$ rpki-client -vvf rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft File: kakyPLNEJvPZyJDjl4Ag1BezWfU.mft (raw, json) Hash identifier: W5wHakdY5nRnlqrzAhyHhKmb22ypZXQ0habbjoWlt3A= Subject key identifier: 81:CE:98:89:C8:31:78:D2:92:EB:2A:79:52:3A:13:39:2C:3D:4A:BC Authority key identifier: 91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5 Certificate issuer: /CN=A9151265/serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5 Certificate serial: 04FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft Manifest number: 04F4 Signing time: Tue 24 Mar 2026 23:23:57 +0000 Manifest this update: Tue 24 Mar 2026 23:23:56 +0000 Manifest next update: Tue 31 Mar 2026 23:23:56 +0000 Files and hashes: 1: kakyPLNEJvPZyJDjl4Ag1BezWfU.crl (hash: cBj0qG5K2Cp3HzKLkm6T2ZZoFDQ7pEcLMwDWgJtE9vk=) 2: B1334FD4522011ECB0594C2BC4F9AE02.roa (hash: wtcSk6Y7w0YC/tgX92PUFuNkS6TBVa+Kp56LZMlD0kQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:23:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1276 (0x4fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151265, serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5 Validity Not Before: Mar 24 23:23:56 2026 GMT Not After : Mar 31 23:23:56 2026 GMT Subject: CN=69c31d0d-c958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ec:0e:30:f6:c2:ac:2c:32:95:37:d9:33:1f: be:90:2c:64:25:a7:1a:12:5c:5e:fe:c7:b9:8e:ca: 55:cc:de:85:ce:48:d3:94:6d:f1:f8:25:f7:f2:6f: 2a:6a:e4:f2:ce:3e:fb:10:f4:b3:79:ea:4b:b0:88: 95:16:c9:7b:af:b8:a9:40:c0:39:45:e4:62:52:30: 84:73:f3:c0:c8:32:ac:c8:ba:db:ce:1b:27:14:81: ed:88:49:e4:3a:3b:43:fc:4c:40:13:fe:f0:47:c0: b3:a9:c7:bf:50:e5:97:79:96:bf:8d:d0:17:4c:db: a2:d0:07:c0:00:87:bd:da:82:14:ea:6f:22:c2:8a: fa:90:3c:76:00:8b:30:9b:00:da:c2:25:17:4e:30: 40:a5:de:b7:a3:b5:30:b0:91:e6:45:80:2a:b9:7f: b5:d5:1f:c2:d7:06:96:62:c9:85:ec:c7:50:75:a5: d2:4d:0e:92:87:1e:c0:a5:89:d9:01:13:ae:11:53: d3:f2:f9:43:93:57:b6:1e:89:b6:66:d2:5b:3d:74: 11:19:a8:7d:36:a9:c3:7f:44:a4:7f:75:54:87:90: 46:b0:ff:c2:d4:c1:a5:ca:8c:5d:36:be:f4:90:41: be:85:bd:85:52:e2:a6:22:f1:a3:08:dc:a8:35:54: 1e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:CE:98:89:C8:31:78:D2:92:EB:2A:79:52:3A:13:39:2C:3D:4A:BC X509v3 Authority Key Identifier: keyid:91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:c9:9c:fc:ff:7a:52:aa:ca:0b:b7:62:52:78:c2:34:c3:a1: 70:bf:75:d0:be:0b:cc:97:6e:83:69:39:99:44:b7:81:9b:a7: ad:9b:95:ef:2b:f3:08:ff:3f:10:4c:96:b8:e0:c4:8f:0e:33: 7d:f6:69:e1:9c:7d:ea:db:6d:fd:0f:ab:ea:60:7f:05:c1:1d: 82:6a:33:9c:c2:4a:77:e4:17:75:6c:cf:4c:fb:a5:27:3b:64: a3:65:9f:a9:f7:ce:77:8d:db:cb:58:66:68:5d:cd:dc:f0:13: 99:f5:57:90:44:aa:37:6e:71:b6:fd:46:ac:e4:08:53:65:f8: fd:a7:ef:80:b0:b4:c8:f9:04:79:5d:d5:95:a2:b5:75:3c:6a: a3:b1:e9:4d:0e:20:4e:b2:fa:f2:2b:3f:96:62:3d:c2:1a:22: 25:82:e1:98:23:09:34:c4:dd:1d:fc:b2:75:4b:4a:9b:ae:6b: 43:d7:de:f7:2f:b0:68:c6:54:0d:63:4f:ef:f3:d4:0f:5a:3e: cd:b6:4e:cf:3a:a3:1d:80:23:3c:b7:70:62:c3:04:16:5e:ce: 8e:63:7c:e6:0d:c2:0b:49:24:be:7e:3c:e8:bd:8c:c2:f9:07: ad:13:ad:ce:22:62:bd:f3:f4:2c:c4:02:0b:8a:2a:15:8f:ad: 6a:a8:63:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNjUxMTAvBgNVBAUTKDkxQTkzMjNDQjM0NDI2RjNEOUM4OTBFMzk3ODAyMEQ0 MTdCMzU5RjUwHhcNMjYwMzI0MjMyMzU2WhcNMjYwMzMxMjMyMzU2WjAYMRYwFAYD VQQDEw02OWMzMWQwZC1jOTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsewOMPbCrCwylTfZMx++kCxkJacaElxe/se5jspVzN6FzkjTlG3x+CX38m8q auTyzj77EPSzeepLsIiVFsl7r7ipQMA5ReRiUjCEc/PAyDKsyLrbzhsnFIHtiEnk OjtD/ExAE/7wR8Czqce/UOWXeZa/jdAXTNui0AfAAIe92oIU6m8iwor6kDx2AIsw mwDawiUXTjBApd63o7UwsJHmRYAquX+11R/C1waWYsmF7MdQdaXSTQ6Shx7ApYnZ AROuEVPT8vlDk1e2Hom2ZtJbPXQRGah9NqnDf0Skf3VUh5BGsP/C1MGlyoxdNr70 kEG+hb2FUuKmIvGjCNyoNVQeSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIHOmInI MXjSkusqeVI6EzksPUq8MB8GA1UdIwQYMBaAFJGpMjyzRCbz2ciQ45eAINQXs1n1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI2NS8wNTcwOUFFQTUy MUYxMUVDQjNEMDE5MkJDNEY5QUUwMi9rYWt5UExORUp2UFp5SkRqbDRBZzFCZXpX ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tha3lQTE5FSnZQWnlKRGpsNEFnMUJleldmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI2NS8wNTcwOUFFQTUyMUYxMUVDQjNEMDE5MkJDNEY5QUUwMi9rYWt5UExORUp2 UFp5SkRqbDRBZzFCZXpXZlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHcmc/P96UqrKC7diUnjCNMOhcL910L4LzJdug2k5mUS3gZunrZuV7yvzCP8/ EEyWuODEjw4zffZp4Zx96ttt/Q+r6mB/BcEdgmoznMJKd+QXdWzPTPulJztko2Wf qffOd43by1hmaF3N3PATmfVXkESqN25xtv1GrOQIU2X4/afvgLC0yPkEeV3VlaK1 dTxqo7HpTQ4gTrL68is/lmI9whoiJYLhmCMJNMTdHfyydUtKm65rQ9fe9y+waMZU DWNP7/PUD1o+zbZOzzqjHYAjPLdwYsMEFl7OjmN85g3CC0kkvn486L2MwvkHrROt ziJivfP0LMQCC4oqFY+taqhjXA== -----END CERTIFICATE-----Generated at Thu Mar 26 08:33:56 2026 by rpki-client