$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft File: KBiMFu7JB0JxcnjCic-C9QTyWqk.mft (raw, json) Hash identifier: 5KCMnwbDGWWO0c22xT9WLmJ1Jq7x0uv1xIGYT4R+dOg= Subject key identifier: DE:91:BB:D0:14:53:AE:6B:A1:4E:D5:F4:DB:E3:51:58:A0:9B:15:34 Authority key identifier: 28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9 Certificate issuer: /CN=A912F387/serialNumber=28188C16EEC90742717278C289CF82F504F25AA9 Certificate serial: 01A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft Manifest number: 01A0 Signing time: Thu 19 Mar 2026 03:04:03 +0000 Manifest this update: Thu 19 Mar 2026 03:04:02 +0000 Manifest next update: Thu 26 Mar 2026 03:04:02 +0000 Files and hashes: 1: KBiMFu7JB0JxcnjCic-C9QTyWqk.crl (hash: jf8/DF4QjFO9CsI85y7IJ+Fg+HJJ3rmMlxaPyy9AsSA=) 2: FCA046066C8611EFBF35D221C4F9AE02.roa (hash: E6IYFtcpZ/59YvDx9G0yLx/SsKVSGs49+4dsMVqOHBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 03:04:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F387, serialNumber=28188C16EEC90742717278C289CF82F504F25AA9 Validity Not Before: Mar 19 03:04:02 2026 GMT Not After : Mar 26 03:04:02 2026 GMT Subject: CN=69bb67a3-d30d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:76:e5:65:f9:ae:ba:0b:2d:da:f7:8e:41:5c: 50:a4:e7:0d:86:83:e8:72:e7:77:a8:ce:b1:44:10: 9d:07:45:71:1a:fd:6b:ca:6c:d8:cc:b4:02:5f:7a: df:14:6d:0f:75:a2:19:ac:ff:25:cb:cf:74:8d:89: 6a:75:6a:bc:79:5e:d9:46:ff:54:36:84:6f:27:fa: 03:80:c2:fc:2a:3b:13:ef:72:14:76:05:d3:6e:7f: 04:ad:76:a7:73:0b:a4:67:76:a3:9e:a2:28:ef:e4: 91:36:c0:67:a8:97:83:59:f4:f5:a0:de:32:0d:00: 21:27:36:26:f6:63:03:f2:29:e9:0b:a0:03:f6:90: b9:f2:96:93:7d:2e:c0:78:c7:2a:c0:10:3b:da:0c: 4a:fa:1b:25:a0:c6:2d:76:b7:05:14:84:a8:70:96: 78:09:be:b3:d0:cb:60:9f:11:cf:6a:87:93:c8:63: 8a:e8:94:98:34:6c:85:ca:d0:43:15:e1:38:92:b5: f6:0a:f4:fe:8c:19:90:8c:5e:3d:dc:b0:30:09:11: f2:79:7f:84:1c:cc:71:a7:e4:1a:13:e4:e5:6f:9b: bb:f8:70:5f:0e:54:f8:ff:dd:77:56:8b:a6:e0:ef: 5d:33:1d:a4:e7:07:70:54:41:8d:6c:73:01:05:86: e3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:91:BB:D0:14:53:AE:6B:A1:4E:D5:F4:DB:E3:51:58:A0:9B:15:34 X509v3 Authority Key Identifier: keyid:28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:43:81:a9:a5:c2:76:fb:3e:4f:21:2d:7c:b8:77:7b:db:15: 1e:0c:38:d6:f2:56:01:2e:a9:69:d0:9d:35:0b:6b:41:92:7a: 11:af:8a:ae:05:e8:82:50:41:af:b2:ab:a0:42:38:f9:cb:49: 55:95:a6:03:6d:4a:27:13:d8:5f:9e:5a:b9:ea:cb:27:9d:59: 0b:11:79:f5:8f:66:45:61:df:90:07:db:13:58:55:12:f3:c0: 62:20:65:75:85:71:88:11:24:b9:68:09:fc:95:00:ed:75:5d: d9:c8:2d:4c:9c:99:d5:fb:9d:65:65:77:9b:32:65:78:e9:51: 3a:0e:12:91:7a:53:0b:28:8b:ef:ee:7d:0a:19:34:6a:83:f3: 04:48:a8:7c:a9:9e:6c:13:5f:b5:f1:b1:2f:a3:f0:94:2c:b6: 53:1b:4e:b5:71:03:ca:44:d6:ab:be:ce:cd:b4:ca:e2:1c:58: 3d:52:19:6e:09:40:c3:6e:1c:cd:f0:2d:84:7e:21:00:22:99: 16:60:71:4b:c4:29:57:51:1c:8a:15:e1:f6:07:25:cf:7a:63: 46:c5:a1:84:80:8e:5a:b2:35:32:82:31:8c:8d:45:53:3a:96: 96:ae:40:1c:cd:82:04:98:16:b1:21:8f:17:78:d4:21:70:22: 96:28:d1:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzODcxMTAvBgNVBAUTKDI4MTg4QzE2RUVDOTA3NDI3MTcyNzhDMjg5Q0Y4MkY1 MDRGMjVBQTkwHhcNMjYwMzE5MDMwNDAyWhcNMjYwMzI2MDMwNDAyWjAYMRYwFAYD VQQDEw02OWJiNjdhMy1kMzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi3blZfmuugst2veOQVxQpOcNhoPocud3qM6xRBCdB0VxGv1rymzYzLQCX3rf FG0PdaIZrP8ly890jYlqdWq8eV7ZRv9UNoRvJ/oDgML8KjsT73IUdgXTbn8ErXan cwukZ3ajnqIo7+SRNsBnqJeDWfT1oN4yDQAhJzYm9mMD8inpC6AD9pC58paTfS7A eMcqwBA72gxK+hsloMYtdrcFFISocJZ4Cb6z0MtgnxHPaoeTyGOK6JSYNGyFytBD FeE4krX2CvT+jBmQjF493LAwCRHyeX+EHMxxp+QaE+Tlb5u7+HBfDlT4/913Voum 4O9dMx2k5wdwVEGNbHMBBYbjzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN6Ru9AU U65roU7V9NvjUVigmxU0MB8GA1UdIwQYMBaAFCgYjBbuyQdCcXJ4wonPgvUE8lqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjM4Ny9GRTRENzhFMkI1 QzExMUVFOTVCNTgzNDFDNEY5QUUwMi9LQmlNRnU3SkIwSnhjbmpDaWMtQzlRVHlX cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tCaU1GdTdKQjBKeGNuakNpYy1DOVFUeVdxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjM4Ny9GRTRENzhFMkI1QzExMUVFOTVCNTgzNDFDNEY5QUUwMi9LQmlNRnU3SkIw SnhjbmpDaWMtQzlRVHlXcWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnkOBqaXCdvs+TyEtfLh3e9sVHgw41vJWAS6padCdNQtrQZJ6Ea+KrgXoglBB r7KroEI4+ctJVZWmA21KJxPYX55auerLJ51ZCxF59Y9mRWHfkAfbE1hVEvPAYiBl dYVxiBEkuWgJ/JUA7XVd2cgtTJyZ1fudZWV3mzJleOlROg4SkXpTCyiL7+59Chk0 aoPzBEiofKmebBNftfGxL6PwlCy2UxtOtXEDykTWq77OzbTK4hxYPVIZbglAw24c zfAthH4hACKZFmBxS8QpV1EcihXh9gclz3pjRsWhhICOWrI1MoIxjI1FUzqWlq5A HM2CBJgWsSGPF3jUIXAilijRGg== -----END CERTIFICATE-----Generated at Fri Mar 20 17:19:55 2026 by rpki-client