$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft File: kj-024ZZxeCui93HGpK2o3Ay89Q.mft (raw, json) Hash identifier: f8A/BqmraAuZpv2Y2eoN1G5e5Q6rnenhu0nJHW1dKjU= Subject key identifier: C4:B6:29:57:24:4B:9D:F4:34:16:43:1B:BB:50:89:53:C8:BF:DC:0D Authority key identifier: 92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4 Certificate issuer: /CN=A91AA8E4/serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4 Certificate serial: 0962 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft Manifest number: 0959 Signing time: Tue 24 Mar 2026 19:53:46 +0000 Manifest this update: Tue 24 Mar 2026 19:53:46 +0000 Manifest next update: Tue 31 Mar 2026 19:53:46 +0000 Files and hashes: 1: kj-024ZZxeCui93HGpK2o3Ay89Q.crl (hash: beNrX+lE4EDtg0Mfuf0zdu5qSYlCwKdnBIfm1EUVSMA=) 2: E76ABE9EB51811EAA9D89B43C4F9AE02.roa (hash: kE3nF4uoNwr26LdrqYbjd4NqQ6Wc0Q+IQHICEWbmAls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:53:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2402 (0x962) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA8E4, serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4 Validity Not Before: Mar 24 19:53:46 2026 GMT Not After : Mar 31 19:53:46 2026 GMT Subject: CN=69c2ebca-76e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:24:85:00:85:a0:01:3d:14:e0:fc:73:bb:76: 67:a4:83:b9:54:d4:37:2a:e5:45:a9:32:ed:6e:1c: cb:3b:2e:1c:be:12:26:df:aa:4e:8a:01:d3:12:31: fe:7f:6a:97:57:f6:93:34:b9:ce:92:c1:99:99:93: 84:07:ed:0a:23:fe:0b:fb:e0:a0:89:69:bc:96:26: 27:6e:cf:e0:bc:5b:ae:6e:83:21:00:5d:e4:4e:86: 36:fd:03:c6:ad:ff:57:0d:42:6d:24:5f:e2:89:d8: 1d:1e:22:cc:bd:6f:bc:10:75:be:97:e1:64:d5:35: 72:ed:4f:5d:11:a9:66:89:10:e4:b4:2d:df:63:9e: a3:ec:8e:3f:be:7a:be:6b:5b:a1:5c:1c:1c:d4:26: 44:17:93:9d:e3:38:2a:05:f8:fb:bd:b4:11:f8:31: 68:1f:20:0c:17:7b:d1:df:2e:06:91:ba:88:74:45: 29:e7:18:a4:57:b3:72:15:e3:a3:28:34:fe:67:00: ee:b1:bf:c8:83:f4:43:53:72:ef:33:f6:df:16:d5: cf:6d:ed:02:b2:28:5d:48:3b:a0:da:41:e9:aa:bb: 79:e3:0a:26:a8:8c:31:45:22:c1:5b:4f:6b:17:68: 3a:b2:60:3e:b8:13:a0:b2:dd:17:a2:9f:c8:19:1d: a1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B6:29:57:24:4B:9D:F4:34:16:43:1B:BB:50:89:53:C8:BF:DC:0D X509v3 Authority Key Identifier: keyid:92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:1c:9b:65:f7:b3:de:a4:ca:b1:b2:fc:a5:83:13:d3:3b:38: 7d:44:64:60:58:5d:13:07:f7:1e:d9:b1:50:9b:49:37:30:a8: e0:35:e6:70:88:4c:8f:54:cf:a2:8d:35:49:bc:49:11:cc:12: 94:67:82:d7:b5:66:b5:38:7a:03:a2:30:4e:70:46:f2:cd:b9: 14:1e:ae:a0:ad:82:6b:65:d1:d1:8c:55:39:a1:97:7b:55:8c: 39:9c:48:79:35:91:4a:b5:10:63:dd:56:7b:c2:ac:f2:47:8a: f4:08:98:e6:24:79:cc:86:8c:01:d2:c2:38:ae:ee:b5:0d:0f: 30:a1:a5:42:dd:27:2c:7e:a6:ae:47:59:83:dc:18:b8:d3:60: ff:30:51:9c:34:4b:c8:c3:e0:86:dc:e1:3b:ae:76:87:e3:ff: b5:a1:c5:21:18:98:c5:ba:b1:1d:7c:5c:4e:d5:63:1c:65:8e: e5:5d:84:44:1c:2f:db:78:b4:60:84:a6:5b:42:0a:c8:fe:a2: b1:8c:db:6e:9e:26:5a:4d:ef:47:d2:e1:2d:90:ae:4a:74:31: 51:c5:10:a9:38:ca:cb:bf:00:5a:34:08:42:23:76:49:45:6c: b7:c3:d1:25:f5:3a:7f:65:c7:3f:d0:70:4f:21:a5:ff:c1:d0: 70:94:5b:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE4RTQxMTAvBgNVBAUTKDkyM0ZCNERCODY1OUM1RTBBRThCRERDNzFBOTJCNkEz NzAzMkYzRDQwHhcNMjYwMzI0MTk1MzQ2WhcNMjYwMzMxMTk1MzQ2WjAYMRYwFAYD VQQDEw02OWMyZWJjYS03NmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsiSFAIWgAT0U4Pxzu3ZnpIO5VNQ3KuVFqTLtbhzLOy4cvhIm36pOigHTEjH+ f2qXV/aTNLnOksGZmZOEB+0KI/4L++CgiWm8liYnbs/gvFuuboMhAF3kToY2/QPG rf9XDUJtJF/iidgdHiLMvW+8EHW+l+Fk1TVy7U9dEalmiRDktC3fY56j7I4/vnq+ a1uhXBwc1CZEF5Od4zgqBfj7vbQR+DFoHyAMF3vR3y4GkbqIdEUp5xikV7NyFeOj KDT+ZwDusb/Ig/RDU3LvM/bfFtXPbe0CsihdSDug2kHpqrt54womqIwxRSLBW09r F2g6smA+uBOgst0Xop/IGR2h9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMS2KVck S530NBZDG7tQiVPIv9wNMB8GA1UdIwQYMBaAFJI/tNuGWcXgrovdxxqStqNwMvPU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQThFNC9DNDI1RjUyNkI0 RjkxMUVBODVFNjAwNTlDNEY5QUUwMi9rai0wMjRaWnhlQ3VpOTNIR3BLMm8zQXk4 OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tqLTAyNFpaeGVDdWk5M0hHcEsybzNBeTg5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QThFNC9DNDI1RjUyNkI0RjkxMUVBODVFNjAwNTlDNEY5QUUwMi9rai0wMjRaWnhl Q3VpOTNIR3BLMm8zQXk4OVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhhybZfez3qTKsbL8pYMT0zs4fURkYFhdEwf3HtmxUJtJNzCo4DXmcIhMj1TP oo01SbxJEcwSlGeC17VmtTh6A6IwTnBG8s25FB6uoK2Ca2XR0YxVOaGXe1WMOZxI eTWRSrUQY91We8Ks8keK9AiY5iR5zIaMAdLCOK7utQ0PMKGlQt0nLH6mrkdZg9wY uNNg/zBRnDRLyMPghtzhO652h+P/taHFIRiYxbqxHXxcTtVjHGWO5V2ERBwv23i0 YISmW0IKyP6isYzbbp4mWk3vR9LhLZCuSnQxUcUQqTjKy78AWjQIQiN2SUVst8PR JfU6f2XHP9BwTyGl/8HQcJRbCg== -----END CERTIFICATE-----Generated at Thu Mar 26 02:45:23 2026 by rpki-client