$ rpki-client -vvf rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft File: kCSWwSsdqlhOQrNDNM8XIBI2snw.mft (raw, json) Hash identifier: PzQ206MlDVqc8kmedYRrTKPHyQmcMKmb6lbw4fUzlro= Subject key identifier: 5D:14:7E:EA:DC:5A:F4:71:7B:74:D1:F1:F9:79:31:02:75:5A:B8:03 Authority key identifier: 90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C Certificate issuer: /CN=A912346E/serialNumber=902496C12B1DAA584E42B34334CF17201236B27C Certificate serial: 06BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft Manifest number: 06B5 Signing time: Tue 24 Mar 2026 22:05:00 +0000 Manifest this update: Tue 24 Mar 2026 22:05:00 +0000 Manifest next update: Tue 31 Mar 2026 22:05:00 +0000 Files and hashes: 1: kCSWwSsdqlhOQrNDNM8XIBI2snw.crl (hash: cXZXw/5r6ocGEBivO8amaQ5mdHZQphX5IphBZYV2VsA=) 2: 5E54C4BEA06411EBB6AFCD55C4F9AE02.roa (hash: WescIqZtu/oV5qzJVivLhqT6NCVSMsUZrdry8jKlBBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:04:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1726 (0x6be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912346E, serialNumber=902496C12B1DAA584E42B34334CF17201236B27C Validity Not Before: Mar 24 22:05:00 2026 GMT Not After : Mar 31 22:05:00 2026 GMT Subject: CN=69c30a8c-f56c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:af:a7:49:1b:40:35:2e:67:ac:69:b9:5f:97: 30:d4:7c:83:0f:e1:86:bd:41:5a:33:7b:0b:66:a2: 6b:72:09:93:f7:41:1e:76:6a:53:38:9c:1e:2c:f5: d7:27:ea:e4:a9:c3:0f:9c:fa:e4:53:6a:71:80:6b: 90:3b:82:2b:93:30:c8:b4:0e:9e:43:cc:b0:16:2a: 43:7c:d5:46:8c:26:2e:23:88:ef:a2:54:99:8a:5c: 5c:3a:0d:94:bb:68:96:25:d0:6b:e1:ef:0a:28:87: 62:e7:e0:69:ea:a2:10:0f:08:b1:47:79:6c:52:10: 78:5b:fe:d2:02:15:88:b9:df:cb:aa:03:2a:ef:ad: 8c:1c:aa:17:05:de:c6:e6:6a:d5:a8:0c:a5:73:4c: ad:b3:c9:1d:68:95:e3:27:9e:8b:ee:b0:0d:c7:f8: a4:9f:5a:02:e6:53:66:6a:da:6a:6d:b4:34:f7:dd: 8f:dd:3c:2b:11:dc:58:57:a7:81:ec:32:92:ed:10: 6e:d4:2d:91:b2:1b:6c:0f:32:17:42:e8:ce:15:cf: 97:88:36:77:1e:d7:9a:a0:c3:45:85:40:86:1c:e1: 17:58:72:d2:b6:bd:7f:e9:dc:b1:9e:76:f4:a5:72: a5:32:1a:62:70:a5:b9:51:fe:ec:03:39:85:9f:a2: 84:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:14:7E:EA:DC:5A:F4:71:7B:74:D1:F1:F9:79:31:02:75:5A:B8:03 X509v3 Authority Key Identifier: keyid:90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:a0:1b:47:97:7e:22:5e:a0:cc:14:92:c7:11:e6:cf:1c:e4: 1d:bc:a7:d6:92:dc:cd:5f:ac:9f:d8:a7:01:e2:e0:e4:70:eb: a8:e3:c8:7a:2d:f0:00:69:5c:db:43:b5:82:ae:e6:e2:e4:e1: 22:95:59:83:1c:a5:42:c2:e6:67:ec:c3:fe:9b:ce:f5:2d:90: 2e:72:30:86:0c:d8:d1:c7:72:67:aa:f4:0c:1f:8b:72:a6:56: 76:ad:64:4f:c8:18:68:90:33:ba:13:4b:65:49:5a:04:29:07: a3:aa:3c:43:82:c0:b0:e4:a0:96:3f:7e:bb:6d:94:26:ad:f4: c5:40:ed:65:d0:37:d2:f9:1d:b6:52:3b:69:b6:e6:30:cf:2a: 99:c1:f9:6e:a8:21:e3:e6:e2:1b:01:43:ad:45:59:f9:dd:b3: a8:f5:dd:01:6b:9f:92:f9:83:76:be:a0:6a:1d:be:2b:fa:7f: 0a:86:09:20:f4:c1:0e:18:a5:34:71:cc:c6:77:4c:27:de:3d: c8:1a:3d:6f:6e:1a:57:95:2f:83:20:91:5a:f3:7b:ff:ca:bc: 9a:b8:71:b8:74:f4:7f:51:14:e3:07:3d:61:ec:28:2e:e4:e6: 01:b4:51:c8:21:4f:d1:4f:f5:2d:94:0e:14:8c:d5:ab:30:80: c3:e0:f5:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM0NkUxMTAvBgNVBAUTKDkwMjQ5NkMxMkIxREFBNTg0RTQyQjM0MzM0Q0YxNzIw MTIzNkIyN0MwHhcNMjYwMzI0MjIwNTAwWhcNMjYwMzMxMjIwNTAwWjAYMRYwFAYD VQQDEw02OWMzMGE4Yy1mNTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyq+nSRtANS5nrGm5X5cw1HyDD+GGvUFaM3sLZqJrcgmT90EedmpTOJweLPXX J+rkqcMPnPrkU2pxgGuQO4IrkzDItA6eQ8ywFipDfNVGjCYuI4jvolSZilxcOg2U u2iWJdBr4e8KKIdi5+Bp6qIQDwixR3lsUhB4W/7SAhWIud/LqgMq762MHKoXBd7G 5mrVqAylc0yts8kdaJXjJ56L7rANx/ikn1oC5lNmatpqbbQ0992P3TwrEdxYV6eB 7DKS7RBu1C2RshtsDzIXQujOFc+XiDZ3HteaoMNFhUCGHOEXWHLStr1/6dyxnnb0 pXKlMhpicKW5Uf7sAzmFn6KElwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF0Ufurc WvRxe3TR8fl5MQJ1WrgDMB8GA1UdIwQYMBaAFJAklsErHapYTkKzQzTPFyASNrJ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzQ2RS84NUM0M0ZGRUEw NjIxMUVCODU5RTc2NTNDNEY5QUUwMi9rQ1NXd1NzZHFsaE9Rck5ETk04WElCSTJz bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tDU1d3U3NkcWxoT1FyTkROTThYSUJJMnNudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzQ2RS84NUM0M0ZGRUEwNjIxMUVCODU5RTc2NTNDNEY5QUUwMi9rQ1NXd1NzZHFs aE9Rck5ETk04WElCSTJzbncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIqAbR5d+Il6gzBSSxxHmzxzkHbyn1pLczV+sn9inAeLg5HDrqOPIei3wAGlc 20O1gq7m4uThIpVZgxylQsLmZ+zD/pvO9S2QLnIwhgzY0cdyZ6r0DB+LcqZWdq1k T8gYaJAzuhNLZUlaBCkHo6o8Q4LAsOSglj9+u22UJq30xUDtZdA30vkdtlI7abbm MM8qmcH5bqgh4+biGwFDrUVZ+d2zqPXdAWufkvmDdr6gah2+K/p/CoYJIPTBDhil NHHMxndMJ949yBo9b24aV5UvgyCRWvN7/8q8mrhxuHT0f1EU4wc9YewoLuTmAbRR yCFP0U/1LZQOFIzVqzCAw+D1Pw== -----END CERTIFICATE-----Generated at Thu Mar 26 07:27:22 2026 by rpki-client