$ rpki-client -vvf rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft File: kSlbu3W_quuVMbObNux1Id3jDWM.mft (raw, json) Hash identifier: RN2krHEkaC+pRxqK2j/wRUqdVSAMSzvtSZ/V7DbBJxk= Subject key identifier: 73:91:F1:0F:50:E4:C9:EB:A1:69:09:A1:62:D5:81:E8:80:51:B8:A6 Authority key identifier: 91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63 Certificate issuer: /CN=A911D9B2/serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63 Certificate serial: 01E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft Manifest number: 01C8 Signing time: Mon 02 Mar 2026 00:21:45 +0000 Manifest this update: Mon 02 Mar 2026 00:21:43 +0000 Manifest next update: Mon 09 Mar 2026 00:21:43 +0000 Files and hashes: 1: kSlbu3W_quuVMbObNux1Id3jDWM.crl (hash: 0+Z6wa4P04o4flZ74vh+jxwX8HajMGnZhrYbdsqAs50=) 2: 48B227F4E8D111F089B2D8B5616F56BC.roa (hash: WkyL76qiMF9RZhUkNMb3RMO30+J1U+zYYA70lfRZGcY=) 3: 59962840D01911EE96596B16C4F9AE02.roa (hash: y1hStzic/YZJ1I+8JzXAyWcd1KU9dmVU0MUq2vt+Xgs=) 4: 11A28878915611EE83F61C41C4F9AE02.roa (hash: RMJ3MtQdHxz76LVbzxDYjdiseR/569W+/vsBpB/W5j4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:21:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 483 (0x1e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D9B2, serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63 Validity Not Before: Mar 2 00:21:43 2026 GMT Not After : Mar 9 00:21:43 2026 GMT Subject: CN=69a4d818-e2e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a7:d3:33:73:8f:84:d2:20:d4:9a:70:44:21: 96:ff:de:b4:e4:f1:02:5f:81:b4:a1:6a:05:9a:0d: 79:79:8c:c9:62:f4:36:38:b7:6e:92:e1:cb:a8:58: 0c:3b:63:8b:9c:4d:17:89:3e:90:56:39:47:cf:58: 65:3f:b8:0b:dc:3a:11:69:fd:e3:42:58:91:b8:b4: 0e:63:7e:27:04:71:de:17:8b:71:40:b4:ad:97:d0: 13:3c:47:a4:a7:da:5c:6d:d9:8e:14:ae:5a:ed:9e: 32:03:b4:e2:9f:05:0c:4a:ff:a3:cc:c7:f2:46:b9: 98:8c:9d:94:0e:ad:69:47:af:72:20:d3:1a:f3:b7: df:96:db:a2:56:ff:2c:96:68:73:ee:28:6c:5f:fb: e6:51:41:70:4b:1e:c4:c6:c4:e7:88:2c:00:2c:c1: 63:8c:04:87:94:7b:5b:b4:b4:88:54:d4:d8:fd:8e: 05:fc:6a:cc:67:81:68:65:66:68:32:13:7e:ea:68: 7f:73:c5:ec:1a:00:b2:bf:9c:12:e3:75:48:a4:b9: 29:63:5a:84:2a:a1:d9:52:8c:0d:68:bc:29:a3:94: b2:4e:4f:86:ad:9a:4c:70:5c:a1:53:4f:cd:f3:94: 20:67:46:35:9a:9b:3a:2c:84:f4:04:e1:db:55:29: e1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:91:F1:0F:50:E4:C9:EB:A1:69:09:A1:62:D5:81:E8:80:51:B8:A6 X509v3 Authority Key Identifier: keyid:91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:1b:bc:03:bf:d3:20:e6:70:25:25:13:25:5c:9b:6d:7a:62: 0b:7e:3f:7b:0b:f7:71:35:99:71:f4:87:82:f8:aa:f1:55:7a: 4e:83:86:ed:a8:56:f4:8e:52:9f:28:4f:cd:76:8e:53:5a:74: c6:3c:c3:64:f5:14:2e:14:a8:74:be:cf:0e:3b:17:2c:f3:3c: 8a:02:1d:c4:35:d1:d3:7c:e0:1a:13:a7:0b:9d:b9:bd:52:1f: 3c:04:b8:5e:e5:c5:57:d6:34:5b:83:12:f2:16:db:96:27:79: 57:86:48:0e:0e:ba:28:f3:da:c1:b8:d7:b1:bb:16:51:05:9c: 28:6a:ed:c5:24:0f:39:64:64:ce:5b:5b:5a:66:bb:b4:91:01: f6:b9:ab:c9:67:d3:2f:5b:3b:7b:0c:e7:71:2c:63:b5:b6:ec: 83:81:00:e7:86:f3:ef:3c:e0:19:18:31:48:34:be:a8:bd:24: e5:cd:b4:4f:f9:4f:e2:f4:e8:38:3d:bc:7c:cb:92:96:05:fc: 30:a7:a0:f3:5d:04:76:58:bf:cb:e7:32:b1:5d:6d:34:dd:72: af:76:db:40:a9:ed:86:39:f2:ec:b1:1d:23:e7:64:0d:91:92: 20:a2:d8:ee:7c:25:d4:f4:16:2f:05:f7:b3:ef:23:1e:73:f5: 04:7a:de:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ5QjIxMTAvBgNVBAUTKDkxMjk1QkJCNzVCRkFBRUI5NTMxQjM5QjM2RUM3NTIx RERFMzBENjMwHhcNMjYwMzAyMDAyMTQzWhcNMjYwMzA5MDAyMTQzWjAYMRYwFAYD VQQDEw02OWE0ZDgxOC1lMmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjafTM3OPhNIg1JpwRCGW/9605PECX4G0oWoFmg15eYzJYvQ2OLdukuHLqFgM O2OLnE0XiT6QVjlHz1hlP7gL3DoRaf3jQliRuLQOY34nBHHeF4txQLStl9ATPEek p9pcbdmOFK5a7Z4yA7TinwUMSv+jzMfyRrmYjJ2UDq1pR69yINMa87ffltuiVv8s lmhz7ihsX/vmUUFwSx7ExsTniCwALMFjjASHlHtbtLSIVNTY/Y4F/GrMZ4FoZWZo MhN+6mh/c8XsGgCyv5wS43VIpLkpY1qEKqHZUowNaLwpo5SyTk+GrZpMcFyhU0/N 85QgZ0Y1mps6LIT0BOHbVSnhbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHOR8Q9Q 5MnroWkJoWLVgeiAUbimMB8GA1UdIwQYMBaAFJEpW7t1v6rrlTGzmzbsdSHd4w1j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDlCMi8wQTZGM0I0Mjkx NTUxMUVFQTRDMEY2NjhDNEY5QUUwMi9rU2xidTNXX3F1dVZNYk9iTnV4MUlkM2pE V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTbGJ1M1dfcXV1Vk1iT2JOdXgxSWQzakRXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDlCMi8wQTZGM0I0MjkxNTUxMUVFQTRDMEY2NjhDNEY5QUUwMi9rU2xidTNXX3F1 dVZNYk9iTnV4MUlkM2pEV00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAchu8A7/TIOZwJSUTJVybbXpiC34/ewv3cTWZcfSHgviq8VV6ToOG7ahW9I5S nyhPzXaOU1p0xjzDZPUULhSodL7PDjsXLPM8igIdxDXR03zgGhOnC525vVIfPAS4 XuXFV9Y0W4MS8hbblid5V4ZIDg66KPPawbjXsbsWUQWcKGrtxSQPOWRkzltbWma7 tJEB9rmryWfTL1s7ewzncSxjtbbsg4EA54bz7zzgGRgxSDS+qL0k5c20T/lP4vTo OD28fMuSlgX8MKeg810Edli/y+cysV1tNN1yr3bbQKnthjny7LEdI+dkDZGSIKLY 7nwl1PQWLwX3s+8jHnP1BHreVQ== -----END CERTIFICATE-----Generated at Mon Mar 2 10:53:17 2026 by rpki-client