$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft File: KBiMFu7JB0JxcnjCic-C9QTyWqk.mft (raw, json) Hash identifier: 9TTQnwzsLc1dlhgkUTfmE2C3HICeqPPuiVeoWYI+6ec= Subject key identifier: 40:F9:77:E4:A4:CA:ED:62:90:D0:B7:8D:3C:A1:B7:E3:1C:39:02:B7 Authority key identifier: 28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9 Certificate issuer: /CN=A912F387/serialNumber=28188C16EEC90742717278C289CF82F504F25AA9 Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft Manifest number: 01A3 Signing time: Wed 25 Mar 2026 03:10:38 +0000 Manifest this update: Wed 25 Mar 2026 03:10:38 +0000 Manifest next update: Wed 01 Apr 2026 03:10:38 +0000 Files and hashes: 1: KBiMFu7JB0JxcnjCic-C9QTyWqk.crl (hash: rIiKSoUZucNiUa12BZmSb31CGVsVJjvDr9pNey48HeQ=) 2: FCA046066C8611EFBF35D221C4F9AE02.roa (hash: E6IYFtcpZ/59YvDx9G0yLx/SsKVSGs49+4dsMVqOHBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F387, serialNumber=28188C16EEC90742717278C289CF82F504F25AA9 Validity Not Before: Mar 25 03:10:38 2026 GMT Not After : Apr 1 03:10:38 2026 GMT Subject: CN=69c3522e-0759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1c:cd:62:82:90:32:26:0e:2c:1e:19:e8:ff: 28:74:e0:6d:49:86:b7:2e:0a:00:c5:7f:58:55:51: e3:1f:04:31:23:76:c7:3b:af:89:23:7b:8b:07:c9: cb:c2:c8:95:03:e0:f3:5d:0b:e0:ea:f8:30:a8:0b: b8:d7:9d:d3:a0:cf:25:ff:c2:1f:28:dc:51:fe:b2: e3:28:10:de:87:d7:24:b8:9b:3d:d7:e0:19:5b:a5: e5:c1:7f:66:7d:e2:7f:1a:28:f8:85:e4:0d:0f:b8: 1a:a5:cb:1a:da:21:05:5f:d5:2e:07:21:a9:b5:0e: c0:3a:a7:62:b6:62:bf:8e:2a:2d:13:72:aa:5c:ce: ca:69:67:44:79:24:2b:9c:8e:29:e8:32:be:66:37: bf:7a:69:cf:93:f9:ec:b4:ec:42:20:a3:0e:7b:13: 13:0f:8b:01:51:09:5e:ac:58:cc:19:6d:c4:72:ed: be:fa:64:5e:3c:b0:18:0f:40:57:4a:e6:be:80:c7: f3:8c:27:39:bf:b1:67:76:6b:3c:9e:0f:b3:56:df: 24:f3:af:21:8e:ac:35:24:e6:9d:6f:9a:98:8b:ad: ca:c9:59:cc:2c:bd:0d:64:de:87:7a:5e:80:35:9d: 13:2b:4e:1d:9a:8d:df:7b:c4:61:d9:ee:34:c4:66: c3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F9:77:E4:A4:CA:ED:62:90:D0:B7:8D:3C:A1:B7:E3:1C:39:02:B7 X509v3 Authority Key Identifier: keyid:28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:f1:a2:57:b4:36:b0:62:3c:69:d7:77:81:91:c7:65:ad:a1: 3c:a5:5c:1b:8a:e0:9c:0f:4d:dd:ab:8f:1e:33:94:1b:4b:07: 34:3f:1d:6b:df:1f:b9:86:18:28:92:7e:b9:aa:a2:1e:45:44: c7:10:6c:c8:d4:1d:b3:d5:43:0a:3e:de:a5:ed:62:3d:96:be: 76:73:12:ca:da:b4:ec:6f:13:76:ed:bf:cb:11:f3:ce:0d:0d: 36:8d:3e:90:43:f7:a8:8e:69:c4:12:16:ea:31:09:1f:83:64: 5c:fa:9b:18:e0:82:cf:f8:28:f8:e3:a9:5e:9b:f3:e0:e0:1e: dd:f1:c7:65:ab:bd:30:37:c8:1f:3f:2e:c9:b8:52:88:0f:f9: 11:85:a0:1c:3b:f0:58:c9:aa:e5:92:ad:d5:c5:c1:80:9c:52: f7:9c:5e:cb:e0:80:82:86:c6:98:fe:61:41:e2:ca:5a:cc:d8: c2:25:48:fc:84:fc:09:ff:85:6a:7a:56:f4:ff:9c:b6:f3:91: 82:4b:18:bf:92:c6:96:8b:62:c9:d2:38:45:98:41:26:61:05: e4:13:80:20:24:bf:4d:dc:bb:a5:cf:ac:85:e3:35:b9:11:1e: c9:af:ba:ca:17:ea:4b:3d:e6:c3:60:2f:44:40:c1:d5:3c:47: 7b:b7:b6:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzODcxMTAvBgNVBAUTKDI4MTg4QzE2RUVDOTA3NDI3MTcyNzhDMjg5Q0Y4MkY1 MDRGMjVBQTkwHhcNMjYwMzI1MDMxMDM4WhcNMjYwNDAxMDMxMDM4WjAYMRYwFAYD VQQDEw02OWMzNTIyZS0wNzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBzNYoKQMiYOLB4Z6P8odOBtSYa3LgoAxX9YVVHjHwQxI3bHO6+JI3uLB8nL wsiVA+DzXQvg6vgwqAu4153ToM8l/8IfKNxR/rLjKBDeh9ckuJs91+AZW6XlwX9m feJ/Gij4heQND7gapcsa2iEFX9UuByGptQ7AOqditmK/jiotE3KqXM7KaWdEeSQr nI4p6DK+Zje/emnPk/nstOxCIKMOexMTD4sBUQlerFjMGW3Ecu2++mRePLAYD0BX Sua+gMfzjCc5v7Fndms8ng+zVt8k868hjqw1JOadb5qYi63KyVnMLL0NZN6Hel6A NZ0TK04dmo3fe8Rh2e40xGbDAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFED5d+Sk yu1ikNC3jTyht+McOQK3MB8GA1UdIwQYMBaAFCgYjBbuyQdCcXJ4wonPgvUE8lqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjM4Ny9GRTRENzhFMkI1 QzExMUVFOTVCNTgzNDFDNEY5QUUwMi9LQmlNRnU3SkIwSnhjbmpDaWMtQzlRVHlX cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tCaU1GdTdKQjBKeGNuakNpYy1DOVFUeVdxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjM4Ny9GRTRENzhFMkI1QzExMUVFOTVCNTgzNDFDNEY5QUUwMi9LQmlNRnU3SkIw SnhjbmpDaWMtQzlRVHlXcWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvPGiV7Q2sGI8add3gZHHZa2hPKVcG4rgnA9N3auPHjOUG0sHND8da98fuYYY KJJ+uaqiHkVExxBsyNQds9VDCj7epe1iPZa+dnMSytq07G8Tdu2/yxHzzg0NNo0+ kEP3qI5pxBIW6jEJH4NkXPqbGOCCz/go+OOpXpvz4OAe3fHHZau9MDfIHz8uybhS iA/5EYWgHDvwWMmq5ZKt1cXBgJxS95xey+CAgobGmP5hQeLKWszYwiVI/IT8Cf+F anpW9P+ctvORgksYv5LGlotiydI4RZhBJmEF5BOAICS/Tdy7pc+sheM1uREeya+6 yhfqSz3mw2AvREDB1TxHe7e20A== -----END CERTIFICATE-----Generated at Thu Mar 26 19:03:58 2026 by rpki-client