$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft File: krTCppKUC1SOY1BEM1qYW-4ivaE.mft (raw, json) Hash identifier: uaNHkVwAJT9W7goMUs4bS/XQQDwHM0MExc9GmQlNFJ4= Subject key identifier: 95:71:32:53:8A:5D:BE:89:FB:14:70:85:3F:10:AB:40:40:4A:00:66 Authority key identifier: 92:B4:C2:A6:92:94:0B:54:8E:63:50:44:33:5A:98:5B:EE:22:BD:A1 Certificate issuer: /CN=A91CFDD0/serialNumber=92B4C2A692940B548E635044335A985BEE22BDA1 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft Manifest number: 5C Signing time: Sun 01 Mar 2026 09:28:32 +0000 Manifest this update: Sun 01 Mar 2026 09:28:31 +0000 Manifest next update: Sun 08 Mar 2026 09:28:31 +0000 Files and hashes: 1: krTCppKUC1SOY1BEM1qYW-4ivaE.crl (hash: Z0xv128/VSzAYoVWo5KAkF0U8mzI2eWmrQfm6KC30qc=) 2: 0D06C406887511F094C09643C4F9AE02.roa (hash: fWHn2iDFgqEBh1OqsVAxNpoFUrx8d2vNfDWyJG2ndTU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.crl rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:28:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFDD0, serialNumber=92B4C2A692940B548E635044335A985BEE22BDA1 Validity Not Before: Mar 1 09:28:31 2026 GMT Not After : Mar 8 09:28:31 2026 GMT Subject: CN=69a406c0-290b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ef:28:60:1f:47:51:73:18:7a:cd:e1:0c:52: ba:29:26:3f:0b:36:4f:85:65:83:43:57:72:95:29: ff:c2:2a:f2:34:c6:f7:f7:59:aa:7b:c1:a9:ff:b8: 1e:a3:08:ee:82:a0:c4:b2:be:d0:de:2b:aa:7e:34: 8d:05:64:12:eb:86:24:26:3f:37:ec:0c:24:d3:2a: df:e1:73:62:c7:be:ef:1f:16:68:69:a8:8b:74:e9: 61:01:23:0f:09:21:66:7d:c1:06:b8:67:8f:a6:d8: 86:39:25:c8:5b:90:b6:58:bb:2b:ca:3a:01:b8:53: c7:c9:f5:66:ce:6e:01:f6:d6:fd:06:61:91:c4:6c: 1e:79:64:64:21:71:3c:95:bf:61:71:2e:44:39:e6: b4:14:e6:46:c2:81:00:d7:93:be:42:d5:ab:2d:fd: ae:40:38:14:d9:79:58:b9:5c:67:4e:d7:ff:7b:3e: 7a:93:dd:ff:01:00:7c:e4:6b:20:de:15:ea:82:ba: ac:32:56:ce:9a:a1:ca:45:9e:14:d7:da:6f:4c:ba: c1:30:4e:34:c7:71:4a:7e:8d:a2:d5:96:10:b6:47: 61:9a:8f:4e:de:56:08:dc:d6:20:ca:84:99:70:f6: 80:90:a0:1c:86:51:08:4e:6d:8b:3d:f4:60:cd:f2: 24:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:71:32:53:8A:5D:BE:89:FB:14:70:85:3F:10:AB:40:40:4A:00:66 X509v3 Authority Key Identifier: keyid:92:B4:C2:A6:92:94:0B:54:8E:63:50:44:33:5A:98:5B:EE:22:BD:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:a1:48:b4:de:fd:35:74:df:c3:67:17:a9:1e:6b:94:5d:52: 76:4b:56:58:d6:0e:c8:44:99:0c:68:72:e5:8e:01:a6:64:4e: bf:ac:0d:8a:d1:15:a4:42:11:4e:37:4d:c4:61:d5:64:1c:a6: 88:6e:00:e6:a8:a2:99:cb:70:1a:cd:b5:62:e1:55:08:70:65: 31:57:86:98:0d:a6:1e:d9:47:56:ee:5e:55:15:79:d2:80:31: 6f:6b:ea:b9:15:d5:78:bc:92:7c:b9:2f:b4:d7:50:f8:be:45: e0:90:cb:3d:63:d0:b3:b5:ac:25:35:ee:45:30:8a:f9:8c:39: 09:47:61:a5:6b:12:3d:0b:54:84:0c:71:2e:a6:31:6d:74:43: f4:76:b5:7b:73:b4:f9:fa:dc:8f:60:44:3c:7f:d0:06:c4:40: 5c:2a:75:58:48:d7:90:64:f3:85:e4:25:a1:c5:2a:00:f2:6a: 54:dc:fa:20:a8:7b:c5:d1:d6:87:1d:f1:38:3d:5b:f8:c7:37: bc:6e:a9:53:28:a6:e5:95:90:92:89:1f:7d:07:66:8c:ef:c6: a3:1a:0a:54:18:04:b3:43:86:b1:9f:b9:ce:17:06:ce:42:63: 77:33:0a:7f:9e:f4:4d:83:7e:86:aa:b7:59:8b:0a:e4:25:41: d7:41:8d:c1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkREMDExMC8GA1UEBRMoOTJCNEMyQTY5Mjk0MEI1NDhFNjM1MDQ0MzM1QTk4NUJF RTIyQkRBMTAeFw0yNjAzMDEwOTI4MzFaFw0yNjAzMDgwOTI4MzFaMBgxFjAUBgNV BAMTDTY5YTQwNmMwLTI5MGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDC7yhgH0dRcxh6zeEMUropJj8LNk+FZYNDV3KVKf/CKvI0xvf3Wap7wan/uB6j CO6CoMSyvtDeK6p+NI0FZBLrhiQmPzfsDCTTKt/hc2LHvu8fFmhpqIt06WEBIw8J IWZ9wQa4Z4+m2IY5JchbkLZYuyvKOgG4U8fJ9WbObgH21v0GYZHEbB55ZGQhcTyV v2FxLkQ55rQU5kbCgQDXk75C1ast/a5AOBTZeVi5XGdO1/97PnqT3f8BAHzkayDe FeqCuqwyVs6aocpFnhTX2m9MusEwTjTHcUp+jaLVlhC2R2Gaj07eVgjc1iDKhJlw 9oCQoByGUQhObYs99GDN8iSPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUlXEyU4pd von7FHCFPxCrQEBKAGYwHwYDVR0jBBgwFoAUkrTCppKUC1SOY1BEM1qYW+4ivaEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGREQwLzlFMEVFODQ0ODg3 NDExRjA4QkQ3M0IzRkM0RjlBRTAyL2tyVENwcEtVQzFTT1kxQkVNMXFZVy00aXZh RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva3JUQ3BwS1VDMVNPWTFCRU0xcVlXLTRpdmFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG REQwLzlFMEVFODQ0ODg3NDExRjA4QkQ3M0IzRkM0RjlBRTAyL2tyVENwcEtVQzFT T1kxQkVNMXFZVy00aXZhRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB5oUi03v01dN/DZxepHmuUXVJ2S1ZY1g7IRJkMaHLljgGmZE6/rA2K0RWkQhFO N03EYdVkHKaIbgDmqKKZy3AazbVi4VUIcGUxV4aYDaYe2UdW7l5VFXnSgDFva+q5 FdV4vJJ8uS+011D4vkXgkMs9Y9CztawlNe5FMIr5jDkJR2GlaxI9C1SEDHEupjFt dEP0drV7c7T5+tyPYEQ8f9AGxEBcKnVYSNeQZPOF5CWhxSoA8mpU3PogqHvF0daH HfE4PVv4xze8bqlTKKbllZCSiR99B2aM78ajGgpUGASzQ4axn7nOFwbOQmN3Mwp/ nvRNg36GqrdZiwrkJUHXQY3B -----END CERTIFICATE-----Generated at Mon Mar 2 00:11:07 2026 by rpki-client