$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft File: KZYjJd4LreTcndvFdq4ncBK8N1g.mft (raw, json) Hash identifier: Y7DE82fleo4ZH/YWTSNx15gyLHgSTyyZxofhl2TztXU= Subject key identifier: C6:77:8D:98:FB:6B:88:55:C8:FF:E7:B2:90:A2:78:39:2F:15:ED:40 Authority key identifier: 29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 Certificate issuer: /CN=A914DA2D/serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Certificate serial: 1B08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft Manifest number: 1AE4 Signing time: Sat 04 Apr 2026 16:14:07 +0000 Manifest this update: Sat 04 Apr 2026 16:14:07 +0000 Manifest next update: Sat 11 Apr 2026 16:14:07 +0000 Files and hashes: 1: KZYjJd4LreTcndvFdq4ncBK8N1g.crl (hash: VTqwITY+nuNp1pC9JDGwxcb4/Dhehc7XOIRLJenKsg8=) 2: B201496EF3A311EC8804FE09C4F9AE02.roa (hash: 7WJalEMOZVtxgJni8RlEELTTNzW+y4R0udMJ9qnWJ3I=) 3: 442A935E2F1F11F0A35F5757C4F9AE02.roa (hash: ep1WIPveJbhkF0Sl4UHnyTFp2JFnKNI9HU6gNgYhNKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6920 (0x1b08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DA2D, serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Validity Not Before: Apr 4 16:14:07 2026 GMT Not After : Apr 11 16:14:07 2026 GMT Subject: CN=69d138cf-aab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a5:a3:07:0c:5f:ab:07:cb:84:32:f5:cc:e0: 14:be:7b:cb:a9:67:47:6f:d3:7e:5c:99:df:7d:5b: c4:78:6d:1f:f6:70:84:be:16:ea:53:49:fc:fd:64: c5:da:d1:e0:e4:2c:63:04:b1:7a:67:c3:7e:68:43: 5d:f4:e0:82:90:8d:8d:3c:b4:22:0e:6d:ed:36:e0: 54:7a:34:26:b5:4e:eb:86:9a:d5:4e:59:ab:e3:e2: 58:51:15:b6:b4:b8:b3:72:39:c0:f2:85:c8:78:99: 4f:a6:df:6d:dd:64:d8:dd:e0:6b:72:0f:1d:d9:04: e2:a1:3f:b1:44:ea:6a:e5:60:0f:3e:ba:b9:8e:a9: 8f:37:00:b2:6c:fc:b4:88:99:83:14:c7:39:4f:d9: 75:3e:fe:08:52:d5:39:5d:4c:02:68:8e:e8:13:41: f7:e8:9c:70:f2:7c:0d:22:d8:f7:7a:1e:86:73:38: 79:32:b9:ff:af:60:5c:91:81:a2:b0:f5:49:4e:f5: 57:20:04:13:5d:f5:c6:4d:28:29:65:5a:5e:19:85: 1f:14:f4:67:5b:57:1c:39:9e:23:18:85:f1:b2:8d: ac:f0:55:31:75:a6:49:4a:20:e2:a7:0d:a0:5a:bc: 83:79:85:7b:37:d0:a9:4d:81:ed:cb:8b:a4:71:7b: da:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:77:8D:98:FB:6B:88:55:C8:FF:E7:B2:90:A2:78:39:2F:15:ED:40 X509v3 Authority Key Identifier: keyid:29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:9f:5b:89:e0:af:71:ac:ac:45:bf:01:f1:ba:f0:56:79:dc: 84:65:aa:17:b7:bf:bd:72:ca:16:2d:8f:86:c6:13:2e:3a:80: b7:61:fb:bb:39:8a:55:e5:0f:ab:b8:2e:cf:2f:bf:5c:3f:ca: a3:3e:9c:12:28:6c:68:fc:a6:2d:37:4f:60:74:eb:9d:b9:28: b7:0c:2a:df:df:39:02:82:92:9a:d1:92:c9:6a:15:2b:65:9c: d7:79:49:a9:c3:42:b4:9c:ec:df:49:12:e8:9e:dd:25:0e:71: f7:60:cd:33:e5:60:d8:b6:38:70:8f:69:e4:b1:08:0d:b5:48: 88:3a:62:a3:0a:df:8d:6b:4d:05:d7:22:ff:67:0e:d3:a4:42: cb:05:32:84:a9:de:63:65:11:bf:d2:32:f0:38:f5:bf:ad:0f: 8b:a6:e4:56:b5:c3:0c:d6:dd:0b:29:09:bd:51:b2:19:9c:70: 57:4c:23:d0:5e:30:53:f4:af:3e:1d:3c:d9:6e:7a:7c:fa:b3: cd:05:9e:50:ed:7f:66:a2:27:eb:f9:b1:4a:78:98:96:ed:f1: f0:51:80:3d:5d:40:42:05:dc:fc:57:24:c3:df:4e:b9:78:69: cc:12:b2:0a:65:c5:32:b0:7d:96:9d:de:b2:70:1b:0d:01:f8: 56:25:33:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERBMkQxMTAvBgNVBAUTKDI5OTYyMzI1REUwQkFERTREQzlEREJDNTc2QUUyNzcw MTJCQzM3NTgwHhcNMjYwNDA0MTYxNDA3WhcNMjYwNDExMTYxNDA3WjAYMRYwFAYD VQQDEw02OWQxMzhjZi1hYWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqWjBwxfqwfLhDL1zOAUvnvLqWdHb9N+XJnffVvEeG0f9nCEvhbqU0n8/WTF 2tHg5CxjBLF6Z8N+aENd9OCCkI2NPLQiDm3tNuBUejQmtU7rhprVTlmr4+JYURW2 tLizcjnA8oXIeJlPpt9t3WTY3eBrcg8d2QTioT+xROpq5WAPPrq5jqmPNwCybPy0 iJmDFMc5T9l1Pv4IUtU5XUwCaI7oE0H36Jxw8nwNItj3eh6Gczh5Mrn/r2BckYGi sPVJTvVXIAQTXfXGTSgpZVpeGYUfFPRnW1ccOZ4jGIXxso2s8FUxdaZJSiDipw2g WryDeYV7N9CpTYHty4ukcXvanQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMZ3jZj7 a4hVyP/nspCieDkvFe1AMB8GA1UdIwQYMBaAFCmWIyXeC63k3J3bxXauJ3ASvDdY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REEyRC84MzgzNjIwQTUw RDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJlVGNuZHZGZHE0bmNCSzhO MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0taWWpKZDRMcmVUY25kdkZkcTRuY0JLOE4xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REEyRC84MzgzNjIwQTUwRDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJl VGNuZHZGZHE0bmNCSzhOMWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACp9bieCvcaysRb8B8brwVnnchGWqF7e/vXLKFi2PhsYTLjqAt2H7uzmKVeUP q7guzy+/XD/Koz6cEihsaPymLTdPYHTrnbkotwwq3985AoKSmtGSyWoVK2Wc13lJ qcNCtJzs30kS6J7dJQ5x92DNM+Vg2LY4cI9p5LEIDbVIiDpiowrfjWtNBdci/2cO 06RCywUyhKneY2URv9Iy8Dj1v60Pi6bkVrXDDNbdCykJvVGyGZxwV0wj0F4wU/Sv Ph082W56fPqzzQWeUO1/ZqIn6/mxSniYlu3x8FGAPV1AQgXc/Fckw99OuXhpzBKy CmXFMrB9lp3esnAbDQH4ViUzIw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:58:07 2026 by rpki-client