$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft File: Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft (raw, json) Hash identifier: 7gBdnxxPoFBxoGann/6+YOHLdZePNy5L1QW7FqOZhyA= Subject key identifier: 61:A5:5E:E0:C1:B5:A0:EB:8E:6A:AE:70:C6:70:3D:F6:9E:9E:9A:EF Authority key identifier: 2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD Certificate issuer: /CN=A91B80C2/serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD Certificate serial: 0182 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft Manifest number: 016D Signing time: Tue 03 Mar 2026 22:39:41 +0000 Manifest this update: Tue 03 Mar 2026 22:39:41 +0000 Manifest next update: Tue 10 Mar 2026 22:39:41 +0000 Files and hashes: 1: Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl (hash: HAUBntzZRjniqkJ0pAjqOWiU7pZ4A86pDZGNQslqVCc=) 2: 1DF1E5F8173A11F1A94BC0C1113D8C67.roa (hash: Qz2x+NUZ1Z4D7iIuBKK98wEGhrLq2XYhy61uyekxUx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 22:39:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80C2, serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD Validity Not Before: Mar 3 22:39:41 2026 GMT Not After : Mar 10 22:39:41 2026 GMT Subject: CN=69a7632d-03ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a1:a3:7b:92:97:b1:bf:64:19:86:85:61:bd: 19:cc:bd:44:b1:65:86:ec:71:2b:7e:13:d8:4f:af: 10:58:ed:db:8a:e8:ec:e2:5b:dd:87:d2:53:30:38: 54:1b:a5:ff:81:e7:24:de:11:61:ce:20:45:dd:41: 95:3a:fe:33:ae:41:c4:a0:9b:5f:81:a3:fc:d3:5e: 19:9e:7d:a0:01:e5:5b:a7:77:3b:b7:c7:4f:a9:9b: f6:21:6a:e6:e1:6f:e0:af:db:d4:bd:87:f7:e7:1d: 84:6b:95:03:d2:a5:0d:a9:7c:9e:8d:89:f9:6a:b9: 23:01:fb:d6:e9:9a:49:3a:43:5f:de:aa:96:bd:4b: b1:68:fa:43:e6:5a:d0:67:0d:11:00:68:4f:bd:37: 73:cf:78:b6:84:21:1c:6b:15:6e:4f:e0:e1:03:9e: 07:db:2b:38:3b:71:be:03:a2:72:56:31:c6:b0:0a: 6c:a3:a8:14:74:be:91:61:e1:bc:c7:88:d9:cf:b5: 4f:05:f4:ac:93:eb:a7:a3:7f:52:9a:96:25:9a:15: d4:9b:54:37:35:00:18:53:57:db:a6:f2:26:be:11: fd:ca:1c:85:a6:55:e6:5e:65:9f:6d:30:29:76:a1: a0:2f:8d:18:a5:16:e1:57:59:a6:38:03:4e:9b:2b: c6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A5:5E:E0:C1:B5:A0:EB:8E:6A:AE:70:C6:70:3D:F6:9E:9E:9A:EF X509v3 Authority Key Identifier: keyid:2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption de:50:2e:94:04:24:b1:d4:4e:c4:39:9a:30:81:77:21:9d:5f: 1f:1e:3c:63:43:7e:cf:cf:c3:34:13:ee:65:ee:8b:91:59:bd: 78:44:60:b2:cd:62:84:59:c6:28:4f:14:51:3e:78:51:03:8d: 99:f5:ba:83:7d:aa:f1:cb:01:73:64:fb:29:ff:55:0e:25:82: ea:9d:00:53:1e:8b:05:94:07:7c:54:27:d5:55:63:66:67:bb: 13:fd:ef:89:2a:a5:4a:b8:40:b5:df:e4:d9:63:82:52:88:fd: 0e:f0:6c:d8:40:68:cf:9c:e4:54:41:e8:5d:14:be:7a:d4:37: a4:d5:f9:56:bf:c1:53:de:d2:29:e6:c7:aa:74:17:40:e2:34: 67:87:a9:1a:39:f7:b7:39:43:a2:35:c7:51:a0:27:be:34:72: af:49:04:1f:33:5c:4f:89:8a:b5:5a:fc:91:6a:a0:df:39:39: e4:11:8e:56:88:67:74:c0:e8:89:f2:f9:7b:c1:67:3d:2c:35: fd:63:62:94:88:03:84:6c:d7:9a:d2:27:75:b9:a4:81:20:dd: 4b:47:c8:8e:8f:09:d8:6a:19:11:14:d4:d1:c0:52:5d:68:fb: c8:7a:04:72:0a:b6:8d:bf:c3:9d:8f:69:6d:f9:e5:61:4e:d3: d7:90:6c:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwQzIxMTAvBgNVBAUTKDJBQkEyQUEzQ0IzRjk0NTgxQzVEM0Q5MUJBMzZCOEE5 RDhFOERFQUQwHhcNMjYwMzAzMjIzOTQxWhcNMjYwMzEwMjIzOTQxWjAYMRYwFAYD VQQDEw02OWE3NjMyZC0wM2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvaGje5KXsb9kGYaFYb0ZzL1EsWWG7HErfhPYT68QWO3biujs4lvdh9JTMDhU G6X/geck3hFhziBF3UGVOv4zrkHEoJtfgaP8014Znn2gAeVbp3c7t8dPqZv2IWrm 4W/gr9vUvYf35x2Ea5UD0qUNqXyejYn5arkjAfvW6ZpJOkNf3qqWvUuxaPpD5lrQ Zw0RAGhPvTdzz3i2hCEcaxVuT+DhA54H2ys4O3G+A6JyVjHGsApso6gUdL6RYeG8 x4jZz7VPBfSsk+uno39SmpYlmhXUm1Q3NQAYU1fbpvImvhH9yhyFplXmXmWfbTAp dqGgL40YpRbhV1mmOANOmyvGbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGGlXuDB taDrjmqucMZwPfaenprvMB8GA1UdIwQYMBaAFCq6KqPLP5RYHF09kbo2uKnY6N6t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBDMi85ODNFNjE1MDE3 MUExMUVGODY1Nzc1NEZDNEY5QUUwMi9Lcm9xbzhzX2xGZ2NYVDJSdWphNHFkam8z cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tyb3FvOHNfbEZnY1hUMlJ1amE0cWRqbzNxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODBDMi85ODNFNjE1MDE3MUExMUVGODY1Nzc1NEZDNEY5QUUwMi9Lcm9xbzhzX2xG Z2NYVDJSdWphNHFkam8zcTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA3lAulAQksdROxDmaMIF3IZ1fHx48Y0N+z8/DNBPuZe6LkVm9eERgss1ihFnG KE8UUT54UQONmfW6g32q8csBc2T7Kf9VDiWC6p0AUx6LBZQHfFQn1VVjZme7E/3v iSqlSrhAtd/k2WOCUoj9DvBs2EBoz5zkVEHoXRS+etQ3pNX5Vr/BU97SKebHqnQX QOI0Z4epGjn3tzlDojXHUaAnvjRyr0kEHzNcT4mKtVr8kWqg3zk55BGOVohndMDo ifL5e8FnPSw1/WNilIgDhGzXmtIndbmkgSDdS0fIjo8J2GoZERTU0cBSXWj7yHoE cgq2jb/DnY9pbfnlYU7T15Bsug== -----END CERTIFICATE-----Generated at Wed Mar 4 08:21:42 2026 by rpki-client