$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft File: K1F8a3njzrA4nUGrxeziEH_sU_s.mft (raw, json) Hash identifier: QpbEvSdszLIFp2TuoyryP0cSMJJmaqVhnhNDwGRT8NU= Subject key identifier: 50:1B:4A:FD:8C:AE:C1:58:DE:F3:05:D5:4D:48:56:1E:42:30:FF:A4 Authority key identifier: 2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB Certificate issuer: /CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB Certificate serial: 045B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft Manifest number: 0445 Signing time: Sun 22 Mar 2026 23:47:50 +0000 Manifest this update: Sun 22 Mar 2026 23:47:49 +0000 Manifest next update: Sun 29 Mar 2026 23:47:49 +0000 Files and hashes: 1: K1F8a3njzrA4nUGrxeziEH_sU_s.crl (hash: OSM8mcci0+/N7MTwD8O5Nvhl8bhfivlRmUWBkhp18DM=) 2: 457D2B5A28DC11ED839D6243C4F9AE02.roa (hash: +Csg2HOJepirMsB8Vzghrd3DehAyOhqy3cud4l2RxN8=) 3: B0F9178297B811ECA8AA4230C4F9AE02.roa (hash: aCuYK0mgowCd/JFxG2trGhyPvdOUhFVgYIy44ZAWkes=) 4: 0E1EAB66961011ECA540626AC4F9AE02.roa (hash: Hk1kLc16bFyVSqCk3vaZyzmEpQAFNe8SSUO2IPtxM1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 23:47:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1115 (0x45b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2A61, serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB Validity Not Before: Mar 22 23:47:49 2026 GMT Not After : Mar 29 23:47:49 2026 GMT Subject: CN=69c07fa6-5418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f4:73:66:f8:94:51:d0:64:de:3c:6d:ba:e5: 54:17:ef:97:a2:46:7c:f5:b8:59:cc:42:11:8e:11: 71:27:90:ed:3f:ce:7e:5a:b2:99:69:83:c7:15:45: ad:d7:c9:73:35:f7:c4:79:c0:fd:f3:08:10:ab:f0: a1:f7:0f:f5:fc:0a:68:b7:a9:e0:99:19:89:11:4e: 0a:d5:1e:b3:fe:9d:ce:15:cf:f7:ac:74:9d:63:e2: ad:a9:66:ac:df:ba:e7:7f:0f:a4:d3:fd:64:57:47: 83:78:cc:a1:de:2b:5f:94:60:1c:98:ac:54:66:8a: e0:b0:3a:15:cb:8b:a5:d0:42:76:18:f6:fc:94:67: 08:a7:e6:70:ab:6d:a4:c1:65:71:8c:20:c5:89:f0: 4b:b8:8d:f4:a8:d1:bd:9e:41:94:dc:49:bd:0c:03: 78:4f:be:34:f1:33:91:7f:79:78:19:85:23:dc:8a: 72:f0:98:27:fb:81:f6:3b:9b:a3:ea:5a:5b:83:e9: c0:39:d8:1d:01:30:43:db:c7:17:92:69:27:51:d0: 6c:e2:fa:e1:69:7a:5e:50:78:ee:2e:92:62:cf:ce: 1b:c8:ee:2a:e2:c4:b0:06:f2:84:ce:47:f4:46:79: be:a1:ea:66:e9:02:20:83:be:0c:a4:a2:87:b8:b7: 8b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:1B:4A:FD:8C:AE:C1:58:DE:F3:05:D5:4D:48:56:1E:42:30:FF:A4 X509v3 Authority Key Identifier: keyid:2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:2f:3a:51:b4:f9:45:6a:a2:b2:0b:19:de:07:16:21:36:21: 72:ff:ce:83:4e:29:1b:d1:1b:23:c3:bc:69:e9:7f:12:cc:28: 9e:5f:15:63:28:dc:ef:30:a2:7c:7f:f0:58:9b:ce:98:82:ca: 8f:e7:fb:4b:7b:db:4a:7a:6d:67:7e:78:8b:13:b8:37:73:95: 54:73:47:f8:06:d9:39:a0:40:45:fc:88:b9:c5:d5:fe:1b:2f: b6:35:b8:b1:36:b9:7e:86:50:9c:9c:ce:2b:dc:84:cf:9d:b2: e6:d0:11:7c:3a:50:76:66:04:9b:38:24:b0:9d:ce:a9:0f:a7: 4e:45:61:60:18:83:06:6d:d7:b4:d5:43:5e:94:9d:48:b7:a0: 0c:48:2a:d3:51:b3:8c:90:f4:1b:45:e5:79:e1:ee:1f:31:2b: cc:66:9c:32:73:da:a7:7c:37:dd:fd:f6:c9:30:3d:47:77:92: 50:13:0f:27:43:9d:3e:0c:45:46:05:5c:95:ab:40:8d:01:01: 13:2e:81:99:05:40:c6:5a:f5:b6:24:74:7b:0b:2d:73:ff:33: 58:98:1b:a3:3e:10:37:dc:95:9f:b2:ef:07:31:4a:fe:c0:e7: ae:e8:26:1c:bf:ce:87:7d:a3:96:49:a3:22:bc:b7:fa:d6:22: 03:b2:bf:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJBNjExMTAvBgNVBAUTKDJCNTE3QzZCNzlFM0NFQjAzODlENDFBQkM1RUNFMjEw N0ZFQzUzRkIwHhcNMjYwMzIyMjM0NzQ5WhcNMjYwMzI5MjM0NzQ5WjAYMRYwFAYD VQQDEw02OWMwN2ZhNi01NDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPRzZviUUdBk3jxtuuVUF++XokZ89bhZzEIRjhFxJ5DtP85+WrKZaYPHFUWt 18lzNffEecD98wgQq/Ch9w/1/Apot6ngmRmJEU4K1R6z/p3OFc/3rHSdY+KtqWas 37rnfw+k0/1kV0eDeMyh3itflGAcmKxUZorgsDoVy4ul0EJ2GPb8lGcIp+Zwq22k wWVxjCDFifBLuI30qNG9nkGU3Em9DAN4T7408TORf3l4GYUj3Ipy8Jgn+4H2O5uj 6lpbg+nAOdgdATBD28cXkmknUdBs4vrhaXpeUHjuLpJiz84byO4q4sSwBvKEzkf0 Rnm+oepm6QIgg74MpKKHuLeL6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFAbSv2M rsFY3vMF1U1IVh5CMP+kMB8GA1UdIwQYMBaAFCtRfGt5486wOJ1Bq8Xs4hB/7FP7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkE2MS9FREMwOEZFNjk2 MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpyQTRuVUdyeGV6aUVIX3NV X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxRjhhM25qenJBNG5VR3J4ZXppRUhfc1Vfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkE2MS9FREMwOEZFNjk2MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpy QTRuVUdyeGV6aUVIX3NVX3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARy86UbT5RWqisgsZ3gcWITYhcv/Og04pG9EbI8O8ael/Eswonl8VYyjc7zCi fH/wWJvOmILKj+f7S3vbSnptZ354ixO4N3OVVHNH+AbZOaBARfyIucXV/hsvtjW4 sTa5foZQnJzOK9yEz52y5tARfDpQdmYEmzgksJ3OqQ+nTkVhYBiDBm3XtNVDXpSd SLegDEgq01GzjJD0G0XleeHuHzErzGacMnPap3w33f32yTA9R3eSUBMPJ0OdPgxF RgVclatAjQEBEy6BmQVAxlr1tiR0ewstc/8zWJgboz4QN9yVn7LvBzFK/sDnrugm HL/Oh32jlkmjIry3+tYiA7K/kg== -----END CERTIFICATE-----Generated at Tue Mar 24 09:19:40 2026 by rpki-client