$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft File: kkcJmme2ONySU7AuJT2zvnRaqFw.mft (raw, json) Hash identifier: kwmurncJJ/XNEVpxWD7C8D0HjvD7qUJM+vY1VCQFZ3A= Subject key identifier: 5B:8C:A0:BE:D0:93:DB:B5:60:16:65:E8:C5:66:F2:DF:65:92:D8:31 Authority key identifier: 92:47:09:9A:67:B6:38:DC:92:53:B0:2E:25:3D:B3:BE:74:5A:A8:5C Certificate issuer: /CN=A9143B87/serialNumber=9247099A67B638DC9253B02E253DB3BE745AA85C Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft Manifest number: 3C Signing time: Sun 01 Mar 2026 09:53:06 +0000 Manifest this update: Sun 01 Mar 2026 09:53:06 +0000 Manifest next update: Sun 08 Mar 2026 09:53:06 +0000 Files and hashes: 1: kkcJmme2ONySU7AuJT2zvnRaqFw.crl (hash: jO6N6FHvm0hBJ72bUlxgRMZ0NsH4QYQlX+jOxuia6fk=) 2: 22C0B5E8BD3811F0973F9752C4F9AE02.roa (hash: x6jH0YoExuPajTzRi1fsVZ3AaYHRKD72yw6/eXqhzss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.crl rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:53:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B87, serialNumber=9247099A67B638DC9253B02E253DB3BE745AA85C Validity Not Before: Mar 1 09:53:06 2026 GMT Not After : Mar 8 09:53:06 2026 GMT Subject: CN=69a40c82-de7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8b:ff:97:d4:82:e1:9d:85:78:cb:f7:36:f4: 89:65:e8:71:75:6d:98:9b:5f:0d:4e:8e:bd:3e:0d: b8:22:34:a3:73:cf:a0:6b:eb:d6:dc:e6:cd:b4:8a: 2f:11:7e:85:97:d8:52:0a:24:b3:d4:4d:cf:14:00: 3f:75:de:5e:7a:51:3f:45:97:ea:2e:98:5f:f6:dd: b0:f3:7e:08:e7:bb:b5:72:0f:1c:7e:6a:fe:3d:08: 8a:e1:c2:b3:96:43:db:b0:fc:ea:2d:2d:17:b0:9f: ed:d1:80:20:2e:06:ca:61:0a:c9:30:4c:51:1e:53: 7c:3b:c5:96:03:6f:94:76:a0:a1:ce:16:12:a6:90: 1f:e5:1a:c8:12:10:71:1c:f7:f4:92:f0:ed:3a:1d: 09:01:f6:c9:3d:ff:2f:62:3b:33:80:9b:f4:1d:b1: 58:49:0e:e1:7b:ae:06:4e:8e:cc:09:60:ee:e4:72: c6:70:c5:75:ff:ed:c1:e1:16:33:4c:8d:4e:eb:c2: 6f:8d:db:c9:db:0b:28:11:be:c6:1c:b6:a9:50:4f: b6:74:93:40:7a:01:ff:94:f7:9e:06:69:ae:75:ca: bc:f5:e0:78:ad:db:34:aa:e8:73:cb:92:d5:d1:86: 1a:48:ce:ed:03:4d:70:8c:c6:02:04:b6:87:08:27: 47:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:8C:A0:BE:D0:93:DB:B5:60:16:65:E8:C5:66:F2:DF:65:92:D8:31 X509v3 Authority Key Identifier: keyid:92:47:09:9A:67:B6:38:DC:92:53:B0:2E:25:3D:B3:BE:74:5A:A8:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:81:3e:8f:12:7e:44:4f:6e:01:d3:b9:6a:1c:da:12:08:44: 72:e6:ca:a5:56:6b:ce:03:ba:7b:0c:85:b8:61:94:2d:50:ce: af:58:76:bd:ac:e4:78:5b:84:2d:a8:67:89:7e:d8:8d:53:57: 21:eb:d1:a1:56:15:46:e4:95:0b:7b:77:ea:67:4e:35:a8:17: cb:53:0d:76:5b:a2:fe:86:08:9c:ea:01:b0:3b:38:dc:ea:89: e0:11:e9:7d:27:25:41:a7:ae:4a:9f:41:ee:2c:48:1a:2a:bc: 6a:8d:11:c6:db:8b:53:72:e0:ad:5c:1a:c6:d1:79:ad:23:f6: 82:e9:36:6a:b6:ef:8b:1a:8d:5d:74:45:c7:72:23:33:33:f3: 74:36:5f:34:ca:f2:5f:42:fe:70:67:89:99:f0:9e:d1:2c:d0: af:5b:a8:92:52:b5:1d:4a:02:48:ea:01:0f:ef:8e:77:ca:aa: 38:cd:ec:b6:dd:08:ed:05:77:c2:0b:45:18:bc:a3:a7:9f:3d: 04:43:bb:46:dd:17:60:ff:53:fc:3b:dc:41:0d:4a:3e:06:f8: e8:59:1a:70:53:09:74:ae:fa:43:f9:49:79:12:75:fd:4f:94: 4d:3d:94:b3:ab:94:10:0e:08:fb:e9:f1:db:ec:70:34:59:1c: 25:45:c1:a2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 M0I4NzExMC8GA1UEBRMoOTI0NzA5OUE2N0I2MzhEQzkyNTNCMDJFMjUzREIzQkU3 NDVBQTg1QzAeFw0yNjAzMDEwOTUzMDZaFw0yNjAzMDgwOTUzMDZaMBgxFjAUBgNV BAMTDTY5YTQwYzgyLWRlN2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3i/+X1ILhnYV4y/c29Ill6HF1bZibXw1Ojr0+DbgiNKNzz6Br69bc5s20ii8R foWX2FIKJLPUTc8UAD913l56UT9Fl+oumF/23bDzfgjnu7VyDxx+av49CIrhwrOW Q9uw/OotLRewn+3RgCAuBsphCskwTFEeU3w7xZYDb5R2oKHOFhKmkB/lGsgSEHEc 9/SS8O06HQkB9sk9/y9iOzOAm/QdsVhJDuF7rgZOjswJYO7kcsZwxXX/7cHhFjNM jU7rwm+N28nbCygRvsYctqlQT7Z0k0B6Af+U954Gaa51yrz14Hit2zSq6HPLktXR hhpIzu0DTXCMxgIEtocIJ0d9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUW4ygvtCT 27VgFmXoxWby32WS2DEwHwYDVR0jBBgwFoAUkkcJmme2ONySU7AuJT2zvnRaqFww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQzQjg3LzIzRDE1MjhBQkNF MzExRjA5QzVGNzA0OEM0RjlBRTAyL2trY0ptbWUyT055U1U3QXVKVDJ6dm5SYXFG dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva2tjSm1tZTJPTnlTVTdBdUpUMnp2blJhcUZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQz Qjg3LzIzRDE1MjhBQkNFMzExRjA5QzVGNzA0OEM0RjlBRTAyL2trY0ptbWUyT055 U1U3QXVKVDJ6dm5SYXFGdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBGgT6PEn5ET24B07lqHNoSCERy5sqlVmvOA7p7DIW4YZQtUM6vWHa9rOR4W4Qt qGeJftiNU1ch69GhVhVG5JULe3fqZ041qBfLUw12W6L+hgic6gGwOzjc6ongEel9 JyVBp65Kn0HuLEgaKrxqjRHG24tTcuCtXBrG0XmtI/aC6TZqtu+LGo1ddEXHciMz M/N0Nl80yvJfQv5wZ4mZ8J7RLNCvW6iSUrUdSgJI6gEP7453yqo4zey23QjtBXfC C0UYvKOnnz0EQ7tG3Rdg/1P8O9xBDUo+BvjoWRpwUwl0rvpD+Ul5EnX9T5RNPZSz q5QQDgj76fHb7HA0WRwlRcGi -----END CERTIFICATE-----Generated at Mon Mar 2 13:25:51 2026 by rpki-client