$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft File: Ktu3GxFSPKM5Ll832dx2shHb4IM.mft (raw, json) Hash identifier: b4AYLbBDewgArvDqbqWK3661gV3IyaiboLEHIUKfSw0= Subject key identifier: B5:23:68:9F:08:E9:5B:1E:79:C2:4F:D7:F7:09:9F:E7:D3:87:C8:DC Authority key identifier: 2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83 Certificate issuer: /CN=A91C8347/serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083 Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft Manifest number: 0184 Signing time: Wed 25 Mar 2026 04:02:35 +0000 Manifest this update: Wed 25 Mar 2026 04:02:35 +0000 Manifest next update: Wed 01 Apr 2026 04:02:35 +0000 Files and hashes: 1: Ktu3GxFSPKM5Ll832dx2shHb4IM.crl (hash: 9eNlszYeMHHM+hbjyrYF6LpjA2pXDCjH8xc8Zg8hF8c=) 2: 34C7EB4010F411EFB4CD9614C4F9AE02.roa (hash: x/bgawUh/ekhizQsMMTbBFbp2PQnJdzq20ib+LnBc+A=) 3: F4777FBEEDDA11EF9731160CC4F9AE02.roa (hash: sZTUTJvgxgWJhUoK93A1p1nM08bMCHTb48BCqzgU1N4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.crl rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:02:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8347, serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083 Validity Not Before: Mar 25 04:02:35 2026 GMT Not After : Apr 1 04:02:35 2026 GMT Subject: CN=69c35e5b-d3b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:06:37:c9:82:0c:23:a4:f3:3a:08:f9:9a:3f: 84:03:98:ad:c8:e8:0c:0f:30:ed:4f:80:1e:c5:59: a3:46:ae:13:51:84:95:d0:e4:db:87:1f:04:62:8a: 9d:4e:6e:c6:e3:7b:94:a2:43:62:23:57:7c:a2:68: 85:bf:be:6e:93:8c:20:4b:46:35:85:a2:01:d4:cb: 01:c2:84:e6:de:dd:4c:51:4f:b8:ae:ba:e4:89:12: 60:e2:02:c3:32:91:7b:d0:c2:33:d3:60:16:2f:c7: 7d:ce:a6:33:e6:bb:de:d6:c9:d6:a1:bc:de:cd:3d: 04:ec:43:69:26:a9:39:62:fe:b5:e9:4f:6c:b2:81: 10:0d:b5:80:9f:17:41:74:5f:27:60:c2:fb:18:4a: 63:ad:98:3f:4f:26:6f:07:60:b6:40:b8:5a:c2:92: 30:2d:fa:b8:7d:f6:4a:26:0b:1a:63:7b:46:f5:75: 2b:85:41:55:13:70:25:ac:d1:e6:f6:21:e5:b3:02: 42:d4:9a:a0:6f:58:8d:4b:ee:d4:ca:e1:cd:9d:39: 9e:e5:29:47:50:95:0e:c3:44:8e:ed:30:e6:f3:a8: 02:ec:e1:2b:89:f2:a0:3b:d5:74:f5:f4:ac:2f:31: 3c:35:12:06:9d:8e:fd:86:92:58:b7:c1:de:dc:81: 04:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:23:68:9F:08:E9:5B:1E:79:C2:4F:D7:F7:09:9F:E7:D3:87:C8:DC X509v3 Authority Key Identifier: keyid:2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:1c:bd:5a:dc:98:df:3d:92:32:af:57:8e:1c:c5:85:a8:4c: d6:4e:1d:9a:3b:94:27:ce:34:fe:b6:43:82:a1:61:53:80:a5: 09:13:ef:5a:81:e9:f4:b2:03:e6:e2:95:b0:d4:1e:84:dc:7f: b4:34:c3:01:44:d5:43:f8:11:6a:9d:c1:dd:db:14:bb:47:73: a8:bd:d9:c5:02:84:69:29:6c:c0:47:17:28:74:18:61:54:6e: db:c0:c4:b7:83:62:af:34:12:55:57:01:bd:86:4c:c4:57:9d: 41:a8:54:d0:89:b6:ba:29:36:c2:bb:b1:a1:dc:f3:b8:22:9c: a0:3d:d7:08:c8:9d:58:32:35:10:72:2b:84:29:82:1a:2a:75: e4:5a:b4:3d:ed:52:04:16:47:05:02:2b:2d:2d:6b:b5:fa:96: 3d:e8:0c:79:b5:5b:36:c3:6f:aa:8c:ba:d2:43:d7:5b:c9:7f: 87:f2:69:30:31:90:b1:e1:3e:3e:aa:bf:29:82:95:f0:0d:74: ac:a1:0c:99:f5:63:3b:25:3f:6e:69:d3:69:bd:a0:4b:5b:d7: be:4d:14:5a:61:82:e8:ab:fb:8c:c0:77:6a:0e:70:67:0c:5a: 57:8c:d1:c6:9c:25:88:87:32:19:d4:75:ed:f6:4a:2f:9d:54: da:e6:a5:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgzNDcxMTAvBgNVBAUTKDJBREJCNzFCMTE1MjNDQTMzOTJFNUYzN0Q5REM3NkIy MTFEQkUwODMwHhcNMjYwMzI1MDQwMjM1WhcNMjYwNDAxMDQwMjM1WjAYMRYwFAYD VQQDEw02OWMzNWU1Yi1kM2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmwY3yYIMI6TzOgj5mj+EA5ityOgMDzDtT4AexVmjRq4TUYSV0OTbhx8EYoqd Tm7G43uUokNiI1d8omiFv75uk4wgS0Y1haIB1MsBwoTm3t1MUU+4rrrkiRJg4gLD MpF70MIz02AWL8d9zqYz5rve1snWobzezT0E7ENpJqk5Yv616U9ssoEQDbWAnxdB dF8nYML7GEpjrZg/TyZvB2C2QLhawpIwLfq4ffZKJgsaY3tG9XUrhUFVE3AlrNHm 9iHlswJC1Jqgb1iNS+7UyuHNnTme5SlHUJUOw0SO7TDm86gC7OErifKgO9V09fSs LzE8NRIGnY79hpJYt8He3IEENwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLUjaJ8I 6VseecJP1/cJn+fTh8jcMB8GA1UdIwQYMBaAFCrbtxsRUjyjOS5fN9ncdrIR2+CD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODM0Ny9DM0U3MjE5MEY5 QTkxMUVFQTgyQTc5MUFDNEY5QUUwMi9LdHUzR3hGU1BLTTVMbDgzMmR4MnNoSGI0 SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t0dTNHeEZTUEtNNUxsODMyZHgyc2hIYjRJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODM0Ny9DM0U3MjE5MEY5QTkxMUVFQTgyQTc5MUFDNEY5QUUwMi9LdHUzR3hGU1BL TTVMbDgzMmR4MnNoSGI0SU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMxy9WtyY3z2SMq9XjhzFhahM1k4dmjuUJ840/rZDgqFhU4ClCRPvWoHp9LID 5uKVsNQehNx/tDTDAUTVQ/gRap3B3dsUu0dzqL3ZxQKEaSlswEcXKHQYYVRu28DE t4NirzQSVVcBvYZMxFedQahU0Im2uik2wruxodzzuCKcoD3XCMidWDI1EHIrhCmC Gip15Fq0Pe1SBBZHBQIrLS1rtfqWPegMebVbNsNvqoy60kPXW8l/h/JpMDGQseE+ Pqq/KYKV8A10rKEMmfVjOyU/bmnTab2gS1vXvk0UWmGC6Kv7jMB3ag5wZwxaV4zR xpwliIcyGdR17fZKL51U2ualZA== -----END CERTIFICATE-----Generated at Thu Mar 26 06:45:36 2026 by rpki-client