$ rpki-client -vvf rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft File: klUgH_qh5mcsBsLfbovhFYLML64.mft (raw, json) Hash identifier: 8K1qy81yrVq8++zQo1CFOOxeZEo0vX6Q4HlJXYIsnsc= Subject key identifier: 2B:4F:90:5D:AA:9A:96:CB:C1:1B:37:CB:3E:CC:F6:B0:1B:44:DC:2B Authority key identifier: 92:55:20:1F:FA:A1:E6:67:2C:06:C2:DF:6E:8B:E1:15:82:CC:2F:AE Certificate issuer: /CN=A9112A7D/serialNumber=9255201FFAA1E6672C06C2DF6E8BE11582CC2FAE Certificate serial: 02DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft Manifest number: 02D7 Signing time: Wed 25 Mar 2026 01:00:02 +0000 Manifest this update: Wed 25 Mar 2026 01:00:01 +0000 Manifest next update: Wed 01 Apr 2026 01:00:01 +0000 Files and hashes: 1: klUgH_qh5mcsBsLfbovhFYLML64.crl (hash: bNnUbK1qrUHuRqgT3Na2ivnyj0qrdwdRCHubwLtqOR8=) 2: 6DE1A436246811ED82556323C4F9AE02.roa (hash: r3TW15SuIdGpywpcotauMLYQIycZlTkIxb64gJm7VrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.crl rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 733 (0x2dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112A7D, serialNumber=9255201FFAA1E6672C06C2DF6E8BE11582CC2FAE Validity Not Before: Mar 25 01:00:01 2026 GMT Not After : Apr 1 01:00:01 2026 GMT Subject: CN=69c33392-2f73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:21:1f:9e:55:7b:04:b1:a2:76:72:13:f2:cf: 5e:c6:1c:e4:1a:b2:b1:a1:83:40:36:6d:f2:a4:53: 79:42:55:cf:d6:84:30:f9:48:19:e4:e6:a6:70:bb: d9:34:b8:dd:b1:a5:e1:b7:aa:a1:59:8f:9c:a2:eb: ff:6a:05:31:21:58:f2:5d:cf:6c:ff:a9:4f:4d:48: da:b6:00:8f:bd:e3:ac:48:02:b4:34:05:8e:05:e7: 87:5b:23:2b:0a:44:2e:3e:76:98:21:86:9c:56:8d: 74:c8:9f:8f:f7:9f:64:3b:48:a6:01:d4:9f:e9:ea: 04:7e:d9:b2:d4:2d:c9:18:c9:46:94:a2:5c:f0:8e: 43:82:54:25:67:25:17:4f:ab:bf:b0:aa:22:b9:2e: f5:1e:c1:33:bb:d7:56:72:79:5d:9a:30:e2:bf:20: 3f:35:f3:f9:24:13:cc:85:5b:e0:6f:27:bf:31:55: 63:f2:4f:88:16:b9:50:18:49:14:fa:76:0d:68:03: 1a:d4:17:df:d4:9b:e5:07:7f:b9:42:33:19:5f:40: 06:14:ab:2e:e8:65:13:98:32:b3:03:da:6d:c4:cb: ca:ca:70:1b:90:79:72:bd:1d:db:20:3a:eb:1b:e0: 9e:11:bd:6d:29:2c:60:03:1f:9f:ff:90:b0:89:86: 7b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:4F:90:5D:AA:9A:96:CB:C1:1B:37:CB:3E:CC:F6:B0:1B:44:DC:2B X509v3 Authority Key Identifier: keyid:92:55:20:1F:FA:A1:E6:67:2C:06:C2:DF:6E:8B:E1:15:82:CC:2F:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:14:ab:9d:9e:32:f7:7b:3b:2d:9a:5a:33:6a:1e:25:55:61: 37:f1:07:98:81:02:3c:61:8e:2e:48:7a:57:91:51:01:68:02: 10:e8:65:2a:e4:8d:eb:d2:5a:dc:95:28:aa:b3:15:0f:35:4c: 4a:c9:a1:a6:3c:ba:5f:5c:47:af:af:64:31:ce:98:e5:e9:c6: 14:cd:9a:fc:13:a0:d3:f4:a6:d5:79:fd:87:db:cf:49:dc:b5: 0d:69:f1:d9:fa:39:b5:e6:35:4f:d5:34:03:94:fd:0b:8a:ba: 63:b0:f8:92:dc:bb:56:c7:74:1c:8e:4e:f6:ec:bc:35:44:df: 18:cf:1f:ea:a0:30:b5:0d:3d:8d:88:ef:c2:8f:84:a8:50:7e: 93:2c:3f:ec:3a:75:37:52:59:ec:dd:f2:b0:54:79:a9:77:c0: 5c:f8:f9:4e:a3:11:35:5d:c5:db:f9:85:2f:39:47:d8:4d:1a: 67:ec:d5:dd:46:62:f6:38:23:87:01:e9:94:96:2c:c1:18:de: 18:39:72:a1:b9:bd:2e:33:34:e6:c3:b4:70:cd:7b:85:91:46: 54:37:bb:47:f5:ad:f1:cf:d7:f9:35:4a:bc:18:d9:e7:9a:6b: 02:0a:57:f4:1c:69:31:2e:60:82:ba:c8:88:36:eb:4c:54:de: 93:70:ee:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJBN0QxMTAvBgNVBAUTKDkyNTUyMDFGRkFBMUU2NjcyQzA2QzJERjZFOEJFMTE1 ODJDQzJGQUUwHhcNMjYwMzI1MDEwMDAxWhcNMjYwNDAxMDEwMDAxWjAYMRYwFAYD VQQDEw02OWMzMzM5Mi0yZjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCEfnlV7BLGidnIT8s9exhzkGrKxoYNANm3ypFN5QlXP1oQw+UgZ5OamcLvZ NLjdsaXht6qhWY+couv/agUxIVjyXc9s/6lPTUjatgCPveOsSAK0NAWOBeeHWyMr CkQuPnaYIYacVo10yJ+P959kO0imAdSf6eoEftmy1C3JGMlGlKJc8I5DglQlZyUX T6u/sKoiuS71HsEzu9dWcnldmjDivyA/NfP5JBPMhVvgbye/MVVj8k+IFrlQGEkU +nYNaAMa1Bff1JvlB3+5QjMZX0AGFKsu6GUTmDKzA9ptxMvKynAbkHlyvR3bIDrr G+CeEb1tKSxgAx+f/5CwiYZ7rwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCtPkF2q mpbLwRs3yz7M9rAbRNwrMB8GA1UdIwQYMBaAFJJVIB/6oeZnLAbC326L4RWCzC+u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkE3RC9BMDRBNjBCNDI0 NjUxMUVEQjhENDIwMjFDNEY5QUUwMi9rbFVnSF9xaDVtY3NCc0xmYm92aEZZTE1M NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tsVWdIX3FoNW1jc0JzTGZib3ZoRllMTUw2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkE3RC9BMDRBNjBCNDI0NjUxMUVEQjhENDIwMjFDNEY5QUUwMi9rbFVnSF9xaDVt Y3NCc0xmYm92aEZZTE1MNjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKhSrnZ4y93s7LZpaM2oeJVVhN/EHmIECPGGOLkh6V5FRAWgCEOhlKuSN69Ja 3JUoqrMVDzVMSsmhpjy6X1xHr69kMc6Y5enGFM2a/BOg0/Sm1Xn9h9vPSdy1DWnx 2fo5teY1T9U0A5T9C4q6Y7D4kty7Vsd0HI5O9uy8NUTfGM8f6qAwtQ09jYjvwo+E qFB+kyw/7Dp1N1JZ7N3ysFR5qXfAXPj5TqMRNV3F2/mFLzlH2E0aZ+zV3UZi9jgj hwHplJYswRjeGDlyobm9LjM05sO0cM17hZFGVDe7R/Wt8c/X+TVKvBjZ55prAgpX 9BxpMS5ggrrIiDbrTFTek3Du5g== -----END CERTIFICATE-----Generated at Thu Mar 26 00:52:14 2026 by rpki-client