$ rpki-client -vvf rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft File: m-KS59FtTo6BYWnDtQLr5O9FwWM.mft (raw, json) Hash identifier: uLUVV7x79MWoKGPQO6A6v1kVKzVNE6USpTcQs0zf6rE= Subject key identifier: 28:81:26:FC:02:88:A4:CE:70:C6:C6:D4:16:D8:06:7B:EC:3E:11:BC Authority key identifier: 9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63 Certificate issuer: /CN=A91897B3/serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163 Certificate serial: 064A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft Manifest number: 063D Signing time: Tue 24 Mar 2026 22:26:14 +0000 Manifest this update: Tue 24 Mar 2026 22:26:14 +0000 Manifest next update: Tue 31 Mar 2026 22:26:14 +0000 Files and hashes: 1: m-KS59FtTo6BYWnDtQLr5O9FwWM.crl (hash: z8+kWn3EQu1E+72K8addczYA/Qv9jkV2ly4v9v7QMIg=) 2: 101ED47C04A811F0B2A84883C4F9AE02.roa (hash: Zlhv3342JavepxfA0ut5BlmLYFXFM3ZkV00bpqHcIaY=) 3: 6D353E4E97F711EFB3A27D59C4F9AE02.roa (hash: onUalOMh2Y21LBaK70hxv0uqRbOQZZN0gUzWropMlFk=) 4: E3D745E4049C11F0A6EDC22CC4F9AE02.roa (hash: 5KDSV/Q8/Iam5LtqemK/WU+8SEZm63CQbuYl32lOpFw=) 5: 034BA52C03AE11F0BDE1863DC4F9AE02.roa (hash: VHtELU4XBm7Fr627ZlTE68FSXaSiIU85oQhKivPBoeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1610 (0x64a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91897B3, serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163 Validity Not Before: Mar 24 22:26:14 2026 GMT Not After : Mar 31 22:26:14 2026 GMT Subject: CN=69c30f86-dd37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ac:7a:05:b9:52:7f:95:27:30:52:27:51:63: 9d:93:cb:48:d0:b0:5f:7a:3c:e4:ad:da:c7:7a:4e: 05:29:de:f1:a9:a8:12:6d:14:b0:87:41:e8:fd:e7: 30:df:08:60:ad:9c:be:4f:1e:10:65:94:ef:92:cf: cb:b0:95:63:83:35:d7:99:ea:c6:86:64:b1:e5:1f: 8d:6a:4c:d4:54:16:9d:98:30:3f:b1:69:1e:b3:ce: cb:bd:7b:a0:80:3e:07:b5:d7:ae:e9:44:45:0e:0a: bc:90:34:5c:07:09:cc:d5:5e:fe:4f:49:b3:8e:90: 14:11:52:a2:37:97:ab:a9:23:e5:a5:40:a5:79:6e: 28:db:e2:34:f1:db:07:a7:58:c4:2c:29:bb:94:49: b4:82:f6:c1:e5:80:47:d8:8f:1b:85:6f:23:ef:e5: 66:cd:f4:1d:51:e7:44:b1:3a:d4:ec:40:6b:4e:81: a7:1e:03:22:5a:7e:2c:69:42:82:40:cc:ea:20:9c: 8e:84:8a:16:6e:b4:f2:1b:da:bb:67:1e:8f:2b:1f: 17:29:4e:cc:c2:8f:cd:69:6b:b0:92:b5:4b:25:a9: 90:4a:ee:1a:2b:87:6a:54:5a:53:fc:bf:1f:58:68: 2b:d5:eb:7f:de:02:0a:a0:53:30:41:7b:3a:93:6e: 48:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:81:26:FC:02:88:A4:CE:70:C6:C6:D4:16:D8:06:7B:EC:3E:11:BC X509v3 Authority Key Identifier: keyid:9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:0a:6e:43:cb:fa:9f:41:fa:a9:71:90:d4:25:93:58:3b:82: a3:8c:b7:8a:9b:a1:ef:ea:99:c9:8e:3f:1f:37:17:84:3c:23: b4:8e:92:2f:73:a8:a0:72:a0:23:5d:2a:73:0d:b9:b8:4b:f7: 62:a0:e7:4d:32:2b:c2:15:b2:d9:bb:c2:1c:8d:55:70:77:07: c3:c7:30:90:ca:21:f4:36:98:cb:f2:0e:6b:bb:81:4e:f0:c4: 25:42:30:a2:5b:36:06:7e:3c:16:84:5e:03:0d:52:3c:91:d3: 6e:9f:30:a9:65:91:b9:48:1a:5a:4e:5c:fc:92:8b:fc:35:4c: ad:a8:63:50:5d:f2:2b:6c:e3:32:1e:08:89:a4:01:d7:c5:df: 4e:34:97:c0:10:34:cb:18:46:b6:02:96:8b:ca:c4:50:ac:50: c9:96:ea:d4:6a:b7:1e:63:2e:26:c6:cd:e6:a7:ed:6a:39:bb: f0:05:2a:e2:bc:3e:62:f3:64:b3:91:85:87:2c:ea:a3:b4:88: 4e:bc:2d:a8:bd:82:69:8d:2e:67:a5:3c:3c:c6:45:b4:aa:90: 2c:ab:ac:f3:f3:31:33:23:ea:d9:3b:47:32:78:11:d4:b4:16: ef:da:6e:cc:58:bd:5f:9f:a1:b5:a8:b9:b4:27:16:89:6a:d6: de:66:2f:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk3QjMxMTAvBgNVBAUTKDlCRTI5MkU3RDE2RDRFOEU4MTYxNjlDM0I1MDJFQkU0 RUY0NUMxNjMwHhcNMjYwMzI0MjIyNjE0WhcNMjYwMzMxMjIyNjE0WjAYMRYwFAYD VQQDEw02OWMzMGY4Ni1kZDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6x6BblSf5UnMFInUWOdk8tI0LBfejzkrdrHek4FKd7xqagSbRSwh0Ho/ecw 3whgrZy+Tx4QZZTvks/LsJVjgzXXmerGhmSx5R+NakzUVBadmDA/sWkes87LvXug gD4Htdeu6URFDgq8kDRcBwnM1V7+T0mzjpAUEVKiN5erqSPlpUCleW4o2+I08dsH p1jELCm7lEm0gvbB5YBH2I8bhW8j7+VmzfQdUedEsTrU7EBrToGnHgMiWn4saUKC QMzqIJyOhIoWbrTyG9q7Zx6PKx8XKU7Mwo/NaWuwkrVLJamQSu4aK4dqVFpT/L8f WGgr1et/3gIKoFMwQXs6k25IZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCiBJvwC iKTOcMbG1BbYBnvsPhG8MB8GA1UdIwQYMBaAFJvikufRbU6OgWFpw7UC6+TvRcFj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTdCMy82NzIxMkRGRUNF QTgxMUVCOUE5NjlFMEZDNEY5QUUwMi9tLUtTNTlGdFRvNkJZV25EdFFMcjVPOUZ3 V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20tS1M1OUZ0VG82QllXbkR0UUxyNU85RndXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTdCMy82NzIxMkRGRUNFQTgxMUVCOUE5NjlFMEZDNEY5QUUwMi9tLUtTNTlGdFRv NkJZV25EdFFMcjVPOUZ3V00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXgpuQ8v6n0H6qXGQ1CWTWDuCo4y3ipuh7+qZyY4/HzcXhDwjtI6SL3OooHKg I10qcw25uEv3YqDnTTIrwhWy2bvCHI1VcHcHw8cwkMoh9DaYy/IOa7uBTvDEJUIw ols2Bn48FoReAw1SPJHTbp8wqWWRuUgaWk5c/JKL/DVMrahjUF3yK2zjMh4IiaQB 18XfTjSXwBA0yxhGtgKWi8rEUKxQyZbq1Gq3HmMuJsbN5qftajm78AUq4rw+YvNk s5GFhyzqo7SITrwtqL2CaY0uZ6U8PMZFtKqQLKus8/MxMyPq2TtHMngR1LQW79pu zFi9X5+htai5tCcWiWrW3mYvng== -----END CERTIFICATE-----Generated at Thu Mar 26 06:12:45 2026 by rpki-client