$ rpki-client -vvf rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft File: Km8SBBLYIPn_JM0F1ez0nmYtmco.mft (raw, json) Hash identifier: 9eXM2RH503t+KpnbA3aYfty2UTOVDjsd3rxTj37R6TM= Subject key identifier: EC:AD:5A:CE:93:82:C8:D7:CF:40:56:03:98:A8:04:C6:9E:58:3A:A1 Authority key identifier: 2A:6F:12:04:12:D8:20:F9:FF:24:CD:05:D5:EC:F4:9E:66:2D:99:CA Certificate issuer: /CN=A91F240B/serialNumber=2A6F120412D820F9FF24CD05D5ECF49E662D99CA Certificate serial: 201B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft Manifest number: 200B Signing time: Sun 22 Mar 2026 15:51:44 +0000 Manifest this update: Sun 22 Mar 2026 15:51:43 +0000 Manifest next update: Sun 29 Mar 2026 15:51:43 +0000 Files and hashes: 1: Km8SBBLYIPn_JM0F1ez0nmYtmco.crl (hash: ikXd5jnSq0diTG034qqAJbiUqSu/5ec7YtVroLsW7q0=) 2: E352E0A2896F11E7BBF2923CC4F9AE02.roa (hash: f53n49BRZ+a4OFczbu9IHjhQmjnGPixaP4vK3+8G2j0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.crl rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8219 (0x201b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F240B, serialNumber=2A6F120412D820F9FF24CD05D5ECF49E662D99CA Validity Not Before: Mar 22 15:51:43 2026 GMT Not After : Mar 29 15:51:43 2026 GMT Subject: CN=69c01010-fa8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c6:02:87:32:54:92:9e:97:14:3d:90:c9:1a: 4d:57:53:c7:d2:fa:a1:03:0b:52:8b:9d:f5:4d:ba: 2f:0c:01:3d:ba:c0:fe:db:3b:64:f0:f5:ad:d5:61: b1:f9:3b:2e:b0:09:80:57:94:a6:9d:76:91:2d:6a: 83:75:cb:5b:61:17:1e:3c:5c:8e:5b:2c:4e:2a:74: 9c:3f:f5:19:3a:d7:84:58:bf:42:9e:84:6f:d9:09: 13:25:e4:d3:50:ee:4c:43:df:6b:b5:42:f7:2b:b8: 12:58:a8:32:c1:a4:13:f0:5c:96:70:b3:9d:60:47: 8b:8d:7e:e0:93:b3:f8:b4:16:ef:08:55:87:df:ea: 79:0d:eb:f4:19:c0:06:66:8f:cd:5a:ab:b9:be:33: f7:ff:dc:98:d0:66:5b:49:dd:85:b6:e8:95:9f:87: f1:fb:c9:1d:e3:d3:62:fd:bd:ca:00:cb:71:74:d7: 68:87:5d:91:6e:10:79:a8:68:96:7e:06:ba:ae:f8: 46:be:50:6c:44:40:dd:28:0a:0a:15:e7:8a:29:8f: 07:75:35:29:d4:d8:6b:3e:df:86:23:f8:d0:0b:ef: 77:a1:59:89:5d:63:42:40:d5:99:80:7f:97:31:68: 8b:f9:b0:2c:94:eb:eb:2f:f2:8a:6c:dd:9e:70:84: 8e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:AD:5A:CE:93:82:C8:D7:CF:40:56:03:98:A8:04:C6:9E:58:3A:A1 X509v3 Authority Key Identifier: keyid:2A:6F:12:04:12:D8:20:F9:FF:24:CD:05:D5:EC:F4:9E:66:2D:99:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:f6:b7:98:8b:f3:c2:58:2d:15:f8:74:9e:71:39:1e:da:e6: 06:0d:45:c4:f5:61:6a:0e:c1:e4:95:68:aa:4a:07:23:09:7c: b0:f7:66:85:0f:e1:a7:1e:07:23:d1:46:c2:1e:1d:2e:2c:9e: 91:bb:4b:ce:33:8b:33:c3:98:9b:18:cd:26:ec:65:d6:ad:49: 1d:61:80:60:fc:2d:74:5d:69:0e:35:be:f3:db:65:96:14:35: 08:4f:66:d7:7e:2d:93:31:b0:ae:0e:11:de:ad:9a:d4:e2:c8: af:e1:70:14:56:42:b4:1c:4b:9c:92:a7:95:66:80:81:3f:41: 74:04:37:37:70:a2:1c:96:5b:da:28:bb:b7:27:e8:67:48:b1: 3c:48:76:cf:82:b7:9a:e1:85:3b:40:b1:5e:68:29:84:16:c3: d0:e4:f9:98:4f:55:e6:15:62:cf:64:46:0d:42:3e:4d:07:f3: bf:b0:98:59:83:73:b5:b0:79:0a:06:e4:67:99:ea:90:e9:ad: ec:b0:91:74:b0:6b:8c:ed:8b:ea:85:a4:c8:cd:53:57:1c:a8: 21:92:23:c4:7b:17:19:32:6e:06:32:03:80:f9:7a:9a:a9:8f: e4:29:1f:e4:4a:a9:c0:2d:d4:5b:59:31:29:3c:41:fd:9c:a4: 3d:93:ff:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjI0MEIxMTAvBgNVBAUTKDJBNkYxMjA0MTJEODIwRjlGRjI0Q0QwNUQ1RUNGNDlF NjYyRDk5Q0EwHhcNMjYwMzIyMTU1MTQzWhcNMjYwMzI5MTU1MTQzWjAYMRYwFAYD VQQDEw02OWMwMTAxMC1mYThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMYChzJUkp6XFD2QyRpNV1PH0vqhAwtSi531TbovDAE9usD+2ztk8PWt1WGx +TsusAmAV5SmnXaRLWqDdctbYRcePFyOWyxOKnScP/UZOteEWL9CnoRv2QkTJeTT UO5MQ99rtUL3K7gSWKgywaQT8FyWcLOdYEeLjX7gk7P4tBbvCFWH3+p5Dev0GcAG Zo/NWqu5vjP3/9yY0GZbSd2FtuiVn4fx+8kd49Ni/b3KAMtxdNdoh12RbhB5qGiW fga6rvhGvlBsREDdKAoKFeeKKY8HdTUp1NhrPt+GI/jQC+93oVmJXWNCQNWZgH+X MWiL+bAslOvrL/KKbN2ecISOmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOytWs6T gsjXz0BWA5ioBMaeWDqhMB8GA1UdIwQYMBaAFCpvEgQS2CD5/yTNBdXs9J5mLZnK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjQwQi81QjczNkQ5MjQz MzMxMUU2OTU5QTc4MTVDNEY5QUUwMi9LbThTQkJMWUlQbl9KTTBGMWV6MG5tWXRt Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ttOFNCQkxZSVBuX0pNMEYxZXowbm1ZdG1jby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjQwQi81QjczNkQ5MjQzMzMxMUU2OTU5QTc4MTVDNEY5QUUwMi9LbThTQkJMWUlQ bl9KTTBGMWV6MG5tWXRtY28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA/a3mIvzwlgtFfh0nnE5HtrmBg1FxPVhag7B5JVoqkoHIwl8sPdmhQ/hpx4H I9FGwh4dLiyekbtLzjOLM8OYmxjNJuxl1q1JHWGAYPwtdF1pDjW+89tllhQ1CE9m 134tkzGwrg4R3q2a1OLIr+FwFFZCtBxLnJKnlWaAgT9BdAQ3N3CiHJZb2ii7tyfo Z0ixPEh2z4K3muGFO0CxXmgphBbD0OT5mE9V5hViz2RGDUI+TQfzv7CYWYNztbB5 CgbkZ5nqkOmt7LCRdLBrjO2L6oWkyM1TVxyoIZIjxHsXGTJuBjIDgPl6mqmP5Ckf 5EqpwC3UW1kxKTxB/ZykPZP/Vw== -----END CERTIFICATE-----Generated at Sun Mar 22 19:00:41 2026 by rpki-client