$ rpki-client -vvf rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft File: kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft (raw, json) Hash identifier: en23TjgFJIC0q74axvDQNAwWUazSbH0toGMyKPEhtPA= Subject key identifier: C7:49:AE:84:05:95:28:08:95:06:DE:55:78:D2:8C:19:F0:27:C5:59 Authority key identifier: 91:F4:93:9A:BA:ED:40:FA:36:6E:CC:76:35:9D:CA:2B:CB:68:CE:47 Certificate issuer: /CN=A9115CB5/serialNumber=91F4939ABAED40FA366ECC76359DCA2BCB68CE47 Certificate serial: 05F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft Manifest number: 05E3 Signing time: Thu 26 Mar 2026 22:48:09 +0000 Manifest this update: Thu 26 Mar 2026 22:48:08 +0000 Manifest next update: Thu 02 Apr 2026 22:48:08 +0000 Files and hashes: 1: kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl (hash: EIjkIESX6/4tt6UCKPhl17w0JqiCeYF/LRTQYfI4o8M=) 2: C41538940B4711EC99840631C4F9AE02.roa (hash: V6JHUzOLGDXoFaxiTUAua6l+IvXzjhCqWaQC1lRJApU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 22:48:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1521 (0x5f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115CB5, serialNumber=91F4939ABAED40FA366ECC76359DCA2BCB68CE47 Validity Not Before: Mar 26 22:48:08 2026 GMT Not After : Apr 2 22:48:08 2026 GMT Subject: CN=69c5b7a8-7155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:02:53:2c:ad:8b:1e:fc:a2:c5:dd:f0:66:4c: 48:f7:41:fc:11:3d:26:19:c7:62:f4:b9:33:85:41: 3a:37:b7:91:e5:50:92:f6:04:d2:f4:5c:3a:d3:18: b9:66:6b:63:a5:04:c1:d1:4e:c7:c0:4b:3b:79:4e: 84:ac:f7:9b:13:de:77:e3:e8:a1:30:51:2c:df:d9: a9:9f:bc:d9:1b:74:d4:e1:3e:7a:20:6e:31:ab:44: 85:b8:0b:56:1f:48:c9:ae:bd:42:f8:0d:33:9e:4e: b6:c5:6c:d5:62:b5:a5:7c:66:39:84:2e:a5:d5:27: de:ac:04:47:d8:00:da:b8:57:28:2e:17:f9:d1:19: ec:77:ea:f7:36:a4:4e:ae:03:37:b7:ba:e5:f0:14: 72:ca:1a:13:0d:45:ee:2c:0e:c1:cd:b3:07:93:4b: 33:dd:40:ea:19:57:ae:39:06:9a:c4:05:1a:e2:64: 2f:2a:d1:66:3e:ea:05:6e:88:55:92:5e:eb:73:f1: f6:2a:ad:42:82:97:44:a6:90:6f:df:90:69:ef:d7: 38:88:fe:ab:c9:e9:fd:fc:ce:a4:3b:f6:18:ed:2c: 51:61:bc:f7:ea:43:eb:1c:c8:69:cd:99:f2:73:5c: 24:56:b2:03:a3:ef:ac:09:ce:fa:73:a1:2c:8c:e8: 20:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:49:AE:84:05:95:28:08:95:06:DE:55:78:D2:8C:19:F0:27:C5:59 X509v3 Authority Key Identifier: keyid:91:F4:93:9A:BA:ED:40:FA:36:6E:CC:76:35:9D:CA:2B:CB:68:CE:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:38:90:1b:f2:e0:28:15:5a:65:32:6c:de:39:64:cc:4d:34: a1:7b:82:3c:99:e2:3b:c0:08:7a:5c:17:6b:3d:18:60:d4:43: b1:a0:a1:df:6c:ee:18:73:b3:6d:50:18:37:63:e0:f8:08:57: bf:6d:d2:41:79:68:05:95:5c:38:3b:8d:76:86:d5:56:bc:bd: ce:b1:12:5e:77:f6:36:77:33:ea:0a:82:de:c3:0f:8a:7b:a6: 21:a7:ab:1d:9d:4e:14:19:d3:70:5b:5e:25:f2:07:12:2d:68: 5d:c4:ad:b2:72:f3:7c:fd:5b:43:2a:aa:7d:40:77:b6:b4:01: e1:2d:7c:48:69:24:a2:ff:13:7d:bb:cb:7e:c2:6b:b0:1c:1f: 7c:2a:fe:4b:d8:22:9d:d5:4b:ff:ce:de:1f:44:c1:86:67:3b: 19:4d:d8:d4:78:c4:f6:08:3d:bb:b6:31:77:0c:24:ac:f4:c3: f2:29:c4:ed:07:e8:e2:86:c9:b8:5c:a0:2b:20:ea:5b:a7:05: c7:10:63:60:a2:f6:89:b6:25:0d:e5:ae:fa:83:22:c2:ad:e7: 16:dc:c0:9d:4d:f2:55:ed:9b:9f:94:40:e0:79:c2:3a:63:ee: 85:d4:6e:4b:8b:20:2a:13:80:81:c9:96:59:ea:19:d1:ee:30: 85:60:73:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVDQjUxMTAvBgNVBAUTKDkxRjQ5MzlBQkFFRDQwRkEzNjZFQ0M3NjM1OURDQTJC Q0I2OENFNDcwHhcNMjYwMzI2MjI0ODA4WhcNMjYwNDAyMjI0ODA4WjAYMRYwFAYD VQQDEw02OWM1YjdhOC03MTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQJTLK2LHvyixd3wZkxI90H8ET0mGcdi9LkzhUE6N7eR5VCS9gTS9Fw60xi5 ZmtjpQTB0U7HwEs7eU6ErPebE9534+ihMFEs39mpn7zZG3TU4T56IG4xq0SFuAtW H0jJrr1C+A0znk62xWzVYrWlfGY5hC6l1SferARH2ADauFcoLhf50Rnsd+r3NqRO rgM3t7rl8BRyyhoTDUXuLA7BzbMHk0sz3UDqGVeuOQaaxAUa4mQvKtFmPuoFbohV kl7rc/H2Kq1CgpdEppBv35Bp79c4iP6ryen9/M6kO/YY7SxRYbz36kPrHMhpzZny c1wkVrIDo++sCc76c6EsjOggeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMdJroQF lSgIlQbeVXjSjBnwJ8VZMB8GA1UdIwQYMBaAFJH0k5q67UD6Nm7MdjWdyivLaM5H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUNCNS9EOUZEMkRGRUYz N0YxMUVCQjI4M0U3NEFDNEY5QUUwMi9rZlNUbXJydFFQbzJic3gyTlozS0s4dG96 a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmU1RtcnJ0UVBvMmJzeDJOWjNLSzh0b3prYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUNCNS9EOUZEMkRGRUYzN0YxMUVCQjI4M0U3NEFDNEY5QUUwMi9rZlNUbXJydFFQ bzJic3gyTlozS0s4dG96a2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAjiQG/LgKBVaZTJs3jlkzE00oXuCPJniO8AIelwXaz0YYNRDsaCh32zuGHOz bVAYN2Pg+AhXv23SQXloBZVcODuNdobVVry9zrESXnf2Nncz6gqC3sMPinumIaer HZ1OFBnTcFteJfIHEi1oXcStsnLzfP1bQyqqfUB3trQB4S18SGkkov8TfbvLfsJr sBwffCr+S9gindVL/87eH0TBhmc7GU3Y1HjE9gg9u7YxdwwkrPTD8inE7Qfo4obJ uFygKyDqW6cFxxBjYKL2ibYlDeWu+oMiwq3nFtzAnU3yVe2bn5RA4HnCOmPuhdRu S4sgKhOAgcmWWeoZ0e4whWBzZg== -----END CERTIFICATE-----Generated at Sat Mar 28 12:00:24 2026 by rpki-client