$ rpki-client -vvf rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft File: KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft (raw, json) Hash identifier: ch/gbzuUOq9MJDj89ibNkFYWjbPb1UhWMij/AKWBwPk= Subject key identifier: AF:05:48:F2:31:2B:61:E7:E4:8E:52:D6:45:B3:AB:55:74:EB:C8:12 Authority key identifier: 2B:13:1A:A1:0D:7E:6B:FE:A3:67:E8:1B:73:D7:FD:B0:AC:01:D6:78 Certificate issuer: /CN=A912F3B6/serialNumber=2B131AA10D7E6BFEA367E81B73D7FDB0AC01D678 Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft Manifest number: 0133 Signing time: Sun 01 Mar 2026 06:34:50 +0000 Manifest this update: Sun 01 Mar 2026 06:34:50 +0000 Manifest next update: Sun 08 Mar 2026 06:34:50 +0000 Files and hashes: 1: KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.crl (hash: uOrkepnLhc+b/dxInQtFVwd/K16eFWijSinO0rzI/Ek=) 2: D91E3ADC498E11EF908FD222C4F9AE02.roa (hash: ZZDdEUCyxIX0Eybvqkeb03mNWg+YxSkSpegb3mdW8RE=) 3: D9C5B55A498E11EF908FD222C4F9AE02.roa (hash: CGn0Q55/AX22nfT4AGCKBK/ILhvxf+/fmsvng3DA1pY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.crl rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:34:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F3B6, serialNumber=2B131AA10D7E6BFEA367E81B73D7FDB0AC01D678 Validity Not Before: Mar 1 06:34:50 2026 GMT Not After : Mar 8 06:34:50 2026 GMT Subject: CN=69a3de0a-7e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:04:40:2a:ab:cd:c2:43:d4:c1:e2:74:5c:91: 76:a5:2b:fd:58:54:80:95:a3:f6:2b:8f:c1:1d:48: 38:48:7c:75:a0:4d:00:5e:34:95:3b:28:22:d7:77: b4:e8:ce:32:97:d7:43:fd:4d:01:85:67:aa:4c:63: 6a:5c:9b:01:d2:35:bb:6e:16:dc:e5:5b:64:f4:c9: 70:8d:9d:2b:15:14:eb:22:69:f7:a1:f1:53:8a:12: 4f:b7:e4:3d:2f:2a:0c:f5:66:af:ad:2b:df:aa:ac: 08:13:0c:e0:e4:e2:0a:ac:b4:24:e1:13:7f:db:f7: 46:48:ce:18:56:58:7f:1f:72:f4:b6:4f:0f:bf:70: 90:f8:3e:3d:2b:c4:b3:67:27:0b:87:d1:c3:4f:ef: e5:95:b7:da:5d:7b:e5:03:04:4b:db:74:84:31:23: dd:78:cf:8b:8f:f7:d9:b2:b2:88:dc:00:e2:c4:1f: c7:b0:1c:e5:f9:7a:aa:92:35:2b:10:6a:6f:75:17: 56:41:3e:b0:6a:dc:da:6d:34:4b:64:4c:02:aa:72: 49:b2:d6:2d:7f:b2:d6:ea:31:a3:46:07:67:d7:94: 32:21:e0:e1:88:35:72:31:cb:31:01:69:e6:25:bd: f9:5e:10:a1:f7:7a:cd:2c:bf:9d:0d:20:14:48:d7: 78:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:05:48:F2:31:2B:61:E7:E4:8E:52:D6:45:B3:AB:55:74:EB:C8:12 X509v3 Authority Key Identifier: keyid:2B:13:1A:A1:0D:7E:6B:FE:A3:67:E8:1B:73:D7:FD:B0:AC:01:D6:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F3B6/50F011C848BA11EFBD45163DC4F9AE02/KxMaoQ1-a_6jZ-gbc9f9sKwB1ng.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:7e:d4:f8:cc:e8:08:07:cf:3e:26:01:de:de:98:93:c8:ad: 4f:ca:b4:b7:b0:fd:1c:c9:0d:40:bb:e4:9c:64:31:31:e6:2b: 26:2c:d3:d0:e8:cb:a9:df:7d:d1:27:2f:81:2d:21:7b:7f:d3: eb:12:de:66:68:bc:90:cf:e1:f8:70:eb:b1:4c:cf:3a:ac:41: 8c:05:8b:f2:58:82:0b:8a:60:5f:53:5b:57:43:76:d9:76:ab: 6a:8f:67:f4:66:59:37:a6:8b:8f:55:d8:fb:88:e7:89:b1:4a: 75:60:69:70:08:22:86:ea:fd:67:97:6b:98:25:09:2b:82:79: 68:5d:c9:b4:09:bf:04:57:92:c6:8a:d3:b6:00:13:df:a9:a4: 96:89:5e:44:cf:da:85:5b:3f:4d:2d:df:f5:ea:79:f5:7f:07: 65:23:20:84:5f:dc:65:fd:57:bd:e3:dc:06:c4:a8:48:76:26: 29:b9:21:d5:e9:83:25:4b:d9:53:f5:b2:d0:e1:82:41:e3:5e: 0d:29:db:4c:0d:67:55:f0:c4:c8:99:83:2a:2d:0f:c3:95:78: 81:eb:62:3b:ce:cd:78:a4:56:56:73:3a:37:5b:9c:ec:94:d7: 9e:18:47:8e:91:c7:a4:38:68:86:f4:f2:cd:e5:51:c8:87:8c: f3:a7:5f:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzQjYxMTAvBgNVBAUTKDJCMTMxQUExMEQ3RTZCRkVBMzY3RTgxQjczRDdGREIw QUMwMUQ2NzgwHhcNMjYwMzAxMDYzNDUwWhcNMjYwMzA4MDYzNDUwWjAYMRYwFAYD VQQDEw02OWEzZGUwYS03ZTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsARAKqvNwkPUweJ0XJF2pSv9WFSAlaP2K4/BHUg4SHx1oE0AXjSVOygi13e0 6M4yl9dD/U0BhWeqTGNqXJsB0jW7bhbc5Vtk9MlwjZ0rFRTrImn3ofFTihJPt+Q9 LyoM9WavrSvfqqwIEwzg5OIKrLQk4RN/2/dGSM4YVlh/H3L0tk8Pv3CQ+D49K8Sz ZycLh9HDT+/llbfaXXvlAwRL23SEMSPdeM+Lj/fZsrKI3ADixB/HsBzl+XqqkjUr EGpvdRdWQT6watzabTRLZEwCqnJJstYtf7LW6jGjRgdn15QyIeDhiDVyMcsxAWnm Jb35XhCh93rNLL+dDSAUSNd4qQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK8FSPIx K2Hn5I5S1kWzq1V068gSMB8GA1UdIwQYMBaAFCsTGqENfmv+o2foG3PX/bCsAdZ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjNCNi81MEYwMTFDODQ4 QkExMUVGQkQ0NTE2M0RDNEY5QUUwMi9LeE1hb1ExLWFfNmpaLWdiYzlmOXNLd0Ix bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0t4TWFvUTEtYV82alotZ2JjOWY5c0t3QjFuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjNCNi81MEYwMTFDODQ4QkExMUVGQkQ0NTE2M0RDNEY5QUUwMi9LeE1hb1ExLWFf NmpaLWdiYzlmOXNLd0IxbmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZX7U+MzoCAfPPiYB3t6Yk8itT8q0t7D9HMkNQLvknGQxMeYrJizT0OjLqd99 0ScvgS0he3/T6xLeZmi8kM/h+HDrsUzPOqxBjAWL8liCC4pgX1NbV0N22Xarao9n 9GZZN6aLj1XY+4jnibFKdWBpcAgihur9Z5drmCUJK4J5aF3JtAm/BFeSxorTtgAT 36mkloleRM/ahVs/TS3f9ep59X8HZSMghF/cZf1XvePcBsSoSHYmKbkh1emDJUvZ U/Wy0OGCQeNeDSnbTA1nVfDEyJmDKi0Pw5V4getiO87NeKRWVnM6N1uc7JTXnhhH jpHHpDhohvTyzeVRyIeM86dfDQ== -----END CERTIFICATE-----Generated at Mon Mar 2 09:51:49 2026 by rpki-client