$ rpki-client -vvf rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft File: m-KS59FtTo6BYWnDtQLr5O9FwWM.mft (raw, json) Hash identifier: m1kme1xSCMkXOhgTtRxenyhYSUHfXwJwR1cFKXq5/vg= Subject key identifier: B8:21:6F:EC:B9:6F:24:82:BC:E0:06:E7:0E:CA:D6:A4:BB:90:26:34 Authority key identifier: 9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63 Certificate issuer: /CN=A91897B3/serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163 Certificate serial: 0643 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft Manifest number: 0636 Signing time: Tue 10 Mar 2026 22:18:37 +0000 Manifest this update: Tue 10 Mar 2026 22:18:36 +0000 Manifest next update: Tue 17 Mar 2026 22:18:36 +0000 Files and hashes: 1: m-KS59FtTo6BYWnDtQLr5O9FwWM.crl (hash: BngKVkKDWNk0wSV1rWzzBcoaiJROpYGopEXU+GEozcE=) 2: 6D353E4E97F711EFB3A27D59C4F9AE02.roa (hash: onUalOMh2Y21LBaK70hxv0uqRbOQZZN0gUzWropMlFk=) 3: 101ED47C04A811F0B2A84883C4F9AE02.roa (hash: Zlhv3342JavepxfA0ut5BlmLYFXFM3ZkV00bpqHcIaY=) 4: 034BA52C03AE11F0BDE1863DC4F9AE02.roa (hash: VHtELU4XBm7Fr627ZlTE68FSXaSiIU85oQhKivPBoeI=) 5: E3D745E4049C11F0A6EDC22CC4F9AE02.roa (hash: 5KDSV/Q8/Iam5LtqemK/WU+8SEZm63CQbuYl32lOpFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Mar 2026 22:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1603 (0x643) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91897B3, serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163 Validity Not Before: Mar 10 22:18:36 2026 GMT Not After : Mar 17 22:18:36 2026 GMT Subject: CN=69b098bd-e8c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6d:a5:9c:e6:87:ee:a4:b3:ad:8c:2e:96:75: 04:90:72:bf:ce:90:f2:6b:5a:fa:41:5f:97:75:02: d0:d2:17:95:25:4b:d5:d8:9a:a4:84:b1:88:c5:2a: 84:65:bf:f1:aa:f2:53:d5:d0:08:20:5b:65:91:59: a0:4a:7f:83:cf:76:2b:26:55:af:d4:44:97:a7:f7: d5:8a:67:69:79:8d:83:75:32:00:a8:dd:50:34:fc: 99:e6:ca:1d:c0:39:49:07:2b:b5:5e:8f:42:3b:7d: 8b:20:d4:29:c7:5f:f8:0b:38:5c:02:5e:cc:7a:fd: cf:58:f1:a0:e6:54:77:3b:20:34:72:5e:6f:56:70: de:d5:26:34:d3:d0:c5:63:a9:f4:2b:ce:5c:b1:81: 2a:7a:9e:eb:0d:30:d2:e0:9d:77:fa:4c:ad:ee:ed: 99:59:68:4c:02:39:9a:11:0a:17:b4:b5:8b:c2:cd: 6f:95:f5:87:29:68:ef:eb:85:42:0e:0e:ab:d2:78: a5:8c:b9:e8:11:9b:cd:64:de:9f:59:3f:68:e5:9c: 03:ab:f0:83:67:c1:d5:78:e2:12:93:d0:b9:56:cb: b8:3c:19:5f:44:5a:74:5b:46:8a:fa:b8:36:af:c7: 69:34:cb:f2:1f:ed:6a:46:b3:75:d1:36:1a:c8:bf: bb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:21:6F:EC:B9:6F:24:82:BC:E0:06:E7:0E:CA:D6:A4:BB:90:26:34 X509v3 Authority Key Identifier: keyid:9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:36:d0:0e:bb:be:f9:20:83:3e:32:f9:88:c5:ea:3f:9f:e8: 45:42:0f:7d:22:58:4f:82:cf:3f:c5:45:6e:d8:98:82:f1:be: 6f:af:d7:e0:8b:00:fe:fe:9f:e7:60:2e:e0:cd:bb:15:ad:ac: 7b:8a:70:e4:57:dc:08:fa:40:bc:ec:b4:7c:be:16:29:17:47: 10:72:c1:c4:ad:8c:c6:1c:60:2d:7d:68:71:31:6b:37:22:cd: fd:70:dc:93:11:01:7e:ba:d0:ba:12:e8:a9:e9:2d:4d:07:1f: f5:75:84:65:8b:29:9b:18:f4:64:95:ca:d1:14:b2:d0:c8:52: e6:e8:c6:18:7a:84:bb:25:66:16:e0:54:12:15:2c:cc:f7:53: ee:e6:99:08:43:10:ef:ae:68:a0:73:8d:55:08:38:c0:17:7a: 70:3c:0f:a7:a8:0b:f5:b2:73:22:bc:ac:55:3a:57:5d:92:92: f2:66:4b:3a:9c:bf:a0:89:a3:a7:35:55:a6:f7:73:eb:53:6b: ef:0b:58:85:1c:ca:5b:fe:2e:1a:59:1f:e3:e5:48:81:db:70: 40:53:71:66:33:21:0e:0a:43:8d:fc:13:80:df:50:af:52:fc: b2:47:8c:12:7a:67:5b:b4:37:2a:14:19:fe:14:ac:97:74:c9: 7b:61:6d:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk3QjMxMTAvBgNVBAUTKDlCRTI5MkU3RDE2RDRFOEU4MTYxNjlDM0I1MDJFQkU0 RUY0NUMxNjMwHhcNMjYwMzEwMjIxODM2WhcNMjYwMzE3MjIxODM2WjAYMRYwFAYD VQQDEw02OWIwOThiZC1lOGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3W2lnOaH7qSzrYwulnUEkHK/zpDya1r6QV+XdQLQ0heVJUvV2JqkhLGIxSqE Zb/xqvJT1dAIIFtlkVmgSn+Dz3YrJlWv1ESXp/fVimdpeY2DdTIAqN1QNPyZ5sod wDlJByu1Xo9CO32LINQpx1/4CzhcAl7Mev3PWPGg5lR3OyA0cl5vVnDe1SY009DF Y6n0K85csYEqep7rDTDS4J13+kyt7u2ZWWhMAjmaEQoXtLWLws1vlfWHKWjv64VC Dg6r0niljLnoEZvNZN6fWT9o5ZwDq/CDZ8HVeOISk9C5Vsu4PBlfRFp0W0aK+rg2 r8dpNMvyH+1qRrN10TYayL+7TQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLghb+y5 bySCvOAG5w7K1qS7kCY0MB8GA1UdIwQYMBaAFJvikufRbU6OgWFpw7UC6+TvRcFj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTdCMy82NzIxMkRGRUNF QTgxMUVCOUE5NjlFMEZDNEY5QUUwMi9tLUtTNTlGdFRvNkJZV25EdFFMcjVPOUZ3 V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20tS1M1OUZ0VG82QllXbkR0UUxyNU85RndXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTdCMy82NzIxMkRGRUNFQTgxMUVCOUE5NjlFMEZDNEY5QUUwMi9tLUtTNTlGdFRv NkJZV25EdFFMcjVPOUZ3V00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwjbQDru++SCDPjL5iMXqP5/oRUIPfSJYT4LPP8VFbtiYgvG+b6/X4IsA/v6f 52Au4M27Fa2se4pw5FfcCPpAvOy0fL4WKRdHEHLBxK2MxhxgLX1ocTFrNyLN/XDc kxEBfrrQuhLoqektTQcf9XWEZYspmxj0ZJXK0RSy0MhS5ujGGHqEuyVmFuBUEhUs zPdT7uaZCEMQ765ooHONVQg4wBd6cDwPp6gL9bJzIrysVTpXXZKS8mZLOpy/oImj pzVVpvdz61Nr7wtYhRzKW/4uGlkf4+VIgdtwQFNxZjMhDgpDjfwTgN9Qr1L8skeM EnpnW7Q3KhQZ/hSsl3TJe2FtNQ== -----END CERTIFICATE-----Generated at Thu Mar 12 21:30:40 2026 by rpki-client