$ rpki-client -vvf rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft File: kw3fQQEGkDvrmRnJm94BY4cGVa4.mft (raw, json) Hash identifier: gITcO0Ax5IKeueOzeep9baLwFlsqIFsjtSXyBJW0+mc= Subject key identifier: 2D:79:A6:E6:D6:54:04:06:A7:11:F2:5D:DA:7A:6B:99:57:DD:86:F0 Authority key identifier: 93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE Certificate issuer: /CN=A9198553/serialNumber=930DDF410106903BEB9919C99BDE0163870655AE Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft Manifest number: DC Signing time: Sun 01 Mar 2026 23:51:26 +0000 Manifest this update: Sun 01 Mar 2026 23:51:24 +0000 Manifest next update: Sun 08 Mar 2026 23:51:24 +0000 Files and hashes: 1: kw3fQQEGkDvrmRnJm94BY4cGVa4.crl (hash: uJIc1C+rAA3kilWtmcR5Zk6II7uS8O1nFfOm5Yfb/F8=) 2: 854C34B410A611F1B36A7FF1393D8C67.roa (hash: T+es4R7Kz78aarIocXiX4PtIykpBJj/m83J7r+F3puc=) 3: B56BC994E18A11EF94F99968C4F9AE02.roa (hash: gMKROOsdZBai7uwNPJMhA7wmGBXyz5SGNbYDb5CcdnA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:51:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198553, serialNumber=930DDF410106903BEB9919C99BDE0163870655AE Validity Not Before: Mar 1 23:51:24 2026 GMT Not After : Mar 8 23:51:24 2026 GMT Subject: CN=69a4d0fd-d87b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:74:4b:dd:69:84:0b:2f:36:b9:a1:ab:cb:4a: 91:45:15:96:d4:c3:50:64:a2:eb:98:1e:95:fb:5a: 56:40:bd:63:04:72:27:8e:6e:b6:cd:d7:06:80:cc: 29:77:8b:8c:d0:3d:4c:d6:d2:b4:d9:00:7a:60:7e: e9:37:3d:24:e6:9f:f9:30:34:31:4e:54:cd:25:91: 4c:b1:ea:77:92:33:3a:83:10:05:01:05:b6:d8:ac: f3:40:2c:28:d0:3f:3f:32:c3:6d:f0:92:0c:92:a5: 3e:8b:48:7a:f5:46:e9:48:12:50:15:b4:12:26:b9: d3:f4:67:9f:f5:03:1c:2d:26:75:c2:23:2e:b1:58: 52:6a:19:b6:09:2c:2a:86:c0:df:e6:6f:a0:a4:d6: 9f:66:02:c2:37:69:75:2f:b2:80:81:bf:c6:65:3b: e6:21:8b:b6:0e:76:e7:ff:1b:13:29:3b:54:b2:26: 25:4f:e2:50:4c:10:79:0b:8b:9d:89:59:07:f6:6d: 89:62:90:fe:93:6f:9a:f1:96:bd:ac:35:5c:27:d2: 0e:05:77:8b:98:31:b3:15:fe:94:df:b9:6b:48:32: 49:7b:0d:83:d7:36:3a:ca:07:42:5f:3f:67:d3:07: 47:94:f6:42:32:ae:0f:d6:cf:93:ee:93:63:b4:f0: 0f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:79:A6:E6:D6:54:04:06:A7:11:F2:5D:DA:7A:6B:99:57:DD:86:F0 X509v3 Authority Key Identifier: keyid:93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:c4:26:83:99:52:25:ca:b7:f8:33:d9:f5:5c:48:3b:34:6c: 28:54:c2:52:f3:3f:ea:17:b7:d8:a9:89:3f:48:82:b1:b2:16: 86:36:f9:45:32:8e:25:d6:3d:ba:47:42:70:e4:80:7f:3b:85: 9b:92:ea:0d:be:10:58:70:2a:52:12:cd:51:6e:2f:bc:4a:6e: 1e:f7:a6:f9:1b:ba:c0:29:7e:a2:2c:7e:ed:4a:6a:ab:ce:10: 3b:ce:96:ff:14:3c:7f:0e:e5:16:ae:f9:cd:cf:8d:62:8b:33: a7:48:05:0b:ca:44:78:73:2a:bc:06:14:c1:d2:42:d2:b7:57: ac:40:dc:95:4f:47:76:b8:ee:68:53:4a:78:37:65:4d:c2:13: fa:e2:d6:f1:be:c1:92:10:ed:92:17:9a:35:47:4f:d4:63:55: 30:69:bf:22:69:73:cc:84:76:4b:34:35:79:66:c4:28:24:92: a7:6c:2a:6d:52:67:84:e9:8d:be:23:cd:43:56:b4:6d:e5:3e: 49:62:f7:73:f3:9e:16:6c:29:0c:d0:33:ff:0c:9b:2e:a7:e5: 5f:f1:20:cb:7b:cb:1e:b2:58:13:b0:c5:b5:43:83:cc:cc:d6: 75:a4:c2:6e:f8:47:c6:da:ad:88:65:a3:cb:91:16:0f:83:8a: db:e6:c5:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg1NTMxMTAvBgNVBAUTKDkzMERERjQxMDEwNjkwM0JFQjk5MTlDOTlCREUwMTYz ODcwNjU1QUUwHhcNMjYwMzAxMjM1MTI0WhcNMjYwMzA4MjM1MTI0WjAYMRYwFAYD VQQDEw02OWE0ZDBmZC1kODdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA23RL3WmECy82uaGry0qRRRWW1MNQZKLrmB6V+1pWQL1jBHInjm62zdcGgMwp d4uM0D1M1tK02QB6YH7pNz0k5p/5MDQxTlTNJZFMsep3kjM6gxAFAQW22KzzQCwo 0D8/MsNt8JIMkqU+i0h69UbpSBJQFbQSJrnT9Gef9QMcLSZ1wiMusVhSahm2CSwq hsDf5m+gpNafZgLCN2l1L7KAgb/GZTvmIYu2Dnbn/xsTKTtUsiYlT+JQTBB5C4ud iVkH9m2JYpD+k2+a8Za9rDVcJ9IOBXeLmDGzFf6U37lrSDJJew2D1zY6ygdCXz9n 0wdHlPZCMq4P1s+T7pNjtPAPrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC15pubW VAQGpxHyXdp6a5lX3YbwMB8GA1UdIwQYMBaAFJMN30EBBpA765kZyZveAWOHBlWu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODU1My9BNTlCRkZFNEQy RUQxMUVGOERFRTUxMjBDNEY5QUUwMi9rdzNmUVFFR2tEdnJtUm5KbTk0Qlk0Y0dW YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2t3M2ZRUUVHa0R2cm1SbkptOTRCWTRjR1ZhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODU1My9BNTlCRkZFNEQyRUQxMUVGOERFRTUxMjBDNEY5QUUwMi9rdzNmUVFFR2tE dnJtUm5KbTk0Qlk0Y0dWYTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANcQmg5lSJcq3+DPZ9VxIOzRsKFTCUvM/6he32KmJP0iCsbIWhjb5RTKOJdY9 ukdCcOSAfzuFm5LqDb4QWHAqUhLNUW4vvEpuHvem+Ru6wCl+oix+7Upqq84QO86W /xQ8fw7lFq75zc+NYoszp0gFC8pEeHMqvAYUwdJC0rdXrEDclU9HdrjuaFNKeDdl TcIT+uLW8b7BkhDtkheaNUdP1GNVMGm/ImlzzIR2SzQ1eWbEKCSSp2wqbVJnhOmN viPNQ1a0beU+SWL3c/OeFmwpDNAz/wybLqflX/Egy3vLHrJYE7DFtUODzMzWdaTC bvhHxtqtiGWjy5EWD4OK2+bFrg== -----END CERTIFICATE-----Generated at Mon Mar 2 19:45:53 2026 by rpki-client