$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft File: kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft (raw, json) Hash identifier: ctmZmTjWZiMRORQvYUqYM5RgtUxy43VE9mQMoSC+MZI= Subject key identifier: 66:F1:7D:DB:C1:7E:95:E8:33:14:B2:87:61:40:88:FD:09:00:7E:08 Authority key identifier: 90:D9:9A:A8:D7:91:31:40:AF:AE:9E:E2:BF:EB:CD:A3:7B:A1:CD:28 Certificate issuer: /CN=A91C2875/serialNumber=90D99AA8D7913140AFAE9EE2BFEBCDA37BA1CD28 Certificate serial: 03FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft Manifest number: 03E9 Signing time: Sun 01 Mar 2026 23:30:21 +0000 Manifest this update: Sun 01 Mar 2026 23:30:17 +0000 Manifest next update: Sun 08 Mar 2026 23:30:17 +0000 Files and hashes: 1: kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl (hash: ZxQ3ZP9YtuFmNuiO/xrPCkQBLSoTPIMzrigEG9v/8xg=) 2: ABB1EE64B4ED11ECBA3D016FC4F9AE02.roa (hash: 9Mz8rV54HoMelrPRHK31KXuQst4w6EzFVX+5Qn5V6r8=) 3: 0E9CF77EBA6811EC8058A213C4F9AE02.roa (hash: tR+5MDUW4TOJVjv12UKHch7zSjULR/5+u2MVA1fbHas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:30:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1023 (0x3ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2875, serialNumber=90D99AA8D7913140AFAE9EE2BFEBCDA37BA1CD28 Validity Not Before: Mar 1 23:30:17 2026 GMT Not After : Mar 8 23:30:17 2026 GMT Subject: CN=69a4cc0c-29f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:80:c4:bf:c2:8a:ee:68:16:93:1f:e5:df:03: ac:3b:f0:16:16:d6:16:c0:14:fc:92:3b:bb:ba:8f: d3:35:7b:6b:0e:82:30:20:41:96:ce:35:1e:e4:ff: cd:1e:b5:a5:63:d1:27:54:06:b6:2e:b5:de:24:13: d1:71:5a:f3:01:c7:99:ab:50:66:22:3d:28:c8:b2: 0f:61:1c:fe:12:bd:d0:96:2d:a3:fa:d3:66:8d:65: 31:bb:9d:f7:9a:b6:2a:3d:5e:94:0e:2d:50:65:2d: a0:a2:24:99:7f:70:6e:dc:1b:b2:39:66:ff:21:8b: 0e:1c:03:95:de:0a:49:c8:2c:cb:9a:d0:bd:1d:db: 44:d3:5b:c7:e6:85:94:86:89:de:93:4e:9a:2c:b0: e7:38:68:c1:08:e7:3c:b2:81:9a:72:ec:74:62:4f: 51:35:09:2b:88:15:f3:a4:4d:6a:88:50:0e:f0:c9: 15:9b:0b:03:48:02:b1:fa:e9:9a:a6:b3:a6:16:35: d0:71:27:08:2f:29:b9:6c:1b:b2:ea:23:48:0f:35: 51:e2:40:39:79:99:7e:a0:8b:39:32:79:e1:bc:63: bb:42:87:02:c5:c1:bd:71:1c:39:7f:c4:ac:79:d0: 18:11:99:56:5e:c5:22:48:3c:5e:59:09:53:cb:81: 92:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F1:7D:DB:C1:7E:95:E8:33:14:B2:87:61:40:88:FD:09:00:7E:08 X509v3 Authority Key Identifier: keyid:90:D9:9A:A8:D7:91:31:40:AF:AE:9E:E2:BF:EB:CD:A3:7B:A1:CD:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:1c:91:fa:af:90:8c:95:fb:30:c0:52:45:2d:b1:08:ad:02: 34:d6:a6:cd:ad:1c:fb:38:f6:e9:b8:2e:bd:ad:d1:41:34:3c: a5:b9:3c:bd:a1:98:ec:6c:9b:af:2d:77:d7:4b:fe:d3:c6:30: 7a:e0:98:a3:7b:18:d0:ff:2d:7b:eb:4b:38:0f:45:f3:8a:eb: 6d:08:22:9a:57:6b:ba:56:47:21:ce:b2:9b:63:e4:44:4e:90: 7c:83:2e:b6:c7:74:ee:9a:e1:4c:63:02:c1:de:a0:2b:d7:f8: 8c:12:7e:1b:ed:ce:0c:dd:09:c0:59:5b:b8:33:8c:78:63:ed: 2d:8d:93:a0:45:fc:42:ce:f6:94:5e:ac:ae:3f:cb:54:a7:7e: 60:bb:f3:ae:8c:c9:5c:0e:87:01:7f:de:ef:b5:62:0a:ac:66: 54:cb:7e:d7:f5:d3:fa:3a:48:40:99:c2:24:31:80:98:a9:d7: 5e:c9:44:aa:9f:b2:09:e5:1b:af:e5:a8:b4:4d:3f:63:75:b1: a4:5f:5b:60:37:e0:54:98:51:28:17:d5:32:b4:f0:5e:d7:30: 3a:5f:11:db:ce:cf:82:0d:11:9a:fb:10:c9:4c:52:a6:6b:94: 15:99:dd:80:3d:27:16:ea:a5:65:f4:76:6d:2d:2b:70:97:ee: ef:f5:9b:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI4NzUxMTAvBgNVBAUTKDkwRDk5QUE4RDc5MTMxNDBBRkFFOUVFMkJGRUJDREEz N0JBMUNEMjgwHhcNMjYwMzAxMjMzMDE3WhcNMjYwMzA4MjMzMDE3WjAYMRYwFAYD VQQDEw02OWE0Y2MwYy0yOWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIDEv8KK7mgWkx/l3wOsO/AWFtYWwBT8kju7uo/TNXtrDoIwIEGWzjUe5P/N HrWlY9EnVAa2LrXeJBPRcVrzAceZq1BmIj0oyLIPYRz+Er3Qli2j+tNmjWUxu533 mrYqPV6UDi1QZS2goiSZf3Bu3BuyOWb/IYsOHAOV3gpJyCzLmtC9HdtE01vH5oWU honek06aLLDnOGjBCOc8soGacux0Yk9RNQkriBXzpE1qiFAO8MkVmwsDSAKx+uma prOmFjXQcScILym5bBuy6iNIDzVR4kA5eZl+oIs5MnnhvGO7QocCxcG9cRw5f8Ss edAYEZlWXsUiSDxeWQlTy4GSDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGbxfdvB fpXoMxSyh2FAiP0JAH4IMB8GA1UdIwQYMBaAFJDZmqjXkTFAr66e4r/rzaN7oc0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjg3NS9DMjVERTBFNkI0 RTgxMUVDOTgwQzQ0NzFDNEY5QUUwMi9rTm1hcU5lUk1VQ3ZycDdpdi12Tm8zdWh6 U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tObWFxTmVSTVVDdnJwN2l2LXZObzN1aHpTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Mjg3NS9DMjVERTBFNkI0RTgxMUVDOTgwQzQ0NzFDNEY5QUUwMi9rTm1hcU5lUk1V Q3ZycDdpdi12Tm8zdWh6U2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARxyR+q+QjJX7MMBSRS2xCK0CNNamza0c+zj26bguva3RQTQ8pbk8vaGY7Gyb ry1310v+08YweuCYo3sY0P8te+tLOA9F84rrbQgimldrulZHIc6ym2PkRE6QfIMu tsd07prhTGMCwd6gK9f4jBJ+G+3ODN0JwFlbuDOMeGPtLY2ToEX8Qs72lF6srj/L VKd+YLvzrozJXA6HAX/e77ViCqxmVMt+1/XT+jpIQJnCJDGAmKnXXslEqp+yCeUb r+WotE0/Y3WxpF9bYDfgVJhRKBfVMrTwXtcwOl8R287Pgg0RmvsQyUxSpmuUFZnd gD0nFuqlZfR2bS0rcJfu7/WboQ== -----END CERTIFICATE-----Generated at Mon Mar 2 16:33:32 2026 by rpki-client