$ rpki-client -vvf rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft File: Km8SBBLYIPn_JM0F1ez0nmYtmco.mft (raw, json) Hash identifier: xYbDGvRayjYmcFU6cwQW/O3clDJ0w3kAApOeKglNiOI= Subject key identifier: D1:66:AB:AA:3E:34:48:3F:50:ED:D1:50:5A:CE:CB:7D:FA:EB:A4:72 Authority key identifier: 2A:6F:12:04:12:D8:20:F9:FF:24:CD:05:D5:EC:F4:9E:66:2D:99:CA Certificate issuer: /CN=A91F240B/serialNumber=2A6F120412D820F9FF24CD05D5ECF49E662D99CA Certificate serial: 201D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft Manifest number: 200D Signing time: Thu 26 Mar 2026 15:57:28 +0000 Manifest this update: Thu 26 Mar 2026 15:57:27 +0000 Manifest next update: Thu 02 Apr 2026 15:57:27 +0000 Files and hashes: 1: Km8SBBLYIPn_JM0F1ez0nmYtmco.crl (hash: i2JhylD3agPsxZR51Ucj/MPStkP/a9d85vZhXdOksDE=) 2: E352E0A2896F11E7BBF2923CC4F9AE02.roa (hash: f53n49BRZ+a4OFczbu9IHjhQmjnGPixaP4vK3+8G2j0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.crl rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8221 (0x201d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F240B, serialNumber=2A6F120412D820F9FF24CD05D5ECF49E662D99CA Validity Not Before: Mar 26 15:57:27 2026 GMT Not After : Apr 2 15:57:27 2026 GMT Subject: CN=69c55768-42da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9d:a0:44:7f:e2:3d:e1:eb:1c:92:71:67:cf: 08:d5:be:bb:3e:e8:55:56:79:6a:49:9d:6f:4b:e5: 64:3b:8c:b6:a0:dc:0a:4c:5a:df:f8:84:01:42:0c: 02:3d:41:80:f5:54:f9:83:64:ed:03:1e:0c:b3:f0: fb:dd:01:4f:eb:28:e9:cd:98:c2:54:e8:a0:6c:79: 70:d4:67:55:7d:38:9b:34:b9:2a:42:d5:82:7d:2b: 87:1f:c6:e6:18:a3:8f:64:e7:6d:f6:2f:bd:93:5e: b5:03:83:e6:cf:c4:bf:61:90:70:a7:b3:70:d4:4a: c0:f5:ad:de:d9:e8:69:d5:cd:f5:b7:58:ce:04:29: 0d:ff:41:8a:00:40:8b:a3:74:14:3c:ba:d8:73:2f: c5:43:bd:b7:8e:11:7a:ff:13:4b:05:82:32:c3:df: 9d:dc:bc:74:65:11:c1:a9:74:d6:a1:be:fc:8a:e1: 4b:16:16:ae:95:9d:16:9f:e2:f1:a5:b3:d2:92:95: d4:92:58:36:c8:27:87:9e:6f:ed:b9:24:29:09:4c: 28:b1:63:a8:6c:72:a2:a6:6e:1f:8f:43:78:fc:e7: e0:6f:60:57:a8:92:3e:ad:cd:3f:7e:79:fa:88:38: f4:8e:15:4f:64:e7:88:6c:a7:0c:9a:16:32:1c:48: 5e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:66:AB:AA:3E:34:48:3F:50:ED:D1:50:5A:CE:CB:7D:FA:EB:A4:72 X509v3 Authority Key Identifier: keyid:2A:6F:12:04:12:D8:20:F9:FF:24:CD:05:D5:EC:F4:9E:66:2D:99:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:3b:4c:a8:ef:23:48:eb:b6:39:06:79:4a:dd:b4:79:ce:cc: 58:61:b9:b5:e9:3d:f0:04:64:72:60:a4:5a:5a:e1:3e:be:60: 45:58:f5:91:6c:02:3f:dd:21:8a:f5:91:77:1d:b4:8d:19:7e: 25:2d:5f:1e:95:1f:15:09:62:c3:00:37:57:53:65:6f:ac:bd: fc:a4:d9:10:9f:ed:a1:90:21:6c:85:27:44:63:3a:ff:20:b0: 95:92:d5:3e:9c:d3:a8:10:9d:78:32:37:a8:e3:4b:7a:2f:30: f0:28:58:17:e9:ae:0d:95:f9:58:5c:f1:c3:05:49:e4:2b:65: 92:b2:be:d7:69:59:6c:cc:08:75:f3:07:8a:8b:e5:32:0c:d0: d0:04:2d:15:a9:f4:b8:31:c9:22:ce:76:99:5e:d3:80:32:1c: 78:ff:40:54:69:bc:2e:3f:ff:45:29:66:7c:88:58:d7:58:f3: 69:1e:e5:b1:19:da:a9:92:8e:30:05:2d:aa:1d:c3:c3:fb:6c: 5c:25:f2:57:c0:94:1b:52:ec:9d:3b:7b:7d:4d:82:5c:7b:70: 57:4b:e8:73:88:fb:38:7e:8d:ed:ec:76:ba:16:fc:ac:fe:99: af:f5:09:5d:5a:a3:36:8c:4d:82:33:fa:1c:48:42:9a:82:c0: f0:09:13:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjI0MEIxMTAvBgNVBAUTKDJBNkYxMjA0MTJEODIwRjlGRjI0Q0QwNUQ1RUNGNDlF NjYyRDk5Q0EwHhcNMjYwMzI2MTU1NzI3WhcNMjYwNDAyMTU1NzI3WjAYMRYwFAYD VQQDEw02OWM1NTc2OC00MmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkp2gRH/iPeHrHJJxZ88I1b67PuhVVnlqSZ1vS+VkO4y2oNwKTFrf+IQBQgwC PUGA9VT5g2TtAx4Ms/D73QFP6yjpzZjCVOigbHlw1GdVfTibNLkqQtWCfSuHH8bm GKOPZOdt9i+9k161A4Pmz8S/YZBwp7Nw1ErA9a3e2ehp1c31t1jOBCkN/0GKAECL o3QUPLrYcy/FQ723jhF6/xNLBYIyw9+d3Lx0ZRHBqXTWob78iuFLFhaulZ0Wn+Lx pbPSkpXUklg2yCeHnm/tuSQpCUwosWOobHKipm4fj0N4/Ofgb2BXqJI+rc0/fnn6 iDj0jhVPZOeIbKcMmhYyHEheEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNFmq6o+ NEg/UO3RUFrOy33666RyMB8GA1UdIwQYMBaAFCpvEgQS2CD5/yTNBdXs9J5mLZnK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjQwQi81QjczNkQ5MjQz MzMxMUU2OTU5QTc4MTVDNEY5QUUwMi9LbThTQkJMWUlQbl9KTTBGMWV6MG5tWXRt Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ttOFNCQkxZSVBuX0pNMEYxZXowbm1ZdG1jby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjQwQi81QjczNkQ5MjQzMzMxMUU2OTU5QTc4MTVDNEY5QUUwMi9LbThTQkJMWUlQ bl9KTTBGMWV6MG5tWXRtY28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUztMqO8jSOu2OQZ5St20ec7MWGG5tek98ARkcmCkWlrhPr5gRVj1kWwCP90h ivWRdx20jRl+JS1fHpUfFQliwwA3V1Nlb6y9/KTZEJ/toZAhbIUnRGM6/yCwlZLV PpzTqBCdeDI3qONLei8w8ChYF+muDZX5WFzxwwVJ5CtlkrK+12lZbMwIdfMHiovl MgzQ0AQtFan0uDHJIs52mV7TgDIceP9AVGm8Lj//RSlmfIhY11jzaR7lsRnaqZKO MAUtqh3Dw/tsXCXyV8CUG1LsnTt7fU2CXHtwV0voc4j7OH6N7ex2uhb8rP6Zr/UJ XVqjNoxNgjP6HEhCmoLA8AkTzA== -----END CERTIFICATE-----Generated at Thu Mar 26 20:42:24 2026 by rpki-client