$ rpki-client -vvf rpki.apnic.net/member_repository/A9188D0F/F359CF9224CF11F1B02C88C1A9833773/kaNAPNs-fi5T9OZhBZESgyz5-M4.mft File: kaNAPNs-fi5T9OZhBZESgyz5-M4.mft (raw, json) Hash identifier: ekL3yNmdk/0gOvaXaYO/LxdOvOUI+OSWbiS6Vn4jm60= Subject key identifier: 61:68:53:4D:05:E0:48:2A:F8:FC:E8:C7:8B:13:95:9F:16:5F:59:D4 Authority key identifier: 91:A3:40:3C:DB:3E:7E:2E:53:F4:E6:61:05:91:12:83:2C:F9:F8:CE Certificate issuer: /CN=A9188D0F/serialNumber=91A3403CDB3E7E2E53F4E661059112832CF9F8CE Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaNAPNs-fi5T9OZhBZESgyz5-M4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188D0F/F359CF9224CF11F1B02C88C1A9833773/kaNAPNs-fi5T9OZhBZESgyz5-M4.mft Manifest number: 04 Signing time: Wed 25 Mar 2026 08:24:25 +0000 Manifest this update: Wed 25 Mar 2026 08:24:24 +0000 Manifest next update: Wed 01 Apr 2026 08:24:24 +0000 Files and hashes: 1: kaNAPNs-fi5T9OZhBZESgyz5-M4.crl (hash: yCHRuEnu+pS3YFeMCLEGw8iz+RKJPcmiZJccfv+cFJo=) 2: 40244FE624D011F1874701DAA9833773.roa (hash: BvmoKK2bVrC8ISg+I54hyLICIuNcMLRT4N3gcv8pi4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188D0F/F359CF9224CF11F1B02C88C1A9833773/kaNAPNs-fi5T9OZhBZESgyz5-M4.crl rsync://rpki.apnic.net/member_repository/A9188D0F/F359CF9224CF11F1B02C88C1A9833773/kaNAPNs-fi5T9OZhBZESgyz5-M4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaNAPNs-fi5T9OZhBZESgyz5-M4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:24:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188D0F, serialNumber=91A3403CDB3E7E2E53F4E661059112832CF9F8CE Validity Not Before: Mar 25 08:24:24 2026 GMT Not After : Apr 1 08:24:24 2026 GMT Subject: CN=69c39bb9-2c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:80:ac:0c:2c:2f:ed:d6:04:ae:59:32:57:9a: 67:59:aa:1c:01:45:3e:ff:e4:dc:99:72:bd:3a:f1: 62:48:3c:9e:64:41:85:e8:d8:9c:e9:e6:f5:0b:e4: 76:5b:f8:6c:15:96:57:94:3d:34:ab:d5:d2:78:4e: 2b:d0:59:d1:7b:c5:f5:af:5b:f2:8b:e8:eb:2e:68: 80:54:e7:85:bf:85:30:a4:61:42:f3:3e:a1:e7:fa: 8e:62:0e:4c:68:58:e9:74:1a:c9:d2:67:c7:81:24: 26:eb:dd:dc:e8:b4:13:33:5b:74:29:fe:b2:8a:e7: 0b:6e:b3:28:c8:8c:7a:97:7b:3a:7f:7c:54:17:fb: 6c:74:01:6c:68:fc:37:a3:23:7e:94:b3:32:d1:b7: bf:d0:fe:72:61:ab:b9:99:f8:0a:6a:ae:ca:70:f3: 30:11:32:35:f4:78:5d:18:85:25:ee:f7:b4:68:e5: 1c:e6:9c:48:86:54:b8:99:38:73:55:bc:3a:f4:75: 7d:28:5e:93:da:66:63:9f:b5:8c:76:6c:9b:0e:a6: e9:d0:46:ee:f5:a4:eb:b8:69:6d:ea:87:86:ce:0c: 6e:a5:67:5d:33:93:06:2d:75:04:2e:cd:60:26:c1: ac:43:c2:d2:06:e9:70:ee:88:81:ad:03:e2:5c:d8: 72:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:68:53:4D:05:E0:48:2A:F8:FC:E8:C7:8B:13:95:9F:16:5F:59:D4 X509v3 Authority Key Identifier: keyid:91:A3:40:3C:DB:3E:7E:2E:53:F4:E6:61:05:91:12:83:2C:F9:F8:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188D0F/F359CF9224CF11F1B02C88C1A9833773/kaNAPNs-fi5T9OZhBZESgyz5-M4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaNAPNs-fi5T9OZhBZESgyz5-M4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D0F/F359CF9224CF11F1B02C88C1A9833773/kaNAPNs-fi5T9OZhBZESgyz5-M4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:3d:ef:b6:7d:5c:49:f7:8a:be:e1:48:84:be:15:a6:59:4c: 30:d0:ed:40:35:18:e6:1e:df:25:43:fa:c6:4e:6d:3c:47:41: 1d:d4:04:0a:4d:16:01:c0:70:0c:7b:23:f1:84:e6:b7:2a:c2: 3b:bb:6b:b3:50:3c:44:b6:f9:49:00:b9:92:69:a6:a3:54:dc: 82:9c:83:4d:b6:61:3c:b4:2c:ac:67:e2:86:9e:01:96:d8:db: 48:0f:c9:96:23:57:93:d8:91:53:d1:2a:82:19:6f:47:97:a1: ee:c1:37:6f:8d:0b:0c:82:2b:79:ee:06:cc:76:70:5d:a1:61: 4e:13:1f:e0:1e:e4:b9:66:d2:6c:09:34:97:0f:05:84:fb:ab: 27:17:d8:f9:fb:3b:d4:60:76:f2:b5:98:46:41:54:78:37:3a: cc:96:4a:07:d4:7b:9f:23:69:b5:62:86:72:59:f6:93:fd:a5: 42:b4:25:74:1e:5e:c0:c5:f2:a1:d6:28:ba:28:5a:e9:f4:ef: 0e:55:bc:68:1e:39:1e:6f:ed:59:53:54:40:58:4e:fe:10:8a: ff:29:c0:3b:dd:62:32:10:05:c9:dc:97:91:d1:bf:00:44:71: 42:75:23:a0:26:fb:65:68:32:ee:53:07:c7:4c:3a:9f:b1:84: 5e:cf:ec:36 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OEQwRjExMC8GA1UEBRMoOTFBMzQwM0NEQjNFN0UyRTUzRjRFNjYxMDU5MTEyODMy Q0Y5RjhDRTAeFw0yNjAzMjUwODI0MjRaFw0yNjA0MDEwODI0MjRaMBgxFjAUBgNV BAMTDTY5YzM5YmI5LTJjOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfgKwMLC/t1gSuWTJXmmdZqhwBRT7/5NyZcr068WJIPJ5kQYXo2Jzp5vUL5HZb +GwVlleUPTSr1dJ4TivQWdF7xfWvW/KL6OsuaIBU54W/hTCkYULzPqHn+o5iDkxo WOl0GsnSZ8eBJCbr3dzotBMzW3Qp/rKK5wtusyjIjHqXezp/fFQX+2x0AWxo/Dej I36UszLRt7/Q/nJhq7mZ+Apqrspw8zARMjX0eF0YhSXu97Ro5RzmnEiGVLiZOHNV vDr0dX0oXpPaZmOftYx2bJsOpunQRu71pOu4aW3qh4bODG6lZ10zkwYtdQQuzWAm waxDwtIG6XDuiIGtA+Jc2HLxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYWhTTQXg SCr4/OjHixOVnxZfWdQwHwYDVR0jBBgwFoAUkaNAPNs+fi5T9OZhBZESgyz5+M4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4RDBGL0YzNTlDRjkyMjRD RjExRjFCMDJDODhDMUE5ODMzNzczL2thTkFQTnMtZmk1VDlPWmhCWkVTZ3l6NS1N NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva2FOQVBOcy1maTVUOU9aaEJaRVNneXo1LU00LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 RDBGL0YzNTlDRjkyMjRDRjExRjFCMDJDODhDMUE5ODMzNzczL2thTkFQTnMtZmk1 VDlPWmhCWkVTZ3l6NS1NNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAFPe+2fVxJ94q+4UiEvhWmWUww0O1ANRjmHt8lQ/rGTm08R0Ed1AQKTRYBwHAM eyPxhOa3KsI7u2uzUDxEtvlJALmSaaajVNyCnINNtmE8tCysZ+KGngGW2NtID8mW I1eT2JFT0SqCGW9Hl6HuwTdvjQsMgit57gbMdnBdoWFOEx/gHuS5ZtJsCTSXDwWE +6snF9j5+zvUYHbytZhGQVR4NzrMlkoH1HufI2m1YoZyWfaT/aVCtCV0Hl7AxfKh 1ii6KFrp9O8OVbxoHjkeb+1ZU1RAWE7+EIr/KcA73WIyEAXJ3JeR0b8ARHFCdSOg JvtlaDLuUwfHTDqfsYRez+w2 -----END CERTIFICATE-----Generated at Thu Mar 26 20:03:36 2026 by rpki-client