$ rpki-client -vvf rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft File: kUhQxLilE7L45O3EtVeHB3djcq4.mft (raw, json) Hash identifier: vCpJEtFbzeMti7ZcPE38qw1L4PtxwfFjdhANGdrsaKI= Subject key identifier: B1:ED:4F:5F:43:98:78:18:F4:E4:CF:52:AD:00:6A:48:39:77:B1:2B Authority key identifier: 91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE Certificate issuer: /CN=A91215B3/serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE Certificate serial: 021F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft Manifest number: 0210 Signing time: Sun 01 Mar 2026 03:54:29 +0000 Manifest this update: Sun 01 Mar 2026 03:54:28 +0000 Manifest next update: Sun 08 Mar 2026 03:54:28 +0000 Files and hashes: 1: kUhQxLilE7L45O3EtVeHB3djcq4.crl (hash: LB3VZPORZ4WKl1V9LoFU+T6ELf1S1bpL5gB0kOU6qMk=) 2: D8F27C903AD811EF960D9329C4F9AE02.roa (hash: HU04MFLwZHlSFOHomT27YUePoykXA2jVW+dbycpzRP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 03:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 543 (0x21f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91215B3, serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE Validity Not Before: Mar 1 03:54:28 2026 GMT Not After : Mar 8 03:54:28 2026 GMT Subject: CN=69a3b875-488e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5e:c3:48:74:71:4b:fb:5a:22:32:9d:18:aa: 8c:cc:ed:a4:fc:63:64:98:74:a0:48:fd:ad:c9:fd: ee:bc:26:b8:7d:85:50:71:b2:81:e3:ac:8f:97:4b: 0f:07:50:f0:3d:6b:74:a5:2f:ed:91:33:12:f8:88: 4f:02:bf:49:fd:3a:4f:aa:df:a5:6a:6c:a7:58:f2: ff:81:ec:24:03:b1:92:92:9a:00:aa:3e:b5:a4:c4: 1b:56:66:a3:d3:89:cf:3f:db:e3:49:99:de:2c:11: 35:da:70:44:6f:9c:29:a0:b0:de:b1:25:59:46:83: 21:b8:81:c3:04:ef:a4:ca:65:c5:90:a7:4f:34:0d: 32:8f:2a:2d:5d:09:92:28:87:6a:25:03:c4:2b:59: f5:27:6a:0f:48:d6:7b:86:69:ad:1d:1d:42:45:86: 1b:e8:e0:20:b2:14:e1:a8:55:87:fb:da:c3:c2:90: b0:c1:a5:00:93:95:3f:f7:fd:b7:dd:34:47:67:01: 7a:43:5b:d9:52:4f:53:59:a3:91:f1:85:1f:4d:a2: 28:07:ce:a6:0e:b9:ae:71:f0:aa:0b:99:73:55:e1: cb:b0:c0:83:18:19:44:56:2e:a3:fe:fc:60:13:85: eb:a5:a2:b4:f6:9c:31:1f:7b:4a:95:8b:ab:74:4c: 3a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:ED:4F:5F:43:98:78:18:F4:E4:CF:52:AD:00:6A:48:39:77:B1:2B X509v3 Authority Key Identifier: keyid:91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:c5:e1:3a:ce:9c:bb:bc:8a:0c:42:e1:89:f5:14:d8:ac:5d: 6b:4b:a6:59:a3:f4:1f:65:26:65:a6:5a:aa:b1:36:f3:38:06: 00:e7:65:67:4c:8e:c4:da:2e:f0:95:3f:82:c2:20:5a:52:93: a8:a6:3a:49:3b:19:35:10:d7:96:db:23:87:f8:7c:b3:82:17: 19:9c:3d:a7:ad:d4:5e:32:2f:62:44:27:61:64:1b:08:62:48: 08:ab:ca:cf:c2:69:00:87:44:20:5e:7f:f6:a3:9d:ea:bc:a3: e3:92:9f:9e:76:bb:32:a9:d1:45:75:9b:10:37:ec:32:70:7d: a6:14:6e:6d:dc:33:9e:ea:0a:3a:45:24:63:3b:d5:5d:3c:20: 02:43:8a:e1:0a:59:b4:3b:43:cb:47:5f:d2:6d:50:1c:6b:72: 17:07:8a:fd:4e:ad:74:59:51:52:4d:c1:30:c3:a0:7f:04:60: 87:cb:99:d9:25:e9:8a:d4:77:61:c0:3f:12:91:59:2c:0b:12: 57:77:54:30:19:42:0f:a5:fa:1a:f6:78:06:87:ca:7d:f3:31: 02:11:37:e6:e7:6e:8b:18:b0:3e:bb:6c:f5:f8:86:fc:ef:2d: 25:74:e5:47:7c:fa:ff:ce:74:e9:0d:78:4d:14:cb:b4:ae:ad: e1:77:22:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE1QjMxMTAvBgNVBAUTKDkxNDg1MEM0QjhBNTEzQjJGOEU0RURDNEI1NTc4NzA3 Nzc2MzcyQUUwHhcNMjYwMzAxMDM1NDI4WhcNMjYwMzA4MDM1NDI4WjAYMRYwFAYD VQQDDA02OWEzYjg3NS00ODhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwF7DSHRxS/taIjKdGKqMzO2k/GNkmHSgSP2tyf3uvCa4fYVQcbKB46yPl0sP B1DwPWt0pS/tkTMS+IhPAr9J/TpPqt+lamynWPL/gewkA7GSkpoAqj61pMQbVmaj 04nPP9vjSZneLBE12nBEb5wpoLDesSVZRoMhuIHDBO+kymXFkKdPNA0yjyotXQmS KIdqJQPEK1n1J2oPSNZ7hmmtHR1CRYYb6OAgshThqFWH+9rDwpCwwaUAk5U/9/23 3TRHZwF6Q1vZUk9TWaOR8YUfTaIoB86mDrmucfCqC5lzVeHLsMCDGBlEVi6j/vxg E4XrpaK09pwxH3tKlYurdEw6eQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLHtT19D mHgY9OTPUq0Aakg5d7ErMB8GA1UdIwQYMBaAFJFIUMS4pROy+OTtxLVXhwd3Y3Ku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTVCMy9FNkY2OEYwNjBC NEIxMUVFQUI5QUFENzlDNEY5QUUwMi9rVWhReExpbEU3TDQ1TzNFdFZlSEIzZGpj cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tVaFF4TGlsRTdMNDVPM0V0VmVIQjNkamNxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTVCMy9FNkY2OEYwNjBCNEIxMUVFQUI5QUFENzlDNEY5QUUwMi9rVWhReExpbEU3 TDQ1TzNFdFZlSEIzZGpjcTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoMXhOs6cu7yKDELhifUU2Kxda0umWaP0H2UmZaZaqrE28zgGAOdlZ0yOxNou 8JU/gsIgWlKTqKY6STsZNRDXltsjh/h8s4IXGZw9p63UXjIvYkQnYWQbCGJICKvK z8JpAIdEIF5/9qOd6ryj45Kfnna7MqnRRXWbEDfsMnB9phRubdwznuoKOkUkYzvV XTwgAkOK4QpZtDtDy0df0m1QHGtyFweK/U6tdFlRUk3BMMOgfwRgh8uZ2SXpitR3 YcA/EpFZLAsSV3dUMBlCD6X6GvZ4BofKffMxAhE35uduixiwPrts9fiG/O8tJXTl R3z6/8506Q14TRTLtK6t4XciGA== -----END CERTIFICATE-----Generated at Sun Mar 1 20:45:55 2026 by rpki-client