$ rpki-client -vvf rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft File: kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft (raw, json) Hash identifier: 4TEte3w/dijWBhXZyaLBmwSrav+p/UC+kc219UYjLvo= Subject key identifier: 28:F2:6F:20:D8:0C:1F:BF:C1:10:E2:1B:3F:84:5F:C5:D0:25:1F:53 Authority key identifier: 93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01 Certificate issuer: /CN=A912EDB7/serialNumber=93159C9B6133F4806FBB28C6225E943963A6B001 Certificate serial: 0D0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft Manifest number: 0D02 Signing time: Tue 24 Mar 2026 17:57:52 +0000 Manifest this update: Tue 24 Mar 2026 17:57:52 +0000 Manifest next update: Tue 31 Mar 2026 17:57:52 +0000 Files and hashes: 1: kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl (hash: DA5kHfiQv6zWQtJCutjOoVa41UYLJ8q7l6CAuJygEX0=) 2: 18CA7386E35511EDA63D5182C4F9AE02.roa (hash: YjPccAzJNBU/ZdWKFo5jYPgMQyoV2n/b3P7n6tGh3TQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:57:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3342 (0xd0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EDB7, serialNumber=93159C9B6133F4806FBB28C6225E943963A6B001 Validity Not Before: Mar 24 17:57:52 2026 GMT Not After : Mar 31 17:57:52 2026 GMT Subject: CN=69c2d0a0-0d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:71:ae:a2:f7:82:2d:f6:f7:bc:aa:fa:49:c1: 79:31:3b:b5:54:b1:c3:27:25:4f:a0:4f:07:1b:14: 4b:59:af:fc:b9:55:ef:d5:dd:ba:d1:aa:08:e3:21: e8:06:41:b3:40:c6:0b:f2:4a:6e:e1:63:d9:a0:9a: 9a:60:48:4f:0a:42:f2:58:46:d0:45:86:7f:ea:e2: b0:22:9f:f7:3a:fb:72:f8:e3:0d:66:cf:af:4c:a8: ee:36:90:47:a7:fb:d9:fd:9e:65:3c:a2:6d:35:be: 65:33:51:29:19:0b:72:35:39:b9:cb:b0:7f:7d:aa: de:9d:f0:57:80:ca:c2:c1:fa:b3:97:a9:b4:69:cc: 05:f6:64:a2:6a:b5:0f:b1:82:32:1a:b0:65:4b:4f: 78:38:52:30:1f:55:af:b2:6d:df:66:82:d9:e9:9c: 0a:2e:84:9c:18:f4:e2:be:ee:39:14:0e:24:8e:01: 6c:03:30:77:17:48:f5:92:36:c9:ce:9a:62:9c:be: 83:88:50:d0:bd:d4:a6:7e:87:5b:88:7c:4e:65:47: ec:37:98:e9:89:0e:c7:8f:94:93:2d:a1:eb:d4:9b: db:c9:d7:52:bd:95:ad:f2:9d:61:2a:20:e9:a3:2b: 3d:6f:d2:35:80:e6:dc:0a:4b:ea:97:04:5f:e2:19: 3d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F2:6F:20:D8:0C:1F:BF:C1:10:E2:1B:3F:84:5F:C5:D0:25:1F:53 X509v3 Authority Key Identifier: keyid:93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:76:ec:8c:b0:2b:43:00:a2:95:90:11:33:77:4b:78:52:41: 5e:17:89:c9:b6:e6:16:6c:6d:9c:0a:36:53:d5:82:e2:f8:e3: d2:fd:91:24:c0:18:ee:d3:f5:bc:aa:54:b1:e3:f9:ea:10:7e: 00:e6:61:a5:e3:5d:d1:de:fb:0f:d6:83:14:e7:a1:4c:42:b5: fa:4f:4a:b2:ab:28:6c:80:c2:87:d3:5d:bc:8f:2a:1d:83:8f: d6:ad:3d:00:a3:9b:b8:57:c4:91:13:8f:5d:29:f1:ae:14:f1: e5:70:62:cf:6d:c8:89:5b:bc:fe:da:05:14:3c:9d:b5:74:c0: e6:7e:fb:d6:a7:37:9a:86:ba:60:ea:c2:e8:2e:9e:84:05:e5: 87:0e:a4:6d:53:54:60:ed:ba:ae:10:96:37:3a:ae:11:60:bd: c6:db:84:dc:6e:7f:79:33:ed:55:38:b3:61:b8:ba:1c:78:7e: 3e:27:fa:2c:34:01:5f:5e:1a:b3:87:12:ad:ee:46:4d:1e:36: 38:b5:68:f2:7d:0f:b5:67:d9:17:72:04:84:49:db:ec:9b:5f: d5:e9:4e:b7:65:7f:f3:c1:2f:06:e5:48:4b:4c:c4:5b:ae:12: 62:85:d2:03:77:ae:b8:5b:00:77:ca:41:83:03:14:3c:c1:94: d0:f8:14:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVEQjcxMTAvBgNVBAUTKDkzMTU5QzlCNjEzM0Y0ODA2RkJCMjhDNjIyNUU5NDM5 NjNBNkIwMDEwHhcNMjYwMzI0MTc1NzUyWhcNMjYwMzMxMTc1NzUyWjAYMRYwFAYD VQQDEw02OWMyZDBhMC0wZDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1HGuoveCLfb3vKr6ScF5MTu1VLHDJyVPoE8HGxRLWa/8uVXv1d260aoI4yHo BkGzQMYL8kpu4WPZoJqaYEhPCkLyWEbQRYZ/6uKwIp/3Ovty+OMNZs+vTKjuNpBH p/vZ/Z5lPKJtNb5lM1EpGQtyNTm5y7B/farenfBXgMrCwfqzl6m0acwF9mSiarUP sYIyGrBlS094OFIwH1Wvsm3fZoLZ6ZwKLoScGPTivu45FA4kjgFsAzB3F0j1kjbJ zppinL6DiFDQvdSmfodbiHxOZUfsN5jpiQ7Hj5STLaHr1JvbyddSvZWt8p1hKiDp oys9b9I1gObcCkvqlwRf4hk9iQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCjybyDY DB+/wRDiGz+EX8XQJR9TMB8GA1UdIwQYMBaAFJMVnJthM/SAb7soxiJelDljprAB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRURCNy80NjE2MkFEQUZF RDIxMUU5ODdGRkMyMTdDNEY5QUUwMi9reFdjbTJFejlJQnZ1eWpHSWw2VU9XT21z QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t4V2NtMkV6OUlCdnV5akdJbDZVT1dPbXNBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RURCNy80NjE2MkFEQUZFRDIxMUU5ODdGRkMyMTdDNEY5QUUwMi9reFdjbTJFejlJ QnZ1eWpHSWw2VU9XT21zQUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb3bsjLArQwCilZARM3dLeFJBXheJybbmFmxtnAo2U9WC4vjj0v2RJMAY7tP1 vKpUseP56hB+AOZhpeNd0d77D9aDFOehTEK1+k9KsqsobIDCh9NdvI8qHYOP1q09 AKObuFfEkROPXSnxrhTx5XBiz23IiVu8/toFFDydtXTA5n771qc3moa6YOrC6C6e hAXlhw6kbVNUYO26rhCWNzquEWC9xtuE3G5/eTPtVTizYbi6HHh+Pif6LDQBX14a s4cSre5GTR42OLVo8n0PtWfZF3IEhEnb7Jtf1elOt2V/88EvBuVIS0zEW64SYoXS A3euuFsAd8pBgwMUPMGU0PgUsg== -----END CERTIFICATE-----Generated at Thu Mar 26 14:26:06 2026 by rpki-client