$ rpki-client -vvf rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft File: KncXIyWXseQO6_FQ58uUIvRdim0.mft (raw, json) Hash identifier: FX1hSRNSjo43cjfQh26UaqrPvRdDAL/xvx0bTJFYFM4= Subject key identifier: FC:FF:F1:AC:90:E9:DF:8D:F0:A3:C3:99:DD:01:0D:0C:64:ED:61:9F Authority key identifier: 2A:77:17:23:25:97:B1:E4:0E:EB:F1:50:E7:CB:94:22:F4:5D:8A:6D Certificate issuer: /CN=A913E5F9/serialNumber=2A7717232597B1E40EEBF150E7CB9422F45D8A6D Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KncXIyWXseQO6_FQ58uUIvRdim0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft Manifest number: 24 Signing time: Wed 25 Mar 2026 08:00:44 +0000 Manifest this update: Wed 25 Mar 2026 08:00:44 +0000 Manifest next update: Wed 01 Apr 2026 08:00:44 +0000 Files and hashes: 1: KncXIyWXseQO6_FQ58uUIvRdim0.crl (hash: MjmVeBMmn8hfOChwyYlEkRs16EgNVbUAv4fVb9wQoFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.crl rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KncXIyWXseQO6_FQ58uUIvRdim0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E5F9, serialNumber=2A7717232597B1E40EEBF150E7CB9422F45D8A6D Validity Not Before: Mar 25 08:00:44 2026 GMT Not After : Apr 1 08:00:44 2026 GMT Subject: CN=69c3962c-b81e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:39:ea:ac:5a:55:5f:95:fb:5f:54:4b:eb:20: 71:e0:72:ad:ea:b0:67:e3:ce:f4:a8:ae:8d:f2:98: 5b:4b:b6:e6:be:05:c2:96:31:6a:f1:64:08:17:97: 4a:71:d7:6b:0f:c6:db:48:9f:7e:93:d3:54:86:bd: 59:ce:cd:6c:a5:d6:bc:b7:a4:2f:4d:2b:8b:5f:72: 89:da:f7:d7:a4:99:97:1a:0a:d0:2c:1c:a0:78:13: 1e:54:54:a7:4f:fe:d8:01:ab:36:39:c5:ad:63:95: 24:ee:3e:89:2a:4a:9b:85:2e:dc:3b:78:57:04:f8: 19:0f:de:0a:5c:2c:7e:f5:91:bc:f3:35:a7:35:c6: ab:54:c3:de:cd:35:6a:83:e3:79:f6:9b:e9:68:fb: 33:1c:96:98:55:41:e8:30:76:84:30:67:62:a6:a2: e8:28:e1:47:49:e9:7e:e5:99:74:29:91:df:20:99: 22:b9:34:d2:db:2a:1e:4c:3b:ce:58:ae:b1:87:4d: ed:59:12:09:74:6b:7f:94:d5:7d:93:6c:cd:c6:92: 32:83:e0:26:5b:60:32:fd:38:7a:67:e7:f3:fa:ef: c8:dd:e8:4e:e3:77:eb:1c:a0:f2:d5:70:9a:ee:54: 09:b7:1e:05:29:29:7a:76:bc:29:0b:98:29:a3:b2: 91:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:FF:F1:AC:90:E9:DF:8D:F0:A3:C3:99:DD:01:0D:0C:64:ED:61:9F X509v3 Authority Key Identifier: keyid:2A:77:17:23:25:97:B1:E4:0E:EB:F1:50:E7:CB:94:22:F4:5D:8A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KncXIyWXseQO6_FQ58uUIvRdim0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:1b:d8:1d:00:6c:85:4f:a8:98:71:82:3c:5e:ec:92:dc:35: 6c:e5:b0:c6:61:73:ac:bb:32:bc:1d:b9:a6:86:9f:8f:c4:a0: 31:c0:94:af:af:b3:4f:cc:77:bc:9a:60:f3:a6:ad:89:1f:73: d6:b7:2d:32:44:56:ed:2b:d9:66:ca:c6:83:05:23:4b:a1:2b: cf:b1:f6:7a:4f:8d:a4:4b:2d:2c:15:31:b2:21:d5:c7:09:a8: d9:b3:c0:da:a0:e7:94:52:f0:92:1f:d1:02:89:b3:b5:e0:48: 57:b8:d0:ed:23:14:7e:11:90:68:1a:71:09:d7:2a:27:f3:3c: 70:f6:dc:82:6e:f8:01:78:5e:36:da:b8:1f:d7:eb:7f:85:3a: dd:65:45:ef:04:27:88:f3:f2:8e:4e:12:00:95:c1:c5:d0:50: 19:58:0c:96:06:f4:72:86:e2:82:df:85:05:67:13:2d:04:29: 9d:fa:5a:1c:37:68:ff:b1:ef:72:5f:a4:8a:e2:f9:d5:e5:25: 46:9d:aa:38:56:be:1c:bd:83:c1:bc:2f:dd:3e:0d:b1:f7:f8: 1c:a3:a1:68:38:7b:b6:b8:80:a3:ba:4f:ea:34:02:71:a6:be: ea:7a:4b:5f:c8:88:e6:06:7a:61:bc:71:9a:a8:36:7a:51:13: f7:55:f8:26 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RTVGOTExMC8GA1UEBRMoMkE3NzE3MjMyNTk3QjFFNDBFRUJGMTUwRTdDQjk0MjJG NDVEOEE2RDAeFw0yNjAzMjUwODAwNDRaFw0yNjA0MDEwODAwNDRaMBgxFjAUBgNV BAMTDTY5YzM5NjJjLWI4MWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcOeqsWlVflftfVEvrIHHgcq3qsGfjzvSoro3ymFtLtua+BcKWMWrxZAgXl0px 12sPxttIn36T01SGvVnOzWyl1ry3pC9NK4tfcona99ekmZcaCtAsHKB4Ex5UVKdP /tgBqzY5xa1jlSTuPokqSpuFLtw7eFcE+BkP3gpcLH71kbzzNac1xqtUw97NNWqD 43n2m+lo+zMclphVQegwdoQwZ2Kmougo4UdJ6X7lmXQpkd8gmSK5NNLbKh5MO85Y rrGHTe1ZEgl0a3+U1X2TbM3GkjKD4CZbYDL9OHpn5/P678jd6E7jd+scoPLVcJru VAm3HgUpKXp2vCkLmCmjspFDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/P/xrJDp 343wo8OZ3QENDGTtYZ8wHwYDVR0jBBgwFoAUKncXIyWXseQO6/FQ58uUIvRdim0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFNUY5LzAwNkJBMzQ0RjY5 MTExRjBBRTI3ODg1MjNBNkY1NkJDL0tuY1hJeVdYc2VRTzZfRlE1OHVVSXZSZGlt MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS25jWEl5V1hzZVFPNl9GUTU4dVVJdlJkaW0wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF NUY5LzAwNkJBMzQ0RjY5MTExRjBBRTI3ODg1MjNBNkY1NkJDL0tuY1hJeVdYc2VR TzZfRlE1OHVVSXZSZGltMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQApG9gdAGyFT6iYcYI8XuyS3DVs5bDGYXOsuzK8Hbmmhp+PxKAxwJSvr7NPzHe8 mmDzpq2JH3PWty0yRFbtK9lmysaDBSNLoSvPsfZ6T42kSy0sFTGyIdXHCajZs8Da oOeUUvCSH9ECibO14EhXuNDtIxR+EZBoGnEJ1yon8zxw9tyCbvgBeF422rgf1+t/ hTrdZUXvBCeI8/KOThIAlcHF0FAZWAyWBvRyhuKC34UFZxMtBCmd+locN2j/se9y X6SK4vnV5SVGnao4Vr4cvYPBvC/dPg2x9/gco6FoOHu2uICjuk/qNAJxpr7qektf yIjmBnphvHGaqDZ6URP3Vfgm -----END CERTIFICATE-----Generated at Thu Mar 26 00:50:22 2026 by rpki-client