$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft File: kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft (raw, json) Hash identifier: Pc6DGekMo8SFdTudYDDPpQWuqBCHtd3NwRCmI8x3Djo= Subject key identifier: 24:CE:B4:B3:45:FC:00:45:4A:6B:A8:4B:00:E9:F9:73:BF:C2:67:C2 Authority key identifier: 90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 Certificate issuer: /CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Certificate serial: 29B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft Manifest number: 28BE Signing time: Fri 06 Mar 2026 15:33:12 +0000 Manifest this update: Fri 06 Mar 2026 15:33:12 +0000 Manifest next update: Fri 13 Mar 2026 15:33:12 +0000 Files and hashes: 1: kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl (hash: CM/9dvUK8HJloqSHGZ8OF4T0p++j9T8RvfjTrQ6qics=) 2: 4971496EAE1B11EF8FFE0422C4F9AE02.roa (hash: OCIUxyS/b5tLlrfDuZU5t1QbT6abuQsHqTZkHSU5t1M=) 3: 28E35E4898F211ED9FB5D80DC4F9AE02.roa (hash: b0UCq+eUPG0Zw3G9HvUdvsx8LonrZenua0MeaBXzxdI=) 4: CCF0C1920EBA11ECB2C2867AC4F9AE02.roa (hash: LFWn/rSoBv/3fh71RRvkZddKgegGusau/MxjXYH21iI=) 5: C6FF76A0000C11F1BBD3B1413E6F56BC.roa (hash: Vmx4U8sYtrtvs8ITU+lcZl+6PgMDKzh+1nwm+4PN1nI=) 6: 45163F62D61E11EEB0DF364BC4F9AE02.roa (hash: atdo0Z3LcSDAabSbX7a5f2sIh9gx5eXq1BHcxnLbdTg=) 7: BD3FF814A49811EEAD789D2AC4F9AE02.roa (hash: Q8fywLVcYI72bpER/jVkoIMpEUoDOPdG+CfgHKA2VuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 15:33:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10675 (0x29b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150F66, serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7 Validity Not Before: Mar 6 15:33:12 2026 GMT Not After : Mar 13 15:33:12 2026 GMT Subject: CN=69aaf3b8-a4b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b3:0f:e0:df:e5:70:e7:5d:af:35:60:2e:f0: d1:84:d2:43:09:68:76:3d:43:ba:06:02:fd:92:91: d8:16:c2:dd:cc:d4:38:09:43:98:91:3a:15:50:24: b2:c6:63:fe:21:e5:7c:55:d3:dd:76:60:b6:ee:32: 4d:14:ac:ae:cc:19:0a:09:df:b5:33:4c:bb:f4:73: 13:9f:fb:96:07:ea:4c:92:ff:74:5e:48:b0:e6:bc: 83:62:a8:fa:65:d1:0b:07:02:25:73:bf:73:62:30: 20:b5:25:66:ee:53:39:f8:c7:c0:77:f4:d5:87:74: fc:7e:4f:5f:07:c2:18:98:04:a7:e1:12:28:ac:b9: 44:ba:bf:c9:9a:3c:d0:7a:4f:55:3f:ab:d8:55:9e: 95:d4:3b:e5:ee:2c:74:a3:1e:3f:23:14:5d:28:6e: 90:28:b4:1c:14:b2:34:d4:6c:78:17:69:28:a1:36: 55:26:8a:43:8c:03:08:50:af:09:01:b3:d8:2f:30: a6:bd:e3:b7:e1:0f:cc:04:33:2b:d6:a3:07:c9:85: 42:dd:88:f3:c2:91:82:b1:f3:4a:86:a9:f5:4c:91: 11:a9:e8:07:85:f3:e9:a0:c0:4c:b4:23:25:a7:62: 5b:e7:2d:75:4b:9b:a1:ed:09:3b:46:24:4f:72:6f: fb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CE:B4:B3:45:FC:00:45:4A:6B:A8:4B:00:E9:F9:73:BF:C2:67:C2 X509v3 Authority Key Identifier: keyid:90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:6b:e4:1e:5e:a5:95:a1:21:a8:ae:7a:c7:16:29:22:16:98: 53:d7:77:c2:92:03:41:00:e8:55:01:6e:b9:ba:dc:d2:33:a2: fb:49:75:38:b6:e2:33:43:8e:52:56:f1:a0:b1:eb:f5:50:d9: dd:02:f7:ca:f0:cf:75:26:36:97:9d:a5:40:9c:75:8d:6c:3d: 35:01:83:84:ff:b9:1a:cd:bb:05:27:6e:6c:56:9c:f0:25:e5: ff:06:a7:74:3c:c4:cb:f8:92:d8:1d:bb:6e:e0:7e:8a:ef:14: 9b:7a:37:43:01:3c:47:30:89:d4:d1:33:30:8d:f7:38:7f:4c: 03:85:6c:ba:62:e9:5d:91:fa:80:81:e6:2b:b5:02:e5:46:a2: b2:48:c9:cb:b5:45:19:73:2f:d1:bf:03:c0:eb:96:33:67:01: 46:b7:ec:4b:58:a9:1b:07:b3:9d:00:a2:4e:64:af:18:50:b6: a3:2f:ad:45:b8:cb:32:b3:0f:97:29:d5:73:28:55:03:5a:bf: 02:f4:7a:12:36:cf:8f:de:c1:2f:8d:70:6b:78:09:90:07:0c: ef:30:91:9d:74:a2:d3:60:b5:44:b5:cc:52:39:c1:ae:18:51: 46:df:d1:83:b1:28:93:60:c4:20:d5:e3:38:b9:c3:ce:2a:10: 1b:ca:c2:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBGNjYxMTAvBgNVBAUTKDkwMDlFNzQxOTZENDhCMDM5NjRGMUZDNTZDRkU0NDZF QzUwNDhDRjcwHhcNMjYwMzA2MTUzMzEyWhcNMjYwMzEzMTUzMzEyWjAYMRYwFAYD VQQDEw02OWFhZjNiOC1hNGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7MP4N/lcOddrzVgLvDRhNJDCWh2PUO6BgL9kpHYFsLdzNQ4CUOYkToVUCSy xmP+IeV8VdPddmC27jJNFKyuzBkKCd+1M0y79HMTn/uWB+pMkv90Xkiw5ryDYqj6 ZdELBwIlc79zYjAgtSVm7lM5+MfAd/TVh3T8fk9fB8IYmASn4RIorLlEur/JmjzQ ek9VP6vYVZ6V1Dvl7ix0ox4/IxRdKG6QKLQcFLI01Gx4F2kooTZVJopDjAMIUK8J AbPYLzCmveO34Q/MBDMr1qMHyYVC3YjzwpGCsfNKhqn1TJERqegHhfPpoMBMtCMl p2Jb5y11S5uh7Qk7RiRPcm/7UQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCTOtLNF /ABFSmuoSwDp+XO/wmfCMB8GA1UdIwQYMBaAFJAJ50GW1IsDlk8fxWz+RG7FBIz3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEY2Ni9CQzFEQzFGNkMx NzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3T1dUeF9GYlA1RWJzVUVq UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tBbm5RWmJVaXdPV1R4X0ZiUDVFYnNVRWpQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEY2Ni9CQzFEQzFGNkMxNzUxMUU0QTJDN0I3NENDNEY5QUUwMi9rQW5uUVpiVWl3 T1dUeF9GYlA1RWJzVUVqUGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZWvkHl6llaEhqK56xxYpIhaYU9d3wpIDQQDoVQFuubrc0jOi+0l1OLbiM0OO UlbxoLHr9VDZ3QL3yvDPdSY2l52lQJx1jWw9NQGDhP+5Gs27BSdubFac8CXl/wan dDzEy/iS2B27buB+iu8Um3o3QwE8RzCJ1NEzMI33OH9MA4VsumLpXZH6gIHmK7UC 5UaiskjJy7VFGXMv0b8DwOuWM2cBRrfsS1ipGweznQCiTmSvGFC2oy+tRbjLMrMP lynVcyhVA1q/AvR6EjbPj97BL41wa3gJkAcM7zCRnXSi02C1RLXMUjnBrhhRRt/R g7Eok2DEINXjOLnDzioQG8rCzg== -----END CERTIFICATE-----Generated at Sun Mar 8 08:28:01 2026 by rpki-client