$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft File: _knCz373vPtEQkWD30SkczIILFk.mft (raw, json) Hash identifier: iJODM+mhPK5v6azzd6ZtFShNuHGnJu6FKsRkoczZ88I= Subject key identifier: 1A:1E:5C:14:BF:3B:DE:A9:BC:87:04:E3:60:32:8D:60:2E:33:4D:CD Authority key identifier: FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59 Certificate issuer: /CN=A916B4A3/serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59 Certificate serial: 06D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft Manifest number: 06AF Signing time: Mon 02 Mar 2026 13:31:53 +0000 Manifest this update: Mon 02 Mar 2026 13:31:52 +0000 Manifest next update: Mon 09 Mar 2026 13:31:52 +0000 Files and hashes: 1: _knCz373vPtEQkWD30SkczIILFk.crl (hash: 5l95birs7NQwMzmviLKRrfSZvXkVRUTP+soSWY5NqGI=) 2: 6A80A1DA930011EFAF2ACC48C4F9AE02.roa (hash: j3y2MD2N/DYKUU8fqu1Wpt61itE0tbiREOOVu3Ycs5g=) 3: B2602B2820EC11EF964FFE2CC4F9AE02.roa (hash: 1Z9LS41ng6fjPpTuu047cOJxnZNw575SVnm1zMIsT+k=) 4: 68219776A41311EBBF911855C4F9AE02.roa (hash: VjXHPuIwGHjxhTWLqkjCa7VDTT6rvVJHd6oJKd+W8yI=) 5: B1C90C7A20EC11EF964FFE2CC4F9AE02.roa (hash: GMAvWxN7LqaBOKvtkjWDIMlqwj7hC5qzX6WxN7KtnZg=) 6: 3F82CC6E234E11EFAF9F0F60C4F9AE02.roa (hash: w4PVGKfxeERIvQHJMYDS31Ha+UPsN3eP0dVpold/msw=) 7: FFC2CBFCF2DA11F09E4464B23F6F56BC.roa (hash: bhE8kPKbDhbjGGtK3dqK/PTW2f7OgPh1zprjpQ4GT6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 13:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1746 (0x6d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B4A3, serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59 Validity Not Before: Mar 2 13:31:52 2026 GMT Not After : Mar 9 13:31:52 2026 GMT Subject: CN=69a59149-1c5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:57:47:1d:24:96:6c:96:bc:60:8c:92:65:ce: 95:fb:28:a0:e1:ef:8a:6c:89:3d:4d:e5:0f:5c:0a: 7a:c9:f1:16:a1:51:46:94:6f:e3:83:e7:15:30:dc: d5:2e:e3:6c:31:0b:7f:b3:eb:ff:a4:06:43:c7:a3: b2:f5:b4:1c:84:cd:92:03:7b:13:ae:3b:5d:bb:c1: 61:ff:37:ae:80:94:ff:0b:19:c2:21:12:09:47:27: a9:12:52:43:0a:7e:f6:43:1f:54:7f:ae:e9:d5:41: 17:77:fe:cd:c2:15:70:af:e7:3b:b3:28:5d:e1:4f: 56:94:d0:23:04:97:18:93:3f:29:cb:27:6e:eb:12: 70:e3:bb:49:bc:cf:a9:bb:2f:0c:bd:4e:6d:79:ed: d4:52:a2:63:64:08:ca:10:2e:06:b8:4f:0b:a2:ae: 56:44:1a:ca:d6:99:79:31:76:eb:1b:b5:72:1e:3f: 07:12:46:e1:58:4a:b8:f3:22:25:fe:91:09:67:ad: 2b:63:b8:0e:e5:e3:7e:13:30:6d:27:64:c9:12:e1: 07:d2:7b:b3:73:64:f6:67:86:35:b2:ba:5d:2c:fc: e9:27:98:02:db:ce:4b:4f:f8:5d:ce:ac:ba:c7:16: fc:2d:83:7b:67:b6:49:a5:5a:20:d7:a9:71:59:09: 4b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:1E:5C:14:BF:3B:DE:A9:BC:87:04:E3:60:32:8D:60:2E:33:4D:CD X509v3 Authority Key Identifier: keyid:FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:84:1b:f1:fd:3a:a7:51:c6:24:f1:25:b6:c1:65:48:18:46: ea:ee:36:69:d8:87:79:d3:09:d3:6b:64:c5:b5:88:12:da:7d: 2b:80:3f:25:a8:1d:ba:fc:ca:ca:3e:0b:41:64:d0:36:46:a8: e5:ab:5a:f6:3f:66:9b:d1:c2:08:e1:ba:15:8d:1b:81:ab:61: f8:bd:4e:9f:05:95:cd:c4:82:f8:a0:e4:2a:e5:39:2e:c3:55: f5:ee:7d:50:26:96:f2:83:6b:b4:80:ab:0a:86:b3:37:3b:c2: a1:9e:4e:db:ba:7b:d2:99:aa:69:cc:3f:17:ac:19:f3:44:c1: 0f:a5:96:19:c7:6e:e8:28:d9:9d:e5:03:ea:f2:3b:58:af:43: fe:ab:74:81:a6:6b:d4:f8:5b:94:61:bf:45:06:ce:47:8f:4b: bc:5a:61:f0:6d:36:b5:e8:70:66:22:f9:27:d5:01:05:95:8f: ed:fe:24:0c:f6:43:9b:cd:80:e7:d0:b9:ec:bc:4d:9d:23:38: 5c:56:f4:22:5c:1f:be:77:a1:39:42:13:dd:27:c2:81:5e:06: 3c:7f:c1:48:02:89:fd:b4:4b:f2:a8:97:49:cd:de:21:f3:20: 2b:d4:eb:7b:c9:5a:d7:83:a6:5a:a1:b8:54:ca:4d:22:8e:cf: d4:8b:9b:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI0QTMxMTAvBgNVBAUTKEZFNDlDMkNGN0VGN0JDRkI0NDQyNDU4M0RGNDRBNDcz MzIwODJDNTkwHhcNMjYwMzAyMTMzMTUyWhcNMjYwMzA5MTMzMTUyWjAYMRYwFAYD VQQDEw02OWE1OTE0OS0xYzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1dHHSSWbJa8YIySZc6V+yig4e+KbIk9TeUPXAp6yfEWoVFGlG/jg+cVMNzV LuNsMQt/s+v/pAZDx6Oy9bQchM2SA3sTrjtdu8Fh/zeugJT/CxnCIRIJRyepElJD Cn72Qx9Uf67p1UEXd/7NwhVwr+c7syhd4U9WlNAjBJcYkz8pyydu6xJw47tJvM+p uy8MvU5tee3UUqJjZAjKEC4GuE8Loq5WRBrK1pl5MXbrG7VyHj8HEkbhWEq48yIl /pEJZ60rY7gO5eN+EzBtJ2TJEuEH0nuzc2T2Z4Y1srpdLPzpJ5gC285LT/hdzqy6 xxb8LYN7Z7ZJpVog16lxWQlLtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBoeXBS/ O96pvIcE42AyjWAuM03NMB8GA1UdIwQYMBaAFP5Jws9+97z7REJFg99EpHMyCCxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjRBMy82RDYyQzhDNEEw NDIxMUVCODFCRkZEMUZDNEY5QUUwMi9fa25DejM3M3ZQdEVRa1dEMzBTa2N6SUlM RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19rbkN6MzczdlB0RVFrV0QzMFNrY3pJSUxGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjRBMy82RDYyQzhDNEEwNDIxMUVCODFCRkZEMUZDNEY5QUUwMi9fa25DejM3M3ZQ dEVRa1dEMzBTa2N6SUlMRmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN4Qb8f06p1HGJPEltsFlSBhG6u42adiHedMJ02tkxbWIEtp9K4A/JagduvzK yj4LQWTQNkao5ata9j9mm9HCCOG6FY0bgath+L1OnwWVzcSC+KDkKuU5LsNV9e59 UCaW8oNrtICrCoazNzvCoZ5O27p70pmqacw/F6wZ80TBD6WWGcdu6CjZneUD6vI7 WK9D/qt0gaZr1PhblGG/RQbOR49LvFph8G02tehwZiL5J9UBBZWP7f4kDPZDm82A 59C57LxNnSM4XFb0IlwfvnehOUIT3SfCgV4GPH/BSAKJ/bRL8qiXSc3eIfMgK9Tr e8la14OmWqG4VMpNIo7P1Iub1w== -----END CERTIFICATE-----Generated at Mon Mar 2 20:18:21 2026 by rpki-client