc:56:b3:ea:51:5d:5c:5b:47:f5:92: 87:ad:b5:2f:e4:58:be:0f:6c:5a:f5:bd:61:59:a4: 24:d7:fa:20:3b:55:33:34:4f:ef:fe:2f:02:30:23: 09:4f:51:7f:21:03:67:1b:13:ae:73:ea:84:27:a2: 01:ca:63:19:62:8f:1e:3c:fa:9f:8d:ed:30:0a:d9: de:c9:2e:ed:97:f7:8b:bb:02:62:ff:bd:2b:d9:96: ed:ca:3f:cc:88:f3:66:8a:9d:04:fa:db:5a:f9:15: 00:d9:46:fb:a4:e7:db:60:95:f4:15:62:cb:88:a4: 16:cf:94:70:3f:ac:89:ab:ad:50:57:98:1f:a1:ab: ed:c7:72:10:78:3b:ae:27:39:65:f6:81:fa:1a:13: b2:2b:ee:0f:e6:7a:e8:4f:f2:2e:6e:01:8c:40:65: 74:e7:5a:fb:c7:61:53:a6:59:05:f9:ef:97:60:e1: f2:93:57:5f:86:26:9b:f6:aa:d4:38:5a:30:e1:16: 8b:da:ac:9b:e1:6e:3b:b6:bd:09:b0:4a:ce:4f:53: b8:fa:8a:66:87:16:2e:67:6a:6f:d0:14:6e:c1:c4: ce:c7:8f:10:71:ba:93:21:fc:04:62:71:30:64:67: 9f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:FE:89:18:07:90:AB:B8:92:94:FE:E7:FA:BD:36:49:44:D6:55:68 X509v3 Authority Key Identifier: keyid:91:B2:89:91:6B:5E:F7:B3:68:69:B3:BA:81:0C:24:5B:36:4E:43:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:cd:39:00:fb:ff:2c:a4:c7:11:bf:c8:77:ee:d8:88:3b:45: 46:f0:21:3b:f7:13:4e:fb:3e:73:e5:a9:66:1c:20:3a:1e:b1: 05:f4:b9:6d:35:34:ef:ed:d4:2b:58:03:20:b3:72:96:ea:b5: 6b:ef:66:20:ce:c8:4a:87:fe:ef:9d:2c:7e:99:b5:b4:d5:ce: 40:52:75:47:e9:89:6a:18:46:4d:18:7a:2f:bf:0b:19:38:ec: ae:4f:f6:d9:1c:37:1e:f1:cc:83:af:7c:8a:42:61:0b:77:e1: bb:f5:63:2c:80:4f:ec:0a:89:e7:b8:51:fe:0f:13:54:52:28: 99:be:7d:73:7c:5e:a7:a1:ec:e2:be:3d:a4:b9:73:29:6f:3d: 52:25:00:fa:2e:25:b7:20:80:d0:b2:e3:85:ed:d2:12:d2:de: dc:dd:2c:c2:ab:88:67:96:58:43:9e:6f:52:5f:04:96:e3:44: 7b:eb:4a:f1:7e:d5:21:08:11:ca:27:6c:c8:45:76:34:2e:69: 7d:4f:94:26:d1:f7:26:78:7c:90:3c:b5:32:48:73:92:3a:ee: 11:db:50:3f:68:28:ac:b3:ee:15:1e:cd:10:84:da:cd:1e:ed: c0:4b:fe:ce:79:d9:41:20:d8:ca:3f:2f:7b:15:10:03:d6:fc: 45:0a:18:1d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MkQ1NjExMC8GA1UEBRMoOTFCMjg5OTE2QjVFRjdCMzY4NjlCM0JBODEwQzI0NUIz NjRFNDNDMDAeFw0yNjAzMjUwNzMzNThaFw0yNjA0MDEwNzMzNThaMBgxFjAUBgNV BAMTDTY5YzM4ZmU2LTY3OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeJxrR5mslPI+7bwPNNn9I7uncVrPqUV1cW0f1koettS/kWL4PbFr1vWFZpCTX +iA7VTM0T+/+LwIwIwlPUX8hA2cbE65z6oQnogHKYxlijx48+p+N7TAK2d7JLu2X 94u7AmL/vSvZlu3KP8yI82aKnQT621r5FQDZRvuk59tglfQVYsuIpBbPlHA/rImr rVBXmB+hq+3HchB4O64nOWX2gfoaE7Ir7g/meuhP8i5uAYxAZXTnWvvHYVOmWQX5 75dg4fKTV1+GJpv2qtQ4WjDhFovarJvhbju2vQmwSs5PU7j6imaHFi5nam/QFG7B xM7HjxBxupMh/ARicTBkZ58bAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUef6JGAeQ q7iSlP7n+r02SUTWVWgwHwYDVR0jBBgwFoAUkbKJkWte97NoabO6gQwkWzZOQ8Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyRDU2L0VEQkJERkQ4QzUy MjExRjA4N0M3QjIxN0M0RjlBRTAyL2tiS0prV3RlOTdOb2FiTzZnUXdrV3paT1E4 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva2JLSmtXdGU5N05vYWJPNmdRd2tXelpPUThBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy RDU2L0VEQkJERkQ4QzUyMjExRjA4N0M3QjIxN0M0RjlBRTAyL2tiS0prV3RlOTdO b2FiTzZnUXdrV3paT1E4QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBXzTkA+/8spMcRv8h37tiIO0VG8CE79xNO+z5z5almHCA6HrEF9LltNTTv7dQr WAMgs3KW6rVr72YgzshKh/7vnSx+mbW01c5AUnVH6YlqGEZNGHovvwsZOOyuT/bZ HDce8cyDr3yKQmELd+G79WMsgE/sConnuFH+DxNUUiiZvn1zfF6noezivj2kuXMp bz1SJQD6LiW3IIDQsuOF7dIS0t7c3SzCq4hnllhDnm9SXwSW40R760rxftUhCBHK J2zIRXY0Lml9T5Qm0fcmeHyQPLUySHOSOu4R21A/aCiss+4VHs0QhNrNHu3AS/7O edlBINjKPy97FRAD1vxFChgd -----END CERTIFICATE-----Generated at Thu Mar 26 15:32:08 2026 by rpki-client