$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.mft File: kZ-oGbL_8UVSGvZkA1J45-eRSkk.mft (raw, json) Hash identifier: 4+iKhguH6q2rqh0kFuLVoUwihHKRNrS6DW1YwZXwk+A= Subject key identifier: 99:2C:E8:48:9E:60:E8:01:35:DE:76:5D:09:15:23:0D:A6:BA:D7:A0 Authority key identifier: 91:9F:A8:19:B2:FF:F1:45:52:1A:F6:64:03:52:78:E7:E7:91:4A:49 Certificate issuer: /CN=A91BB6E3/serialNumber=919FA819B2FFF145521AF664035278E7E7914A49 Certificate serial: 0261 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kZ-oGbL_8UVSGvZkA1J45-eRSkk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.mft Manifest number: 0245 Signing time: Sun 01 Mar 2026 23:49:54 +0000 Manifest this update: Sun 01 Mar 2026 23:49:50 +0000 Manifest next update: Sun 08 Mar 2026 23:49:50 +0000 Files and hashes: 1: kZ-oGbL_8UVSGvZkA1J45-eRSkk.crl (hash: /bAGftV2yyVNQT/AbBAJsn5aeQEfnv4UE+5eH2Qj6gM=) 2: F96174ECC27D11EDB8226F2DC4F9AE02.roa (hash: G5wyunrhNPZHL5dnU3YCTVm9J7AtwfPqbQe5Aa4DplE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.crl rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kZ-oGbL_8UVSGvZkA1J45-eRSkk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:49:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 609 (0x261) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB6E3, serialNumber=919FA819B2FFF145521AF664035278E7E7914A49 Validity Not Before: Mar 1 23:49:50 2026 GMT Not After : Mar 8 23:49:50 2026 GMT Subject: CN=69a4d0a1-184e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f6:1f:14:59:f7:46:68:44:7e:e0:76:b6:15: 32:9d:79:15:fb:17:13:7f:3a:88:b5:88:d3:4f:63: cf:14:55:ba:d8:96:d4:14:22:f5:bc:14:1c:a6:e0: 66:36:a5:0a:db:3e:9d:a1:3c:c2:fe:05:8b:bc:86: 1f:5e:53:f6:1f:e3:a0:59:47:07:4a:d9:dd:24:55: 7d:2a:f7:eb:dc:f4:bf:f2:15:da:39:31:6c:c2:a7: 2c:59:23:39:de:12:07:c7:d9:4e:7e:5f:4a:71:7e: 72:8e:52:77:a3:19:2b:97:10:ea:bd:77:30:04:cb: b1:b2:e3:eb:d2:38:c7:3c:c7:ef:9c:f5:e5:39:6c: c7:b0:c0:69:b1:50:c7:4c:c4:a2:03:6a:36:d3:1e: 07:11:a7:0b:17:9d:67:17:aa:ad:ef:b5:2d:78:50: 24:07:9a:7a:0f:e6:83:b6:2f:b6:e7:ba:97:e8:dd: 6e:0a:9c:73:e3:e6:87:8e:3c:a4:b1:1b:00:c7:64: cc:37:9c:20:0a:00:61:38:b3:1a:bf:bc:09:29:70: 89:f6:53:9d:f8:d0:0e:a2:05:e6:40:00:2a:bc:0a: c0:e4:32:93:3e:dd:c3:06:06:e9:6f:01:74:3e:ea: af:81:fb:b4:4e:04:a1:cf:c0:54:f9:d3:96:35:a6: 9d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2C:E8:48:9E:60:E8:01:35:DE:76:5D:09:15:23:0D:A6:BA:D7:A0 X509v3 Authority Key Identifier: keyid:91:9F:A8:19:B2:FF:F1:45:52:1A:F6:64:03:52:78:E7:E7:91:4A:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kZ-oGbL_8UVSGvZkA1J45-eRSkk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:28:6e:df:c7:d7:01:4a:2b:5a:a3:e3:e2:18:ea:b1:89:a7: d8:af:c4:b3:c8:16:7e:d5:6b:0b:81:36:08:d5:be:69:67:24: a1:d3:09:e8:df:83:64:05:a6:8d:87:03:9f:fa:1d:55:82:c7: 09:e6:5d:fc:66:2e:35:b3:b1:2b:cf:a9:14:d6:06:12:ca:06: 86:0b:5e:f9:fa:8e:a9:b3:53:0c:4d:a4:f9:1a:da:fe:3c:0d: 9f:70:69:95:8b:5d:c1:ee:d0:57:65:e8:05:1b:5a:23:54:25: 7d:96:1d:d1:46:e0:89:ee:d0:2d:0c:38:68:97:21:8f:ef:bd: cd:97:a7:38:cc:0f:da:0d:6f:2a:a0:f0:3b:d8:6c:e9:ca:74: 4f:77:f9:c5:0c:1e:d2:57:22:30:fa:fa:12:9c:2b:9e:7e:0e: e8:a4:90:36:3e:6e:71:40:0e:70:25:c7:15:47:8a:99:f9:52: 64:90:80:49:31:2c:7c:58:98:b9:cd:eb:db:a3:80:fc:60:02: 17:15:da:45:93:4c:ec:e1:95:f0:97:58:58:c0:18:ed:af:0b: 78:72:ad:2d:b2:7d:fb:3f:44:cd:ab:d3:7d:1b:1a:86:83:24: 48:6c:3c:c0:77:cd:5e:4d:7b:13:a7:02:a1:4f:1e:59:3a:b4: bb:9f:da:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI2RTMxMTAvBgNVBAUTKDkxOUZBODE5QjJGRkYxNDU1MjFBRjY2NDAzNTI3OEU3 RTc5MTRBNDkwHhcNMjYwMzAxMjM0OTUwWhcNMjYwMzA4MjM0OTUwWjAYMRYwFAYD VQQDEw02OWE0ZDBhMS0xODRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/YfFFn3RmhEfuB2thUynXkV+xcTfzqItYjTT2PPFFW62JbUFCL1vBQcpuBm NqUK2z6doTzC/gWLvIYfXlP2H+OgWUcHStndJFV9Kvfr3PS/8hXaOTFswqcsWSM5 3hIHx9lOfl9KcX5yjlJ3oxkrlxDqvXcwBMuxsuPr0jjHPMfvnPXlOWzHsMBpsVDH TMSiA2o20x4HEacLF51nF6qt77UteFAkB5p6D+aDti+257qX6N1uCpxz4+aHjjyk sRsAx2TMN5wgCgBhOLMav7wJKXCJ9lOd+NAOogXmQAAqvArA5DKTPt3DBgbpbwF0 Puqvgfu0TgShz8BU+dOWNaad2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJks6Eie YOgBNd52XQkVIw2mutegMB8GA1UdIwQYMBaAFJGfqBmy//FFUhr2ZANSeOfnkUpJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjZFMy9BMjJDODE0Q0My NzUxMUVEQjNCNEQ3MjhDNEY5QUUwMi9rWi1vR2JMXzhVVlNHdlprQTFKNDUtZVJT a2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2taLW9HYkxfOFVWU0d2WmtBMUo0NS1lUlNray5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjZFMy9BMjJDODE0Q0MyNzUxMUVEQjNCNEQ3MjhDNEY5QUUwMi9rWi1vR2JMXzhV VlNHdlprQTFKNDUtZVJTa2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEyhu38fXAUorWqPj4hjqsYmn2K/Es8gWftVrC4E2CNW+aWckodMJ6N+DZAWm jYcDn/odVYLHCeZd/GYuNbOxK8+pFNYGEsoGhgte+fqOqbNTDE2k+Rra/jwNn3Bp lYtdwe7QV2XoBRtaI1QlfZYd0Ubgie7QLQw4aJchj++9zZenOMwP2g1vKqDwO9hs 6cp0T3f5xQwe0lciMPr6Epwrnn4O6KSQNj5ucUAOcCXHFUeKmflSZJCASTEsfFiY uc3r26OA/GACFxXaRZNM7OGV8JdYWMAY7a8LeHKtLbJ9+z9EzavTfRsahoMkSGw8 wHfNXk17E6cCoU8eWTq0u5/aPQ== -----END CERTIFICATE-----Generated at Mon Mar 2 08:19:33 2026 by rpki-client