$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft File: kJUWWXx2-jz_qxUgjArpiGY0qgM.mft (raw, json) Hash identifier: ndE9nVHcgRuUzWMZlGfRfEeRZLhnRBKPbzFQVg/RBC8= Subject key identifier: 03:4F:31:59:85:9F:C2:E0:BC:67:FF:E9:3B:F1:2B:9D:45:50:6C:58 Authority key identifier: 90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03 Certificate issuer: /CN=A91847A2/serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03 Certificate serial: 0B48 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft Manifest number: 0B3E Signing time: Tue 24 Mar 2026 19:05:44 +0000 Manifest this update: Tue 24 Mar 2026 19:05:44 +0000 Manifest next update: Tue 31 Mar 2026 19:05:44 +0000 Files and hashes: 1: kJUWWXx2-jz_qxUgjArpiGY0qgM.crl (hash: ja0i73JG0/XqTSqsZG0+vNIqDlmAWVY45PBBgRct9eM=) 2: 54EDB8542E1811EBB4E80B1FC4F9AE02.roa (hash: U8LPi0ztG0viQT8FjnrvYf4D9AeaJJe8T9chhBCJepM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:05:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2888 (0xb48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A2, serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03 Validity Not Before: Mar 24 19:05:44 2026 GMT Not After : Mar 31 19:05:44 2026 GMT Subject: CN=69c2e088-be9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:09:a4:17:93:67:e8:0d:72:e0:86:f2:d4:16: d2:85:1a:bc:7f:ac:19:4f:e5:95:67:f7:4b:46:22: c3:cb:52:6f:c7:3d:dd:7d:1e:ab:d7:62:63:33:91: 62:67:f4:f6:ae:59:06:00:61:8c:5a:0d:5b:4c:37: a4:64:df:73:a1:3a:a8:d7:2c:30:88:c4:ed:25:b1: 6a:d0:65:67:c7:29:e0:33:4d:5f:f7:f1:a7:ba:83: 8c:41:76:97:b2:54:0f:d4:08:c0:f9:19:40:8e:cc: 23:71:1e:4a:fe:08:92:2c:c5:f2:99:ff:c7:83:76: 61:e9:4b:a3:cc:61:46:8f:e1:1d:6d:4c:64:50:7a: 08:92:ad:8d:b9:5f:55:00:ca:1b:c3:2c:18:8d:1d: a1:46:71:e3:74:63:64:5e:42:d7:84:3a:6a:d1:7d: b7:ef:7c:47:cf:8e:da:46:2a:32:01:65:39:84:c7: fd:fb:b3:d4:cc:cf:e4:13:21:51:60:1b:0b:68:0c: 98:6b:06:f2:c3:ea:73:37:c3:5d:64:1f:03:78:27: 21:64:56:81:9d:5e:fd:4a:c7:67:53:df:5d:33:ba: 70:0a:b6:0b:68:60:d6:8b:ee:08:4b:29:ca:7f:72: c0:30:54:7e:54:ed:87:4e:7f:aa:bf:a0:c0:83:9f: 74:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:4F:31:59:85:9F:C2:E0:BC:67:FF:E9:3B:F1:2B:9D:45:50:6C:58 X509v3 Authority Key Identifier: keyid:90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:06:ae:e1:98:7a:9c:ef:a4:9d:1d:59:57:ba:25:ad:e6:d4: 2e:a2:87:cc:d1:78:8e:49:1e:56:d3:82:5e:f7:ab:2b:09:db: 03:01:77:6a:a2:38:f8:6e:98:70:e7:f7:b8:2c:2b:d3:92:20: 4d:16:8c:8e:5d:ce:a8:0c:4e:aa:65:0f:02:87:46:25:14:ec: 00:96:d3:2d:53:0c:ea:0c:95:17:35:cc:2b:ed:3b:ef:72:65: ce:4d:6a:35:ce:87:e4:99:b5:60:b4:8e:e6:e6:9f:72:01:46: 69:a1:2f:34:87:4c:aa:48:4e:0a:a6:74:37:68:37:cb:0e:6f: b7:1b:65:dc:ed:4a:17:56:ff:f8:dc:1d:6d:4d:f6:c5:c6:a4: 8e:04:81:37:52:54:8a:62:af:63:55:ea:11:14:60:16:3f:23: 70:5a:bf:d8:b8:d3:51:fe:62:a6:9a:b6:1e:9a:5b:00:77:be: d6:de:d9:80:fc:b8:63:e6:d4:ae:ac:4f:ad:b2:2f:7c:95:27: 47:d3:9b:fe:e6:f1:e6:4e:cc:03:2b:93:ee:ee:cd:d1:c0:9a: 03:9a:01:9a:52:82:3e:38:54:12:97:ff:77:e1:0b:b2:98:01: db:c6:45:63:1a:92:ce:07:b0:07:15:3a:64:f2:a5:3f:e9:6e: 25:b4:86:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QTIxMTAvBgNVBAUTKDkwOTUxNjU5N0M3NkZBM0NGRkFCMTUyMDhDMEFFOTg4 NjYzNEFBMDMwHhcNMjYwMzI0MTkwNTQ0WhcNMjYwMzMxMTkwNTQ0WjAYMRYwFAYD VQQDEw02OWMyZTA4OC1iZTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAmkF5Nn6A1y4Iby1BbShRq8f6wZT+WVZ/dLRiLDy1Jvxz3dfR6r12JjM5Fi Z/T2rlkGAGGMWg1bTDekZN9zoTqo1ywwiMTtJbFq0GVnxyngM01f9/GnuoOMQXaX slQP1AjA+RlAjswjcR5K/giSLMXymf/Hg3Zh6UujzGFGj+EdbUxkUHoIkq2NuV9V AMobwywYjR2hRnHjdGNkXkLXhDpq0X2373xHz47aRioyAWU5hMf9+7PUzM/kEyFR YBsLaAyYawbyw+pzN8NdZB8DeCchZFaBnV79SsdnU99dM7pwCrYLaGDWi+4ISynK f3LAMFR+VO2HTn+qv6DAg590LwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFANPMVmF n8LgvGf/6TvxK51FUGxYMB8GA1UdIwQYMBaAFJCVFll8dvo8/6sVIIwK6YhmNKoD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMi9BRUQzRDM1RTU5 NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rSlVXV1h4Mi1qel9xeFVnakFycGlHWTBx Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tKVVdXWHgyLWp6X3F4VWdqQXJwaUdZMHFnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdBMi9BRUQzRDM1RTU5NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rSlVXV1h4Mi1q el9xeFVnakFycGlHWTBxZ00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANQau4Zh6nO+knR1ZV7olrebULqKHzNF4jkkeVtOCXverKwnbAwF3aqI4+G6Y cOf3uCwr05IgTRaMjl3OqAxOqmUPAodGJRTsAJbTLVMM6gyVFzXMK+0773Jlzk1q Nc6H5Jm1YLSO5uafcgFGaaEvNIdMqkhOCqZ0N2g3yw5vtxtl3O1KF1b/+NwdbU32 xcakjgSBN1JUimKvY1XqERRgFj8jcFq/2LjTUf5ippq2HppbAHe+1t7ZgPy4Y+bU rqxPrbIvfJUnR9Ob/ubx5k7MAyuT7u7N0cCaA5oBmlKCPjhUEpf/d+ELspgB28ZF YxqSzgewBxU6ZPKlP+luJbSG1A== -----END CERTIFICATE-----Generated at Thu Mar 26 19:30:57 2026 by rpki-client