$ rpki-client -vvf rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft File: KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft (raw, json) Hash identifier: 9lKeTSrM1QrYSeG9DCt1LsLSvA/vaRUjrN57AHahVUY= Subject key identifier: D6:82:FA:94:B6:D6:50:B7:4E:93:F2:D2:74:3B:30:F1:C6:DC:B0:14 Authority key identifier: 28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 Certificate issuer: /CN=A91E868C/serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Certificate serial: 0F30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft Manifest number: 0EE0 Signing time: Sat 28 Feb 2026 17:49:59 +0000 Manifest this update: Sat 28 Feb 2026 17:49:59 +0000 Manifest next update: Sat 07 Mar 2026 17:49:59 +0000 Files and hashes: 1: KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl (hash: 4W9viw8rEvqsE40lNZPvkcDLyTfaS7hw0GxTld9uxn0=) 2: DED77BB2FA2F11EF98728875C4F9AE02.roa (hash: uul2CdaEoquPtSKMLPmrjkbQbRp1WUkF6rtkLx9zg64=) 3: 41A09C683D8211EEA0E4DD46C4F9AE02.roa (hash: hPUFimj9BE3+BwwQ7RyTBe4Kb4UDlyO5v1n1M99BRDE=) 4: 40BA3F5C3D8211EEA0E4DD46C4F9AE02.roa (hash: DsQ8k2r18shy7gg+hUBL2SO8HUEFyNSKHtxB+WEbNG4=) 5: 5915642864AB11EEBFD54F2EC4F9AE02.roa (hash: wbUo+m2N2pVjNOlqoJ9Ve/RDUUkR0+GFezmtrgOfh+0=) 6: 433917A83D8211EEA0E4DD46C4F9AE02.roa (hash: h1piDIbFbu2D+AHr+FNeuVa8V0LAf8dUKVxZfkw96aI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 17:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3888 (0xf30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E868C, serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Validity Not Before: Feb 28 17:49:59 2026 GMT Not After : Mar 7 17:49:59 2026 GMT Subject: CN=69a32ac7-5257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c7:31:6e:af:da:c1:3c:e4:ec:35:10:d1:af: 57:d9:97:bf:b2:50:ea:c1:b6:f7:40:7e:5f:f1:06: 3b:0a:20:ce:36:06:a1:7c:f6:ef:16:38:0e:88:a6: 81:a8:6b:72:48:96:eb:cd:95:a5:11:cc:16:f3:40: 70:37:6b:f8:64:aa:af:21:a3:bb:24:8c:a1:b9:a2: a2:7c:2d:f1:58:dd:02:5c:bf:13:8a:21:52:2f:8e: a3:7f:9e:6c:71:7c:91:72:d2:57:d1:76:a8:52:c5: 2d:69:c3:c0:bb:34:2b:76:c4:ed:d1:5d:d9:87:bb: 44:55:e4:5d:4e:38:90:aa:03:93:5f:16:3b:1a:7c: 1d:64:75:06:2d:66:2b:62:5e:dc:71:56:ce:3b:3f: d4:12:1b:28:04:67:32:96:47:30:fd:cd:cf:68:44: 64:66:9a:6c:25:54:fa:7c:db:82:f2:7e:6f:44:ed: de:79:30:f5:38:56:c4:86:0c:dd:a0:b0:cd:d3:b7: 26:95:e1:0c:5a:1a:a6:49:da:62:bb:3a:e9:43:48: b6:0d:18:fa:b3:4b:cc:9d:a9:78:8c:7d:3c:6c:26: 91:98:8a:01:4a:c2:e5:b1:26:a2:93:bb:ec:04:8a: 64:bd:cd:b9:1d:ce:58:46:19:4c:8f:21:7c:69:46: 41:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:82:FA:94:B6:D6:50:B7:4E:93:F2:D2:74:3B:30:F1:C6:DC:B0:14 X509v3 Authority Key Identifier: keyid:28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:cc:30:51:66:cc:94:fa:65:81:49:da:20:2d:05:b6:4f:95: 66:42:dd:be:b5:60:1e:0f:b6:23:0f:b4:79:d6:76:71:fb:76: 3b:80:0f:3f:27:7f:29:ae:55:0f:69:db:6c:0e:69:eb:89:34: 73:da:b2:ce:49:86:e6:25:c9:77:73:f4:94:28:80:4f:fb:2b: be:d5:3e:8e:93:56:ce:45:43:00:02:0a:f4:9f:af:7e:df:c5: 76:42:b5:3b:01:70:a0:3d:f1:bb:76:17:a7:0c:fa:bc:36:4f: 68:d6:e8:66:de:1d:ae:9f:d5:6e:da:1b:dc:cc:a6:42:4d:73: 3e:fa:bf:61:38:e0:ed:a5:a4:08:c2:e6:cf:e0:e7:eb:1d:49: 33:87:e6:fc:91:e0:32:97:72:f4:08:30:d4:15:cb:3c:f5:63: 39:34:f2:c4:cc:fc:3f:98:10:6f:2e:0b:37:de:e8:54:b3:1f: 1d:fb:0a:80:d6:19:c7:95:a2:e8:38:9e:b6:9e:d8:22:76:98: f7:07:c5:76:ef:55:a7:8a:d9:09:25:12:27:05:3d:01:f4:ed: 51:fd:57:ca:1f:24:08:31:8b:dd:1e:0b:da:56:05:70:ad:27: 91:70:93:f0:c5:88:ef:32:d1:f5:a2:10:05:dc:9d:98:82:86: 33:60:fa:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg2OEMxMTAvBgNVBAUTKDI4RTY3MEMyRTM3MDEyRjA1QzYzQkI1NjZFMjAzQzUx REM0NUUyQjIwHhcNMjYwMjI4MTc0OTU5WhcNMjYwMzA3MTc0OTU5WjAYMRYwFAYD VQQDDA02OWEzMmFjNy01MjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzscxbq/awTzk7DUQ0a9X2Ze/slDqwbb3QH5f8QY7CiDONgahfPbvFjgOiKaB qGtySJbrzZWlEcwW80BwN2v4ZKqvIaO7JIyhuaKifC3xWN0CXL8TiiFSL46jf55s cXyRctJX0XaoUsUtacPAuzQrdsTt0V3Zh7tEVeRdTjiQqgOTXxY7GnwdZHUGLWYr Yl7ccVbOOz/UEhsoBGcylkcw/c3PaERkZppsJVT6fNuC8n5vRO3eeTD1OFbEhgzd oLDN07cmleEMWhqmSdpiuzrpQ0i2DRj6s0vMnal4jH08bCaRmIoBSsLlsSaik7vs BIpkvc25Hc5YRhlMjyF8aUZB9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNaC+pS2 1lC3TpPy0nQ7MPHG3LAUMB8GA1UdIwQYMBaAFCjmcMLjcBLwXGO7Vm4gPFHcReKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODY4Qy8zRkI5MzM2OEE5 REIxMUU5ODQyODUyODZDNEY5QUUwMi9LT1p3d3VOd0V2QmNZN3RXYmlBOFVkeEY0 ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tPWnd3dU53RXZCY1k3dFdiaUE4VWR4RjRySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODY4Qy8zRkI5MzM2OEE5REIxMUU5ODQyODUyODZDNEY5QUUwMi9LT1p3d3VOd0V2 QmNZN3RXYmlBOFVkeEY0ckkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF8wwUWbMlPplgUnaIC0Ftk+VZkLdvrVgHg+2Iw+0edZ2cft2O4APPyd/Ka5V D2nbbA5p64k0c9qyzkmG5iXJd3P0lCiAT/srvtU+jpNWzkVDAAIK9J+vft/FdkK1 OwFwoD3xu3YXpwz6vDZPaNboZt4drp/Vbtob3MymQk1zPvq/YTjg7aWkCMLmz+Dn 6x1JM4fm/JHgMpdy9Agw1BXLPPVjOTTyxMz8P5gQby4LN97oVLMfHfsKgNYZx5Wi 6Dietp7YInaY9wfFdu9Vp4rZCSUSJwU9AfTtUf1Xyh8kCDGL3R4L2lYFcK0nkXCT 8MWI7zLR9aIQBdydmIKGM2D6lQ== -----END CERTIFICATE-----Generated at Sun Mar 1 21:07:28 2026 by rpki-client