$ rpki-client -vvf rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft File: kWov4qosIKsBxaE9I22knbfqUGI.mft (raw, json) Hash identifier: navt3fJRYq2kjkgOG3tnwP7VyLiXrkTgbXPUn9AIxDM= Subject key identifier: 57:75:E0:3F:94:11:D5:A4:02:A5:FE:CE:5E:C5:50:AA:84:7C:CC:AF Authority key identifier: 91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62 Certificate issuer: /CN=A912EF71/serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062 Certificate serial: 0EAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft Manifest number: 0EA2 Signing time: Mon 02 Mar 2026 02:42:45 +0000 Manifest this update: Mon 02 Mar 2026 02:42:43 +0000 Manifest next update: Mon 09 Mar 2026 02:42:43 +0000 Files and hashes: 1: kWov4qosIKsBxaE9I22knbfqUGI.crl (hash: QVRqgS5+cRlORvMIt6Tn51w0rqyNhunixgI+pN+sVbw=) 2: 6877A622A9DB11E9B353AF85C4F9AE02.roa (hash: NuBjYFXj77aFswBTlKejqdXl3N0GVz1YYukL9sl8zI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:42:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3756 (0xeac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EF71, serialNumber=916A2FE2AA2C20AB01C5A13D236DA49DB7EA5062 Validity Not Before: Mar 2 02:42:43 2026 GMT Not After : Mar 9 02:42:43 2026 GMT Subject: CN=69a4f924-6a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:44:cf:c7:96:ae:23:7d:f7:47:b1:44:e5:75: 93:bf:e7:54:04:b1:eb:ad:03:ec:20:a4:8f:d9:54: 71:6a:90:31:f2:2f:10:d1:57:d3:dc:cf:77:62:72: 50:45:27:2d:29:7f:87:53:cb:a5:fe:a1:66:8e:bf: b2:7e:46:7c:7c:84:a4:06:9f:58:74:3f:c5:a5:0f: a6:5d:38:62:af:1e:a1:f4:bb:5d:cc:c8:0e:40:c8: 0e:fb:d8:1c:4e:a2:44:61:53:c1:67:68:e0:cd:23: 96:18:f6:70:a4:8a:cb:b9:b4:2f:cb:71:3e:ed:03: c3:82:60:84:23:2e:25:12:61:d1:57:0f:d3:29:b0: fb:78:74:b4:6a:78:66:3f:95:c1:a2:9d:79:48:49: af:b7:b6:3d:d4:26:63:c6:07:29:c0:07:33:65:38: 54:60:eb:87:c3:60:e4:73:57:ba:51:72:c6:fd:bc: 51:14:75:9d:46:c7:ac:fe:d2:57:8f:83:ba:36:16: d5:04:22:0d:cb:a7:57:b1:80:72:07:6c:46:a3:6f: 88:04:26:b8:f1:11:71:29:44:23:3f:3c:81:52:7c: 55:af:31:d4:c8:41:1e:2d:32:48:ac:6a:85:bf:57: 2c:8d:75:8e:88:c4:a0:00:17:8c:8b:66:41:15:fa: b8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:75:E0:3F:94:11:D5:A4:02:A5:FE:CE:5E:C5:50:AA:84:7C:CC:AF X509v3 Authority Key Identifier: keyid:91:6A:2F:E2:AA:2C:20:AB:01:C5:A1:3D:23:6D:A4:9D:B7:EA:50:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWov4qosIKsBxaE9I22knbfqUGI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EF71/7EA8297CA9DA11E995433484C4F9AE02/kWov4qosIKsBxaE9I22knbfqUGI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:80:7d:ca:7e:00:82:26:e6:09:c6:a7:de:d2:7a:2e:b8:74: cb:a4:d2:60:05:4b:cc:9e:2e:59:a9:b7:f4:2e:97:51:e1:23: 60:19:39:b5:a8:14:9e:f8:d7:1c:d0:28:f9:e2:45:2e:dc:be: 5c:8a:64:37:2a:d2:e0:ce:de:87:da:01:fc:74:0b:00:85:07: 87:e9:5c:00:87:cf:9d:9e:b7:7f:45:f2:3c:57:1c:e6:54:85: 51:88:54:84:37:70:6b:43:69:e8:6f:ef:1b:0f:2f:19:cd:6f: ca:e8:a8:b6:bb:70:c1:34:55:63:6e:3a:26:d4:19:bb:b1:5d: 86:0d:54:bd:ae:3c:46:e9:c6:07:46:ed:5c:31:25:92:15:27: 6a:27:69:01:6e:98:fe:f7:65:0a:f5:bb:2d:13:b4:a1:d7:fc: fc:eb:dd:ec:af:d5:9b:bc:41:eb:cd:40:ca:07:a8:7e:a2:3c: de:ea:30:5b:60:42:44:e0:be:e7:0c:84:60:4c:1b:73:11:b3: 75:48:8e:10:bd:5c:71:8c:bc:97:6e:f2:42:d2:f6:19:2c:c6: 32:69:27:1d:b2:5e:22:c7:4f:2f:b3:b6:6f:61:69:12:2b:7e: 8d:14:e6:16:98:25:d9:12:0f:5d:65:78:38:9f:d2:39:5d:da: 48:5a:3f:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVGNzExMTAvBgNVBAUTKDkxNkEyRkUyQUEyQzIwQUIwMUM1QTEzRDIzNkRBNDlE QjdFQTUwNjIwHhcNMjYwMzAyMDI0MjQzWhcNMjYwMzA5MDI0MjQzWjAYMRYwFAYD VQQDEw02OWE0ZjkyNC02YTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUTPx5auI333R7FE5XWTv+dUBLHrrQPsIKSP2VRxapAx8i8Q0VfT3M93YnJQ RSctKX+HU8ul/qFmjr+yfkZ8fISkBp9YdD/FpQ+mXThirx6h9LtdzMgOQMgO+9gc TqJEYVPBZ2jgzSOWGPZwpIrLubQvy3E+7QPDgmCEIy4lEmHRVw/TKbD7eHS0anhm P5XBop15SEmvt7Y91CZjxgcpwAczZThUYOuHw2Dkc1e6UXLG/bxRFHWdRses/tJX j4O6NhbVBCINy6dXsYByB2xGo2+IBCa48RFxKUQjPzyBUnxVrzHUyEEeLTJIrGqF v1csjXWOiMSgABeMi2ZBFfq4IwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFd14D+U EdWkAqX+zl7FUKqEfMyvMB8GA1UdIwQYMBaAFJFqL+KqLCCrAcWhPSNtpJ236lBi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRUY3MS83RUE4Mjk3Q0E5 REExMUU5OTU0MzM0ODRDNEY5QUUwMi9rV292NHFvc0lLc0J4YUU5STIya25iZnFV R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tXb3Y0cW9zSUtzQnhhRTlJMjJrbmJmcVVHSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RUY3MS83RUE4Mjk3Q0E5REExMUU5OTU0MzM0ODRDNEY5QUUwMi9rV292NHFvc0lL c0J4YUU5STIya25iZnFVR0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV4B9yn4AgibmCcan3tJ6Lrh0y6TSYAVLzJ4uWam39C6XUeEjYBk5tagUnvjX HNAo+eJFLty+XIpkNyrS4M7eh9oB/HQLAIUHh+lcAIfPnZ63f0XyPFcc5lSFUYhU hDdwa0Np6G/vGw8vGc1vyuiotrtwwTRVY246JtQZu7Fdhg1Uva48RunGB0btXDEl khUnaidpAW6Y/vdlCvW7LRO0odf8/Ovd7K/Vm7xB681AygeofqI83uowW2BCROC+ 5wyEYEwbcxGzdUiOEL1ccYy8l27yQtL2GSzGMmknHbJeIsdPL7O2b2FpEit+jRTm Fpgl2RIPXWV4OJ/SOV3aSFo/Kg== -----END CERTIFICATE-----Generated at Mon Mar 2 11:45:42 2026 by rpki-client