$ rpki-client -vvf rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft File: KiZlwxQeS_P9LwBKrimlmHETod8.mft (raw, json) Hash identifier: r1cs+LOsopvKSCjIn1rCmikUiwv6D7bAQV3N+OoQNjA= Subject key identifier: 21:35:D5:49:B4:FD:6B:90:25:DC:3F:A7:AE:65:15:01:35:05:67:5E Authority key identifier: 2A:26:65:C3:14:1E:4B:F3:FD:2F:00:4A:AE:29:A5:98:71:13:A1:DF Certificate issuer: /CN=A911972D/serialNumber=2A2665C3141E4BF3FD2F004AAE29A5987113A1DF Certificate serial: 0430 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KiZlwxQeS_P9LwBKrimlmHETod8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft Manifest number: 0428 Signing time: Fri 17 Apr 2026 00:16:16 +0000 Manifest this update: Fri 17 Apr 2026 00:16:15 +0000 Manifest next update: Fri 24 Apr 2026 00:16:15 +0000 Files and hashes: 1: KiZlwxQeS_P9LwBKrimlmHETod8.crl (hash: 1FnxLg1sRi0D1Xrw2xCq/p4dMJf29WVqK7hBxqDFGMQ=) 2: B067CCDCA8C511EC8F560C42C4F9AE02.roa (hash: fIfbNfI4LK0sIc8YlB3yB2MWelYN+TJwvhzmec0KKmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.crl rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KiZlwxQeS_P9LwBKrimlmHETod8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:16:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1072 (0x430) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911972D, serialNumber=2A2665C3141E4BF3FD2F004AAE29A5987113A1DF Validity Not Before: Apr 17 00:16:15 2026 GMT Not After : Apr 24 00:16:15 2026 GMT Subject: CN=69e17bcf-54a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4b:70:44:ac:44:8b:45:c8:22:bc:1b:dc:f1: 12:52:97:d3:c1:17:34:12:09:eb:c0:b7:7f:43:c5: c4:b9:f7:4e:6b:62:5f:44:cf:43:2e:1f:f0:30:28: bf:b2:7f:5e:96:7f:4d:f2:2e:26:54:c0:97:b6:f8: 15:dc:ed:3f:83:d0:b6:f8:a3:ae:45:38:ef:30:b4: ea:22:bd:bf:48:fd:7d:dd:7a:72:73:e5:ae:40:ce: 79:7a:0c:f2:dd:46:44:c2:23:2d:9e:9c:a2:f9:4e: 80:44:72:00:5b:a3:3e:24:4d:b0:30:23:e1:79:47: 45:1c:92:cc:ec:17:c5:60:29:62:c1:3b:b6:59:36: 66:e2:b2:6a:87:57:92:3a:88:d0:75:cd:c0:6d:fa: f6:bc:1f:26:15:39:4d:8c:c9:2d:8e:e6:d4:b5:d6: c5:42:d1:10:e6:9e:f2:c6:1b:43:d3:11:10:a8:3b: fe:4f:eb:48:fe:01:15:c4:74:b5:96:cf:90:6c:2b: 51:f2:46:e5:d7:e9:c7:a7:14:5d:ef:9b:b2:d3:4a: 45:c3:33:b6:b0:8b:9d:60:d9:62:92:87:b4:10:aa: de:5e:51:b6:b7:98:c6:36:11:49:1b:b4:91:33:9f: f7:88:7e:32:69:0e:f8:b4:ea:58:e1:cd:3e:ff:20: 9a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:35:D5:49:B4:FD:6B:90:25:DC:3F:A7:AE:65:15:01:35:05:67:5E X509v3 Authority Key Identifier: keyid:2A:26:65:C3:14:1E:4B:F3:FD:2F:00:4A:AE:29:A5:98:71:13:A1:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KiZlwxQeS_P9LwBKrimlmHETod8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:86:e3:d4:ba:cd:21:6b:07:f4:a8:2b:a0:ec:f4:0f:8f:fe: 1a:2f:1f:ae:18:22:0e:34:17:0b:bd:b3:6f:48:a5:2e:6d:ef: 2a:cc:99:f9:de:0d:98:a1:0f:31:26:55:7a:24:75:a7:e1:9d: 3a:a7:63:40:94:3d:c0:01:fd:39:26:34:26:6e:af:9b:f2:5e: c7:eb:0e:24:1f:d8:04:29:06:18:b4:93:7e:bf:2b:54:5d:c9: eb:15:b5:94:28:d3:23:e2:75:d7:a7:d8:bb:b8:f5:22:57:62: 49:d6:1e:27:57:85:fe:17:ff:a3:9c:d8:c2:ca:81:46:27:89: 76:8c:90:49:b9:28:16:5b:cf:e3:5c:a0:1b:80:bb:d5:03:59: 4e:cd:24:a0:49:cb:dc:4a:94:5b:0f:a1:d3:2a:23:99:6d:4c: 3d:54:f2:af:d4:33:44:c3:9b:18:77:7d:cf:72:ec:14:47:31: 68:2f:59:24:23:45:1d:f2:9f:f7:2f:9c:1e:82:a6:e8:56:7a: dc:1f:81:82:18:73:d8:8e:ca:26:cf:f3:c4:ee:73:57:fd:e0: aa:8d:42:e4:0f:c6:80:2e:68:31:27:c7:e2:b9:a4:e4:7a:33: a6:b1:4c:88:3e:f8:3d:23:63:62:ee:6c:e6:29:92:b5:7e:29: cf:bf:04:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk3MkQxMTAvBgNVBAUTKDJBMjY2NUMzMTQxRTRCRjNGRDJGMDA0QUFFMjlBNTk4 NzExM0ExREYwHhcNMjYwNDE3MDAxNjE1WhcNMjYwNDI0MDAxNjE1WjAYMRYwFAYD VQQDEw02OWUxN2JjZi01NGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnktwRKxEi0XIIrwb3PESUpfTwRc0EgnrwLd/Q8XEufdOa2JfRM9DLh/wMCi/ sn9eln9N8i4mVMCXtvgV3O0/g9C2+KOuRTjvMLTqIr2/SP193Xpyc+WuQM55egzy 3UZEwiMtnpyi+U6ARHIAW6M+JE2wMCPheUdFHJLM7BfFYCliwTu2WTZm4rJqh1eS OojQdc3Abfr2vB8mFTlNjMktjubUtdbFQtEQ5p7yxhtD0xEQqDv+T+tI/gEVxHS1 ls+QbCtR8kbl1+nHpxRd75uy00pFwzO2sIudYNlikoe0EKreXlG2t5jGNhFJG7SR M5/3iH4yaQ74tOpY4c0+/yCaVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCE11Um0 /WuQJdw/p65lFQE1BWdeMB8GA1UdIwQYMBaAFComZcMUHkvz/S8ASq4ppZhxE6Hf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTcyRC85OUVFOTUwQ0E2 ODIxMUVDQjRFM0VDM0FDNEY5QUUwMi9LaVpsd3hRZVNfUDlMd0JLcmltbG1IRVRv ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tpWmx3eFFlU19QOUx3QktyaW1sbUhFVG9kOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTcyRC85OUVFOTUwQ0E2ODIxMUVDQjRFM0VDM0FDNEY5QUUwMi9LaVpsd3hRZVNf UDlMd0JLcmltbG1IRVRvZDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1Ybj1LrNIWsH9KgroOz0D4/+Gi8frhgiDjQXC72zb0ilLm3vKsyZ+d4NmKEP MSZVeiR1p+GdOqdjQJQ9wAH9OSY0Jm6vm/Jex+sOJB/YBCkGGLSTfr8rVF3J6xW1 lCjTI+J116fYu7j1IldiSdYeJ1eF/hf/o5zYwsqBRieJdoyQSbkoFlvP41ygG4C7 1QNZTs0koEnL3EqUWw+h0yojmW1MPVTyr9QzRMObGHd9z3LsFEcxaC9ZJCNFHfKf 9y+cHoKm6FZ63B+Bghhz2I7KJs/zxO5zV/3gqo1C5A/GgC5oMSfH4rmk5HozprFM iD74PSNjYu5s5imStX4pz78Eww== -----END CERTIFICATE-----Generated at Fri Apr 17 21:23:54 2026 by rpki-client