$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft File: kFj-3Oxfh289_hYZQxnBRcnAzLU.mft (raw, json) Hash identifier: lf4tVPxqqJolEu8yHmnIgBlIiAG8EG6i3pejVZ6+fG0= Subject key identifier: B8:60:54:B4:B1:C1:F7:A8:1A:05:A8:94:E5:0B:05:91:1E:D1:78:8C Authority key identifier: 90:58:FE:DC:EC:5F:87:6F:3D:FE:16:19:43:19:C1:45:C9:C0:CC:B5 Certificate issuer: /CN=A9185B0F/serialNumber=9058FEDCEC5F876F3DFE16194319C145C9C0CCB5 Certificate serial: 0701 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft Manifest number: 06F9 Signing time: Sat 04 Apr 2026 21:49:30 +0000 Manifest this update: Sat 04 Apr 2026 21:49:30 +0000 Manifest next update: Sat 11 Apr 2026 21:49:30 +0000 Files and hashes: 1: kFj-3Oxfh289_hYZQxnBRcnAzLU.crl (hash: pS6m+hudlCe/xqqok/6cJgj3wtaAoysm3zoValOYRN8=) 2: 25A7FE7E855211EB8DEDD812C4F9AE02.roa (hash: JFLwuBXWDX0J8f5lX14aiOUiyE2v7U9ODxE/5aeQfZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.crl rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 21:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1793 (0x701) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B0F, serialNumber=9058FEDCEC5F876F3DFE16194319C145C9C0CCB5 Validity Not Before: Apr 4 21:49:30 2026 GMT Not After : Apr 11 21:49:30 2026 GMT Subject: CN=69d1876a-dfd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3a:99:f6:a5:74:28:6f:c3:77:f4:79:d2:02: ac:93:05:c0:54:da:59:9b:ef:41:37:7b:fc:9b:d0: f6:7a:74:dd:29:d2:81:6e:47:f9:2c:84:f4:5a:6c: 24:22:e5:35:84:4f:bc:7d:71:f2:07:9f:96:a2:50: 4d:9a:bf:18:3f:18:b0:f2:d1:6e:54:4b:69:c8:2c: 47:8a:94:9b:e0:01:57:1d:37:98:cc:1a:ea:4e:8b: aa:41:d4:9d:39:63:68:6f:db:bd:d0:82:b9:51:47: fb:c0:74:b3:48:22:5e:f1:4c:01:c2:53:83:fb:a6: 40:12:1f:4a:90:cc:64:c0:34:f9:5f:70:41:46:2a: 65:a2:72:7d:64:49:f4:b6:eb:6f:33:a0:a8:f0:c2: d1:e3:5d:20:a3:ba:e1:e8:81:a6:66:c7:45:41:10: a4:0c:3a:5e:7e:4d:a1:1b:89:6c:23:21:d4:60:a2: 98:d8:f4:e1:6d:06:bc:6d:ea:58:60:fd:13:82:01: f7:bd:c7:69:f6:46:0a:7d:19:51:01:14:53:ea:c8: 0b:41:c7:a1:d5:04:00:55:4d:56:6c:70:04:4a:b0: f9:64:3d:aa:68:fa:fc:6f:ba:43:57:e5:05:3d:82: 72:3b:dd:8d:49:0c:81:a2:66:75:02:df:59:58:e2: 3c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:60:54:B4:B1:C1:F7:A8:1A:05:A8:94:E5:0B:05:91:1E:D1:78:8C X509v3 Authority Key Identifier: keyid:90:58:FE:DC:EC:5F:87:6F:3D:FE:16:19:43:19:C1:45:C9:C0:CC:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:d1:07:b9:d2:c2:b5:bd:e8:d2:fd:44:88:5f:0b:20:d7:99: a1:19:a8:9c:a8:03:46:d1:98:dd:8e:fe:86:6b:b8:53:13:d2: 06:7b:03:c8:a9:c4:43:75:db:b9:9d:d2:93:9d:c8:57:19:01: 35:30:6e:31:63:af:8a:1b:d6:2f:db:95:0e:16:e3:79:c4:04: e2:69:39:ae:1b:8c:c2:88:72:fe:e6:6a:66:dd:f1:bd:01:bd: e4:c2:28:67:2a:a3:03:5d:01:82:a4:4a:e7:61:d8:5b:f1:63: d2:0a:da:43:9d:87:c2:da:07:ed:17:31:70:d5:76:c6:6c:40: 45:35:ed:21:d5:60:dd:d5:47:7f:7d:80:15:ab:d5:77:80:04: cb:26:1f:81:fa:e6:4d:34:f8:b3:ce:82:2a:3e:39:1b:8b:03: 5a:1f:a1:f4:2c:0f:5a:a6:0b:57:f0:71:e7:98:20:e1:44:cb: 14:b4:c4:ca:7d:be:31:14:f4:f4:8c:a5:17:80:76:45:43:ec: 25:dc:a0:88:0d:d8:a0:f5:11:54:96:39:49:3c:87:18:99:df: 8f:7f:12:55:ae:9c:6d:e5:3b:9e:ae:50:c9:11:22:cb:7d:e6: bd:18:87:d8:2c:02:99:a6:3f:66:f5:c0:2b:85:bf:30:20:c1: 11:02:11:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCMEYxMTAvBgNVBAUTKDkwNThGRURDRUM1Rjg3NkYzREZFMTYxOTQzMTlDMTQ1 QzlDMENDQjUwHhcNMjYwNDA0MjE0OTMwWhcNMjYwNDExMjE0OTMwWjAYMRYwFAYD VQQDEw02OWQxODc2YS1kZmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmTqZ9qV0KG/Dd/R50gKskwXAVNpZm+9BN3v8m9D2enTdKdKBbkf5LIT0Wmwk IuU1hE+8fXHyB5+WolBNmr8YPxiw8tFuVEtpyCxHipSb4AFXHTeYzBrqTouqQdSd OWNob9u90IK5UUf7wHSzSCJe8UwBwlOD+6ZAEh9KkMxkwDT5X3BBRiplonJ9ZEn0 tutvM6Co8MLR410go7rh6IGmZsdFQRCkDDpefk2hG4lsIyHUYKKY2PThbQa8bepY YP0TggH3vcdp9kYKfRlRARRT6sgLQceh1QQAVU1WbHAESrD5ZD2qaPr8b7pDV+UF PYJyO92NSQyBomZ1At9ZWOI8HQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLhgVLSx wfeoGgWolOULBZEe0XiMMB8GA1UdIwQYMBaAFJBY/tzsX4dvPf4WGUMZwUXJwMy1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUIwRi81MkQwQTEyMDg1 NEUxMUVCQjc1QkIwMDlDNEY5QUUwMi9rRmotM094ZmgyODlfaFlaUXhuQlJjbkF6 TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tGai0zT3hmaDI4OV9oWVpReG5CUmNuQXpMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUIwRi81MkQwQTEyMDg1NEUxMUVCQjc1QkIwMDlDNEY5QUUwMi9rRmotM094Zmgy ODlfaFlaUXhuQlJjbkF6TFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO9EHudLCtb3o0v1EiF8LINeZoRmonKgDRtGY3Y7+hmu4UxPSBnsDyKnEQ3Xb uZ3Sk53IVxkBNTBuMWOvihvWL9uVDhbjecQE4mk5rhuMwohy/uZqZt3xvQG95MIo ZyqjA10BgqRK52HYW/Fj0graQ52HwtoH7RcxcNV2xmxARTXtIdVg3dVHf32AFavV d4AEyyYfgfrmTTT4s86CKj45G4sDWh+h9CwPWqYLV/Bx55gg4UTLFLTEyn2+MRT0 9IylF4B2RUPsJdygiA3YoPURVJY5STyHGJnfj38SVa6cbeU7nq5QyREiy33mvRiH 2CwCmaY/ZvXAK4W/MCDBEQIRag== -----END CERTIFICATE-----Generated at Mon Apr 6 08:33:15 2026 by rpki-client