$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft File: KZYjJd4LreTcndvFdq4ncBK8N1g.mft (raw, json) Hash identifier: FRw3pV9JDUtesvUAOc7o5dDearcs6YOlxZXSdCCADv4= Subject key identifier: B1:1C:20:0C:60:85:BB:64:1B:B9:59:78:AC:9A:6E:CF:91:10:DD:D3 Authority key identifier: 29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 Certificate issuer: /CN=A914DA2D/serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Certificate serial: 1AF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft Manifest number: 1AD0 Signing time: Sat 28 Feb 2026 16:22:24 +0000 Manifest this update: Sat 28 Feb 2026 16:22:23 +0000 Manifest next update: Sat 07 Mar 2026 16:22:23 +0000 Files and hashes: 1: KZYjJd4LreTcndvFdq4ncBK8N1g.crl (hash: uLSk4+KPgSvP6Gv4eVfyGXBzkmtNzHdJ1Yxl0R0zYME=) 2: B201496EF3A311EC8804FE09C4F9AE02.roa (hash: 1W3bZjmYo4y/faIyWLiaDn4cNEWTqd/xhoIAZdOleqM=) 3: 442A935E2F1F11F0A35F5757C4F9AE02.roa (hash: D4FdDOMn9kYOe8wUYl/7g0SwBt2d9VcBYOrZDNcFK0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 16:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6898 (0x1af2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DA2D, serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Validity Not Before: Feb 28 16:22:23 2026 GMT Not After : Mar 7 16:22:23 2026 GMT Subject: CN=69a31640-f75f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:16:20:61:0e:54:05:3f:09:a2:f4:9c:4e:56: a7:3c:54:fd:3a:39:ec:4c:00:86:c1:f0:d6:c2:74: ec:8f:51:54:49:97:fe:7f:c6:53:5a:62:fc:26:8f: 0a:24:77:1a:e7:dd:bb:7b:fb:6f:9b:4c:5b:55:7d: 18:c2:4c:54:39:b7:a1:49:16:f9:2d:67:51:56:aa: a9:54:fa:94:ba:a2:08:ef:e1:ac:94:6b:04:cc:83: 77:b1:59:5c:5a:1b:72:c9:dc:36:94:32:33:c4:74: 09:de:31:07:7a:27:26:1c:79:b2:f0:d3:81:de:e2: 9a:2e:a1:db:fe:bb:1b:dc:1c:a2:34:fd:07:0a:0b: b8:2c:e8:b8:5d:82:e6:be:cc:a6:e5:a0:a9:e9:26: 00:0b:77:53:3d:f7:8d:b3:69:7d:62:de:cd:e4:23: b6:8a:15:88:d9:19:0d:31:03:07:5d:31:2e:de:13: 88:68:03:9d:73:40:49:58:39:78:71:ef:e2:9b:f4: 16:57:5a:ce:42:a5:4e:74:d2:83:83:c2:c2:25:d4: ec:e6:47:6b:b1:e3:9f:5a:83:c6:83:e1:7c:2f:5d: f9:fb:06:1f:8a:00:e1:54:5a:15:25:17:bd:c5:d0: 48:2f:b1:90:96:ab:ba:74:17:5f:91:88:65:74:49: fe:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1C:20:0C:60:85:BB:64:1B:B9:59:78:AC:9A:6E:CF:91:10:DD:D3 X509v3 Authority Key Identifier: keyid:29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:93:08:75:6d:1a:85:88:f8:15:22:47:cd:af:dd:34:94:65: fe:cf:e2:95:f3:66:e5:46:1e:72:49:37:77:af:b3:0a:99:8b: 21:9f:25:02:50:56:3f:cf:6e:8d:57:17:a0:e7:d7:8a:cd:f4: 2c:84:b9:71:90:51:87:99:e6:1c:3a:e3:4d:ee:93:ad:ff:52: 65:66:20:3e:f7:18:46:5f:40:cf:4a:13:f1:6f:3a:86:a0:91: 1e:41:81:d5:3c:94:f8:c1:cf:78:12:04:4f:34:6c:d3:90:ce: 31:1c:75:a4:a2:f4:6f:07:b6:fe:0a:fd:76:b2:7b:91:d4:52: 68:6d:8a:81:ff:8f:5c:50:4e:3b:22:1b:ab:5a:59:33:d7:00: 44:e7:1f:d3:3d:0a:f6:81:88:cb:6b:8b:4c:8b:b0:42:b5:2e: 44:d7:75:15:82:08:7c:1d:ae:17:9d:2c:da:86:ed:0c:79:bf: 04:45:ba:9e:a1:17:ae:d6:29:2e:34:d0:07:0b:c1:fe:c2:87: 06:3a:30:80:1b:05:fb:aa:06:23:a7:e5:81:5c:65:2b:a9:91: 9d:52:7c:04:5b:c0:ce:8a:aa:01:0e:f5:e3:59:72:d3:bb:09: 0d:6f:4c:4c:56:8f:52:fa:f1:d2:57:6d:e6:f7:49:4f:3f:f4: e5:a7:cf:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERBMkQxMTAvBgNVBAUTKDI5OTYyMzI1REUwQkFERTREQzlEREJDNTc2QUUyNzcw MTJCQzM3NTgwHhcNMjYwMjI4MTYyMjIzWhcNMjYwMzA3MTYyMjIzWjAYMRYwFAYD VQQDDA02OWEzMTY0MC1mNzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhYgYQ5UBT8JovScTlanPFT9OjnsTACGwfDWwnTsj1FUSZf+f8ZTWmL8Jo8K JHca5927e/tvm0xbVX0YwkxUObehSRb5LWdRVqqpVPqUuqII7+GslGsEzIN3sVlc Whtyydw2lDIzxHQJ3jEHeicmHHmy8NOB3uKaLqHb/rsb3ByiNP0HCgu4LOi4XYLm vsym5aCp6SYAC3dTPfeNs2l9Yt7N5CO2ihWI2RkNMQMHXTEu3hOIaAOdc0BJWDl4 ce/im/QWV1rOQqVOdNKDg8LCJdTs5kdrseOfWoPGg+F8L135+wYfigDhVFoVJRe9 xdBIL7GQlqu6dBdfkYhldEn+CwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLEcIAxg hbtkG7lZeKyabs+REN3TMB8GA1UdIwQYMBaAFCmWIyXeC63k3J3bxXauJ3ASvDdY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REEyRC84MzgzNjIwQTUw RDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJlVGNuZHZGZHE0bmNCSzhO MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0taWWpKZDRMcmVUY25kdkZkcTRuY0JLOE4xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REEyRC84MzgzNjIwQTUwRDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJl VGNuZHZGZHE0bmNCSzhOMWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxZMIdW0ahYj4FSJHza/dNJRl/s/ilfNm5UYeckk3d6+zCpmLIZ8lAlBWP89u jVcXoOfXis30LIS5cZBRh5nmHDrjTe6Trf9SZWYgPvcYRl9Az0oT8W86hqCRHkGB 1TyU+MHPeBIETzRs05DOMRx1pKL0bwe2/gr9drJ7kdRSaG2Kgf+PXFBOOyIbq1pZ M9cAROcf0z0K9oGIy2uLTIuwQrUuRNd1FYIIfB2uF50s2obtDHm/BEW6nqEXrtYp LjTQBwvB/sKHBjowgBsF+6oGI6flgVxlK6mRnVJ8BFvAzoqqAQ7141ly07sJDW9M TFaPUvrx0ldt5vdJTz/05afPvA== -----END CERTIFICATE-----Generated at Sun Mar 1 20:37:09 2026 by rpki-client