$ rpki-client -vvf rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft File: KxUe1JZstlaQzZqoJiuKau0G5EM.mft (raw, json) Hash identifier: VxRYTcgd7vJG62+SKrNVELzVHDCOSu/eBy62XqBSzXU= Subject key identifier: D6:7D:D2:59:D3:4D:77:DC:EF:C2:57:FB:CA:F6:85:C6:DC:52:66:92 Authority key identifier: 2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43 Certificate issuer: /CN=A911B871/serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443 Certificate serial: 0823 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft Manifest number: 0802 Signing time: Fri 20 Mar 2026 20:50:10 +0000 Manifest this update: Fri 20 Mar 2026 20:50:10 +0000 Manifest next update: Fri 27 Mar 2026 20:50:10 +0000 Files and hashes: 1: KxUe1JZstlaQzZqoJiuKau0G5EM.crl (hash: m0bGNc2N96xIuW5ELMqMRc5oiuCmAdKa+q+8RGmieU0=) 2: 6FA255F0CF9511F0BB07FA4DC4F9AE02.roa (hash: fvpqpUzd6orBmYsM2LQ9LVbe6tQGwosd6BH+YSEYAM0=) 3: 8A01BCDC1DA811EBAFA5B44FC4F9AE02.roa (hash: azpIitGefSlvlMwJupckHpHUM74PuPNEm5zYnaQUVWk=) 4: 6F3FE776CF9511F09003FA4DC4F9AE02.roa (hash: rbytNq7zSMq3A/PgT/ftfqGJmoj9sr47JEvc0Ik+KVQ=) 5: 440FC47687C211EEA6A0667BC4F9AE02.roa (hash: OuNbUML34/9s/CXrZPGm/r79NOrwg5tKWUZilkojMKg=) 6: FF7010DCAE9811F081180758C4F9AE02.roa (hash: m6dAjh3VRiywp2YYqFbpA9pqC5UWocmOlzdiWn/0Kkc=) 7: C4EEE8EE24E011EBA4C87F7DC4F9AE02.roa (hash: mlM1LcCow/OwFUOHCekedTzL1znm7NAJ6YdDLrO7EAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 20:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2083 (0x823) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B871, serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443 Validity Not Before: Mar 20 20:50:10 2026 GMT Not After : Mar 27 20:50:10 2026 GMT Subject: CN=69bdb302-eee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8e:04:4b:f0:95:87:e6:81:7a:93:c9:47:07: 6e:87:34:05:b8:d6:e8:c7:cf:10:78:6c:fc:00:51: 85:e6:00:63:4d:78:cb:3a:a8:a4:69:02:6b:e1:db: 28:50:b8:cb:46:31:0e:da:56:0b:07:2e:3c:d6:d3: ec:1f:74:cc:4f:a3:58:9b:6a:04:2e:1b:3b:ce:e8: d7:75:a3:96:f8:2c:ea:e8:9f:ce:4b:65:be:c2:dc: 0c:de:c2:06:48:c1:b2:fb:fd:57:b6:89:49:b0:bf: ef:89:08:4f:af:e8:e7:b7:e0:8f:4c:87:79:a4:71: f4:34:5c:ab:66:d5:a3:d0:ea:c3:f6:99:3e:a1:22: 53:66:72:09:12:c2:e0:c3:df:f5:8c:85:bc:06:2e: bf:a3:e9:5d:d3:62:51:5d:46:d4:60:67:1b:65:60: 0d:63:39:6a:e2:92:d7:e1:45:8f:5b:2b:ac:11:3d: f2:f0:21:60:19:e3:dd:d7:66:64:42:f9:56:66:25: e0:9d:c3:f8:e2:ec:0a:fb:20:cf:14:b0:9c:77:16: 4b:bf:38:57:8b:83:78:46:81:79:ac:b5:0e:2f:8a: dd:49:2a:40:a5:ee:3d:09:6a:f5:d2:37:79:b9:3d: 77:e4:c5:32:fd:b9:bf:93:db:02:a4:59:f8:99:c2: f6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:7D:D2:59:D3:4D:77:DC:EF:C2:57:FB:CA:F6:85:C6:DC:52:66:92 X509v3 Authority Key Identifier: keyid:2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:59:5e:eb:a5:c8:e6:85:c6:db:2e:ac:70:82:98:fb:73:3f: e5:e8:f4:58:69:e6:ae:1f:5b:d5:64:e0:7d:63:2f:f9:bb:39: 7d:c5:a3:8f:12:64:ce:3b:f9:35:2f:8e:16:04:b6:bd:33:5e: e4:ec:26:ac:13:f9:f5:cf:0a:8f:51:bd:82:e5:b4:c0:27:8f: f4:ef:81:6d:e6:9b:c5:da:78:4e:c9:b6:fe:18:3c:48:50:37: 09:a3:29:12:7b:6a:2b:f7:aa:10:b6:5f:b0:de:c8:77:a4:5f: 4f:18:ec:57:f1:2b:fe:7c:48:3d:a5:f2:14:9f:2a:c8:c8:19: d4:2c:1b:4c:9a:85:b4:4a:47:38:b4:bb:a2:c9:6a:30:e1:cf: fe:77:a9:17:88:1a:e3:c5:a7:a4:5d:2a:92:af:c9:89:91:de: 9d:79:24:52:b0:99:ff:d0:1c:91:4f:12:ce:ad:ee:2d:db:6c: d8:19:70:ba:36:0d:44:52:44:b6:a8:06:53:4f:78:63:8f:26: 3a:34:73:b0:9a:88:fd:53:ba:e4:64:d1:f1:e4:b1:d1:94:2a: 50:9f:e9:04:73:30:7a:47:19:3e:b9:0a:57:fd:37:2c:cd:13: ea:ad:08:00:0e:a4:23:07:a7:96:5a:6d:ee:2e:80:6a:92:8e: 1e:8f:55:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI4NzExMTAvBgNVBAUTKDJCMTUxRUQ0OTY2Q0I2NTY5MENEOUFBODI2MkI4QTZB RUQwNkU0NDMwHhcNMjYwMzIwMjA1MDEwWhcNMjYwMzI3MjA1MDEwWjAYMRYwFAYD VQQDEw02OWJkYjMwMi1lZWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnI4ES/CVh+aBepPJRwduhzQFuNbox88QeGz8AFGF5gBjTXjLOqikaQJr4dso ULjLRjEO2lYLBy481tPsH3TMT6NYm2oELhs7zujXdaOW+Czq6J/OS2W+wtwM3sIG SMGy+/1XtolJsL/viQhPr+jnt+CPTId5pHH0NFyrZtWj0OrD9pk+oSJTZnIJEsLg w9/1jIW8Bi6/o+ld02JRXUbUYGcbZWANYzlq4pLX4UWPWyusET3y8CFgGePd12Zk QvlWZiXgncP44uwK+yDPFLCcdxZLvzhXi4N4RoF5rLUOL4rdSSpApe49CWr10jd5 uT135MUy/bm/k9sCpFn4mcL2zQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNZ90lnT TXfc78JX+8r2hcbcUmaSMB8GA1UdIwQYMBaAFCsVHtSWbLZWkM2aqCYrimrtBuRD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjg3MS84QTJEQUJFMDFE QTcxMUVCODA3MTJBNEZDNEY5QUUwMi9LeFVlMUpac3RsYVF6WnFvSml1S2F1MEc1 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t4VWUxSlpzdGxhUXpacW9KaXVLYXUwRzVFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Qjg3MS84QTJEQUJFMDFEQTcxMUVCODA3MTJBNEZDNEY5QUUwMi9LeFVlMUpac3Rs YVF6WnFvSml1S2F1MEc1RU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvFle66XI5oXG2y6scIKY+3M/5ej0WGnmrh9b1WTgfWMv+bs5fcWjjxJkzjv5 NS+OFgS2vTNe5OwmrBP59c8Kj1G9guW0wCeP9O+Bbeabxdp4Tsm2/hg8SFA3CaMp EntqK/eqELZfsN7Id6RfTxjsV/Er/nxIPaXyFJ8qyMgZ1CwbTJqFtEpHOLS7oslq MOHP/nepF4ga48WnpF0qkq/JiZHenXkkUrCZ/9AckU8Szq3uLdts2BlwujYNRFJE tqgGU094Y48mOjRzsJqI/VO65GTR8eSx0ZQqUJ/pBHMwekcZPrkKV/03LM0T6q0I AA6kIwenllpt7i6AapKOHo9VsA== -----END CERTIFICATE-----Generated at Sun Mar 22 13:36:28 2026 by rpki-client