$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft File: kXcqmmw5cZ-KbmlxY21ITt5DplA.mft (raw, json) Hash identifier: x237BdYjR1LwYR4m+GDO4rYu7tpGSPdLdtAcesv8Fo0= Subject key identifier: 5C:BC:BA:6E:46:50:6E:67:89:26:8D:61:E4:4B:B7:88:DC:98:32:CA Authority key identifier: 91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50 Certificate issuer: /CN=A9122C94/serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650 Certificate serial: 06C5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft Manifest number: 06BB Signing time: Sat 04 Apr 2026 20:56:59 +0000 Manifest this update: Sat 04 Apr 2026 20:56:59 +0000 Manifest next update: Sat 11 Apr 2026 20:56:59 +0000 Files and hashes: 1: kXcqmmw5cZ-KbmlxY21ITt5DplA.crl (hash: qZzQ9Qq9aP7FkyFWjes33TxtkTyW8Y8Feut0l4n6+NI=) 2: DFA876BAA1D011EB909F3352C4F9AE02.roa (hash: kx0li/zw87s40T3OezyGkC+0pUIU5Rs0sCA+z6TjHX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1733 (0x6c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122C94, serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650 Validity Not Before: Apr 4 20:56:59 2026 GMT Not After : Apr 11 20:56:59 2026 GMT Subject: CN=69d17b1b-a95c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fb:3a:7c:0b:63:f9:8b:ba:31:02:a7:38:76: 75:10:dc:26:62:15:27:54:af:d8:a8:77:ab:32:09: d3:e7:0b:58:8f:b7:2b:5e:fd:19:fc:92:f1:20:1f: 8c:a8:2d:48:61:09:d3:52:70:ad:e3:22:d1:50:72: 94:e8:2d:61:94:ad:03:7a:c1:78:34:dd:a9:24:da: 01:47:fc:98:37:1d:e6:5f:d3:56:6c:20:97:8f:3e: f4:79:a5:98:38:10:48:55:15:42:b0:70:c3:17:1f: f1:92:f6:09:b7:8a:f1:83:ce:ad:5e:54:62:97:30: c3:e2:b9:a1:0c:57:fa:71:e6:37:dc:cb:0e:29:81: dd:db:ec:68:12:7f:1a:c1:93:0c:4e:52:7a:85:c1: 60:74:80:c2:76:f9:83:7d:9d:ec:d8:b7:2c:d8:60: cd:a6:c4:ed:d0:b7:21:e9:34:cd:18:e8:8b:90:19: f2:71:2c:b0:e7:f9:e8:f0:7a:0c:7b:50:88:86:dd: bc:14:3d:e2:5f:4e:13:59:f1:d8:86:fb:f9:4d:2a: 2a:88:fd:43:24:1a:6a:52:7b:66:6a:5b:cd:24:41: 91:69:d0:dc:f2:78:5d:4b:31:50:96:bd:45:ed:a2: 33:e1:81:be:f7:44:7b:a1:0c:49:93:ca:ae:7b:1a: 6f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:BC:BA:6E:46:50:6E:67:89:26:8D:61:E4:4B:B7:88:DC:98:32:CA X509v3 Authority Key Identifier: keyid:91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:78:3a:64:13:2f:28:d0:66:ea:3b:75:ec:33:2b:27:9d:7a: 50:81:42:5e:f0:a9:af:62:e4:31:0f:15:b8:38:b8:21:53:c8: 80:57:28:92:56:6e:23:86:bc:19:8a:e1:d8:86:e3:97:90:dd: 4c:ba:67:da:53:59:7b:67:df:56:80:e8:aa:fa:9c:ae:d6:07: 56:78:a8:9a:32:f5:63:1d:bc:53:44:42:7a:55:ce:25:30:83: d1:12:ce:6f:40:12:9d:b2:7e:41:22:53:b2:43:11:d5:4f:a8: d0:55:4d:3e:fb:e8:df:91:25:2c:f0:5a:95:07:37:af:98:fe: 88:f3:15:2e:a5:ad:4a:86:c5:15:66:12:5c:62:7f:dc:90:70: ec:d1:56:91:3b:67:3b:7b:90:a5:4b:b4:77:cf:4d:d1:84:c4: 4b:36:11:a5:e4:cc:f8:06:55:d8:6f:30:47:f0:43:da:b9:1c: 76:3b:ce:78:44:1b:c0:31:15:1a:47:b5:c7:7e:28:6a:ed:2a: a6:14:72:87:c7:0f:9a:f2:e9:9c:ec:5d:21:4d:4e:af:1c:62: 0f:56:65:60:bb:27:af:43:12:56:d9:38:30:c2:01:9a:92:44: 3f:e6:0b:ec:67:23:30:1d:aa:f9:04:71:31:ac:61:d3:58:81: dc:2f:7d:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJDOTQxMTAvBgNVBAUTKDkxNzcyQTlBNkMzOTcxOUY4QTZFNjk3MTYzNkQ0ODRF REU0M0E2NTAwHhcNMjYwNDA0MjA1NjU5WhcNMjYwNDExMjA1NjU5WjAYMRYwFAYD VQQDEw02OWQxN2IxYi1hOTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPs6fAtj+Yu6MQKnOHZ1ENwmYhUnVK/YqHerMgnT5wtYj7crXv0Z/JLxIB+M qC1IYQnTUnCt4yLRUHKU6C1hlK0DesF4NN2pJNoBR/yYNx3mX9NWbCCXjz70eaWY OBBIVRVCsHDDFx/xkvYJt4rxg86tXlRilzDD4rmhDFf6ceY33MsOKYHd2+xoEn8a wZMMTlJ6hcFgdIDCdvmDfZ3s2Lcs2GDNpsTt0Lch6TTNGOiLkBnycSyw5/no8HoM e1CIht28FD3iX04TWfHYhvv5TSoqiP1DJBpqUntmalvNJEGRadDc8nhdSzFQlr1F 7aIz4YG+90R7oQxJk8quexpvzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFy8um5G UG5niSaNYeRLt4jcmDLKMB8GA1UdIwQYMBaAFJF3KppsOXGfim5pcWNtSE7eQ6ZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkM5NC82QUUyMDJBNkEx RDAxMUVCOTJBMkRGMjlDNEY5QUUwMi9rWGNxbW13NWNaLUtibWx4WTIxSVR0NURw bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tYY3FtbXc1Y1otS2JtbHhZMjFJVHQ1RHBsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkM5NC82QUUyMDJBNkExRDAxMUVCOTJBMkRGMjlDNEY5QUUwMi9rWGNxbW13NWNa LUtibWx4WTIxSVR0NURwbEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAong6ZBMvKNBm6jt17DMrJ516UIFCXvCpr2LkMQ8VuDi4IVPIgFcoklZuI4a8 GYrh2Ibjl5DdTLpn2lNZe2ffVoDoqvqcrtYHVniomjL1Yx28U0RCelXOJTCD0RLO b0ASnbJ+QSJTskMR1U+o0FVNPvvo35ElLPBalQc3r5j+iPMVLqWtSobFFWYSXGJ/ 3JBw7NFWkTtnO3uQpUu0d89N0YTESzYRpeTM+AZV2G8wR/BD2rkcdjvOeEQbwDEV Gke1x34oau0qphRyh8cPmvLpnOxdIU1OrxxiD1ZlYLsnr0MSVtk4MMIBmpJEP+YL 7GcjMB2q+QRxMaxh01iB3C99Lw== -----END CERTIFICATE-----Generated at Mon Apr 6 13:55:23 2026 by rpki-client