$ rpki-client -vvf rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft File: KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft (raw, json) Hash identifier: r86luW6h/pJpS44OoYjOMPyoULGxe+j6MJ1hNlQT5ko= Subject key identifier: 2B:C4:98:1E:65:83:DC:DD:03:BD:73:56:B4:BE:72:E1:4E:4B:0B:41 Authority key identifier: 2B:13:1A:A1:0D:7E:6B:FE:A3:67:E8:1B:73:D7:FD:B0:AC:01:D6:78 Certificate issuer: /CN=A912F3B6/serialNumber=2B131AA10D7E6BFEA367E81B73D7FDB0AC01D678 Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft Manifest number: 0148 Signing time: Sun 05 Apr 2026 04:44:43 +0000 Manifest this update: Sun 05 Apr 2026 04:44:43 +0000 Manifest next update: Sun 12 Apr 2026 04:44:43 +0000 Files and hashes: 1: KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.crl (hash: xRJOSy1PAHjomhJFl+oLRZgOqgRmcAtlommoG0vjA1Y=) 2: D91E3ADC498E11EF908FD222C4F9AE02.roa (hash: dV2yNdOt/46ICqDeuLFj+0Sp1pslxl2GwJkDaUPc31g=) 3: D9C5B55A498E11EF908FD222C4F9AE02.roa (hash: ohWNBeobdCPyY/6CPWfy1mGiydZdoWmdPKZh8LFovXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.crl rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F3B6, serialNumber=2B131AA10D7E6BFEA367E81B73D7FDB0AC01D678 Validity Not Before: Apr 5 04:44:43 2026 GMT Not After : Apr 12 04:44:43 2026 GMT Subject: CN=69d1e8bb-ad15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1c:99:22:b6:a6:c0:5e:af:64:a2:e4:87:c5: 12:fd:59:8d:c0:18:4c:f0:ab:e0:34:77:c9:0b:56: 57:50:2b:1b:a8:32:d8:39:19:7a:dd:81:88:39:07: dd:91:12:3c:f9:93:0f:84:68:4c:d1:90:1e:4a:8a: 87:a7:70:3a:47:be:7b:8f:28:ad:60:78:20:a9:a6: f2:b0:10:55:34:e4:aa:13:5e:69:44:1f:c0:e5:0b: e4:a9:68:a8:67:2a:8f:31:31:78:88:92:14:62:48: 9b:3f:a0:9e:04:90:c0:f5:a3:eb:64:e2:c9:83:9e: 02:e1:7c:0b:db:0e:8f:a1:20:dc:18:cc:91:e4:a2: 0e:07:87:e5:9d:fc:fc:cc:05:a6:35:32:bb:92:59: e6:8a:2b:5e:5a:4f:8c:dd:54:79:03:e5:13:06:25: c6:fe:38:48:b9:10:bd:77:59:1d:b2:b2:7b:f2:07: 06:87:52:b7:f1:de:63:4e:a7:f2:4b:24:92:5b:fd: 38:8a:a6:8e:04:ed:1b:5b:da:5d:7a:82:43:ed:ea: ed:73:bc:23:64:4d:1c:c3:31:72:30:53:d4:be:fc: 9e:91:91:37:1b:d4:33:56:73:a9:8b:02:82:28:c4: 5f:3c:b1:c6:23:67:80:1e:6c:85:cb:4d:a4:78:38: 59:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C4:98:1E:65:83:DC:DD:03:BD:73:56:B4:BE:72:E1:4E:4B:0B:41 X509v3 Authority Key Identifier: keyid:2B:13:1A:A1:0D:7E:6B:FE:A3:67:E8:1B:73:D7:FD:B0:AC:01:D6:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:79:d1:c8:0b:9a:cd:79:08:be:23:43:9a:28:32:88:94:c1: 07:6a:e3:a8:3e:06:8a:f0:db:8d:62:d1:20:06:4e:a9:17:73: 83:0f:86:af:b0:77:8d:a7:ce:5b:fa:fd:23:bf:a2:67:83:23: 03:8c:3b:06:03:e6:3a:40:c8:86:92:e0:24:5e:2d:89:46:69: 4d:71:79:ee:7a:f8:ce:ad:24:16:1b:fe:83:7c:0f:3a:5f:8b: a6:ec:4f:59:d4:3e:93:78:aa:0c:74:26:d0:14:91:f7:59:38: df:2f:c6:3f:a1:13:90:c8:ba:7b:d0:b9:19:08:8d:ec:1c:86: 13:b5:d4:d4:c2:9d:15:f3:8c:5b:31:d5:c5:c8:28:2e:da:1a: 8b:95:27:9e:fb:1d:76:6d:42:4d:68:e1:42:f8:86:ed:3b:6c: 2d:6e:b2:91:b9:c5:bc:66:e8:97:d2:8a:35:c6:88:59:43:75: 38:8b:19:1d:77:d3:54:3a:cb:e7:16:33:35:7b:d1:ec:46:67: b4:b7:79:07:50:5f:63:b5:66:34:54:14:12:9d:d9:23:4b:ff: 8f:95:6d:7f:87:42:71:02:47:da:4c:94:d1:1e:55:9b:14:00: 90:c5:17:6f:fc:fb:57:36:58:83:af:7e:4d:9b:af:d7:b0:79: 44:90:4f:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzQjYxMTAvBgNVBAUTKDJCMTMxQUExMEQ3RTZCRkVBMzY3RTgxQjczRDdGREIw QUMwMUQ2NzgwHhcNMjYwNDA1MDQ0NDQzWhcNMjYwNDEyMDQ0NDQzWjAYMRYwFAYD VQQDEw02OWQxZThiYi1hZDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthyZIramwF6vZKLkh8US/VmNwBhM8KvgNHfJC1ZXUCsbqDLYORl63YGIOQfd kRI8+ZMPhGhM0ZAeSoqHp3A6R757jyitYHggqabysBBVNOSqE15pRB/A5QvkqWio ZyqPMTF4iJIUYkibP6CeBJDA9aPrZOLJg54C4XwL2w6PoSDcGMyR5KIOB4flnfz8 zAWmNTK7klnmiiteWk+M3VR5A+UTBiXG/jhIuRC9d1kdsrJ78gcGh1K38d5jTqfy SySSW/04iqaOBO0bW9pdeoJD7ertc7wjZE0cwzFyMFPUvvyekZE3G9QzVnOpiwKC KMRfPLHGI2eAHmyFy02keDhZrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCvEmB5l g9zdA71zVrS+cuFOSwtBMB8GA1UdIwQYMBaAFCsTGqENfmv+o2foG3PX/bCsAdZ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjNCNi81MEYwMTFDODQ4 QkExMUVGQkQ0NTE2M0RDNEY5QUUwMi9LeE1hb1ExLWFfNmpaLWdiYzlmOXNLd0Ix bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0t4TWFvUTEtYV82alotZ2JjOWY5c0t3QjFuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjNCNi81MEYwMTFDODQ4QkExMUVGQkQ0NTE2M0RDNEY5QUUwMi9LeE1hb1ExLWFf NmpaLWdiYzlmOXNLd0IxbmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATXnRyAuazXkIviNDmigyiJTBB2rjqD4GivDbjWLRIAZOqRdzgw+Gr7B3jafO W/r9I7+iZ4MjA4w7BgPmOkDIhpLgJF4tiUZpTXF57nr4zq0kFhv+g3wPOl+LpuxP WdQ+k3iqDHQm0BSR91k43y/GP6ETkMi6e9C5GQiN7ByGE7XU1MKdFfOMWzHVxcgo Ltoai5Unnvsddm1CTWjhQviG7TtsLW6ykbnFvGbol9KKNcaIWUN1OIsZHXfTVDrL 5xYzNXvR7EZntLd5B1BfY7VmNFQUEp3ZI0v/j5Vtf4dCcQJH2kyU0R5VmxQAkMUX b/z7VzZYg69+TZuv17B5RJBPcA== -----END CERTIFICATE-----Generated at Mon Apr 6 01:17:01 2026 by rpki-client