$ rpki-client -vvf rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft File: kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft (raw, json) Hash identifier: Dz1nnT35EDkINNvyE41w0j/SVjV3o2oRIbjiAo1EPaM= Subject key identifier: 4E:5C:7C:57:38:BF:EE:C1:B8:97:63:4C:BD:3E:64:1D:0F:2F:4A:61 Authority key identifier: 90:F6:80:FC:A7:C9:30:FD:1F:DC:53:36:75:38:5A:E9:0F:B4:16:72 Certificate issuer: /CN=A91248C9/serialNumber=90F680FCA7C930FD1FDC533675385AE90FB41672 Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft Manifest number: 01C8 Signing time: Wed 25 Mar 2026 03:02:37 +0000 Manifest this update: Wed 25 Mar 2026 03:02:36 +0000 Manifest next update: Wed 01 Apr 2026 03:02:36 +0000 Files and hashes: 1: kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl (hash: 7MySQqQPbNci49krdxLYfmx0+ugjBPXZNZ3TAhjzr2k=) 2: 4B3C43EA6EF011EE84DC9B0EC4F9AE02.roa (hash: YTWQLKjMPS+pJcK/98qLOrg1cnW5P2/DgKnTnaoaWiI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91248C9, serialNumber=90F680FCA7C930FD1FDC533675385AE90FB41672 Validity Not Before: Mar 25 03:02:36 2026 GMT Not After : Apr 1 03:02:36 2026 GMT Subject: CN=69c3504d-768e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a0:6c:5f:d7:7b:8d:ad:a6:15:d0:39:44:3c: 41:54:fa:6f:48:b5:3a:a9:12:1b:06:37:bb:06:15: eb:be:3c:36:d6:cc:d5:9a:b3:6f:9f:2e:85:07:fc: b2:ee:14:b2:86:17:b0:19:a2:86:40:f7:57:e2:de: 20:02:04:2c:3a:11:63:2d:c6:a8:e8:2f:d1:7f:b3: 50:82:96:5f:a5:58:71:41:5c:b3:13:7b:31:24:67: 48:7e:8d:87:d0:ca:67:73:7e:44:2d:29:fd:ee:51: 8e:16:c4:e9:7e:7c:0b:e4:14:bd:5b:24:dd:12:f2: bb:38:d4:2b:25:b3:c3:43:19:dd:68:94:aa:43:5a: c7:37:83:2d:9d:6a:e3:b6:1f:63:af:57:d0:eb:c8: 1f:78:e4:b2:7f:66:2c:e6:b1:ed:04:31:fa:a6:2e: 8a:42:83:cf:83:f3:09:d4:66:45:1b:76:ed:d0:a7: 38:5a:0d:0a:42:75:a5:ed:d3:80:93:e5:ae:9f:05: a0:2a:76:a6:da:e8:6c:ac:d5:81:d8:8b:2d:77:a8: 6e:b1:02:fe:03:06:9b:be:a7:82:af:75:69:c2:a3: 57:48:d4:41:ef:03:b8:aa:ba:b8:da:62:8b:e4:5b: c8:2e:d3:95:93:65:99:89:f4:f6:f7:01:46:42:8e: 49:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:5C:7C:57:38:BF:EE:C1:B8:97:63:4C:BD:3E:64:1D:0F:2F:4A:61 X509v3 Authority Key Identifier: keyid:90:F6:80:FC:A7:C9:30:FD:1F:DC:53:36:75:38:5A:E9:0F:B4:16:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:0c:6b:a2:1e:db:b5:64:0d:90:2a:57:7e:60:c7:f8:ca:d2: fc:36:1a:0d:d1:2a:39:10:00:e5:0f:8f:27:91:59:f0:e2:a1: 37:55:47:7c:8c:a7:22:5c:32:6a:a2:36:b5:c7:fe:a9:7a:1f: c9:6e:62:2f:ba:18:e1:0b:e6:f1:eb:5a:be:d7:c7:2e:f9:d0: 7a:79:66:26:10:d8:16:ab:79:98:ca:03:f5:64:0a:af:27:52: df:6b:42:78:c0:0f:79:c5:49:f8:08:c4:73:09:9f:fc:bd:de: bd:cd:c7:21:a7:04:cc:b0:d7:aa:45:9a:bf:60:ca:c8:6a:6e: b6:84:ff:56:24:aa:ac:12:69:df:b7:f7:43:50:19:7a:da:e3: ee:be:92:25:41:70:f9:d9:a4:32:d9:9a:63:ab:49:8d:63:0f: 8a:3d:63:49:e3:e1:30:d4:74:8f:f9:31:18:e8:fb:db:a6:86: 93:ca:a8:b3:ef:20:d8:2e:a3:55:e5:1b:95:e1:67:92:bd:2e: 90:35:1e:5b:c4:84:ef:94:52:6c:af:b7:cc:12:2a:83:a2:7e: 2e:ee:9d:a4:e4:ac:05:bc:7f:ee:dc:c3:47:72:63:96:4c:5b: 84:62:56:a5:8d:6b:34:53:87:74:af:36:9a:b6:52:7b:f0:6e: 15:2d:83:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ4QzkxMTAvBgNVBAUTKDkwRjY4MEZDQTdDOTMwRkQxRkRDNTMzNjc1Mzg1QUU5 MEZCNDE2NzIwHhcNMjYwMzI1MDMwMjM2WhcNMjYwNDAxMDMwMjM2WjAYMRYwFAYD VQQDEw02OWMzNTA0ZC03NjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi6BsX9d7ja2mFdA5RDxBVPpvSLU6qRIbBje7BhXrvjw21szVmrNvny6FB/yy 7hSyhhewGaKGQPdX4t4gAgQsOhFjLcao6C/Rf7NQgpZfpVhxQVyzE3sxJGdIfo2H 0Mpnc35ELSn97lGOFsTpfnwL5BS9WyTdEvK7ONQrJbPDQxndaJSqQ1rHN4MtnWrj th9jr1fQ68gfeOSyf2Ys5rHtBDH6pi6KQoPPg/MJ1GZFG3bt0Kc4Wg0KQnWl7dOA k+WunwWgKnam2uhsrNWB2Istd6husQL+AwabvqeCr3VpwqNXSNRB7wO4qrq42mKL 5FvILtOVk2WZifT29wFGQo5JZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE5cfFc4 v+7BuJdjTL0+ZB0PL0phMB8GA1UdIwQYMBaAFJD2gPynyTD9H9xTNnU4WukPtBZy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDhDOS9BMDU1QjVCMjZF RUQxMUVFQkMxQUFCNTNDNEY5QUUwMi9rUGFBX0tmSk1QMGYzRk0yZFRoYTZRLTBG bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tQYUFfS2ZKTVAwZjNGTTJkVGhhNlEtMEZuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDhDOS9BMDU1QjVCMjZFRUQxMUVFQkMxQUFCNTNDNEY5QUUwMi9rUGFBX0tmSk1Q MGYzRk0yZFRoYTZRLTBGbkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEwxroh7btWQNkCpXfmDH+MrS/DYaDdEqORAA5Q+PJ5FZ8OKhN1VHfIynIlwy aqI2tcf+qXofyW5iL7oY4Qvm8etavtfHLvnQenlmJhDYFqt5mMoD9WQKrydS32tC eMAPecVJ+AjEcwmf/L3evc3HIacEzLDXqkWav2DKyGputoT/ViSqrBJp37f3Q1AZ etrj7r6SJUFw+dmkMtmaY6tJjWMPij1jSePhMNR0j/kxGOj726aGk8qos+8g2C6j VeUbleFnkr0ukDUeW8SE75RSbK+3zBIqg6J+Lu6dpOSsBbx/7tzDR3JjlkxbhGJW pY1rNFOHdK82mrZSe/BuFS2DaA== -----END CERTIFICATE-----Generated at Thu Mar 26 06:56:57 2026 by rpki-client