$ rpki-client -vvf rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft File: KncXIyWXseQO6_FQ58uUIvRdim0.mft (raw, json) Hash identifier: 0QjxGmXLzeX/yPbG4RJz8E5y65TdOPy6uvyM3e5WlGw= Subject key identifier: 0E:87:65:62:CE:26:8F:52:94:08:85:71:B3:DD:F8:65:89:E5:92:4C Authority key identifier: 2A:77:17:23:25:97:B1:E4:0E:EB:F1:50:E7:CB:94:22:F4:5D:8A:6D Certificate issuer: /CN=A913E5F9/serialNumber=2A7717232597B1E40EEBF150E7CB9422F45D8A6D Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KncXIyWXseQO6_FQ58uUIvRdim0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft Manifest number: 18 Signing time: Sun 01 Mar 2026 10:27:54 +0000 Manifest this update: Sun 01 Mar 2026 10:27:53 +0000 Manifest next update: Sun 08 Mar 2026 10:27:53 +0000 Files and hashes: 1: KncXIyWXseQO6_FQ58uUIvRdim0.crl (hash: 8uqMedOeT7LotHYZDm2I41VijFr+7V3uDtPTq3hIARE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.crl rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KncXIyWXseQO6_FQ58uUIvRdim0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E5F9, serialNumber=2A7717232597B1E40EEBF150E7CB9422F45D8A6D Validity Not Before: Mar 1 10:27:53 2026 GMT Not After : Mar 8 10:27:53 2026 GMT Subject: CN=69a414aa-119a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:78:bd:f5:19:b0:2b:7e:2b:9c:c4:fc:95:3e: de:6e:af:00:41:0a:e4:c7:20:37:13:67:e6:fd:96: 27:fa:ef:ae:4d:5d:e5:2c:e6:6e:e2:2e:7d:9c:89: cf:9b:55:f5:0b:a0:79:fa:9b:1e:18:06:41:4e:26: 60:46:60:23:32:d8:87:a7:e5:cf:06:50:61:89:8e: 9b:8a:fe:58:0b:77:cc:d1:5e:3d:d2:b9:e5:89:30: 5e:35:25:c8:02:6f:92:ec:cc:0e:7c:8d:5f:09:60: fc:bf:8e:c3:8c:f4:0f:a5:00:5f:e9:a4:a2:67:ae: 21:a3:76:75:f2:5a:0d:35:28:9b:9f:91:1e:04:40: 9e:65:16:6a:2a:5f:97:9e:07:ea:7d:24:1d:8c:7a: fd:e6:ec:da:b5:29:ba:89:fe:e7:e1:43:d0:5f:8b: b0:6f:81:6b:76:8f:87:26:c0:c1:f1:f3:c0:ab:ba: 39:37:d7:d6:c9:2f:bc:2c:dc:ea:19:aa:95:a2:51: 9c:18:b2:ac:7c:10:9d:28:18:56:c0:3d:2b:42:1a: f3:83:4f:e3:d1:8c:cf:32:dc:26:7a:af:74:2a:af: d6:f9:3f:3e:0d:4b:1a:de:c8:8b:51:a4:92:c1:75: bf:e3:57:0a:e2:70:a6:58:7e:1f:dc:da:19:a4:c3: af:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:87:65:62:CE:26:8F:52:94:08:85:71:B3:DD:F8:65:89:E5:92:4C X509v3 Authority Key Identifier: keyid:2A:77:17:23:25:97:B1:E4:0E:EB:F1:50:E7:CB:94:22:F4:5D:8A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KncXIyWXseQO6_FQ58uUIvRdim0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:03:40:fd:23:87:9b:71:aa:85:e0:5c:f0:a3:9a:1a:cd:40: b8:0c:78:8b:ad:65:72:9c:83:66:70:ec:29:14:5f:ee:17:72: 58:d6:d9:f3:6b:6a:2e:c4:a1:1f:17:ef:c3:72:59:46:29:74: c0:03:f8:19:5d:2b:d7:79:58:ec:de:5c:31:ed:9d:5a:65:71: 10:28:86:94:0f:75:e6:67:ca:03:cc:eb:78:1c:85:9a:97:4e: 89:56:74:97:a5:64:58:8e:08:24:b6:65:06:36:2c:f5:70:d4: f7:9b:78:a9:40:26:e3:98:58:e3:aa:7c:c6:da:a6:03:02:ff: be:fe:17:04:e9:c4:1e:bb:49:ae:b0:b5:a2:5e:45:3d:41:aa: 59:70:f7:fa:fd:9c:cd:1c:dd:f8:1e:2f:29:3f:cd:f1:a9:a3: f3:bb:3b:13:ba:0d:57:14:08:de:46:17:62:21:3c:94:88:0d: 54:67:55:b5:ee:57:ef:46:ec:27:c5:4b:fb:e7:4c:74:95:50: 01:06:0f:f1:47:57:a4:1d:1f:a0:fa:bb:93:83:68:b3:e7:2d: 00:18:4b:ee:b8:f6:5b:9c:88:aa:6a:66:e0:b1:45:83:b6:55: 21:e6:23:fc:df:37:ae:37:7f:c7:d0:7e:94:e0:b8:71:1f:33: e0:37:ac:99 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RTVGOTExMC8GA1UEBRMoMkE3NzE3MjMyNTk3QjFFNDBFRUJGMTUwRTdDQjk0MjJG NDVEOEE2RDAeFw0yNjAzMDExMDI3NTNaFw0yNjAzMDgxMDI3NTNaMBgxFjAUBgNV BAMTDTY5YTQxNGFhLTExOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXeL31GbArfiucxPyVPt5urwBBCuTHIDcTZ+b9lif6765NXeUs5m7iLn2cic+b VfULoHn6mx4YBkFOJmBGYCMy2Ien5c8GUGGJjpuK/lgLd8zRXj3SueWJMF41JcgC b5LszA58jV8JYPy/jsOM9A+lAF/ppKJnriGjdnXyWg01KJufkR4EQJ5lFmoqX5ee B+p9JB2Mev3m7Nq1KbqJ/ufhQ9Bfi7BvgWt2j4cmwMHx88Crujk319bJL7ws3OoZ qpWiUZwYsqx8EJ0oGFbAPStCGvODT+PRjM8y3CZ6r3Qqr9b5Pz4NSxreyItRpJLB db/jVwricKZYfh/c2hmkw699AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUDodlYs4m j1KUCIVxs934ZYnlkkwwHwYDVR0jBBgwFoAUKncXIyWXseQO6/FQ58uUIvRdim0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFNUY5LzAwNkJBMzQ0RjY5 MTExRjBBRTI3ODg1MjNBNkY1NkJDL0tuY1hJeVdYc2VRTzZfRlE1OHVVSXZSZGlt MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS25jWEl5V1hzZVFPNl9GUTU4dVVJdlJkaW0wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF NUY5LzAwNkJBMzQ0RjY5MTExRjBBRTI3ODg1MjNBNkY1NkJDL0tuY1hJeVdYc2VR TzZfRlE1OHVVSXZSZGltMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAVA0D9I4ebcaqF4Fzwo5oazUC4DHiLrWVynINmcOwpFF/uF3JY1tnza2ouxKEf F+/DcllGKXTAA/gZXSvXeVjs3lwx7Z1aZXEQKIaUD3XmZ8oDzOt4HIWal06JVnSX pWRYjggktmUGNiz1cNT3m3ipQCbjmFjjqnzG2qYDAv++/hcE6cQeu0musLWiXkU9 QapZcPf6/ZzNHN34Hi8pP83xqaPzuzsTug1XFAjeRhdiITyUiA1UZ1W17lfvRuwn xUv750x0lVABBg/xR1ekHR+g+ruTg2iz5y0AGEvuuPZbnIiqambgsUWDtlUh5iP8 3zeuN3/H0H6U4LhxHzPgN6yZ -----END CERTIFICATE-----Generated at Mon Mar 2 00:03:43 2026 by rpki-client