$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft File: Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft (raw, json) Hash identifier: SnU7VYYqoRS3PxJOcXqaPrBCaDu+WmklUhqBrJ8N5qA= Subject key identifier: 83:3A:E6:0F:0D:80:CD:76:DF:5C:DB:1B:60:E3:8B:85:46:38:79:9E Authority key identifier: 29:AD:B3:9B:62:0E:AE:3C:B8:AF:CA:2C:A1:85:F5:C4:87:6F:D0:43 Certificate issuer: /CN=A91FC985/serialNumber=29ADB39B620EAE3CB8AFCA2CA185F5C4876FD043 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft Manifest number: CC Signing time: Wed 25 Mar 2026 06:02:10 +0000 Manifest this update: Wed 25 Mar 2026 06:02:10 +0000 Manifest next update: Wed 01 Apr 2026 06:02:10 +0000 Files and hashes: 1: Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl (hash: eHlmesmDkb9F2uYQMYUATvlK1NVrnf6TbAV4UiirCMA=) 2: DA3E289CF5B811EFA1046714C4F9AE02.roa (hash: oaeasOGheSroKPV3LiPVQfpD09ef36G8xHY2SVCQJWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC985, serialNumber=29ADB39B620EAE3CB8AFCA2CA185F5C4876FD043 Validity Not Before: Mar 25 06:02:10 2026 GMT Not After : Apr 1 06:02:10 2026 GMT Subject: CN=69c37a62-8ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f8:9f:a3:b3:4b:e8:0c:df:3f:45:77:8c:4e: 2d:ed:19:ca:cc:ba:46:04:94:09:f3:6f:a7:35:fe: 12:0e:55:93:a6:d1:5b:a4:f8:36:76:57:c5:89:10: 8e:00:b0:0b:4d:76:1b:ab:4b:51:a1:8f:4f:b5:58: b2:2b:f0:6a:81:19:3d:78:ff:1b:52:d4:93:9a:f8: 72:d2:c5:f1:be:85:d3:52:fc:4d:50:9e:d0:c3:a6: d9:37:5f:40:33:cd:90:37:b6:a6:1b:5d:82:49:33: 7c:55:2d:3a:36:f9:33:05:b6:57:17:69:f0:fc:ad: fa:8d:8b:58:c9:45:81:54:d0:8d:cf:e4:2a:d4:1b: d7:59:da:8b:05:76:4e:b4:bf:d8:82:23:11:9e:e2: ef:3c:ea:b3:62:56:d5:fb:a4:ed:b3:02:c5:a9:65: f4:4d:85:05:e9:c4:54:f3:f6:c7:ae:b0:03:20:f8: 31:af:75:21:cf:4a:39:fa:c8:7b:63:d4:70:d6:7f: 31:02:c9:4a:6c:d8:2d:e4:2d:92:6d:5a:db:bd:90: c2:60:d5:53:b1:6a:c7:1d:95:fb:04:e5:e8:f1:14: 64:71:73:14:23:fa:c0:a0:11:a4:bd:62:b6:91:18: f6:91:fe:63:ac:ba:f3:d1:f1:14:54:96:3c:42:02: 08:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:3A:E6:0F:0D:80:CD:76:DF:5C:DB:1B:60:E3:8B:85:46:38:79:9E X509v3 Authority Key Identifier: keyid:29:AD:B3:9B:62:0E:AE:3C:B8:AF:CA:2C:A1:85:F5:C4:87:6F:D0:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ka2zm2IOrjy4r8osoYX1xIdv0EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC985/673AA2F4F5B711EF8C1FF611C4F9AE02/Ka2zm2IOrjy4r8osoYX1xIdv0EM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:6b:22:26:0f:f9:5b:e3:df:4b:4e:fd:17:67:67:21:39:27: 8d:2a:02:4d:c6:14:9c:08:a2:7f:b6:51:1b:4b:47:89:ed:88: e9:7b:12:4c:3a:45:0a:74:67:59:64:c2:bb:40:11:58:de:d4: 10:6f:4b:34:6a:7e:d9:ce:34:e3:a1:40:ec:cd:50:fe:cb:3c: c6:b2:03:03:5a:72:f8:40:e1:4b:c9:13:82:1d:03:25:1c:7d: 1f:1c:1e:27:8c:91:6a:0e:37:d3:fb:7c:c5:39:30:74:6d:e3: 32:24:42:2a:a2:90:45:5b:45:91:0b:a5:66:6d:93:ef:b4:7b: 32:27:0f:6d:3f:29:f9:40:ff:9f:06:45:46:c0:64:51:b7:00: 83:d3:82:15:24:a0:d2:5d:d8:a6:ab:a1:a3:6f:b4:c9:57:65: 7c:d0:ad:e1:39:7b:7c:04:c3:32:db:d5:33:5e:2c:97:2a:1f: d8:78:ca:f5:0a:ec:81:76:58:22:22:9a:fb:d9:da:8d:59:61: c1:bb:aa:f8:71:18:b3:1f:f2:c7:10:51:e8:88:7b:e6:72:05: 96:e4:e6:f7:c1:eb:4c:e4:f3:a2:70:5a:1c:35:de:d4:13:a1: d7:a1:bb:52:71:32:33:9d:6d:46:be:7b:e2:35:e7:dc:46:64: d7:ce:9c:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM5ODUxMTAvBgNVBAUTKDI5QURCMzlCNjIwRUFFM0NCOEFGQ0EyQ0ExODVGNUM0 ODc2RkQwNDMwHhcNMjYwMzI1MDYwMjEwWhcNMjYwNDAxMDYwMjEwWjAYMRYwFAYD VQQDEw02OWMzN2E2Mi04ZWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlPifo7NL6AzfP0V3jE4t7RnKzLpGBJQJ82+nNf4SDlWTptFbpPg2dlfFiRCO ALALTXYbq0tRoY9PtViyK/BqgRk9eP8bUtSTmvhy0sXxvoXTUvxNUJ7Qw6bZN19A M82QN7amG12CSTN8VS06NvkzBbZXF2nw/K36jYtYyUWBVNCNz+Qq1BvXWdqLBXZO tL/YgiMRnuLvPOqzYlbV+6TtswLFqWX0TYUF6cRU8/bHrrADIPgxr3Uhz0o5+sh7 Y9Rw1n8xAslKbNgt5C2SbVrbvZDCYNVTsWrHHZX7BOXo8RRkcXMUI/rAoBGkvWK2 kRj2kf5jrLrz0fEUVJY8QgIIKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIM65g8N gM1231zbG2Dji4VGOHmeMB8GA1UdIwQYMBaAFCmts5tiDq48uK/KLKGF9cSHb9BD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzk4NS82NzNBQTJGNEY1 QjcxMUVGOEMxRkY2MTFDNEY5QUUwMi9LYTJ6bTJJT3JqeTRyOG9zb1lYMXhJZHYw RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0thMnptMklPcmp5NHI4b3NvWVgxeElkdjBFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Qzk4NS82NzNBQTJGNEY1QjcxMUVGOEMxRkY2MTFDNEY5QUUwMi9LYTJ6bTJJT3Jq eTRyOG9zb1lYMXhJZHYwRU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOWsiJg/5W+PfS079F2dnITknjSoCTcYUnAiif7ZRG0tHie2I6XsSTDpFCnRn WWTCu0ARWN7UEG9LNGp+2c4046FA7M1Q/ss8xrIDA1py+EDhS8kTgh0DJRx9Hxwe J4yRag430/t8xTkwdG3jMiRCKqKQRVtFkQulZm2T77R7MicPbT8p+UD/nwZFRsBk UbcAg9OCFSSg0l3Ypquho2+0yVdlfNCt4Tl7fATDMtvVM14slyof2HjK9QrsgXZY IiKa+9najVlhwbuq+HEYsx/yxxBR6Ih75nIFluTm98HrTOTzonBaHDXe1BOh16G7 UnEyM51tRr574jXn3EZk186cxA== -----END CERTIFICATE-----Generated at Thu Mar 26 17:10:48 2026 by rpki-client