$ rpki-client -vvf rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft File: KaAJAT90Md42nADKtUcWypNFJtM.mft (raw, json) Hash identifier: lGQjXxFh+P2305RB8SEyZg76kqtwMbpdaN7g1XycVhE= Subject key identifier: 0A:BC:D6:AF:FF:E3:4E:38:9E:A9:89:8D:48:94:DA:AB:41:80:6B:8A Authority key identifier: 29:A0:09:01:3F:74:31:DE:36:9C:00:CA:B5:47:16:CA:93:45:26:D3 Certificate issuer: /CN=A91651CF/serialNumber=29A009013F7431DE369C00CAB54716CA934526D3 Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KaAJAT90Md42nADKtUcWypNFJtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft Manifest number: 0106 Signing time: Sun 01 Mar 2026 07:07:10 +0000 Manifest this update: Sun 01 Mar 2026 07:07:10 +0000 Manifest next update: Sun 08 Mar 2026 07:07:10 +0000 Files and hashes: 1: KaAJAT90Md42nADKtUcWypNFJtM.crl (hash: 6DxwGmBZ3jbhglWBlN+ssm7rjk0K+aJBVUad3nmDjZI=) 2: C731AFD03B9A11F0B7924C1FC4F9AE02.roa (hash: EmmsOqkiT007YavefYEjF7jWl6E1fCl7urJJNV6C63g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.crl rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KaAJAT90Md42nADKtUcWypNFJtM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 07:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91651CF, serialNumber=29A009013F7431DE369C00CAB54716CA934526D3 Validity Not Before: Mar 1 07:07:10 2026 GMT Not After : Mar 8 07:07:10 2026 GMT Subject: CN=69a3e59e-7a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2f:16:5d:11:cb:70:51:aa:b3:2a:b4:b7:5e: 25:27:6a:bd:f8:5d:d6:ed:e7:ab:f6:93:13:26:f2: bc:e6:7b:40:e2:b5:aa:76:f8:c9:80:45:cc:42:e8: 5e:a2:1d:31:d7:10:8b:00:58:17:e2:91:b9:98:db: 02:48:22:aa:1b:6a:5b:4f:6a:66:a8:48:3b:83:5a: fc:12:f6:b7:eb:c0:37:f3:9c:0f:e7:54:49:a1:a4: 03:7c:1e:9f:bb:98:bb:09:d3:25:17:ca:ca:78:9d: 40:25:16:fb:f2:d5:8e:7e:66:53:d4:bd:65:25:d2: 85:c7:8b:d8:d9:21:d8:9b:4b:aa:f2:3b:d3:87:ca: c5:b4:e0:68:d9:a9:0b:8d:bd:ba:bf:e2:5d:a7:6d: 36:9c:20:14:80:cb:ce:a6:e8:08:3a:51:3d:2a:2d: 48:2b:37:34:ac:aa:d6:a2:8f:8b:d8:33:50:03:88: 5c:df:1b:61:c6:0b:5c:ff:95:a9:65:5a:ac:0b:12: a0:d6:d5:9c:b0:4c:ae:15:66:a7:5b:17:d4:c5:5f: 32:d9:e4:e3:37:cf:1d:09:09:14:93:69:1f:4f:6d: 74:a2:f1:a3:be:a3:ad:cf:66:54:ea:0b:c3:3c:52: 7d:69:14:c5:53:91:94:55:ce:99:f1:14:af:22:a3: 86:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:BC:D6:AF:FF:E3:4E:38:9E:A9:89:8D:48:94:DA:AB:41:80:6B:8A X509v3 Authority Key Identifier: keyid:29:A0:09:01:3F:74:31:DE:36:9C:00:CA:B5:47:16:CA:93:45:26:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KaAJAT90Md42nADKtUcWypNFJtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:f2:65:75:1c:12:63:71:42:a4:21:e9:9e:81:39:47:9f:0d: c2:a5:5d:d0:84:48:29:1e:d9:55:a2:1e:73:f0:6a:67:73:95: 5a:0a:64:54:44:73:d9:99:f6:87:1e:0a:f5:b2:63:41:f1:c6: 77:bd:b2:f4:02:e0:f8:c7:a0:b6:f9:9f:bd:60:47:d1:20:57: 91:a0:7f:c6:12:18:b1:09:3c:32:a4:9d:02:f7:06:c0:fb:76: a1:ec:dd:a9:7d:ef:93:88:83:70:bc:b1:0b:d1:29:f1:51:8a: 35:b9:12:cc:a5:37:a8:4c:f6:85:48:18:45:3f:81:ef:b8:23: 9f:44:cb:16:39:2c:1d:64:4c:ec:3f:3d:27:e0:1e:07:04:35: a8:a9:07:9e:18:f1:d9:40:ec:f0:03:83:69:2a:8e:69:e2:57: 49:ee:fd:05:ec:fa:4d:55:79:28:03:85:6e:bb:0d:cd:1e:53: 98:42:3a:09:56:04:3a:3a:70:e5:61:fd:36:b0:c9:23:ad:13: ed:18:70:a9:97:a4:53:7c:51:bf:9f:42:47:84:31:10:65:b6: a9:08:c8:8a:bc:ac:e1:48:c5:18:c0:4e:7b:bf:36:84:5e:99: f9:ad:79:f5:f7:ce:9c:77:8b:21:92:5e:2a:27:ab:12:41:4e: e9:d3:c7:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUxQ0YxMTAvBgNVBAUTKDI5QTAwOTAxM0Y3NDMxREUzNjlDMDBDQUI1NDcxNkNB OTM0NTI2RDMwHhcNMjYwMzAxMDcwNzEwWhcNMjYwMzA4MDcwNzEwWjAYMRYwFAYD VQQDEw02OWEzZTU5ZS03YThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtC8WXRHLcFGqsyq0t14lJ2q9+F3W7eer9pMTJvK85ntA4rWqdvjJgEXMQuhe oh0x1xCLAFgX4pG5mNsCSCKqG2pbT2pmqEg7g1r8Eva368A385wP51RJoaQDfB6f u5i7CdMlF8rKeJ1AJRb78tWOfmZT1L1lJdKFx4vY2SHYm0uq8jvTh8rFtOBo2akL jb26v+Jdp202nCAUgMvOpugIOlE9Ki1IKzc0rKrWoo+L2DNQA4hc3xthxgtc/5Wp ZVqsCxKg1tWcsEyuFWanWxfUxV8y2eTjN88dCQkUk2kfT210ovGjvqOtz2ZU6gvD PFJ9aRTFU5GUVc6Z8RSvIqOG2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAq81q// 4044nqmJjUiU2qtBgGuKMB8GA1UdIwQYMBaAFCmgCQE/dDHeNpwAyrVHFsqTRSbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTFDRi8zMDQzNjM1Qzg2 RDcxMUVGODU0REQ0N0JDNEY5QUUwMi9LYUFKQVQ5ME1kNDJuQURLdFVjV3lwTkZK dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0thQUpBVDkwTWQ0Mm5BREt0VWNXeXBORkp0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTFDRi8zMDQzNjM1Qzg2RDcxMUVGODU0REQ0N0JDNEY5QUUwMi9LYUFKQVQ5ME1k NDJuQURLdFVjV3lwTkZKdE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcPJldRwSY3FCpCHpnoE5R58NwqVd0IRIKR7ZVaIec/BqZ3OVWgpkVERz2Zn2 hx4K9bJjQfHGd72y9ALg+MegtvmfvWBH0SBXkaB/xhIYsQk8MqSdAvcGwPt2oezd qX3vk4iDcLyxC9Ep8VGKNbkSzKU3qEz2hUgYRT+B77gjn0TLFjksHWRM7D89J+Ae BwQ1qKkHnhjx2UDs8AODaSqOaeJXSe79Bez6TVV5KAOFbrsNzR5TmEI6CVYEOjpw 5WH9NrDJI60T7RhwqZekU3xRv59CR4QxEGW2qQjIirys4UjFGMBOe782hF6Z+a15 9ffOnHeLIZJeKierEkFO6dPH2w== -----END CERTIFICATE-----Generated at Mon Mar 2 13:36:37 2026 by rpki-client