$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft File: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft (raw, json) Hash identifier: mBt25LPkAYrUFeggtv8+0Npi5/xDXbRDsQMT/OyOeAk= Subject key identifier: DA:45:7A:9A:DB:8F:B3:5C:E8:98:BA:A8:C2:BB:0A:F2:A7:A2:0E:93 Authority key identifier: 91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57 Certificate issuer: /CN=A91BC1CE/serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057 Certificate serial: 10FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft Manifest number: 10F0 Signing time: Thu 26 Mar 2026 17:14:31 +0000 Manifest this update: Thu 26 Mar 2026 17:14:30 +0000 Manifest next update: Thu 02 Apr 2026 17:14:30 +0000 Files and hashes: 1: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl (hash: CkSA49wVD/cL2u70oR+mfRBP8v7l9obdFvwtjJp6wvQ=) 2: 4178B83237ED11E99B3C9C4AC4F9AE02.roa (hash: 4agi+QhWWtUPKmH1/dW+seJgI+qk+4RdSuU9ar5oRKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 17:14:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4346 (0x10fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC1CE, serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057 Validity Not Before: Mar 26 17:14:30 2026 GMT Not After : Apr 2 17:14:30 2026 GMT Subject: CN=69c56976-1f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:74:e4:c7:2a:95:7f:43:8e:1f:d8:66:79:1b: 74:cf:2d:16:6a:01:1d:f3:15:f8:85:09:86:f3:ec: 69:e9:c1:dc:d7:96:7c:7c:56:5e:9f:f1:9f:3e:cd: 0b:4d:39:5d:68:1b:33:1d:4a:3a:87:9c:54:30:8e: 80:c0:0c:fc:0d:af:64:1b:9d:91:c2:d3:3a:57:31: cf:69:bf:1e:53:2d:eb:d1:8e:1d:0b:b3:e5:16:2e: 1b:d9:ec:d2:03:50:3d:b3:67:c1:70:c4:f4:38:d6: e7:4c:e3:c0:49:bf:43:5c:fa:3e:50:6c:7d:d2:61: 44:a5:2a:19:0c:76:c0:45:cc:af:f7:c5:b2:b1:11: 9f:b5:ed:93:ff:8c:70:b3:0d:2c:86:43:6e:60:2d: b7:e7:b5:c2:28:bf:b4:22:0e:d1:aa:d7:1c:c2:7c: 73:48:0f:b8:f9:4a:c1:a4:f4:c2:06:f4:b5:91:be: 8f:04:6a:e4:32:e8:5b:ba:02:8d:33:dd:7a:6b:4b: da:a4:22:7b:6c:0d:36:36:ab:51:52:cf:6e:97:76: 5c:0b:6f:04:ae:00:8f:74:f4:3f:e5:69:75:24:33: 1c:59:b0:9c:36:d0:00:f4:52:c5:81:18:2f:41:26: fb:2b:95:d8:f7:7d:31:72:b1:ce:7a:05:bf:22:5d: 19:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:45:7A:9A:DB:8F:B3:5C:E8:98:BA:A8:C2:BB:0A:F2:A7:A2:0E:93 X509v3 Authority Key Identifier: keyid:91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:a9:b6:02:bb:da:eb:0a:89:22:aa:91:fa:70:dc:fe:49:5d: bd:2d:b3:22:0c:18:9a:9a:b6:1d:03:87:e6:0b:3c:12:ea:b6: 89:5b:d7:38:9f:2a:91:9a:67:12:9a:ae:75:e8:02:a7:0a:70: 72:11:90:d9:51:bb:9a:88:df:43:b7:ca:cd:86:08:56:67:5b: 17:26:e9:64:ec:5b:bd:04:4c:87:34:f2:0d:d6:12:23:49:e8: 58:f9:0a:fa:ea:66:3a:7b:83:c1:8f:00:1e:28:0d:7c:17:fb: 29:23:65:49:e5:03:00:5f:ad:fb:a8:7e:07:1e:a1:b3:a1:55: b8:55:c2:3c:9b:43:bf:48:e1:2d:4c:c3:1a:53:23:12:ab:1b: 01:28:2e:ee:18:88:2f:b7:0d:43:e3:5f:6c:91:1b:1c:cc:0a: 1a:d5:77:01:5f:3e:71:a3:06:21:0b:e7:cf:e0:71:76:96:2e: 6a:3f:b1:c0:53:ef:03:af:33:03:f1:ce:b2:24:f7:b1:95:4c: 99:b4:84:35:ee:a6:73:51:55:d9:ac:5d:98:0d:b8:9d:f5:66: e0:cf:b5:6a:06:ba:ff:6a:65:be:72:5d:a5:6f:20:ec:7f:e4: af:c4:71:51:6e:3b:2b:ef:c8:96:d0:b2:a4:ad:62:22:52:fc: 50:36:c6:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMxQ0UxMTAvBgNVBAUTKDkxRjJERTY3QzhFNjVCQjUzM0VEOEYzQzY0RjMyREY5 QzY5NUMwNTcwHhcNMjYwMzI2MTcxNDMwWhcNMjYwNDAyMTcxNDMwWjAYMRYwFAYD VQQDEw02OWM1Njk3Ni0xZjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnTkxyqVf0OOH9hmeRt0zy0WagEd8xX4hQmG8+xp6cHc15Z8fFZen/GfPs0L TTldaBszHUo6h5xUMI6AwAz8Da9kG52RwtM6VzHPab8eUy3r0Y4dC7PlFi4b2ezS A1A9s2fBcMT0ONbnTOPASb9DXPo+UGx90mFEpSoZDHbARcyv98WysRGfte2T/4xw sw0shkNuYC2357XCKL+0Ig7RqtccwnxzSA+4+UrBpPTCBvS1kb6PBGrkMuhbugKN M916a0vapCJ7bA02NqtRUs9ul3ZcC28ErgCPdPQ/5Wl1JDMcWbCcNtAA9FLFgRgv QSb7K5XY930xcrHOegW/Il0ZFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNpFeprb j7Nc6Ji6qMK7CvKnog6TMB8GA1UdIwQYMBaAFJHy3mfI5lu1M+2PPGTzLfnGlcBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzFDRS8yNEZBNjBFNDM3 RUMxMUU5QTg3NUU4NDhDNEY5QUUwMi9rZkxlWjhqbVc3VXo3WTg4WlBNdC1jYVZ3 RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmTGVaOGptVzdVejdZODhaUE10LWNhVndGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzFDRS8yNEZBNjBFNDM3RUMxMUU5QTg3NUU4NDhDNEY5QUUwMi9rZkxlWjhqbVc3 VXo3WTg4WlBNdC1jYVZ3RmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAram2Arva6wqJIqqR+nDc/kldvS2zIgwYmpq2HQOH5gs8Euq2iVvXOJ8qkZpn EpqudegCpwpwchGQ2VG7mojfQ7fKzYYIVmdbFybpZOxbvQRMhzTyDdYSI0noWPkK +upmOnuDwY8AHigNfBf7KSNlSeUDAF+t+6h+Bx6hs6FVuFXCPJtDv0jhLUzDGlMj EqsbASgu7hiIL7cNQ+NfbJEbHMwKGtV3AV8+caMGIQvnz+BxdpYuaj+xwFPvA68z A/HOsiT3sZVMmbSENe6mc1FV2axdmA24nfVm4M+1aga6/2plvnJdpW8g7H/kr8Rx UW47K+/IltCypK1iIlL8UDbGMw== -----END CERTIFICATE-----Generated at Sat Mar 28 12:15:23 2026 by rpki-client