$ rpki-client -vvf rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft File: KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft (raw, json) Hash identifier: +xLWUhUM60fazeY2ul4n+PQCgAXpu8rNORPedz1zkIM= Subject key identifier: FE:D5:F3:3C:8B:7A:05:2A:D5:EA:EE:EB:38:D8:B8:A8:3B:58:23:28 Authority key identifier: 28:17:D4:A8:64:4A:EC:41:9A:DC:CE:E3:0C:4E:87:A2:4D:2F:F5:7B Certificate issuer: /CN=A9158650/serialNumber=2817D4A8644AEC419ADCCEE30C4E87A24D2FF57B Certificate serial: 0235 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft Manifest number: 0230 Signing time: Sun 01 Mar 2026 03:23:14 +0000 Manifest this update: Sun 01 Mar 2026 03:23:13 +0000 Manifest next update: Sun 08 Mar 2026 03:23:13 +0000 Files and hashes: 1: KBfUqGRK7EGa3M7jDE6Hok0v9Xs.crl (hash: OK2tp+cxfmDv4Ll+RiqTXc5dDpnaBCEHkgkrb1grIM8=) 2: EA5A9A32BDAA11ED92995562C4F9AE02.roa (hash: /EEXvT665opKL7OI/mui0sN2NqpuGn4U8tvIvrJ8aw8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.crl rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 03:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 565 (0x235) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158650, serialNumber=2817D4A8644AEC419ADCCEE30C4E87A24D2FF57B Validity Not Before: Mar 1 03:23:13 2026 GMT Not After : Mar 8 03:23:13 2026 GMT Subject: CN=69a3b122-84b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c7:5e:10:fe:50:01:1a:20:c4:56:bd:e9:39: 04:d0:a6:d5:b7:b9:5e:62:80:45:0f:23:e3:fc:5f: 6a:84:c7:14:c2:9c:f3:3f:2d:4d:a3:8c:bf:59:54: 94:17:ab:47:69:5d:05:a9:39:cd:ff:4b:46:4f:95: 86:5c:c1:8e:2e:cf:85:51:32:c6:07:28:80:82:8a: 63:fe:14:4d:7e:39:36:a4:de:23:12:dd:4c:4c:fb: 71:ec:fd:91:75:a8:40:1f:b1:d5:7f:48:de:b4:a7: a9:02:10:03:7b:cd:ae:d6:7d:aa:49:be:90:55:0d: 69:da:e2:5b:83:46:82:0d:0c:da:17:6f:6d:07:d3: 4e:37:a8:2b:2c:9d:59:b2:43:38:4b:e0:e8:aa:1e: 14:bf:c2:fd:4d:7d:60:78:ae:35:6d:7c:4a:12:dd: ca:b4:d5:e3:b9:2c:f5:83:7a:13:c3:09:00:91:06: d0:e5:81:e7:21:fa:cf:ea:63:ea:e6:d4:03:aa:ed: 18:38:56:51:43:48:51:dc:3d:23:f6:79:52:b4:30: bc:c9:29:0b:d7:b9:21:c8:26:79:93:3b:2c:df:30: b4:a3:15:8b:0b:3d:16:ea:48:78:a6:a4:e8:4e:3f: b9:2d:c7:ed:9c:f6:16:85:e6:bd:a2:f5:f7:43:63: fe:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D5:F3:3C:8B:7A:05:2A:D5:EA:EE:EB:38:D8:B8:A8:3B:58:23:28 X509v3 Authority Key Identifier: keyid:28:17:D4:A8:64:4A:EC:41:9A:DC:CE:E3:0C:4E:87:A2:4D:2F:F5:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:f0:b4:c2:27:85:06:06:f0:5b:fa:dd:07:61:03:68:16:c4: da:64:25:41:bf:7a:61:4d:7b:36:85:48:c3:c2:32:2c:55:2e: 1d:49:5c:8c:b0:6d:bb:7c:c5:ee:af:d3:69:0c:13:22:00:e2: b4:22:2b:ca:50:40:59:fc:44:61:78:d2:c5:83:17:54:f7:a5: 82:92:bb:1c:83:80:d9:36:26:c8:1a:6b:44:14:8f:ce:dd:95: 9c:06:d6:3a:a8:2c:33:e4:ba:9d:02:90:0f:fd:1c:2d:74:47: 00:b5:c4:ae:52:c8:04:5c:6b:0a:a0:8c:f9:15:78:2e:33:ce: 6a:a1:91:8a:a9:56:3a:79:cf:37:90:31:f8:81:3b:92:4e:56: 8f:f5:e4:ec:c3:9d:df:55:4f:7a:02:15:83:46:f6:96:3e:b7: c7:0b:cb:14:da:b8:fa:de:3e:40:dd:fb:70:ac:67:c5:23:b9: ca:c8:97:70:de:08:dc:e9:1c:c8:2a:ce:6e:f4:20:bd:d9:7a: 23:0b:1a:98:fe:79:08:87:80:ca:09:9b:d0:f5:ce:29:89:c1: 1f:0a:c2:17:e3:0a:e9:fc:1b:31:d4:f6:1d:0a:c9:4b:c1:11: 17:31:90:81:a1:0a:d2:b2:d1:04:9d:a8:0e:b5:cb:8b:d5:70: 19:df:d6:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg2NTAxMTAvBgNVBAUTKDI4MTdENEE4NjQ0QUVDNDE5QURDQ0VFMzBDNEU4N0Ey NEQyRkY1N0IwHhcNMjYwMzAxMDMyMzEzWhcNMjYwMzA4MDMyMzEzWjAYMRYwFAYD VQQDDA02OWEzYjEyMi04NGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8deEP5QARogxFa96TkE0KbVt7leYoBFDyPj/F9qhMcUwpzzPy1No4y/WVSU F6tHaV0FqTnN/0tGT5WGXMGOLs+FUTLGByiAgopj/hRNfjk2pN4jEt1MTPtx7P2R dahAH7HVf0jetKepAhADe82u1n2qSb6QVQ1p2uJbg0aCDQzaF29tB9NON6grLJ1Z skM4S+Doqh4Uv8L9TX1geK41bXxKEt3KtNXjuSz1g3oTwwkAkQbQ5YHnIfrP6mPq 5tQDqu0YOFZRQ0hR3D0j9nlStDC8ySkL17khyCZ5kzss3zC0oxWLCz0W6kh4pqTo Tj+5LcftnPYWhea9ovX3Q2P+OQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP7V8zyL egUq1eru6zjYuKg7WCMoMB8GA1UdIwQYMBaAFCgX1KhkSuxBmtzO4wxOh6JNL/V7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODY1MC83NzU4RDJDMkJE QTcxMUVEQUVDRDRBNURDNEY5QUUwMi9LQmZVcUdSSzdFR2EzTTdqREU2SG9rMHY5 WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tCZlVxR1JLN0VHYTNNN2pERTZIb2swdjlYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODY1MC83NzU4RDJDMkJEQTcxMUVEQUVDRDRBNURDNEY5QUUwMi9LQmZVcUdSSzdF R2EzTTdqREU2SG9rMHY5WHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAivC0wieFBgbwW/rdB2EDaBbE2mQlQb96YU17NoVIw8IyLFUuHUlcjLBtu3zF 7q/TaQwTIgDitCIrylBAWfxEYXjSxYMXVPelgpK7HIOA2TYmyBprRBSPzt2VnAbW OqgsM+S6nQKQD/0cLXRHALXErlLIBFxrCqCM+RV4LjPOaqGRiqlWOnnPN5Ax+IE7 kk5Wj/Xk7MOd31VPegIVg0b2lj63xwvLFNq4+t4+QN37cKxnxSO5ysiXcN4I3Okc yCrObvQgvdl6IwsamP55CIeAygmb0PXOKYnBHwrCF+MK6fwbMdT2HQrJS8ERFzGQ gaEK0rLRBJ2oDrXLi9VwGd/WUg== -----END CERTIFICATE-----Generated at Sun Mar 1 20:27:26 2026 by rpki-client