$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft File: kXcqmmw5cZ-KbmlxY21ITt5DplA.mft (raw, json) Hash identifier: Saxd91WVGijlMcU6vQq409D8bVfSRP7C9c5UPuGXkmg= Subject key identifier: 6B:CA:B5:3D:62:3B:BE:1C:81:8F:98:85:40:47:F6:90:94:81:59:BB Authority key identifier: 91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50 Certificate issuer: /CN=A9122C94/serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650 Certificate serial: 06BF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft Manifest number: 06B5 Signing time: Tue 24 Mar 2026 20:54:51 +0000 Manifest this update: Tue 24 Mar 2026 20:54:51 +0000 Manifest next update: Tue 31 Mar 2026 20:54:51 +0000 Files and hashes: 1: kXcqmmw5cZ-KbmlxY21ITt5DplA.crl (hash: cCdA9ciB+VdLwqcdhvB4pq393QC7/ENMndcc4vO/uYw=) 2: DFA876BAA1D011EB909F3352C4F9AE02.roa (hash: kx0li/zw87s40T3OezyGkC+0pUIU5Rs0sCA+z6TjHX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1727 (0x6bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122C94, serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650 Validity Not Before: Mar 24 20:54:51 2026 GMT Not After : Mar 31 20:54:51 2026 GMT Subject: CN=69c2fa1b-84b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4f:8b:3d:af:83:90:3f:d9:61:bd:99:91:9e: 32:d0:9c:44:db:80:d9:80:57:8a:63:dc:21:00:df: 8a:bc:a5:da:e5:7d:56:b8:91:07:00:25:bc:75:dc: 92:9a:db:aa:9a:55:71:29:1f:50:9c:cb:6f:ae:3d: 5c:f4:da:8b:3b:46:11:00:65:40:56:00:e7:1e:b0: 4f:09:07:68:f7:18:9b:ad:9d:8e:ee:12:c7:37:be: 92:5c:01:fa:2b:f7:70:1f:01:54:7a:95:ee:d4:55: d3:9e:04:ef:62:32:6d:ef:58:0e:ac:db:51:3c:78: 7f:49:f5:f1:c5:75:11:bd:e7:87:ae:15:a2:68:d7: f7:a2:50:89:42:0c:27:14:d6:96:5d:f3:da:90:f4: 80:9e:93:aa:90:73:00:f9:0c:89:2c:21:ae:b1:7c: 54:b4:18:f4:cd:8a:05:3f:24:4e:80:7a:c8:e8:37: 5e:43:3e:c6:42:86:31:6c:85:71:0c:4a:32:30:56: 17:6b:ff:e8:b4:1d:17:f4:33:74:75:c8:0a:fb:8a: 0f:b9:10:05:7c:b8:12:56:c6:d2:f0:cc:8e:a6:f2: fb:5b:2d:4d:33:26:6f:28:7e:3b:c5:8c:2a:ab:eb: c8:48:71:33:d8:4c:88:c2:b7:75:f8:5e:c9:9a:03: 23:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:CA:B5:3D:62:3B:BE:1C:81:8F:98:85:40:47:F6:90:94:81:59:BB X509v3 Authority Key Identifier: keyid:91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:06:4d:bb:15:76:fa:cb:4f:60:dd:d6:68:ca:63:6f:eb:b9: 86:13:85:5e:c4:90:17:d5:57:fa:bc:b6:33:87:cd:1d:ca:db: b1:d9:63:fd:42:90:1a:f0:19:78:49:36:0d:70:f2:1b:a1:8f: 91:98:0c:e3:d2:5d:8c:1f:2b:6e:0c:f0:4a:4e:73:ca:56:85: 26:a0:9e:06:7c:ba:1b:a0:e5:5d:ff:27:7e:d9:41:0f:77:29: 7a:2f:0b:03:c2:ed:4f:f3:7c:5a:83:d6:d5:ed:d4:55:b2:9a: f2:5d:23:63:9b:5f:1e:9c:4d:a2:6b:e5:5d:8e:b4:30:0f:9a: 5f:30:cf:95:4a:0f:69:b9:e3:37:39:a0:55:fc:9e:f4:0e:68: bf:f0:9f:7a:23:d8:d8:51:1e:78:3c:c6:62:8b:cc:44:fa:8a: 28:da:66:82:c9:15:15:d0:fe:9c:a3:4f:70:71:90:aa:e7:e6: 27:9b:80:11:ab:80:5d:d3:2a:d2:60:03:c7:24:eb:ea:ea:7e: ec:99:e6:c7:25:8a:12:16:41:98:64:be:c4:54:66:b2:81:d3: e8:80:4d:11:d8:ad:16:bf:c2:f3:cf:0e:82:00:b4:f7:84:99: d2:1c:ba:da:6b:ae:62:9b:12:23:99:a1:54:54:ef:22:6a:1a: 61:2b:fd:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJDOTQxMTAvBgNVBAUTKDkxNzcyQTlBNkMzOTcxOUY4QTZFNjk3MTYzNkQ0ODRF REU0M0E2NTAwHhcNMjYwMzI0MjA1NDUxWhcNMjYwMzMxMjA1NDUxWjAYMRYwFAYD VQQDEw02OWMyZmExYi04NGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwE+LPa+DkD/ZYb2ZkZ4y0JxE24DZgFeKY9whAN+KvKXa5X1WuJEHACW8ddyS mtuqmlVxKR9QnMtvrj1c9NqLO0YRAGVAVgDnHrBPCQdo9xibrZ2O7hLHN76SXAH6 K/dwHwFUepXu1FXTngTvYjJt71gOrNtRPHh/SfXxxXURveeHrhWiaNf3olCJQgwn FNaWXfPakPSAnpOqkHMA+QyJLCGusXxUtBj0zYoFPyROgHrI6DdeQz7GQoYxbIVx DEoyMFYXa//otB0X9DN0dcgK+4oPuRAFfLgSVsbS8MyOpvL7Wy1NMyZvKH47xYwq q+vISHEz2EyIwrd1+F7JmgMj3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGvKtT1i O74cgY+YhUBH9pCUgVm7MB8GA1UdIwQYMBaAFJF3KppsOXGfim5pcWNtSE7eQ6ZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkM5NC82QUUyMDJBNkEx RDAxMUVCOTJBMkRGMjlDNEY5QUUwMi9rWGNxbW13NWNaLUtibWx4WTIxSVR0NURw bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tYY3FtbXc1Y1otS2JtbHhZMjFJVHQ1RHBsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkM5NC82QUUyMDJBNkExRDAxMUVCOTJBMkRGMjlDNEY5QUUwMi9rWGNxbW13NWNa LUtibWx4WTIxSVR0NURwbEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfAZNuxV2+stPYN3WaMpjb+u5hhOFXsSQF9VX+ry2M4fNHcrbsdlj/UKQGvAZ eEk2DXDyG6GPkZgM49JdjB8rbgzwSk5zylaFJqCeBny6G6DlXf8nftlBD3cpei8L A8LtT/N8WoPW1e3UVbKa8l0jY5tfHpxNomvlXY60MA+aXzDPlUoPabnjNzmgVfye 9A5ov/CfeiPY2FEeeDzGYovMRPqKKNpmgskVFdD+nKNPcHGQqufmJ5uAEauAXdMq 0mADxyTr6up+7JnmxyWKEhZBmGS+xFRmsoHT6IBNEditFr/C888OggC094SZ0hy6 2muuYpsSI5mhVFTvImoaYSv9lQ== -----END CERTIFICATE-----Generated at Thu Mar 26 15:58:36 2026 by rpki-client