$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft File: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft (raw, json) Hash identifier: lfQ1FDNIKYimPtRcUsboZDEZX01MPzIG1NPNv6aHA6s= Subject key identifier: BB:8D:40:77:23:B5:29:43:6B:24:27:EC:2F:0F:3A:C0:50:C7:0B:56 Authority key identifier: 90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23 Certificate issuer: /CN=A91EC4DD/serialNumber=90C3D8351726A8B91DE26D46811283435CC52623 Certificate serial: 077A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft Manifest number: 0771 Signing time: Tue 24 Mar 2026 21:21:27 +0000 Manifest this update: Tue 24 Mar 2026 21:21:27 +0000 Manifest next update: Tue 31 Mar 2026 21:21:27 +0000 Files and hashes: 1: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl (hash: MoK98rRNW0ZH1hHTOyBBuh3+oBgDMHaIPkSVMood2Fc=) 2: AFCD8352557E11EBACB5CE3BC4F9AE02.roa (hash: TiUPjLdVglIkEHQL/X4tGGIetQbXseZVHM8jybp8qAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:21:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1914 (0x77a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC4DD, serialNumber=90C3D8351726A8B91DE26D46811283435CC52623 Validity Not Before: Mar 24 21:21:27 2026 GMT Not After : Mar 31 21:21:27 2026 GMT Subject: CN=69c30057-2ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d0:e8:3c:a5:90:ff:49:bc:c6:9c:19:54:2c: e0:a2:29:c0:46:d6:87:b5:83:64:6c:d1:b7:f1:bf: 64:fe:4c:10:b3:98:e4:cd:db:bd:74:63:9a:b1:bd: 60:aa:2f:25:d0:c7:88:32:09:3d:80:b0:85:f4:ee: 47:64:0a:bd:73:41:5e:5c:4d:ab:43:0e:e5:db:9f: ed:43:db:d0:70:5a:da:e6:af:56:d0:d5:2e:81:ae: 71:f7:fb:4d:1b:2f:d7:67:59:7a:e5:aa:67:3e:c4: 91:10:0f:d8:cb:6d:73:c2:b8:9e:72:4a:7c:a9:31: 04:cd:b5:0e:60:26:d2:05:b1:64:25:17:83:24:c7: d8:a5:73:82:58:02:ff:cd:06:3e:e1:14:e4:18:16: 23:6d:5f:07:dc:a3:9e:fe:02:10:bb:6e:8a:6f:65: f0:92:69:81:fc:db:da:d7:b4:44:5b:95:dd:0e:8f: df:ca:4c:60:fc:6f:a3:24:5d:69:7f:81:3f:53:53: d4:c1:4f:01:bf:2f:58:e6:ef:6b:35:35:41:14:7b: 86:29:65:c8:16:34:7a:f9:0b:f7:b3:37:f8:03:cc: 1c:9c:a4:7e:3d:e0:e1:5f:ce:12:3e:f8:ca:b8:cf: 79:c5:c7:91:85:74:6c:e6:e3:90:23:46:ed:d8:61: 13:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8D:40:77:23:B5:29:43:6B:24:27:EC:2F:0F:3A:C0:50:C7:0B:56 X509v3 Authority Key Identifier: keyid:90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:61:fe:25:be:2a:47:74:f1:62:55:d7:e5:73:b2:f1:df:d9: b7:48:1e:a3:4b:8e:1c:5e:e4:ee:99:ae:b3:a6:f7:da:dc:7d: cc:f0:91:06:12:e4:7a:f5:4d:2a:7b:93:74:9d:a7:57:f1:5e: 4c:c7:85:6b:32:a8:54:6b:92:d5:c4:66:2d:7e:20:90:ec:16: d6:f2:c4:31:c1:81:02:83:d4:11:54:6f:99:2c:51:18:e2:a6: 4d:bc:d4:4f:d4:6a:83:6d:b6:ec:ad:c7:7f:3a:4b:79:65:e3: f2:82:5a:f5:97:53:0c:45:5c:c4:bd:98:17:cd:43:93:ca:57: 0f:41:55:1b:8d:46:d6:1c:99:d4:40:1e:03:9a:bc:3c:0d:b4: cd:24:76:a9:ba:83:71:ae:f6:9b:a2:33:40:2f:67:ed:91:51: 37:bf:ca:c0:43:d7:76:1d:a4:56:06:69:3e:18:71:f2:ee:09: f0:2f:c6:85:d1:5d:05:5e:93:c5:8c:a9:18:6c:03:b7:ff:46: 38:ad:2f:d2:8a:a7:76:f0:df:28:56:91:2d:04:2e:96:80:1c: 64:3a:73:1e:5e:dc:9c:b6:2d:79:5a:0c:a1:f9:e1:4f:48:33: ec:06:46:ed:08:92:ff:57:b9:30:7c:46:c7:ce:54:ab:49:90: 92:72:cd:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM0REQxMTAvBgNVBAUTKDkwQzNEODM1MTcyNkE4QjkxREUyNkQ0NjgxMTI4MzQz NUNDNTI2MjMwHhcNMjYwMzI0MjEyMTI3WhcNMjYwMzMxMjEyMTI3WjAYMRYwFAYD VQQDEw02OWMzMDA1Ny0yY2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmtDoPKWQ/0m8xpwZVCzgoinARtaHtYNkbNG38b9k/kwQs5jkzdu9dGOasb1g qi8l0MeIMgk9gLCF9O5HZAq9c0FeXE2rQw7l25/tQ9vQcFra5q9W0NUuga5x9/tN Gy/XZ1l65apnPsSREA/Yy21zwrieckp8qTEEzbUOYCbSBbFkJReDJMfYpXOCWAL/ zQY+4RTkGBYjbV8H3KOe/gIQu26Kb2XwkmmB/Nva17REW5XdDo/fykxg/G+jJF1p f4E/U1PUwU8Bvy9Y5u9rNTVBFHuGKWXIFjR6+Qv3szf4A8wcnKR+PeDhX84SPvjK uM95xceRhXRs5uOQI0bt2GETVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLuNQHcj tSlDayQn7C8POsBQxwtWMB8GA1UdIwQYMBaAFJDD2DUXJqi5HeJtRoESg0NcxSYj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzRERC9CODhDMjI0QzU1 N0QxMUVCQjQ5MEI1M0JDNEY5QUUwMi9rTVBZTlJjbXFMa2Q0bTFHZ1JLRFExekZK aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tNUFlOUmNtcUxrZDRtMUdnUktEUTF6RkppTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzRERC9CODhDMjI0QzU1N0QxMUVCQjQ5MEI1M0JDNEY5QUUwMi9rTVBZTlJjbXFM a2Q0bTFHZ1JLRFExekZKaU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ2H+Jb4qR3TxYlXX5XOy8d/Zt0geo0uOHF7k7pmus6b32tx9zPCRBhLkevVN KnuTdJ2nV/FeTMeFazKoVGuS1cRmLX4gkOwW1vLEMcGBAoPUEVRvmSxRGOKmTbzU T9Rqg2227K3HfzpLeWXj8oJa9ZdTDEVcxL2YF81Dk8pXD0FVG41G1hyZ1EAeA5q8 PA20zSR2qbqDca72m6IzQC9n7ZFRN7/KwEPXdh2kVgZpPhhx8u4J8C/GhdFdBV6T xYypGGwDt/9GOK0v0oqndvDfKFaRLQQuloAcZDpzHl7cnLYteVoMofnhT0gz7AZG 7QiS/1e5MHxGx85Uq0mQknLNCw== -----END CERTIFICATE-----Generated at Thu Mar 26 20:59:34 2026 by rpki-client