$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft File: KO2nuV1ejUVip1l0xt19pkwqKoY.mft (raw, json) Hash identifier: jgQzdBTcHwXmjlzC80oReWGGhiZ5WMbnsxoOEQiaLzY= Subject key identifier: CF:FD:99:F2:1D:1B:93:12:3B:2B:D0:4A:4E:A6:6F:E8:FF:A2:0D:50 Authority key identifier: 28:ED:A7:B9:5D:5E:8D:45:62:A7:59:74:C6:DD:7D:A6:4C:2A:2A:86 Certificate issuer: /CN=A9142E1E/serialNumber=28EDA7B95D5E8D4562A75974C6DD7DA64C2A2A86 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft Manifest number: D4 Signing time: Sun 01 Mar 2026 07:04:34 +0000 Manifest this update: Sun 01 Mar 2026 07:04:33 +0000 Manifest next update: Sun 08 Mar 2026 07:04:33 +0000 Files and hashes: 1: KO2nuV1ejUVip1l0xt19pkwqKoY.crl (hash: fpTh9i0IqcMsdW0UsPv6WutQk+/VxwxNyj0cUN7EvRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.crl rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 07:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142E1E, serialNumber=28EDA7B95D5E8D4562A75974C6DD7DA64C2A2A86 Validity Not Before: Mar 1 07:04:33 2026 GMT Not After : Mar 8 07:04:33 2026 GMT Subject: CN=69a3e501-a08c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a5:c5:f0:ee:ae:90:1c:13:b6:28:68:f1:aa: 3f:3b:6b:f3:9c:27:af:7a:8e:57:6f:cc:63:66:97: 6b:04:92:82:12:76:36:23:19:3d:6c:4c:11:a6:57: f4:d3:6f:d3:de:e3:bd:ac:02:73:db:aa:d7:d1:67: 85:75:df:bc:9b:de:52:d5:b8:d1:88:c0:e2:d3:94: 41:1e:48:77:ed:c7:cc:35:51:cd:48:79:47:25:aa: 73:84:02:c2:76:9b:b4:cc:e6:4f:29:54:9d:82:87: a8:6b:81:ab:be:5b:9c:c2:86:6f:f9:e2:37:2f:96: e0:b0:8d:6d:49:42:5a:03:81:09:76:41:34:2f:1e: 84:41:79:76:c8:86:e6:3b:8c:0b:e9:72:6d:cb:83: 67:87:4c:da:41:7c:e2:d2:d6:a1:98:7c:74:25:d4: 52:e7:fd:97:3b:b6:5d:b6:c6:17:d8:cf:5f:01:c2: 03:41:be:5f:03:f3:ba:a9:29:19:bb:e1:40:0e:9d: 4b:ab:2b:c7:a9:66:e8:5d:e5:77:8c:4d:ff:0d:56: 5c:9b:b0:6b:a0:29:9a:ea:3f:7f:c1:bc:c4:61:0d: 49:a2:c7:77:63:e3:6c:4e:43:c5:c1:71:e8:f2:1b: be:29:32:cd:e1:43:2d:5c:50:5b:77:e1:cd:6b:c7: 86:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:FD:99:F2:1D:1B:93:12:3B:2B:D0:4A:4E:A6:6F:E8:FF:A2:0D:50 X509v3 Authority Key Identifier: keyid:28:ED:A7:B9:5D:5E:8D:45:62:A7:59:74:C6:DD:7D:A6:4C:2A:2A:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:d3:3b:79:82:4c:02:d7:3b:25:04:a1:86:29:e3:57:f7:24: 88:f3:71:bf:34:4c:6c:42:cf:1d:e3:1f:3d:30:b4:9f:c6:e9: 04:ae:3a:fd:dd:f8:82:70:7f:7b:ec:75:cd:93:3d:99:33:96: f2:9b:64:97:12:49:d1:90:17:74:d0:20:55:c8:0d:45:06:54: 67:3a:97:04:a2:2e:d5:4f:c8:13:f7:48:7d:73:2e:51:d6:88: 73:05:87:80:52:9b:5f:ef:0e:9e:79:c9:c8:20:44:20:85:32: c4:64:f1:ae:0d:46:05:43:a4:fa:6c:4b:00:d3:aa:8e:20:2b: 64:a5:cd:ab:55:9e:42:73:de:6a:ba:a1:0c:0e:17:75:ab:2a: 3c:04:0c:94:b5:72:b6:9f:48:e1:73:be:6f:84:43:43:a8:6e: db:b1:55:05:be:89:c8:af:9a:5e:1d:3b:43:ee:8b:49:c0:5b: 40:0c:d6:1d:4e:65:85:c4:fa:a2:c8:c5:63:41:26:74:82:3d: c5:47:fe:05:81:d8:fc:c9:fb:9e:aa:05:a3:68:0c:d7:75:94: 46:25:2d:60:d4:10:78:2a:4d:83:0e:b9:7d:c3:19:01:1c:80: e6:41:22:46:7c:88:e1:59:05:27:d7:07:43:cb:a7:0d:f1:1b: ae:5a:d6:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJFMUUxMTAvBgNVBAUTKDI4RURBN0I5NUQ1RThENDU2MkE3NTk3NEM2REQ3REE2 NEMyQTJBODYwHhcNMjYwMzAxMDcwNDMzWhcNMjYwMzA4MDcwNDMzWjAYMRYwFAYD VQQDEw02OWEzZTUwMS1hMDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApKXF8O6ukBwTtiho8ao/O2vznCeveo5Xb8xjZpdrBJKCEnY2Ixk9bEwRplf0 02/T3uO9rAJz26rX0WeFdd+8m95S1bjRiMDi05RBHkh37cfMNVHNSHlHJapzhALC dpu0zOZPKVSdgoeoa4GrvlucwoZv+eI3L5bgsI1tSUJaA4EJdkE0Lx6EQXl2yIbm O4wL6XJty4Nnh0zaQXzi0tahmHx0JdRS5/2XO7ZdtsYX2M9fAcIDQb5fA/O6qSkZ u+FADp1LqyvHqWboXeV3jE3/DVZcm7BroCma6j9/wbzEYQ1Josd3Y+NsTkPFwXHo 8hu+KTLN4UMtXFBbd+HNa8eGHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM/9mfId G5MSOyvQSk6mb+j/og1QMB8GA1UdIwQYMBaAFCjtp7ldXo1FYqdZdMbdfaZMKiqG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkUxRS9ENDA5RjgyQUQx NjkxMUVGQjc2RkI1MjBDNEY5QUUwMi9LTzJudVYxZWpVVmlwMWwweHQxOXBrd3FL b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0tPMm51VjFlalVWaXAxbDB4dDE5cGt3cUtvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkUxRS9ENDA5RjgyQUQxNjkxMUVGQjc2RkI1MjBDNEY5QUUwMi9LTzJudVYxZWpV VmlwMWwweHQxOXBrd3FLb1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAu9M7eYJMAtc7JQShhinjV/ckiPNxvzRMbELPHeMfPTC0n8bpBK46/d34gnB/ e+x1zZM9mTOW8ptklxJJ0ZAXdNAgVcgNRQZUZzqXBKIu1U/IE/dIfXMuUdaIcwWH gFKbX+8OnnnJyCBEIIUyxGTxrg1GBUOk+mxLANOqjiArZKXNq1WeQnPearqhDA4X dasqPAQMlLVytp9I4XO+b4RDQ6hu27FVBb6JyK+aXh07Q+6LScBbQAzWHU5lhcT6 osjFY0EmdII9xUf+BYHY/Mn7nqoFo2gM13WURiUtYNQQeCpNgw65fcMZARyA5kEi RnyI4VkFJ9cHQ8unDfEbrlrWyA== -----END CERTIFICATE-----Generated at Mon Mar 2 12:43:25 2026 by rpki-client