$ rpki-client -vvf rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft File: kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft (raw, json) Hash identifier: V3jThYqk0v0/HNTUzh2pEP14xHIVLCs7owSYgqzazo8= Subject key identifier: 2A:C3:9E:B9:64:D4:53:00:4E:1D:C7:68:9E:3A:56:A7:9F:F2:E3:ED Authority key identifier: 92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84 Certificate issuer: /CN=A91B952E/serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684 Certificate serial: 04D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft Manifest number: 04D0 Signing time: Tue 24 Mar 2026 23:32:52 +0000 Manifest this update: Tue 24 Mar 2026 23:32:52 +0000 Manifest next update: Tue 31 Mar 2026 23:32:52 +0000 Files and hashes: 1: kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl (hash: 8UbyN//iQc2643939EHepgJqAtizdcUUS+HJvOYZoe0=) 2: 02D13C94D4B211F093413921C4F9AE02.roa (hash: 5S6cmEeP7M2EZTlTeoJaoR5wTUKBQoK3xjSaXGSNves=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1239 (0x4d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B952E, serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684 Validity Not Before: Mar 24 23:32:52 2026 GMT Not After : Mar 31 23:32:52 2026 GMT Subject: CN=69c31f24-fe79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:54:cd:f4:db:33:b6:99:bd:47:70:b6:0e:e7: 5d:e3:78:16:da:28:cb:c0:31:97:5d:f0:7f:6f:1d: 8f:21:65:3c:bc:bf:59:c4:3c:4c:80:1f:03:8b:93: 2f:0b:70:05:8b:a3:c4:1a:f9:10:22:67:31:95:18: f6:f4:47:5c:40:b4:99:c8:db:e0:89:e0:7b:db:11: 8c:9d:92:d8:e6:89:0c:ce:16:d9:e8:37:24:82:d9: fc:54:67:e6:e9:ae:15:1c:a4:5a:44:d0:f3:8a:3c: 6f:ba:b2:81:7a:fb:a4:f4:d3:f8:c4:06:90:12:eb: 32:83:e9:c8:e7:63:57:ca:0b:9b:8e:43:e2:f3:cd: 0e:b4:55:81:cf:b8:76:85:dd:f3:2c:58:68:be:11: 3a:a9:5b:82:af:cd:f8:5b:f0:87:7b:62:be:2f:49: 31:a3:3b:4a:7b:fc:b7:ae:15:b0:62:e2:cb:3a:d6: ac:c1:2a:f5:92:5b:32:c4:c6:0d:0b:d4:81:c7:c3: 22:58:51:92:62:f5:ef:db:d2:66:06:c3:8b:32:61: e7:4e:4c:dd:45:67:c0:19:ce:a2:a6:6d:92:ae:97: 05:85:dc:c6:db:8d:a1:12:1e:f1:36:c7:01:4a:55: 9e:0b:45:57:0f:6c:2d:78:78:dc:64:81:00:7e:69: 3c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C3:9E:B9:64:D4:53:00:4E:1D:C7:68:9E:3A:56:A7:9F:F2:E3:ED X509v3 Authority Key Identifier: keyid:92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:39:87:3e:b9:cb:1b:b5:80:12:c5:1b:ab:63:e8:34:4a:09: 08:8a:ee:f7:5c:2f:40:56:e7:52:64:7a:14:7a:27:33:6b:81: ee:17:f8:69:64:cc:c5:4e:6f:12:b3:41:ce:74:db:d8:ed:55: 61:63:68:0e:ef:98:04:9c:c4:cc:c6:9f:8f:d7:a9:68:23:09: 12:94:47:be:f0:ab:1b:c4:0a:ea:cc:02:0d:6a:2e:29:87:45: 21:62:0a:ee:b9:68:56:5e:c9:fc:77:86:82:ec:c6:b1:12:b3: 98:ee:9d:53:88:6b:90:34:e4:3e:89:66:0d:51:13:fb:cd:45: 2e:1d:02:0c:18:5c:53:60:3a:7d:79:32:b2:f4:b8:f9:21:01: 25:ac:76:74:32:50:94:11:6d:f1:00:00:87:58:12:73:f3:1a: 79:85:11:51:e3:1a:0c:61:63:f0:84:bf:26:55:63:e6:d1:2a: 43:5e:42:44:bc:9f:66:ac:85:d4:67:45:20:22:1b:ce:6e:b4: 65:14:90:a7:fb:61:7f:12:0a:68:2d:ad:95:b8:c1:fe:f8:e9: 7c:9e:d6:71:8e:e2:4a:c1:48:20:9b:28:c1:08:51:85:24:c1: 5e:fc:1e:0b:24:36:5d:1c:91:30:96:62:09:bb:24:68:f1:54: 73:72:61:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk1MkUxMTAvBgNVBAUTKDkyMjkxOTk1MzVFQkVFNDQ3MkEyMkZDNTE5NUIwQTdF RkZDQjY2ODQwHhcNMjYwMzI0MjMzMjUyWhcNMjYwMzMxMjMzMjUyWjAYMRYwFAYD VQQDEw02OWMzMWYyNC1mZTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoFTN9Nsztpm9R3C2Dudd43gW2ijLwDGXXfB/bx2PIWU8vL9ZxDxMgB8Di5Mv C3AFi6PEGvkQImcxlRj29EdcQLSZyNvgieB72xGMnZLY5okMzhbZ6Dckgtn8VGfm 6a4VHKRaRNDzijxvurKBevuk9NP4xAaQEusyg+nI52NXygubjkPi880OtFWBz7h2 hd3zLFhovhE6qVuCr834W/CHe2K+L0kxoztKe/y3rhWwYuLLOtaswSr1klsyxMYN C9SBx8MiWFGSYvXv29JmBsOLMmHnTkzdRWfAGc6ipm2SrpcFhdzG242hEh7xNscB SlWeC0VXD2wteHjcZIEAfmk87QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCrDnrlk 1FMATh3HaJ46Vqef8uPtMB8GA1UdIwQYMBaAFJIpGZU16+5EcqIvxRlbCn7/y2aE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTUyRS84M0NGODExNjYw RTQxMUVDQUQxODhEMzRDNEY5QUUwMi9raWtabFRYcjdrUnlvaV9GR1ZzS2Z2X0xa b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tpa1psVFhyN2tSeW9pX0ZHVnNLZnZfTFpvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTUyRS84M0NGODExNjYwRTQxMUVDQUQxODhEMzRDNEY5QUUwMi9raWtabFRYcjdr UnlvaV9GR1ZzS2Z2X0xab1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJjmHPrnLG7WAEsUbq2PoNEoJCIru91wvQFbnUmR6FHonM2uB7hf4aWTMxU5v ErNBznTb2O1VYWNoDu+YBJzEzMafj9epaCMJEpRHvvCrG8QK6swCDWouKYdFIWIK 7rloVl7J/HeGguzGsRKzmO6dU4hrkDTkPolmDVET+81FLh0CDBhcU2A6fXkysvS4 +SEBJax2dDJQlBFt8QAAh1gSc/MaeYURUeMaDGFj8IS/JlVj5tEqQ15CRLyfZqyF 1GdFICIbzm60ZRSQp/thfxIKaC2tlbjB/vjpfJ7WcY7iSsFIIJsowQhRhSTBXvwe CyQ2XRyRMJZiCbskaPFUc3JhgQ== -----END CERTIFICATE-----Generated at Thu Mar 26 00:54:14 2026 by rpki-client