$ rpki-client -vvf rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft File: KoE65dYVKWBF2z4sQsuPzaxq0gw.mft (raw, json) Hash identifier: feZXTlLZDt2EGF93K4QRnx1Yn2KDwmrUGqHVPyZUDZw= Subject key identifier: 5A:46:0A:02:2A:35:F3:DA:B8:B2:26:E2:A4:23:4A:EE:26:7B:88:D1 Authority key identifier: 2A:81:3A:E5:D6:15:29:60:45:DB:3E:2C:42:CB:8F:CD:AC:6A:D2:0C Certificate issuer: /CN=A9193BF8/serialNumber=2A813AE5D615296045DB3E2C42CB8FCDAC6AD20C Certificate serial: 022D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft Manifest number: 0227 Signing time: Wed 25 Mar 2026 02:06:40 +0000 Manifest this update: Wed 25 Mar 2026 02:06:40 +0000 Manifest next update: Wed 01 Apr 2026 02:06:40 +0000 Files and hashes: 1: KoE65dYVKWBF2z4sQsuPzaxq0gw.crl (hash: RvjWXDwBxBvn74nKWLHVKkl8NWr3X9hdpExfmfRIbGQ=) 2: B8F3C5B4E01811ED8385DA62C4F9AE02.roa (hash: 72/bCWar4kI1SS9FjdRKOsQjDQzMinFfK2s3pr0xemY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.crl rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 557 (0x22d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193BF8, serialNumber=2A813AE5D615296045DB3E2C42CB8FCDAC6AD20C Validity Not Before: Mar 25 02:06:40 2026 GMT Not After : Apr 1 02:06:40 2026 GMT Subject: CN=69c34330-aecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3a:71:8e:72:f2:e7:1e:88:d6:77:bb:7a:90: 5b:1a:ce:49:29:ad:2e:d9:0e:ec:87:62:8b:cf:55: 8a:1f:51:d0:5b:9f:e8:b0:e3:52:97:63:b5:fd:e8: 3d:5f:5d:61:0f:cc:56:ec:f9:b9:3a:af:f2:de:e2: c0:9f:08:21:1a:20:48:ff:85:54:6e:c2:c3:c1:54: ea:fb:7f:a7:43:88:87:09:d4:68:47:86:da:30:8f: 5f:bd:63:46:f9:94:9b:4b:5a:ea:36:70:4c:30:e7: e8:b7:f0:a9:17:91:98:b0:82:94:b2:51:81:d2:34: f9:cc:11:81:77:70:92:67:3b:cb:5f:92:8c:e3:04: 4b:f4:83:18:b4:dc:30:cd:f3:a1:85:5a:aa:19:aa: 85:27:0f:5c:ef:b7:29:8d:fa:fb:e7:88:33:62:47: 92:98:b5:a5:cd:62:f6:df:d7:f4:29:e4:07:3c:c7: 5e:9f:23:eb:5b:35:64:3b:53:4b:91:d2:05:15:06: f4:b8:09:61:9f:59:3d:70:a4:57:53:f7:b7:35:93: 04:c4:28:97:ea:37:f3:bd:b0:1b:b5:8e:ea:f0:15: 20:f3:e6:6d:c8:49:83:97:2b:1d:c0:b0:50:a3:96: fe:cc:b6:7b:5b:93:57:db:b2:06:17:d7:7f:59:16: 7a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:46:0A:02:2A:35:F3:DA:B8:B2:26:E2:A4:23:4A:EE:26:7B:88:D1 X509v3 Authority Key Identifier: keyid:2A:81:3A:E5:D6:15:29:60:45:DB:3E:2C:42:CB:8F:CD:AC:6A:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:74:13:58:a8:c4:6c:2c:8c:03:e9:3b:14:41:a8:fc:9c:a6: ee:55:72:57:fa:a2:de:dc:35:ac:10:ea:b3:f7:14:9a:45:7e: ac:fd:0f:f2:2b:52:1b:6e:1e:64:f3:66:9d:92:cb:9f:23:da: 7b:63:80:d0:6e:1a:23:01:d8:32:4a:64:bf:27:04:54:22:e3: 4a:db:5b:cf:f5:18:5e:30:40:25:de:2e:65:f7:11:25:1d:98: 63:c9:f9:c6:97:04:20:b5:2d:1e:fc:c9:cb:09:e0:9e:96:7f: 6c:5a:e6:93:db:d1:73:c5:6a:e5:34:65:e6:ff:87:f4:6d:8c: b6:38:27:dd:d8:53:4a:42:53:a1:c7:33:c2:3a:ce:cb:04:6e: 61:10:74:6d:07:06:b0:2f:a4:89:93:24:48:9a:29:96:c8:b5: 6d:ad:15:ca:bf:42:65:8b:1c:eb:9b:15:c5:94:22:c4:1f:12: 3f:8d:01:8b:61:55:78:90:a2:93:8b:10:28:e5:91:39:01:9a: 4c:6c:b2:11:42:d9:e2:fa:d8:7a:14:c2:c9:96:f6:0f:91:7b: 2d:3d:7b:87:00:7b:7b:b7:91:52:e1:a1:cf:b9:3f:7d:ff:3f: fd:99:ab:4c:c0:4c:ab:81:e3:89:c4:49:cd:89:9e:4e:8e:c6: 80:82:db:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNCRjgxMTAvBgNVBAUTKDJBODEzQUU1RDYxNTI5NjA0NURCM0UyQzQyQ0I4RkNE QUM2QUQyMEMwHhcNMjYwMzI1MDIwNjQwWhcNMjYwNDAxMDIwNjQwWjAYMRYwFAYD VQQDEw02OWMzNDMzMC1hZWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArTpxjnLy5x6I1ne7epBbGs5JKa0u2Q7sh2KLz1WKH1HQW5/osONSl2O1/eg9 X11hD8xW7Pm5Oq/y3uLAnwghGiBI/4VUbsLDwVTq+3+nQ4iHCdRoR4baMI9fvWNG +ZSbS1rqNnBMMOfot/CpF5GYsIKUslGB0jT5zBGBd3CSZzvLX5KM4wRL9IMYtNww zfOhhVqqGaqFJw9c77cpjfr754gzYkeSmLWlzWL239f0KeQHPMdenyPrWzVkO1NL kdIFFQb0uAlhn1k9cKRXU/e3NZMExCiX6jfzvbAbtY7q8BUg8+ZtyEmDlysdwLBQ o5b+zLZ7W5NX27IGF9d/WRZ6pQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFpGCgIq NfPauLIm4qQjSu4me4jRMB8GA1UdIwQYMBaAFCqBOuXWFSlgRds+LELLj82satIM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0JGOC9BMjJCRDE1OEUw MTUxMUVEQjE2NjY5NjFDNEY5QUUwMi9Lb0U2NWRZVktXQkYyejRzUXN1UHpheHEw Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tvRTY1ZFlWS1dCRjJ6NHNRc3VQemF4cTBndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0JGOC9BMjJCRDE1OEUwMTUxMUVEQjE2NjY5NjFDNEY5QUUwMi9Lb0U2NWRZVktX QkYyejRzUXN1UHpheHEwZ3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV3QTWKjEbCyMA+k7FEGo/Jym7lVyV/qi3tw1rBDqs/cUmkV+rP0P8itSG24e ZPNmnZLLnyPae2OA0G4aIwHYMkpkvycEVCLjSttbz/UYXjBAJd4uZfcRJR2YY8n5 xpcEILUtHvzJywngnpZ/bFrmk9vRc8Vq5TRl5v+H9G2Mtjgn3dhTSkJTocczwjrO ywRuYRB0bQcGsC+kiZMkSJoplsi1ba0Vyr9CZYsc65sVxZQixB8SP40Bi2FVeJCi k4sQKOWROQGaTGyyEULZ4vrYehTCyZb2D5F7LT17hwB7e7eRUuGhz7k/ff8//Zmr TMBMq4HjicRJzYmeTo7GgILbwA== -----END CERTIFICATE-----Generated at Thu Mar 26 18:59:13 2026 by rpki-client