$ rpki-client -vvf rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft File: KL7nBASyQwlkwwKSkNPqYEyRDrE.mft (raw, json) Hash identifier: y/gluOgMV3ohIUFSTsCQrgxP0BzrhGhsFVjhtyuyrfA= Subject key identifier: 08:14:5D:9C:40:70:8B:66:6E:A9:26:1D:CF:18:4B:BA:AE:7A:60:47 Authority key identifier: 28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1 Certificate issuer: /CN=A9154E3F/serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1 Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft Manifest number: B0 Signing time: Wed 25 Mar 2026 06:19:50 +0000 Manifest this update: Wed 25 Mar 2026 06:19:50 +0000 Manifest next update: Wed 01 Apr 2026 06:19:50 +0000 Files and hashes: 1: KL7nBASyQwlkwwKSkNPqYEyRDrE.crl (hash: lzBOFVOOn5TlWSYiB0QpME/GbDXz/4GH79F5S3Ij9JI=) 2: C028C06E18E211F081A75558C4F9AE02.roa (hash: mUs4fgM8VrVj+tu77XrkYII8tafnRQVMrP9/4PhdyvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154E3F, serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1 Validity Not Before: Mar 25 06:19:50 2026 GMT Not After : Apr 1 06:19:50 2026 GMT Subject: CN=69c37e86-2470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ce:aa:01:9b:7b:35:ca:9f:d1:57:f1:17:b0: fc:f5:60:7e:c9:4b:f8:9c:3a:a7:af:61:71:88:e4: 0c:8d:d1:3f:d8:a1:95:a9:bf:45:54:bb:fd:a2:4b: be:d7:f7:e3:5f:6f:3f:cf:70:55:7c:54:f3:c2:77: 1f:e6:64:cf:72:90:2b:4d:89:43:fe:75:bf:9b:17: 73:a9:63:d2:42:86:6a:8e:3a:8a:01:9e:c5:d2:d6: c8:bb:b8:00:14:47:12:d4:9f:09:70:94:ef:6b:6d: f2:0f:a4:96:b5:af:5b:4a:7f:c0:6f:09:b1:00:7c: cf:1f:60:9f:0a:19:68:13:c6:16:cb:aa:bb:80:78: 9f:97:9a:8a:05:14:18:55:e6:2c:99:68:6f:3d:6d: dd:81:8f:66:a5:63:48:e5:68:44:93:99:93:47:8e: e7:cf:8d:21:43:d7:3c:e9:3e:1c:67:92:4a:85:b6: b8:eb:b7:18:6c:e8:bd:0d:d0:43:d2:b6:05:c7:23: 78:9f:29:8d:19:30:81:6f:4d:b3:60:3b:ad:c3:4e: 45:8c:b9:22:ee:8e:92:81:23:57:fd:f3:02:4c:18: 61:1b:ab:07:89:54:09:07:9b:5e:3b:70:b8:48:8f: 68:98:ac:79:48:86:1a:75:15:85:d3:b5:7b:be:b5: 43:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:14:5D:9C:40:70:8B:66:6E:A9:26:1D:CF:18:4B:BA:AE:7A:60:47 X509v3 Authority Key Identifier: keyid:28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:72:0e:c9:8c:d3:28:29:bd:a7:6a:66:bf:d2:80:93:27:ac: 1b:06:1c:5c:99:3f:6b:a1:46:4e:0f:6c:ac:da:f1:14:6a:e5: 63:92:6b:aa:67:08:0b:28:76:b2:39:bf:e3:38:e2:d5:92:70: 43:ef:c9:a4:1a:e0:31:8e:e2:6e:0f:52:46:51:61:88:22:c9: d6:58:4b:be:a2:b6:5c:e1:56:29:d6:9f:d9:1d:56:2d:74:fe: 3b:69:f6:e5:6e:47:ad:17:7f:e6:a6:22:47:e9:2d:04:29:54: 72:90:a2:a7:20:10:ed:39:bb:85:92:d4:de:b5:cd:c2:2c:d1: 85:db:9e:db:79:a7:8e:2b:9e:9e:bc:80:8b:12:61:d7:01:be: ca:37:51:06:ce:82:6e:01:ed:5a:6e:30:9e:41:47:88:9c:b8: 60:44:e1:e5:36:df:0c:0a:19:4f:19:c3:ec:30:11:37:86:66: 0e:8e:29:2f:4a:84:e8:62:8f:f9:36:ec:be:e2:24:08:66:cd: 8b:54:5c:d8:64:3f:7c:7d:1f:e7:fe:59:30:6d:b6:be:61:50: 9d:f5:5e:da:34:31:85:f5:e8:7b:4c:4d:55:11:fd:85:80:83: 7c:ec:04:96:3a:44:90:76:bd:da:1a:00:b6:2d:75:95:73:4e: de:0d:99:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRFM0YxMTAvBgNVBAUTKDI4QkVFNzA0MDRCMjQzMDk2NEMzMDI5MjkwRDNFQTYw NEM5MTBFQjEwHhcNMjYwMzI1MDYxOTUwWhcNMjYwNDAxMDYxOTUwWjAYMRYwFAYD VQQDEw02OWMzN2U4Ni0yNDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0s6qAZt7Ncqf0VfxF7D89WB+yUv4nDqnr2FxiOQMjdE/2KGVqb9FVLv9oku+ 1/fjX28/z3BVfFTzwncf5mTPcpArTYlD/nW/mxdzqWPSQoZqjjqKAZ7F0tbIu7gA FEcS1J8JcJTva23yD6SWta9bSn/AbwmxAHzPH2CfChloE8YWy6q7gHifl5qKBRQY VeYsmWhvPW3dgY9mpWNI5WhEk5mTR47nz40hQ9c86T4cZ5JKhba467cYbOi9DdBD 0rYFxyN4nymNGTCBb02zYDutw05FjLki7o6SgSNX/fMCTBhhG6sHiVQJB5teO3C4 SI9omKx5SIYadRWF07V7vrVDSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAgUXZxA cItmbqkmHc8YS7quemBHMB8GA1UdIwQYMBaAFCi+5wQEskMJZMMCkpDT6mBMkQ6x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEUzRi8zQzNFNjIwRTE4 RTIxMUYwOUJFOTk1NTdDNEY5QUUwMi9LTDduQkFTeVF3bGt3d0tTa05QcVlFeVJE ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tMN25CQVN5UXdsa3d3S1NrTlBxWUV5UkRyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEUzRi8zQzNFNjIwRTE4RTIxMUYwOUJFOTk1NTdDNEY5QUUwMi9LTDduQkFTeVF3 bGt3d0tTa05QcVlFeVJEckUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsnIOyYzTKCm9p2pmv9KAkyesGwYcXJk/a6FGTg9srNrxFGrlY5JrqmcICyh2 sjm/4zji1ZJwQ+/JpBrgMY7ibg9SRlFhiCLJ1lhLvqK2XOFWKdaf2R1WLXT+O2n2 5W5HrRd/5qYiR+ktBClUcpCipyAQ7Tm7hZLU3rXNwizRhdue23mnjiuenryAixJh 1wG+yjdRBs6CbgHtWm4wnkFHiJy4YETh5TbfDAoZTxnD7DARN4ZmDo4pL0qE6GKP +TbsvuIkCGbNi1Rc2GQ/fH0f5/5ZMG22vmFQnfVe2jQxhfXoe0xNVRH9hYCDfOwE ljpEkHa92hoAti11lXNO3g2ZTw== -----END CERTIFICATE-----Generated at Thu Mar 26 13:10:40 2026 by rpki-client