$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft File: kkcJmme2ONySU7AuJT2zvnRaqFw.mft (raw, json) Hash identifier: H5SVu6EMRMw/u+emiH/V6ThgZJtwY1Iy/D/yZ+5VC5g= Subject key identifier: B4:2F:31:8D:23:AD:99:DD:29:A1:A3:FA:64:AF:40:DA:50:43:2B:97 Authority key identifier: 92:47:09:9A:67:B6:38:DC:92:53:B0:2E:25:3D:B3:BE:74:5A:A8:5C Certificate issuer: /CN=A9143B87/serialNumber=9247099A67B638DC9253B02E253DB3BE745AA85C Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft Manifest number: 3D Signing time: Tue 03 Mar 2026 08:05:33 +0000 Manifest this update: Tue 03 Mar 2026 08:05:33 +0000 Manifest next update: Tue 10 Mar 2026 08:05:33 +0000 Files and hashes: 1: kkcJmme2ONySU7AuJT2zvnRaqFw.crl (hash: xH3uk72xeqCRGW8utXTUnAGNkOZbT2ElLyr4S9rvy9o=) 2: 22C0B5E8BD3811F0973F9752C4F9AE02.roa (hash: x6jH0YoExuPajTzRi1fsVZ3AaYHRKD72yw6/eXqhzss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.crl rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 08:05:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143B87, serialNumber=9247099A67B638DC9253B02E253DB3BE745AA85C Validity Not Before: Mar 3 08:05:33 2026 GMT Not After : Mar 10 08:05:33 2026 GMT Subject: CN=69a6964d-d8a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:85:9f:7a:5f:47:87:57:34:12:d6:b1:8c:ac: ee:29:90:c3:18:04:42:dc:2e:72:61:8a:7a:b5:21: 51:d3:05:0d:82:02:80:7b:3b:28:cf:a7:bd:42:4b: fa:bf:24:18:8d:2c:55:25:49:89:47:6e:ba:78:0d: 1d:17:ea:da:fa:02:4f:de:3a:f2:35:6d:3e:ea:8e: ec:10:4f:7d:c3:de:35:ca:85:f4:29:62:84:6a:d0: 08:fe:46:07:d8:78:8f:8e:32:30:ba:f0:54:d8:71: f9:d0:6c:e4:66:b9:cf:d2:c0:10:da:92:a6:9a:a7: 53:39:f9:47:b8:22:21:5e:3b:b4:e6:01:22:56:aa: 17:17:ad:84:d4:a4:7b:b0:21:67:05:04:c4:51:08: d2:b7:14:ef:9a:01:9a:c8:32:06:a1:83:ca:9b:c1: d2:0f:56:67:05:c3:ff:2a:3b:28:38:ed:1f:ad:36: 6e:cb:d2:03:c5:d0:98:16:78:4a:8a:20:44:cc:08: e2:fd:c2:e2:bc:14:d4:49:4e:65:3a:3a:09:31:25: c7:06:17:6c:c4:78:85:b4:45:3f:32:3d:63:49:db: e3:2e:de:c1:4c:dd:38:b3:bc:38:a3:5a:5d:12:b4: e0:83:60:f0:4a:4c:f9:d0:17:69:d6:a3:2a:01:fa: c6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:2F:31:8D:23:AD:99:DD:29:A1:A3:FA:64:AF:40:DA:50:43:2B:97 X509v3 Authority Key Identifier: keyid:92:47:09:9A:67:B6:38:DC:92:53:B0:2E:25:3D:B3:BE:74:5A:A8:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:c9:73:84:87:9c:2d:30:e5:a8:50:bb:96:11:4d:45:99:39: 46:3e:9a:7c:d4:ac:93:3b:9a:3a:4e:c4:9b:00:1a:45:01:e1: 9d:77:d1:64:71:73:83:41:cd:af:13:b6:27:f0:d4:39:14:8c: 98:96:dc:1e:d4:9a:c2:3b:60:87:ca:04:4e:63:f0:c7:c5:70: 36:d5:b0:a9:4c:4e:3f:1b:c4:8e:2e:34:61:7c:ec:98:d9:a9: b7:79:92:84:ac:a2:5a:3b:a0:51:12:3a:63:c8:a4:e5:87:da: 44:8a:1a:88:14:b4:a9:bb:e1:aa:b7:7f:ff:eb:87:e7:88:a6: b4:c3:80:7d:7b:16:8e:c5:56:6c:d0:3e:c3:a2:e3:4c:dc:5f: 7a:c0:db:7f:b0:6c:64:ff:61:ff:37:cc:62:e4:ce:7c:e1:bd: 86:aa:2f:d6:b6:e4:54:95:ee:8a:46:e1:6f:99:99:33:86:49: 09:77:33:e4:3b:4c:c9:61:a0:05:6f:15:4a:2c:42:4b:a9:83: 1f:69:1a:27:b4:33:15:01:85:05:e7:8e:6c:4e:fd:dc:c5:e8: fd:86:32:2c:5a:38:a1:d5:36:ba:12:cf:ec:65:fb:8d:ae:8e: cc:f0:6e:0c:1c:f1:2c:d8:d0:ab:27:c1:a1:2e:d6:dc:1f:34: e4:f8:de:14 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 M0I4NzExMC8GA1UEBRMoOTI0NzA5OUE2N0I2MzhEQzkyNTNCMDJFMjUzREIzQkU3 NDVBQTg1QzAeFw0yNjAzMDMwODA1MzNaFw0yNjAzMTAwODA1MzNaMBgxFjAUBgNV BAMTDTY5YTY5NjRkLWQ4YTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDThZ96X0eHVzQS1rGMrO4pkMMYBELcLnJhinq1IVHTBQ2CAoB7OyjPp71CS/q/ JBiNLFUlSYlHbrp4DR0X6tr6Ak/eOvI1bT7qjuwQT33D3jXKhfQpYoRq0Aj+RgfY eI+OMjC68FTYcfnQbORmuc/SwBDakqaap1M5+Ue4IiFeO7TmASJWqhcXrYTUpHuw IWcFBMRRCNK3FO+aAZrIMgahg8qbwdIPVmcFw/8qOyg47R+tNm7L0gPF0JgWeEqK IETMCOL9wuK8FNRJTmU6OgkxJccGF2zEeIW0RT8yPWNJ2+Mu3sFM3TizvDijWl0S tOCDYPBKTPnQF2nWoyoB+sYHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtC8xjSOt md0poaP6ZK9A2lBDK5cwHwYDVR0jBBgwFoAUkkcJmme2ONySU7AuJT2zvnRaqFww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQzQjg3LzIzRDE1MjhBQkNF MzExRjA5QzVGNzA0OEM0RjlBRTAyL2trY0ptbWUyT055U1U3QXVKVDJ6dm5SYXFG dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva2tjSm1tZTJPTnlTVTdBdUpUMnp2blJhcUZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQz Qjg3LzIzRDE1MjhBQkNFMzExRjA5QzVGNzA0OEM0RjlBRTAyL2trY0ptbWUyT055 U1U3QXVKVDJ6dm5SYXFGdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAgyXOEh5wtMOWoULuWEU1FmTlGPpp81KyTO5o6TsSbABpFAeGdd9FkcXODQc2v E7Yn8NQ5FIyYltwe1JrCO2CHygROY/DHxXA21bCpTE4/G8SOLjRhfOyY2am3eZKE rKJaO6BREjpjyKTlh9pEihqIFLSpu+Gqt3//64fniKa0w4B9exaOxVZs0D7DouNM 3F96wNt/sGxk/2H/N8xi5M584b2Gqi/WtuRUle6KRuFvmZkzhkkJdzPkO0zJYaAF bxVKLEJLqYMfaRontDMVAYUF545sTv3cxej9hjIsWjih1Ta6Es/sZfuNro7M8G4M HPEs2NCrJ8GhLtbcHzTk+N4U -----END CERTIFICATE-----Generated at Wed Mar 4 08:30:12 2026 by rpki-client