$ rpki-client -vvf rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft File: KsCrS187tbDveb0hpknK_-f5wgo.mft (raw, json) Hash identifier: 5mHRiIHSzDnVwuAVlDJq6D7rF2kGMm9WoaqWFlf74yE= Subject key identifier: 79:09:E6:7E:5F:8A:E4:6A:E3:E0:E5:BB:DA:C7:0D:E1:03:7A:A7:9A Authority key identifier: 2A:C0:AB:4B:5F:3B:B5:B0:EF:79:BD:21:A6:49:CA:FF:E7:F9:C2:0A Certificate issuer: /CN=A91B927E/serialNumber=2AC0AB4B5F3BB5B0EF79BD21A649CAFFE7F9C20A Certificate serial: 07A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft Manifest number: 1268 Signing time: Tue 24 Mar 2026 19:12:50 +0000 Manifest this update: Tue 24 Mar 2026 19:12:49 +0000 Manifest next update: Tue 31 Mar 2026 19:12:49 +0000 Files and hashes: 1: KsCrS187tbDveb0hpknK_-f5wgo.crl (hash: 5+e0kAfGgaMZumATK9+Hq8VBXdMigpgwxxQSLtui3F0=) 2: 6243075E653411EB98060C17C4F9AE02.roa (hash: v0uC7Tgqg5Ka5gyjZsM8cExfBYnQ3ib9cJkCqTADvOs=) 3: 37868F90574711EBB6BA4183C4F9AE02.roa (hash: OYV9eK2HNZwk+SVet5sg0PfolaNTvnaGC/XgX9+ge9A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.crl rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1959 (0x7a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B927E, serialNumber=2AC0AB4B5F3BB5B0EF79BD21A649CAFFE7F9C20A Validity Not Before: Mar 24 19:12:49 2026 GMT Not After : Mar 31 19:12:49 2026 GMT Subject: CN=69c2e231-a534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:89:f6:64:ff:15:28:07:6b:0d:87:36:29:f9: e4:8d:73:87:06:be:4a:c3:cb:03:f8:6c:c1:df:74: 55:84:ab:a1:e0:09:de:8f:fb:22:2f:92:8f:d4:0e: b5:bf:9a:0d:8c:de:98:9d:68:58:bd:47:4e:10:87: 03:7e:dc:4a:2c:b2:77:4d:4d:9b:be:d7:1e:a4:8f: de:69:04:16:1c:16:2b:e3:b7:f8:ab:6e:eb:b2:ba: fa:e9:7d:2e:b1:e8:e1:f2:09:39:f3:0d:c9:e3:46: b2:04:4b:65:ae:a7:a3:1b:1a:b9:6d:b6:54:2c:f2: d4:91:7c:65:67:eb:2f:00:b6:c7:ba:17:55:d4:26: b7:b0:14:75:40:c2:21:45:8b:0d:a1:ae:54:9d:07: de:38:f9:3c:bb:c8:e4:3d:35:e7:48:5b:47:3f:a3: a7:73:ec:ad:20:47:58:16:59:15:99:bf:4b:dd:79: 82:27:65:e8:62:d3:a8:ba:8f:6c:d1:f6:6a:88:39: 0f:51:f3:bb:1e:9a:42:c9:45:91:eb:eb:70:86:d7: c4:4a:91:4f:64:af:24:14:d5:87:27:e1:77:cc:21: 9d:24:55:ee:6b:d7:49:e9:7d:8e:67:a4:39:e8:c4: 00:71:dd:7f:aa:48:a1:81:87:b7:9e:b0:c5:7c:e1: 73:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:09:E6:7E:5F:8A:E4:6A:E3:E0:E5:BB:DA:C7:0D:E1:03:7A:A7:9A X509v3 Authority Key Identifier: keyid:2A:C0:AB:4B:5F:3B:B5:B0:EF:79:BD:21:A6:49:CA:FF:E7:F9:C2:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:3f:0d:52:be:6e:25:2b:2c:50:f8:2e:ca:49:de:79:5f:50: f8:14:15:68:35:76:f1:9b:0a:2d:1f:67:17:03:5d:33:76:6a: 6e:1f:a8:b4:29:d7:b6:74:c7:c2:f6:3a:cd:e1:96:2d:ff:0a: 51:96:ce:45:37:2b:53:fb:09:3a:ec:55:1a:47:98:13:fb:a4: 74:e6:25:c5:9f:b1:4a:84:e4:1b:e4:d8:55:f6:15:86:56:78: 1a:a4:0d:c9:6c:94:bc:c0:54:e6:79:03:9c:ef:73:0b:7c:10: 41:8f:41:8e:e5:75:ec:04:c3:72:0c:4f:1d:c2:44:b5:5e:a6: 0f:ee:64:ae:a5:8c:80:ea:8d:11:6b:86:cb:5d:67:b1:88:e1: 58:63:e6:5d:9b:16:a9:31:21:07:0f:d9:a8:56:0d:29:ab:64: 0c:e7:7f:e0:5e:64:b9:44:48:2f:2d:a0:e2:f4:3c:cd:b3:24: 75:02:cc:01:3c:f6:9a:58:50:5a:11:1e:03:5b:b3:8e:72:20: 84:f8:68:d8:1e:e9:9d:f0:9b:18:90:ce:b5:f4:ff:57:38:13: 8f:87:86:24:bd:b8:4d:ed:4a:a4:8c:e7:7f:8f:95:d6:b0:c9: 9b:4a:6e:fe:95:48:5a:7c:83:50:00:ba:7f:46:de:35:9e:67: 48:f8:a8:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyN0UxMTAvBgNVBAUTKDJBQzBBQjRCNUYzQkI1QjBFRjc5QkQyMUE2NDlDQUZG RTdGOUMyMEEwHhcNMjYwMzI0MTkxMjQ5WhcNMjYwMzMxMTkxMjQ5WjAYMRYwFAYD VQQDEw02OWMyZTIzMS1hNTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoYn2ZP8VKAdrDYc2KfnkjXOHBr5Kw8sD+GzB33RVhKuh4Anej/siL5KP1A61 v5oNjN6YnWhYvUdOEIcDftxKLLJ3TU2bvtcepI/eaQQWHBYr47f4q27rsrr66X0u sejh8gk58w3J40ayBEtlrqejGxq5bbZULPLUkXxlZ+svALbHuhdV1Ca3sBR1QMIh RYsNoa5UnQfeOPk8u8jkPTXnSFtHP6Onc+ytIEdYFlkVmb9L3XmCJ2XoYtOouo9s 0fZqiDkPUfO7HppCyUWR6+twhtfESpFPZK8kFNWHJ+F3zCGdJFXua9dJ6X2OZ6Q5 6MQAcd1/qkihgYe3nrDFfOFzhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHkJ5n5f iuRq4+Dlu9rHDeEDeqeaMB8GA1UdIwQYMBaAFCrAq0tfO7Ww73m9IaZJyv/n+cIK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI3RS9DQ0Q2RUQxQzY4 REYxMUVBOTdCMTU1MjRDNEY5QUUwMi9Lc0NyUzE4N3RiRHZlYjBocGtuS18tZjV3 Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tzQ3JTMTg3dGJEdmViMGhwa25LXy1mNXdnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI3RS9DQ0Q2RUQxQzY4REYxMUVBOTdCMTU1MjRDNEY5QUUwMi9Lc0NyUzE4N3Ri RHZlYjBocGtuS18tZjV3Z28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIT8NUr5uJSssUPguykneeV9Q+BQVaDV28ZsKLR9nFwNdM3Zqbh+otCnXtnTH wvY6zeGWLf8KUZbORTcrU/sJOuxVGkeYE/ukdOYlxZ+xSoTkG+TYVfYVhlZ4GqQN yWyUvMBU5nkDnO9zC3wQQY9BjuV17ATDcgxPHcJEtV6mD+5krqWMgOqNEWuGy11n sYjhWGPmXZsWqTEhBw/ZqFYNKatkDOd/4F5kuURILy2g4vQ8zbMkdQLMATz2mlhQ WhEeA1uzjnIghPho2B7pnfCbGJDOtfT/VzgTj4eGJL24Te1KpIznf4+V1rDJm0pu /pVIWnyDUAC6f0beNZ5nSPioCw== -----END CERTIFICATE-----Generated at Thu Mar 26 06:07:50 2026 by rpki-client