$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft File: kj-024ZZxeCui93HGpK2o3Ay89Q.mft (raw, json) Hash identifier: +DFhP4wMHoerl6sMProO/UB8tND/dngbA5dtTjPlxBU= Subject key identifier: 07:D6:E6:29:88:68:0F:B2:3F:0C:63:DD:16:AB:8B:3D:97:CC:3E:C0 Authority key identifier: 92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4 Certificate issuer: /CN=A91AA8E4/serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4 Certificate serial: 0968 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft Manifest number: 095F Signing time: Sat 04 Apr 2026 19:54:23 +0000 Manifest this update: Sat 04 Apr 2026 19:54:23 +0000 Manifest next update: Sat 11 Apr 2026 19:54:23 +0000 Files and hashes: 1: kj-024ZZxeCui93HGpK2o3Ay89Q.crl (hash: YoJRCSbtC2vpO+s5CIPdevNENQMxRFVJdT2UoIW0Vkg=) 2: E76ABE9EB51811EAA9D89B43C4F9AE02.roa (hash: kE3nF4uoNwr26LdrqYbjd4NqQ6Wc0Q+IQHICEWbmAls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2408 (0x968) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA8E4, serialNumber=923FB4DB8659C5E0AE8BDDC71A92B6A37032F3D4 Validity Not Before: Apr 4 19:54:23 2026 GMT Not After : Apr 11 19:54:23 2026 GMT Subject: CN=69d16c6f-c3db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9e:db:fd:c2:4d:0b:66:c1:f4:c9:27:8c:d0: 18:09:ff:f7:3e:a0:3e:c6:d8:5b:26:d0:01:7e:aa: eb:c8:e9:51:2c:7f:d4:5d:17:c5:d8:cf:25:6e:e4: d3:b0:5a:9b:f7:80:db:32:30:39:f0:4c:d5:06:28: 7b:35:a0:7f:6a:29:11:8e:87:73:a0:34:17:30:38: 2a:ac:a0:ca:ca:8a:5c:a9:db:30:86:ba:35:c6:b7: 3b:7b:37:4a:95:1c:a6:62:12:98:46:c3:3d:4f:d7: dd:b9:0e:b0:b3:07:a7:d4:e2:aa:bd:91:25:97:60: da:c1:5b:a6:aa:1b:b0:1d:04:84:51:1a:e0:4f:9a: e3:20:64:de:66:59:95:87:db:97:4d:e3:0e:4b:35: 6b:e2:92:e1:1a:97:57:85:cb:15:8c:cb:94:dd:db: f1:e8:4c:81:65:d0:77:21:d8:35:e0:bc:50:20:d8: ac:db:74:fa:28:81:4f:03:e3:19:52:d3:99:1c:b4: 07:3d:55:da:34:e2:02:c3:05:f4:84:c7:af:10:de: 71:b1:9c:17:50:0a:ad:5d:0f:b9:6a:7c:5c:5c:e6: 71:57:ac:96:ba:e3:cb:fd:03:72:b4:08:05:47:39: a6:de:c2:2a:ad:6d:54:6e:b5:4f:09:8c:e2:49:82: d8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D6:E6:29:88:68:0F:B2:3F:0C:63:DD:16:AB:8B:3D:97:CC:3E:C0 X509v3 Authority Key Identifier: keyid:92:3F:B4:DB:86:59:C5:E0:AE:8B:DD:C7:1A:92:B6:A3:70:32:F3:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kj-024ZZxeCui93HGpK2o3Ay89Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA8E4/C425F526B4F911EA85E60059C4F9AE02/kj-024ZZxeCui93HGpK2o3Ay89Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:2e:f0:24:da:f4:31:c4:a0:29:8c:d0:91:22:4d:00:c8:bf: 45:3c:8c:69:52:d4:5c:20:27:29:be:f1:ce:be:57:5f:08:11: ce:27:2c:fc:4c:53:3a:a6:88:89:cd:1e:c3:05:34:65:4a:53: f9:78:cd:72:03:c8:a8:7c:b9:7c:03:a2:95:2e:fb:40:4c:7e: 1f:13:29:14:9d:e9:dc:fb:93:b9:a3:44:1f:87:3c:05:41:10: 75:2c:64:8d:f2:4b:0f:5a:e6:ea:65:ff:0d:02:3f:f7:79:d5: 24:0a:cd:f1:a9:03:ab:24:27:c1:6b:0a:cc:f9:54:9c:55:f9: 53:2e:68:5b:f6:11:70:f9:62:da:bc:60:c3:09:c2:82:b9:05: 9d:46:e9:27:04:d1:c9:5e:19:ff:b8:71:08:0b:f8:f1:ef:6f: 99:2f:2d:61:0e:bd:c4:25:82:d3:f9:0b:ad:d4:f0:94:9e:37: 06:b3:42:ae:fd:b8:97:6e:1b:74:d2:f1:4f:e1:2f:cd:31:c6: 2d:d2:6b:2a:7c:99:6c:76:3e:fa:0a:b9:08:23:d5:8a:37:82: c6:cc:53:c8:8e:ab:f2:88:28:1f:93:f7:11:0e:84:e7:33:29: df:c5:da:fb:bc:7b:13:d3:02:92:37:b5:f9:75:44:59:c9:5a: ac:ea:5a:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE4RTQxMTAvBgNVBAUTKDkyM0ZCNERCODY1OUM1RTBBRThCRERDNzFBOTJCNkEz NzAzMkYzRDQwHhcNMjYwNDA0MTk1NDIzWhcNMjYwNDExMTk1NDIzWjAYMRYwFAYD VQQDEw02OWQxNmM2Zi1jM2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA257b/cJNC2bB9MknjNAYCf/3PqA+xthbJtABfqrryOlRLH/UXRfF2M8lbuTT sFqb94DbMjA58EzVBih7NaB/aikRjodzoDQXMDgqrKDKyopcqdswhro1xrc7ezdK lRymYhKYRsM9T9fduQ6wswen1OKqvZEll2DawVumqhuwHQSEURrgT5rjIGTeZlmV h9uXTeMOSzVr4pLhGpdXhcsVjMuU3dvx6EyBZdB3Idg14LxQINis23T6KIFPA+MZ UtOZHLQHPVXaNOICwwX0hMevEN5xsZwXUAqtXQ+5anxcXOZxV6yWuuPL/QNytAgF Rzmm3sIqrW1UbrVPCYziSYLYSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAfW5imI aA+yPwxj3Rariz2XzD7AMB8GA1UdIwQYMBaAFJI/tNuGWcXgrovdxxqStqNwMvPU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQThFNC9DNDI1RjUyNkI0 RjkxMUVBODVFNjAwNTlDNEY5QUUwMi9rai0wMjRaWnhlQ3VpOTNIR3BLMm8zQXk4 OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tqLTAyNFpaeGVDdWk5M0hHcEsybzNBeTg5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QThFNC9DNDI1RjUyNkI0RjkxMUVBODVFNjAwNTlDNEY5QUUwMi9rai0wMjRaWnhl Q3VpOTNIR3BLMm8zQXk4OVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATy7wJNr0McSgKYzQkSJNAMi/RTyMaVLUXCAnKb7xzr5XXwgRzics/ExTOqaI ic0ewwU0ZUpT+XjNcgPIqHy5fAOilS77QEx+HxMpFJ3p3PuTuaNEH4c8BUEQdSxk jfJLD1rm6mX/DQI/93nVJArN8akDqyQnwWsKzPlUnFX5Uy5oW/YRcPli2rxgwwnC grkFnUbpJwTRyV4Z/7hxCAv48e9vmS8tYQ69xCWC0/kLrdTwlJ43BrNCrv24l24b dNLxT+EvzTHGLdJrKnyZbHY++gq5CCPVijeCxsxTyI6r8ogoH5P3EQ6E5zMp38Xa +7x7E9MCkje1+XVEWclarOpaaQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:33:16 2026 by rpki-client