$ rpki-client -vvf rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft File: KL7nBASyQwlkwwKSkNPqYEyRDrE.mft (raw, json) Hash identifier: AIS8NnLyWUcp5w+GRjkM5BjA0Q4IN+lzr4d1TTOrYEc= Subject key identifier: A8:E0:22:83:8B:17:30:D0:EE:96:46:0D:9F:84:35:69:A3:94:87:65 Authority key identifier: 28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1 Certificate issuer: /CN=A9154E3F/serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1 Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft Manifest number: A4 Signing time: Sun 01 Mar 2026 08:32:29 +0000 Manifest this update: Sun 01 Mar 2026 08:32:29 +0000 Manifest next update: Sun 08 Mar 2026 08:32:29 +0000 Files and hashes: 1: KL7nBASyQwlkwwKSkNPqYEyRDrE.crl (hash: hPZswd4Dd8kSny0aC5dnkzDyRvxCTJ8cp++CK71Jy30=) 2: C028C06E18E211F081A75558C4F9AE02.roa (hash: mUs4fgM8VrVj+tu77XrkYII8tafnRQVMrP9/4PhdyvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:32:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154E3F, serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1 Validity Not Before: Mar 1 08:32:29 2026 GMT Not After : Mar 8 08:32:29 2026 GMT Subject: CN=69a3f99d-0c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:89:d1:74:62:d7:ae:a9:1c:be:87:bd:2b:17: 26:98:a0:b3:e4:97:64:3b:a4:b6:60:cb:62:4a:14: 1e:ff:62:2d:14:cb:6b:1c:86:18:f2:8d:57:47:be: 30:a8:b7:74:4d:10:bc:e5:ca:99:ae:9f:83:46:31: d2:f3:78:3f:de:82:46:8f:4e:ae:46:32:bb:58:17: ba:cb:b2:19:78:76:0f:56:b5:89:82:7d:ca:9c:47: 6c:b7:1a:1d:08:fe:6c:e0:c3:1e:5b:0d:cc:ce:f6: 35:a9:05:8d:43:f6:52:50:19:a9:b0:63:77:87:d0: c9:8e:d6:b5:de:9e:16:69:c9:12:8d:c5:66:99:08: cf:e3:40:31:c8:c2:43:91:82:34:01:76:67:eb:9d: d6:88:1a:b4:32:31:8d:8f:12:68:e0:2c:73:ae:0e: f6:4b:b5:ea:41:99:4c:2b:0e:ae:26:46:86:d1:1a: 4d:c4:e7:1b:91:f7:ac:7e:ed:e1:78:1c:54:21:6b: 14:47:a1:88:f4:11:ed:b8:ea:22:7a:ef:5a:d8:dc: f2:a5:c8:0b:42:ca:d7:5f:f0:48:f1:4a:8e:be:63: 7b:41:ce:f1:d5:ae:76:bc:7a:7d:8f:11:55:60:70: ba:3b:92:e1:ad:45:74:4a:07:80:5c:5d:c0:c1:62: 80:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E0:22:83:8B:17:30:D0:EE:96:46:0D:9F:84:35:69:A3:94:87:65 X509v3 Authority Key Identifier: keyid:28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:48:82:0c:c4:f6:32:e3:85:fa:f2:06:a3:31:76:4a:2c:69: 55:e6:75:a9:6a:e9:68:71:32:36:b2:19:b6:95:fa:0c:62:48: 58:97:fe:8a:89:23:f7:b7:a9:ab:e0:43:cf:f9:d9:66:d4:5a: 01:9c:a0:6d:7e:65:58:7c:41:90:af:c7:62:0a:38:90:03:02: e3:5d:9b:94:fc:4e:5c:26:d2:5b:7a:a3:c7:24:56:ec:78:a0: 14:43:9e:46:b8:26:a0:8f:ac:27:5e:14:c1:74:a1:3e:7c:89: a3:d5:91:b6:a9:05:75:71:d9:52:c9:4a:31:4b:d7:76:61:5e: e5:ab:5c:8c:b3:b8:0f:73:46:44:35:b0:73:5d:d9:a0:17:52: 29:7d:f5:2b:23:e2:a2:df:4e:b5:83:28:82:95:3e:1b:a3:e5: c1:07:a0:cf:a2:ca:c4:57:28:7a:a3:0a:79:1f:1a:2b:47:4c: a4:71:95:02:11:70:1c:54:77:92:e4:82:19:c8:7c:08:ea:37: d0:b1:b5:47:8a:3e:1e:0e:f7:db:06:3b:65:a3:20:a4:be:7d: e9:26:48:3c:fa:8b:1a:4d:f1:3e:67:fc:b9:7b:8c:64:b3:6b: 5f:62:fc:dc:74:9b:21:58:5b:71:e7:32:0b:ba:1c:90:82:60: 51:a7:aa:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRFM0YxMTAvBgNVBAUTKDI4QkVFNzA0MDRCMjQzMDk2NEMzMDI5MjkwRDNFQTYw NEM5MTBFQjEwHhcNMjYwMzAxMDgzMjI5WhcNMjYwMzA4MDgzMjI5WjAYMRYwFAYD VQQDEw02OWEzZjk5ZC0wYzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApInRdGLXrqkcvoe9KxcmmKCz5JdkO6S2YMtiShQe/2ItFMtrHIYY8o1XR74w qLd0TRC85cqZrp+DRjHS83g/3oJGj06uRjK7WBe6y7IZeHYPVrWJgn3KnEdstxod CP5s4MMeWw3MzvY1qQWNQ/ZSUBmpsGN3h9DJjta13p4WackSjcVmmQjP40AxyMJD kYI0AXZn653WiBq0MjGNjxJo4Cxzrg72S7XqQZlMKw6uJkaG0RpNxOcbkfesfu3h eBxUIWsUR6GI9BHtuOoieu9a2NzypcgLQsrXX/BI8UqOvmN7Qc7x1a52vHp9jxFV YHC6O5LhrUV0SgeAXF3AwWKAXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKjgIoOL FzDQ7pZGDZ+ENWmjlIdlMB8GA1UdIwQYMBaAFCi+5wQEskMJZMMCkpDT6mBMkQ6x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEUzRi8zQzNFNjIwRTE4 RTIxMUYwOUJFOTk1NTdDNEY5QUUwMi9LTDduQkFTeVF3bGt3d0tTa05QcVlFeVJE ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tMN25CQVN5UXdsa3d3S1NrTlBxWUV5UkRyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEUzRi8zQzNFNjIwRTE4RTIxMUYwOUJFOTk1NTdDNEY5QUUwMi9LTDduQkFTeVF3 bGt3d0tTa05QcVlFeVJEckUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHkiCDMT2MuOF+vIGozF2SixpVeZ1qWrpaHEyNrIZtpX6DGJIWJf+iokj97ep q+BDz/nZZtRaAZygbX5lWHxBkK/HYgo4kAMC412blPxOXCbSW3qjxyRW7HigFEOe RrgmoI+sJ14UwXShPnyJo9WRtqkFdXHZUslKMUvXdmFe5atcjLO4D3NGRDWwc13Z oBdSKX31KyPiot9OtYMogpU+G6PlwQegz6LKxFcoeqMKeR8aK0dMpHGVAhFwHFR3 kuSCGch8COo30LG1R4o+Hg732wY7ZaMgpL596SZIPPqLGk3xPmf8uXuMZLNrX2L8 3HSbIVhbcecyC7ockIJgUaeqRA== -----END CERTIFICATE-----Generated at Mon Mar 2 10:17:28 2026 by rpki-client