$ rpki-client -vvf rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft File: kbx5rhXMrqROT-eEX7_KY-f6654.mft (raw, json) Hash identifier: i3DxvNcvF9E3Kujjha7umkf3/4813Mbjj9UEi4RrL2s= Subject key identifier: C2:C9:AD:2D:33:A8:4A:33:96:39:60:D2:3E:1A:F1:F2:08:48:88:D9 Authority key identifier: 91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E Certificate issuer: /CN=A9194335/serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E Certificate serial: 109C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft Manifest number: 1077 Signing time: Tue 24 Mar 2026 17:16:05 +0000 Manifest this update: Tue 24 Mar 2026 17:16:04 +0000 Manifest next update: Tue 31 Mar 2026 17:16:04 +0000 Files and hashes: 1: kbx5rhXMrqROT-eEX7_KY-f6654.crl (hash: P195NXImD6gH5MhSh29+fl2uhwq3Evf32B7riWNfot0=) 2: 122F83AAC4AD11EA9E35F20AC4F9AE02.roa (hash: TLISGWppoBnnfbHZFjULlfKEwbQDopU4rmYPr0nU0OE=) 3: 30BF32F2C28C11EAB764BF4CC4F9AE02.roa (hash: 9oD7ePq9FUpAKk3w/IsQePKTLx2iOd3tFZxiCRUR3No=) 4: 13C01CC0C4AD11EA9E35F20AC4F9AE02.roa (hash: qwQKPoIUFxOPN3MeCcCPfp5jviDrGHMY5L0x8rUXkG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4252 (0x109c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194335, serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E Validity Not Before: Mar 24 17:16:04 2026 GMT Not After : Mar 31 17:16:04 2026 GMT Subject: CN=69c2c6d4-a82c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8d:6e:55:aa:10:ab:9f:94:1f:08:ed:c9:5c: 9c:e5:4a:99:0f:a7:ed:3b:3d:ce:14:95:53:34:4e: c8:66:e2:11:b4:0d:9a:94:e3:40:18:b5:b3:72:e9: ed:25:bf:5b:bc:7d:f2:29:ae:67:70:7b:84:a8:31: 2e:ce:c8:bb:19:5e:b3:c6:50:50:f7:77:e6:cd:f6: ac:73:35:54:4d:cd:03:b9:c8:f9:5d:de:7f:4c:42: cd:33:ef:b0:af:a8:4f:f7:d4:27:e1:13:08:8f:bd: ad:f7:85:07:78:09:14:04:91:d7:0d:04:49:f4:0a: 0d:87:df:7d:f0:f9:50:72:56:d2:17:a6:e3:d4:4c: 90:31:e5:5e:59:69:d8:ce:77:e1:c2:de:88:11:2b: 8f:18:c2:0a:98:e5:59:2c:fd:59:9e:e1:47:26:f4: 17:f2:40:f1:a8:70:a3:25:41:29:ed:fe:2d:03:3c: 85:bb:1a:e0:77:df:6a:1b:f3:cd:3b:07:de:91:27: 0c:19:70:e1:87:b0:e4:49:9d:79:3a:a6:68:9b:ef: 50:a2:ea:f5:52:23:08:4e:72:a4:89:0c:4a:a5:a3: 12:8a:c3:0c:a3:cd:16:81:b1:85:21:a7:63:34:86: 1c:a3:97:62:d2:52:f9:26:80:02:f8:74:8e:4c:3b: d2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C9:AD:2D:33:A8:4A:33:96:39:60:D2:3E:1A:F1:F2:08:48:88:D9 X509v3 Authority Key Identifier: keyid:91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:79:d1:b6:e3:3c:3d:a2:90:00:6b:3d:87:ea:c0:5f:74:80: 74:10:6a:de:77:32:8c:01:fd:d2:d7:db:2e:c5:68:aa:ae:a7: 85:77:9b:8e:fd:30:b8:4e:fa:03:52:92:b8:ad:53:60:20:30: a9:31:cc:04:7f:80:75:a9:f2:f4:5f:23:79:88:92:d3:1c:67: 44:d4:d5:3c:89:d6:ca:e6:49:45:c9:d2:f8:67:99:c0:64:da: 35:ed:87:0e:d3:d6:2b:0a:7e:b4:82:ab:57:09:b7:39:6d:93: da:69:3a:e2:5b:7a:6c:85:b7:97:c2:ca:a5:f2:f4:fc:fa:6b: a7:83:5a:55:7b:d7:14:77:d6:76:a9:2d:33:ba:8a:3e:0c:43: 2b:cf:53:62:58:68:35:86:c8:59:a1:25:3c:4e:d9:9b:1b:99: cd:d7:7b:fb:2f:59:b0:5f:53:41:98:9f:57:03:94:5f:c0:91: 6e:51:7d:45:ca:6c:5d:06:72:12:51:cf:de:57:76:fd:bb:79: 6a:27:eb:8c:58:af:75:03:ef:62:11:ef:82:ce:81:6d:5b:78: 74:3f:4b:72:a6:66:b3:44:06:c2:39:18:de:59:24:1b:34:32: d2:a1:3f:05:67:6f:31:44:55:78:99:0a:00:ab:41:e9:09:2c: 5f:d6:2e:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQzMzUxMTAvBgNVBAUTKDkxQkM3OUFFMTVDQ0FFQTQ0RTRGRTc4NDVGQkZDQTYz RTdGQUVCOUUwHhcNMjYwMzI0MTcxNjA0WhcNMjYwMzMxMTcxNjA0WjAYMRYwFAYD VQQDEw02OWMyYzZkNC1hODJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Y1uVaoQq5+UHwjtyVyc5UqZD6ftOz3OFJVTNE7IZuIRtA2alONAGLWzcunt Jb9bvH3yKa5ncHuEqDEuzsi7GV6zxlBQ93fmzfasczVUTc0Ducj5Xd5/TELNM++w r6hP99Qn4RMIj72t94UHeAkUBJHXDQRJ9AoNh9998PlQclbSF6bj1EyQMeVeWWnY znfhwt6IESuPGMIKmOVZLP1ZnuFHJvQX8kDxqHCjJUEp7f4tAzyFuxrgd99qG/PN OwfekScMGXDhh7DkSZ15OqZom+9Qour1UiMITnKkiQxKpaMSisMMo80WgbGFIadj NIYco5di0lL5JoAC+HSOTDvSjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMLJrS0z qEozljlg0j4a8fIISIjZMB8GA1UdIwQYMBaAFJG8ea4VzK6kTk/nhF+/ymPn+uue MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDMzNS8zNDJEMjIyODUx RDExMUU5QUYxRkY3M0NDNEY5QUUwMi9rYng1cmhYTXJxUk9ULWVFWDdfS1ktZjY2 NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tieDVyaFhNcnFST1QtZUVYN19LWS1mNjY1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDMzNS8zNDJEMjIyODUxRDExMUU5QUYxRkY3M0NDNEY5QUUwMi9rYng1cmhYTXJx Uk9ULWVFWDdfS1ktZjY2NTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ3nRtuM8PaKQAGs9h+rAX3SAdBBq3ncyjAH90tfbLsVoqq6nhXebjv0wuE76 A1KSuK1TYCAwqTHMBH+Adany9F8jeYiS0xxnRNTVPInWyuZJRcnS+GeZwGTaNe2H DtPWKwp+tIKrVwm3OW2T2mk64lt6bIW3l8LKpfL0/Pprp4NaVXvXFHfWdqktM7qK PgxDK89TYlhoNYbIWaElPE7ZmxuZzdd7+y9ZsF9TQZifVwOUX8CRblF9RcpsXQZy ElHP3ld2/bt5aifrjFivdQPvYhHvgs6BbVt4dD9LcqZms0QGwjkY3lkkGzQy0qE/ BWdvMURVeJkKAKtB6QksX9YuUA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:37:30 2026 by rpki-client