$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft File: kl2pi04IXWgNFte6GD8OpUJqGgM.mft (raw, json) Hash identifier: 0QwQFClVkDVOHcjJIGdFC6Yfxjj3buGiJ6zqagaadGk= Subject key identifier: FA:F4:AF:78:3E:04:E5:1E:20:4E:FC:73:E1:2E:4A:2C:E6:D3:B7:95 Authority key identifier: 92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03 Certificate issuer: /CN=A9112320/serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03 Certificate serial: 05D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft Manifest number: 05C1 Signing time: Mon 02 Mar 2026 00:22:45 +0000 Manifest this update: Mon 02 Mar 2026 00:22:43 +0000 Manifest next update: Mon 09 Mar 2026 00:22:43 +0000 Files and hashes: 1: kl2pi04IXWgNFte6GD8OpUJqGgM.crl (hash: QjkpuvVJTxt4VzQ77xTvRjM/frOEU2GZATVoRAM+US4=) 2: C7B754BEF85311ED8D59CA87C4F9AE02.roa (hash: M+wNfsm6YQmLCJcAzey1G7TcdY1od2Gihz4uSm0Idd0=) 3: A87AE518D2E011EDA1EF340FC4F9AE02.roa (hash: XeS+UNfddkVQ+DW6xIplHBmjPx6deLGv6cSwFbKYRAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1491 (0x5d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112320, serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03 Validity Not Before: Mar 2 00:22:43 2026 GMT Not After : Mar 9 00:22:43 2026 GMT Subject: CN=69a4d854-3146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:33:5a:bd:eb:60:7c:dd:4e:8a:c6:6a:d2:11: a5:bc:7f:fd:cc:20:a4:33:31:00:57:92:40:33:c0: 1c:23:42:64:6e:9b:97:85:f6:78:59:7b:38:cc:cb: fc:55:8e:57:60:9d:99:6b:81:91:86:d0:40:69:44: 39:e4:40:30:26:99:5b:8b:a3:0b:b2:84:0b:1e:54: 43:5d:f5:9b:49:85:bd:8a:87:a9:f6:cc:ce:15:44: 71:f5:26:6e:f5:fa:68:4d:16:8b:31:15:bf:f6:46: 65:0d:87:ef:af:89:07:52:82:8d:ac:d4:b6:96:98: ff:2c:fe:93:0f:7c:83:91:8d:b3:0d:1d:e6:ed:fa: 47:dd:98:83:67:3b:77:f4:8a:fb:17:d0:32:0e:da: 0a:de:3c:f6:df:56:6a:81:08:6b:5c:7a:19:d2:29: fc:ee:9e:f5:54:aa:18:c7:98:90:4a:b1:34:2a:d3: 18:4d:e0:93:81:66:72:88:63:08:e7:37:6f:d0:78: fc:6e:c8:a9:92:e5:5d:42:52:88:c3:ee:93:cf:63: dc:c0:3c:0c:34:f0:69:65:a4:24:dd:b7:ee:31:91: 81:89:03:6b:2a:c8:d8:43:2e:e9:41:33:5c:4a:b6: b5:d2:83:ee:a7:72:d7:34:51:5b:8c:4c:20:52:20: d1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F4:AF:78:3E:04:E5:1E:20:4E:FC:73:E1:2E:4A:2C:E6:D3:B7:95 X509v3 Authority Key Identifier: keyid:92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:96:2a:df:a9:ab:61:ff:b5:6d:3a:88:bd:1b:07:e4:88:26: a8:fc:b4:9f:61:2b:35:18:7f:4a:3a:b4:da:ee:f9:cc:c7:bf: bc:23:4d:fd:9d:13:c2:5f:77:f1:ea:75:ee:cb:bd:f7:b3:5b: c4:25:59:0d:bb:6d:e5:26:ad:b1:65:a6:dd:6c:f9:cd:75:b6: 13:1d:37:9f:60:73:72:54:01:bb:53:94:55:e8:8e:9c:f5:69: 04:10:af:b4:31:a5:2f:88:5d:15:29:bb:f4:6c:d0:73:1c:2d: de:90:2c:ad:a1:f7:f8:5a:d9:bd:6a:0b:38:38:58:6c:69:50: ee:22:9e:19:ae:42:4e:f2:fa:19:6f:92:11:51:0f:32:de:c6: 34:d0:2a:16:5b:60:8a:25:07:1a:bd:64:f1:f4:f9:39:d9:cd: ba:14:e7:a9:c4:30:d0:10:f6:2f:d8:de:56:06:d9:96:49:5e: a3:87:8d:c2:64:6d:3e:ec:09:e9:9c:86:54:39:2b:6d:ee:aa: 11:ce:2b:a7:fd:64:c7:5d:1a:f7:ba:25:af:a2:0f:4b:f3:65: b0:d8:ee:33:04:b6:89:fe:81:ed:db:98:02:7b:c6:96:96:69: ac:8f:6b:fb:01:0b:6f:39:d4:0d:7a:77:4e:8f:d2:21:3b:f0: ec:70:4d:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIzMjAxMTAvBgNVBAUTKDkyNURBOThCNEUwODVENjgwRDE2RDdCQTE4M0YwRUE1 NDI2QTFBMDMwHhcNMjYwMzAyMDAyMjQzWhcNMjYwMzA5MDAyMjQzWjAYMRYwFAYD VQQDEw02OWE0ZDg1NC0zMTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlzNavetgfN1OisZq0hGlvH/9zCCkMzEAV5JAM8AcI0JkbpuXhfZ4WXs4zMv8 VY5XYJ2Za4GRhtBAaUQ55EAwJplbi6MLsoQLHlRDXfWbSYW9ioep9szOFURx9SZu 9fpoTRaLMRW/9kZlDYfvr4kHUoKNrNS2lpj/LP6TD3yDkY2zDR3m7fpH3ZiDZzt3 9Ir7F9AyDtoK3jz231ZqgQhrXHoZ0in87p71VKoYx5iQSrE0KtMYTeCTgWZyiGMI 5zdv0Hj8bsipkuVdQlKIw+6Tz2PcwDwMNPBpZaQk3bfuMZGBiQNrKsjYQy7pQTNc Sra10oPup3LXNFFbjEwgUiDRbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPr0r3g+ BOUeIE78c+EuSizm07eVMB8GA1UdIwQYMBaAFJJdqYtOCF1oDRbXuhg/DqVCahoD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjMyMC82RDcwNUJDRUZF NzAxMUVCOUNGQjkwMjlDNEY5QUUwMi9rbDJwaTA0SVhXZ05GdGU2R0Q4T3BVSnFH Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tsMnBpMDRJWFdnTkZ0ZTZHRDhPcFVKcUdnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjMyMC82RDcwNUJDRUZFNzAxMUVCOUNGQjkwMjlDNEY5QUUwMi9rbDJwaTA0SVhX Z05GdGU2R0Q4T3BVSnFHZ00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGJYq36mrYf+1bTqIvRsH5IgmqPy0n2ErNRh/Sjq02u75zMe/vCNN/Z0Twl93 8ep17su997NbxCVZDbtt5SatsWWm3Wz5zXW2Ex03n2BzclQBu1OUVeiOnPVpBBCv tDGlL4hdFSm79GzQcxwt3pAsraH3+FrZvWoLODhYbGlQ7iKeGa5CTvL6GW+SEVEP Mt7GNNAqFltgiiUHGr1k8fT5OdnNuhTnqcQw0BD2L9jeVgbZlkleo4eNwmRtPuwJ 6ZyGVDkrbe6qEc4rp/1kx10a97olr6IPS/NlsNjuMwS2if6B7duYAnvGlpZprI9r +wELbznUDXp3To/SITvw7HBNZQ== -----END CERTIFICATE-----Generated at Mon Mar 2 12:15:17 2026 by rpki-client