$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft File: kkcJmme2ONySU7AuJT2zvnRaqFw.mft (raw, json) Hash identifier: o8pMLV8VlEVKR/D6W4zEdJ2NXmG3RnpKUYukMY/xMBk= Subject key identifier: B3:89:60:20:1D:7B:DD:D2:15:4C:AC:91:3B:BF:15:EC:8C:D3:1C:D6 Authority key identifier: 92:47:09:9A:67:B6:38:DC:92:53:B0:2E:25:3D:B3:BE:74:5A:A8:5C Certificate issuer: /CN=A9143B87/serialNumber=9247099A67B638DC9253B02E253DB3BE745AA85C Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft Manifest number: 48 Signing time: Wed 25 Mar 2026 07:29:52 +0000 Manifest this update: Wed 25 Mar 2026 07:29:51 +0000 Manifest next update: Wed 01 Apr 2026 07:29:51 +0000 Files and hashes: 1: kkcJmme2ONySU7AuJT2zvnRaqFw.crl (hash: 315MKlyhPiRpKXeFQDCiCDWVbJkJGNHI/hvCW0LJwiE=) 2: 22C0B5E8BD3811F0973F9752C4F9AE02.roa (hash: x6jH0YoExuPajTzRi1fsVZ3AaYHRKD72yw6/eXqhzss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.crl rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:29:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B87, serialNumber=9247099A67B638DC9253B02E253DB3BE745AA85C Validity Not Before: Mar 25 07:29:51 2026 GMT Not After : Apr 1 07:29:51 2026 GMT Subject: CN=69c38ef0-15b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:03:52:61:41:4c:b0:02:f8:85:75:82:c2:c0: 59:76:f6:9c:c3:8d:88:aa:08:58:94:3f:ee:da:b7: 9e:45:4b:17:06:73:3a:71:d1:8e:99:fc:58:8a:59: 19:e7:bf:6b:b5:bd:1b:59:6e:9e:3a:a6:84:7b:ad: bd:59:6c:bc:e7:18:fc:67:16:35:65:3e:ab:c6:a7: 6e:1b:58:4e:2a:21:d0:a6:85:71:bc:e9:fc:2e:d2: 80:10:bc:b4:87:65:94:52:67:96:1b:4a:b0:66:4c: 38:c9:02:b8:67:85:a3:e8:7b:2b:ad:d8:64:11:92: 91:97:df:41:f3:fb:89:fd:2f:bc:21:ba:72:cd:05: 47:38:c0:80:12:b7:20:0e:54:ad:ef:47:67:f6:0c: 0c:37:09:ca:2e:9d:0b:4f:46:27:af:a9:95:b6:77: a9:89:a0:3d:3a:20:5b:c2:4e:0f:fc:63:e6:75:a6: c5:46:f9:f6:fe:6b:6f:9e:4e:58:8a:78:79:ed:2b: 26:7c:85:5f:9a:3f:1e:16:1f:97:78:7a:65:5d:1f: ce:a4:b3:1d:28:e0:22:af:b7:cd:d0:40:59:c7:ed: 0a:df:24:b8:72:e9:40:93:97:6a:aa:a2:bd:b1:53: 5b:74:7e:cc:38:6a:0f:c6:4f:6a:ea:9a:bd:1c:4c: e9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:89:60:20:1D:7B:DD:D2:15:4C:AC:91:3B:BF:15:EC:8C:D3:1C:D6 X509v3 Authority Key Identifier: keyid:92:47:09:9A:67:B6:38:DC:92:53:B0:2E:25:3D:B3:BE:74:5A:A8:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:f5:c0:d0:26:dd:bc:e0:ee:53:88:95:da:53:aa:3d:9a:4e: 00:85:6e:87:a6:b2:41:2f:4d:1a:ff:c3:62:77:d9:cf:b3:7f: 78:3f:3c:0f:bb:89:0c:cf:0c:b4:28:0b:8a:82:45:db:91:8c: 3c:53:44:09:22:63:bd:1a:4b:a6:4d:97:20:f0:23:19:3e:ec: af:cd:44:4e:ba:b1:3d:d4:ea:70:f3:10:43:af:6b:f1:d1:2a: bb:91:18:d8:22:ab:4a:5d:90:95:65:f5:4a:5e:e6:6d:59:a7: 4a:e2:e7:77:e2:81:b5:f1:62:06:cb:09:33:f3:51:3e:89:1c: fb:d5:35:40:e5:56:d2:6b:8c:1c:c5:d1:28:9a:d4:0d:03:ef: f5:bd:52:8c:78:01:37:3c:9b:30:b8:13:a2:2d:d3:f4:0d:b7: 41:bb:40:d6:60:1a:21:f1:64:3d:14:75:35:2a:71:5e:b6:54: 56:26:8a:40:11:fa:97:c0:22:0a:64:ac:e1:b4:75:7d:57:46: 75:9b:68:79:3a:c2:32:38:59:f3:9f:7a:4e:be:e0:02:02:fd: bd:cf:08:5d:47:f5:30:54:94:25:25:4c:4e:1b:b8:b2:bd:95: 51:63:3b:dd:97:8f:61:ec:f3:55:9f:21:98:c2:68:bf:59:1c: 97:6a:8e:3b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 M0I4NzExMC8GA1UEBRMoOTI0NzA5OUE2N0I2MzhEQzkyNTNCMDJFMjUzREIzQkU3 NDVBQTg1QzAeFw0yNjAzMjUwNzI5NTFaFw0yNjA0MDEwNzI5NTFaMBgxFjAUBgNV BAMTDTY5YzM4ZWYwLTE1YjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYA1JhQUywAviFdYLCwFl29pzDjYiqCFiUP+7at55FSxcGczpx0Y6Z/FiKWRnn v2u1vRtZbp46poR7rb1ZbLznGPxnFjVlPqvGp24bWE4qIdCmhXG86fwu0oAQvLSH ZZRSZ5YbSrBmTDjJArhnhaPoeyut2GQRkpGX30Hz+4n9L7whunLNBUc4wIAStyAO VK3vR2f2DAw3CcounQtPRievqZW2d6mJoD06IFvCTg/8Y+Z1psVG+fb+a2+eTliK eHntKyZ8hV+aPx4WH5d4emVdH86ksx0o4CKvt83QQFnH7QrfJLhy6UCTl2qqor2x U1t0fsw4ag/GT2rqmr0cTOnrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUs4lgIB17 3dIVTKyRO78V7IzTHNYwHwYDVR0jBBgwFoAUkkcJmme2ONySU7AuJT2zvnRaqFww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQzQjg3LzIzRDE1MjhBQkNF MzExRjA5QzVGNzA0OEM0RjlBRTAyL2trY0ptbWUyT055U1U3QXVKVDJ6dm5SYXFG dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva2tjSm1tZTJPTnlTVTdBdUpUMnp2blJhcUZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQz Qjg3LzIzRDE1MjhBQkNFMzExRjA5QzVGNzA0OEM0RjlBRTAyL2trY0ptbWUyT055 U1U3QXVKVDJ6dm5SYXFGdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDK9cDQJt284O5TiJXaU6o9mk4AhW6HprJBL00a/8Nid9nPs394PzwPu4kMzwy0 KAuKgkXbkYw8U0QJImO9GkumTZcg8CMZPuyvzUROurE91Opw8xBDr2vx0Sq7kRjY IqtKXZCVZfVKXuZtWadK4ud34oG18WIGywkz81E+iRz71TVA5VbSa4wcxdEomtQN A+/1vVKMeAE3PJswuBOiLdP0DbdBu0DWYBoh8WQ9FHU1KnFetlRWJopAEfqXwCIK ZKzhtHV9V0Z1m2h5OsIyOFnzn3pOvuACAv29zwhdR/UwVJQlJUxOG7iyvZVRYzvd l49h7PNVnyGYwmi/WRyXao47 -----END CERTIFICATE-----Generated at Thu Mar 26 22:32:34 2026 by rpki-client