$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft File: K7fm9k6JPZEwSosliGA1DWdQVK0.mft (raw, json) Hash identifier: C2wWgGQko7CXYED3/lsPxGiwV32oIgw+98jZHOuk0AQ= Subject key identifier: F4:A8:0A:FF:70:DD:B5:C3:A5:08:67:29:4A:5A:2D:A5:B3:2D:86:BB Authority key identifier: 2B:B7:E6:F6:4E:89:3D:91:30:4A:8B:25:88:60:35:0D:67:50:54:AD Certificate issuer: /CN=A91F08D9/serialNumber=2BB7E6F64E893D91304A8B258860350D675054AD Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7fm9k6JPZEwSosliGA1DWdQVK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft Manifest number: 65 Signing time: Sun 01 Mar 2026 09:22:31 +0000 Manifest this update: Sun 01 Mar 2026 09:22:31 +0000 Manifest next update: Sun 08 Mar 2026 09:22:31 +0000 Files and hashes: 1: K7fm9k6JPZEwSosliGA1DWdQVK0.crl (hash: pGdG8/zIVIMj046VM63QS1BFwTsiVBXhqXLvjAFpBZQ=) 2: 87B1CF3484AB11F08EC73477C4F9AE02.roa (hash: wj3CysiZUbw6+gol3WXIUNIf6f/KPaKD87i7kYiUu3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.crl rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7fm9k6JPZEwSosliGA1DWdQVK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F08D9, serialNumber=2BB7E6F64E893D91304A8B258860350D675054AD Validity Not Before: Mar 1 09:22:31 2026 GMT Not After : Mar 8 09:22:31 2026 GMT Subject: CN=69a40557-67bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f2:75:6f:27:86:ff:c0:e8:de:5f:fa:3a:a2: 86:86:97:49:53:32:e4:40:93:67:b1:38:67:bf:16: e4:bd:eb:ff:82:a2:2f:5e:1d:f7:c0:2a:cd:3d:c1: 40:10:a3:30:66:d8:fb:ec:fc:ba:6d:a8:dc:f1:07: ea:f9:79:68:9b:be:c1:33:a7:5c:f4:19:4b:fc:e1: 3b:3a:89:5c:fa:8d:eb:af:48:4f:62:e7:7e:e2:1f: 0a:bf:9a:f8:bd:0e:2f:ac:ad:b4:a8:f3:1b:4a:f5: 82:74:9f:ca:01:74:e7:14:34:9c:38:c1:07:2f:a2: f5:0c:21:79:21:f1:44:4d:01:57:05:ed:4e:0d:d4: 7b:cf:2e:4b:59:81:dd:50:da:6b:b4:74:08:04:2c: d8:89:99:30:0a:2b:53:f6:37:dd:72:3d:db:e4:fd: 2b:b8:41:90:32:b1:5a:bc:6d:03:e3:79:be:69:62: a0:32:fb:8f:f0:af:82:80:d6:41:87:5b:c2:69:a4: de:38:8f:76:f0:1d:97:9a:0e:18:15:dc:39:69:dc: 81:79:87:d8:1d:13:c3:9c:a9:00:c8:44:01:59:75: 86:28:5d:34:23:78:e7:70:a4:c4:a8:89:3a:64:c8: 3a:04:6b:57:f4:04:fc:a3:01:b9:7e:f2:df:d6:1c: 65:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A8:0A:FF:70:DD:B5:C3:A5:08:67:29:4A:5A:2D:A5:B3:2D:86:BB X509v3 Authority Key Identifier: keyid:2B:B7:E6:F6:4E:89:3D:91:30:4A:8B:25:88:60:35:0D:67:50:54:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7fm9k6JPZEwSosliGA1DWdQVK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:bc:b7:1c:f4:3e:2e:75:b4:d4:9d:55:fd:c2:94:2f:d3:5f: b3:26:68:14:e0:0e:d0:ec:a5:4c:de:be:22:25:35:32:f9:31: 8d:60:fd:3c:c7:bb:de:e2:fe:3f:a0:27:25:1d:0d:6a:e7:74: 6e:c5:0b:59:7b:e0:89:1e:a7:ed:44:d3:08:55:43:75:b0:bb: ee:93:36:03:88:a9:3d:e8:16:b7:f5:24:4f:8c:d8:f9:a5:c7: ef:75:ae:c0:2a:d9:4c:52:9b:80:cb:7f:0d:66:eb:bc:05:52: 3b:bb:ad:d4:c0:e6:77:d5:97:ee:1c:8e:b3:4f:33:97:b3:d9: 0c:c9:8c:1c:7f:52:0a:97:9f:fc:4d:b0:54:bc:f0:61:05:82: 72:87:ad:8f:f7:88:8c:41:0e:c1:b6:fa:06:e5:a6:61:0d:4d: f7:a5:1d:47:06:54:05:19:78:cb:de:c1:65:96:c7:52:0a:41: 81:a0:ef:04:6f:af:ed:53:b9:40:c2:6c:15:fc:0e:a4:bd:cd: bd:b7:4f:cd:aa:e8:f8:a9:5f:0e:e4:98:fd:44:4a:ac:3c:49: 29:4c:b5:ab:44:cc:4d:95:f6:58:3b:40:a7:47:a8:91:fe:03: 9b:ec:29:7d:82:0b:3f:bd:c4:39:06:50:24:01:f6:15:84:be: 3c:0c:d4:6e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDhEOTExMC8GA1UEBRMoMkJCN0U2RjY0RTg5M0Q5MTMwNEE4QjI1ODg2MDM1MEQ2 NzUwNTRBRDAeFw0yNjAzMDEwOTIyMzFaFw0yNjAzMDgwOTIyMzFaMBgxFjAUBgNV BAMTDTY5YTQwNTU3LTY3YmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCM8nVvJ4b/wOjeX/o6ooaGl0lTMuRAk2exOGe/FuS96/+Coi9eHffAKs09wUAQ ozBm2Pvs/LptqNzxB+r5eWibvsEzp1z0GUv84Ts6iVz6jeuvSE9i537iHwq/mvi9 Di+srbSo8xtK9YJ0n8oBdOcUNJw4wQcvovUMIXkh8URNAVcF7U4N1HvPLktZgd1Q 2mu0dAgELNiJmTAKK1P2N91yPdvk/Su4QZAysVq8bQPjeb5pYqAy+4/wr4KA1kGH W8JppN44j3bwHZeaDhgV3Dlp3IF5h9gdE8OcqQDIRAFZdYYoXTQjeOdwpMSoiTpk yDoEa1f0BPyjAbl+8t/WHGW1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU9KgK/3Dd tcOlCGcpSlotpbMthrswHwYDVR0jBBgwFoAUK7fm9k6JPZEwSosliGA1DWdQVK0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwOEQ5LzBGRDZBQjUyODE3 MTExRjA5QjEwQUU1NkM0RjlBRTAyL0s3Zm05azZKUFpFd1Nvc2xpR0ExRFdkUVZL MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSzdmbTlrNkpQWkV3U29zbGlHQTFEV2RRVkswLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw OEQ5LzBGRDZBQjUyODE3MTExRjA5QjEwQUU1NkM0RjlBRTAyL0s3Zm05azZKUFpF d1Nvc2xpR0ExRFdkUVZLMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQATvLcc9D4udbTUnVX9wpQv01+zJmgU4A7Q7KVM3r4iJTUy+TGNYP08x7ve4v4/ oCclHQ1q53RuxQtZe+CJHqftRNMIVUN1sLvukzYDiKk96Ba39SRPjNj5pcfvda7A KtlMUpuAy38NZuu8BVI7u63UwOZ31ZfuHI6zTzOXs9kMyYwcf1IKl5/8TbBUvPBh BYJyh62P94iMQQ7BtvoG5aZhDU33pR1HBlQFGXjL3sFllsdSCkGBoO8Eb6/tU7lA wmwV/A6kvc29t0/Nquj4qV8O5Jj9REqsPEkpTLWrRMxNlfZYO0CnR6iR/gOb7Cl9 ggs/vcQ5BlAkAfYVhL48DNRu -----END CERTIFICATE-----Generated at Sun Mar 1 20:27:03 2026 by rpki-client