$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft File: KMruhJZWnFc8PlsYkMWhs0z8jjA.mft (raw, json) Hash identifier: FKUSgQUmMXCV++p3s6Fep8FBVqFbZzgYX5qW7IH3uUo= Subject key identifier: AA:47:03:2D:2C:84:AB:ED:A7:11:C3:38:10:84:E8:01:29:CF:B9:E2 Authority key identifier: 28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30 Certificate issuer: /CN=A91E4EF6/serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30 Certificate serial: 078B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft Manifest number: 127D Signing time: Tue 24 Mar 2026 19:08:17 +0000 Manifest this update: Tue 24 Mar 2026 19:08:17 +0000 Manifest next update: Tue 31 Mar 2026 19:08:17 +0000 Files and hashes: 1: KMruhJZWnFc8PlsYkMWhs0z8jjA.crl (hash: KtgtRy+bpt9KIsXGOU3w4QZPr2RMk6z7dqx8yuWjsfs=) 2: 377B6620506B11EBAD849641C4F9AE02.roa (hash: 7lVvPvKm0jDrCtO8FOe2rLzoGXgVOgfwoKgNAbdQ/CA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:08:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1931 (0x78b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF6, serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30 Validity Not Before: Mar 24 19:08:17 2026 GMT Not After : Mar 31 19:08:17 2026 GMT Subject: CN=69c2e121-4f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f1:0c:f6:e1:3e:07:80:50:3e:c1:87:44:18: e1:d4:c6:fa:73:c6:e6:71:6b:a2:41:4c:af:67:a7: 6e:69:c8:94:4c:0b:28:09:7f:6a:a8:93:1b:cb:46: d2:38:d3:a1:f8:cf:7d:53:9f:6c:11:36:7b:91:79: 7c:c7:96:25:54:6b:f5:bf:1f:6e:37:b8:8b:b3:ee: bd:8d:e9:6a:52:66:1f:0d:03:9c:ab:b7:85:ec:2c: 74:e2:d9:8e:b7:a8:04:8b:13:f7:e3:c4:bf:49:d9: d1:36:ca:59:b1:dd:87:dd:38:78:da:ce:b6:16:9d: e5:64:b3:8b:35:37:39:c5:5d:a4:d5:f6:42:f8:e4: 67:4c:64:71:da:b0:af:c9:b3:d6:c1:24:50:ad:95: 4c:d1:d4:1a:c6:cb:76:39:e2:43:5c:ba:9d:a0:97: e3:6b:7c:c2:24:dd:d6:b1:a1:ad:1e:25:92:57:17: 7d:dd:56:b4:31:33:a0:17:ea:70:2a:b3:13:24:62: 2e:d8:cc:69:ee:34:13:82:87:9e:39:91:6a:32:9c: 31:ce:9d:7a:e3:23:e7:56:b1:b0:8b:28:2c:6e:d9: 16:d4:5f:93:12:22:ae:95:23:d3:89:e3:4a:dd:81: 79:b5:ca:52:ae:65:b7:6c:3c:ab:1b:a8:f0:08:59: 05:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:47:03:2D:2C:84:AB:ED:A7:11:C3:38:10:84:E8:01:29:CF:B9:E2 X509v3 Authority Key Identifier: keyid:28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:56:af:a2:2e:3c:56:aa:fd:2c:7b:70:36:24:24:0b:c1:4a: 8b:e1:13:6a:51:26:7f:32:a5:6b:2c:0b:9f:4d:0a:91:a9:2a: c5:3b:ab:79:4b:9b:1d:c5:4e:89:cb:76:f4:d2:25:17:40:8e: 7f:6d:20:26:0d:8c:16:c5:f2:a9:39:d9:52:d4:ab:68:16:fc: 90:8b:81:c1:4e:ed:95:20:d6:14:35:df:0a:39:67:be:93:8f: 9f:df:1b:34:72:b6:dc:25:7e:e9:ca:48:20:41:70:4f:f4:5f: 23:96:d3:e4:ed:1f:4d:d7:84:5f:2e:df:a8:65:d0:82:de:95: 03:ea:c3:0c:9f:83:f2:47:d7:a1:90:d6:31:48:92:33:30:ee: cf:b8:80:0b:5d:05:db:36:e5:b2:ba:33:01:e8:fe:4c:4b:fd: 9d:4a:1d:71:40:dd:05:46:5e:86:69:84:e7:a1:95:52:ec:f1: 95:ac:93:0d:28:cb:49:34:f1:a4:8a:cb:ea:08:63:9f:d1:56: 13:0e:ad:18:10:b1:c6:cd:35:58:d3:b4:e3:df:b3:1c:b4:01: 94:dc:99:96:46:bd:9c:67:a9:ae:62:ae:64:0c:0f:73:2e:31: fb:dd:d2:25:f2:83:fc:18:68:85:9f:b8:51:d4:bf:e3:19:6b: 19:d5:26:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjYxMTAvBgNVBAUTKDI4Q0FFRTg0OTY1NjlDNTczQzNFNUIxODkwQzVBMUIz NENGQzhFMzAwHhcNMjYwMzI0MTkwODE3WhcNMjYwMzMxMTkwODE3WjAYMRYwFAYD VQQDEw02OWMyZTEyMS00ZjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPEM9uE+B4BQPsGHRBjh1Mb6c8bmcWuiQUyvZ6duaciUTAsoCX9qqJMby0bS ONOh+M99U59sETZ7kXl8x5YlVGv1vx9uN7iLs+69jelqUmYfDQOcq7eF7Cx04tmO t6gEixP348S/SdnRNspZsd2H3Th42s62Fp3lZLOLNTc5xV2k1fZC+ORnTGRx2rCv ybPWwSRQrZVM0dQaxst2OeJDXLqdoJfja3zCJN3WsaGtHiWSVxd93Va0MTOgF+pw KrMTJGIu2Mxp7jQTgoeeOZFqMpwxzp164yPnVrGwiygsbtkW1F+TEiKulSPTieNK 3YF5tcpSrmW3bDyrG6jwCFkF5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKpHAy0s hKvtpxHDOBCE6AEpz7niMB8GA1UdIwQYMBaAFCjK7oSWVpxXPD5bGJDFobNM/I4w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNi85MzgwMDc4RTYx RDYxMUVBQjhEMDE1NUJDNEY5QUUwMi9LTXJ1aEpaV25GYzhQbHNZa01XaHMwejhq akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tNcnVoSlpXbkZjOFBsc1lrTVdoczB6OGpqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNi85MzgwMDc4RTYxRDYxMUVBQjhEMDE1NUJDNEY5QUUwMi9LTXJ1aEpaV25G YzhQbHNZa01XaHMwejhqakEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt1avoi48Vqr9LHtwNiQkC8FKi+ETalEmfzKlaywLn00KkakqxTureUubHcVO ict29NIlF0COf20gJg2MFsXyqTnZUtSraBb8kIuBwU7tlSDWFDXfCjlnvpOPn98b NHK23CV+6cpIIEFwT/RfI5bT5O0fTdeEXy7fqGXQgt6VA+rDDJ+D8kfXoZDWMUiS MzDuz7iAC10F2zblsrozAej+TEv9nUodcUDdBUZehmmE56GVUuzxlayTDSjLSTTx pIrL6ghjn9FWEw6tGBCxxs01WNO049+zHLQBlNyZlka9nGeprmKuZAwPcy4x+93S JfKD/BhohZ+4UdS/4xlrGdUmlw== -----END CERTIFICATE-----Generated at Thu Mar 26 19:09:57 2026 by rpki-client