$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft File: KZYjJd4LreTcndvFdq4ncBK8N1g.mft (raw, json) Hash identifier: XcIf7KpY31GOgjVRq7+jxNKyHM/RyWLa+GHSVM0kWmA= Subject key identifier: 86:54:61:67:61:F6:BA:C3:B5:21:69:24:79:AB:97:FB:E7:A0:FE:D3 Authority key identifier: 29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 Certificate issuer: /CN=A914DA2D/serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Certificate serial: 1B0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft Manifest number: 1AEA Signing time: Thu 16 Apr 2026 16:16:16 +0000 Manifest this update: Thu 16 Apr 2026 16:16:15 +0000 Manifest next update: Thu 23 Apr 2026 16:16:15 +0000 Files and hashes: 1: KZYjJd4LreTcndvFdq4ncBK8N1g.crl (hash: 9zg/KSX73AmhKh2JF7tALX78ajSoFz0z/M2PR8CJ06M=) 2: 442A935E2F1F11F0A35F5757C4F9AE02.roa (hash: ep1WIPveJbhkF0Sl4UHnyTFp2JFnKNI9HU6gNgYhNKI=) 3: B201496EF3A311EC8804FE09C4F9AE02.roa (hash: 7WJalEMOZVtxgJni8RlEELTTNzW+y4R0udMJ9qnWJ3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6926 (0x1b0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DA2D, serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Validity Not Before: Apr 16 16:16:15 2026 GMT Not After : Apr 23 16:16:15 2026 GMT Subject: CN=69e10b50-4bc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:30:40:07:b0:10:c6:84:2e:97:bf:58:ad:8e: e8:f2:47:12:fe:1c:cd:5e:f1:76:73:fd:d5:dd:c5: 8b:81:4f:39:14:93:7a:3a:4c:8f:2f:46:84:69:35: 9a:b6:29:26:0a:d5:ee:fb:3d:d7:7d:1c:13:b4:dd: e7:b0:94:1b:22:30:1b:cb:ad:d0:da:88:d0:74:30: 8e:7d:51:56:64:95:35:a4:36:4a:9a:cf:57:89:07: 1d:dd:a4:13:9e:cc:a1:cc:02:da:a8:99:9f:89:0b: 6d:f1:c3:b8:91:b7:91:9a:4f:c3:bf:af:a9:78:d9: f6:e0:af:13:ce:8a:81:61:9b:3a:d0:51:31:43:01: 50:14:f3:02:8d:f5:45:17:04:46:e8:c6:96:bf:86: 50:bc:db:13:cd:d5:85:94:88:33:35:73:74:ce:d8: a2:16:ee:5d:6f:84:d7:b6:c5:90:cd:85:6e:c1:cd: da:3a:80:e4:08:7f:5f:8c:9d:3e:bd:80:4d:5c:57: e6:7e:9a:36:d8:a3:23:13:dd:e7:77:be:5e:36:cd: d1:49:ef:d9:1e:63:e6:f1:bb:a7:08:34:43:28:ed: df:c4:71:83:ff:81:b7:62:05:4e:e4:0a:3c:95:15: 82:af:24:c9:bb:a0:74:b8:5d:96:80:5b:39:ea:27: 4f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:54:61:67:61:F6:BA:C3:B5:21:69:24:79:AB:97:FB:E7:A0:FE:D3 X509v3 Authority Key Identifier: keyid:29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:7e:1a:01:9a:a0:6a:25:ec:8a:28:d9:5c:ce:b6:ba:b4:52: 62:00:75:47:00:a9:63:ea:2c:36:a6:0d:d1:4f:ff:91:d9:49: e4:16:35:f9:d3:e8:53:f3:bf:e5:fc:a8:ac:fe:84:ed:a5:2c: 2e:d5:a6:7f:04:94:ee:85:9f:b0:14:1e:3a:aa:bc:e9:ae:f6: e7:dc:9a:16:c1:4b:e2:e8:88:fc:1d:60:c4:11:56:06:08:e0: 6f:d3:5e:b3:a7:09:07:74:a2:48:df:8d:52:29:3f:f8:f0:2f: 68:0a:15:20:51:73:ea:b2:f9:d8:4c:4b:85:38:f9:48:1b:aa: 35:dc:6a:fb:6c:61:2d:41:df:37:fc:ba:80:aa:5e:d7:d4:ee: ff:b5:f0:45:3b:78:9c:01:2a:c8:64:fb:a7:7a:48:9c:af:08: ef:e0:4d:b4:cb:d2:4e:65:d2:7d:26:e8:ae:90:f3:cf:18:9e: 0a:59:bc:6a:94:f3:7c:c8:03:65:75:f9:c0:ed:e9:49:d5:be: 73:31:cf:29:03:ce:2b:04:28:aa:43:ac:9d:47:89:5f:9f:6c: cd:6a:d9:7c:70:b4:dc:7b:20:ff:16:92:64:0b:05:e5:00:90: a3:b5:c8:aa:4c:c7:52:4a:23:0b:96:31:74:76:81:92:42:a3: cf:fd:d0:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERBMkQxMTAvBgNVBAUTKDI5OTYyMzI1REUwQkFERTREQzlEREJDNTc2QUUyNzcw MTJCQzM3NTgwHhcNMjYwNDE2MTYxNjE1WhcNMjYwNDIzMTYxNjE1WjAYMRYwFAYD VQQDEw02OWUxMGI1MC00YmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7TBAB7AQxoQul79YrY7o8kcS/hzNXvF2c/3V3cWLgU85FJN6OkyPL0aEaTWa tikmCtXu+z3XfRwTtN3nsJQbIjAby63Q2ojQdDCOfVFWZJU1pDZKms9XiQcd3aQT nsyhzALaqJmfiQtt8cO4kbeRmk/Dv6+peNn24K8TzoqBYZs60FExQwFQFPMCjfVF FwRG6MaWv4ZQvNsTzdWFlIgzNXN0ztiiFu5db4TXtsWQzYVuwc3aOoDkCH9fjJ0+ vYBNXFfmfpo22KMjE93nd75eNs3RSe/ZHmPm8bunCDRDKO3fxHGD/4G3YgVO5Ao8 lRWCryTJu6B0uF2WgFs56idPuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIZUYWdh 9rrDtSFpJHmrl/vnoP7TMB8GA1UdIwQYMBaAFCmWIyXeC63k3J3bxXauJ3ASvDdY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REEyRC84MzgzNjIwQTUw RDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJlVGNuZHZGZHE0bmNCSzhO MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0taWWpKZDRMcmVUY25kdkZkcTRuY0JLOE4xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REEyRC84MzgzNjIwQTUwRDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJl VGNuZHZGZHE0bmNCSzhOMWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPH4aAZqgaiXsiijZXM62urRSYgB1RwCpY+osNqYN0U//kdlJ5BY1+dPoU/O/ 5fyorP6E7aUsLtWmfwSU7oWfsBQeOqq86a7259yaFsFL4uiI/B1gxBFWBgjgb9Ne s6cJB3SiSN+NUik/+PAvaAoVIFFz6rL52ExLhTj5SBuqNdxq+2xhLUHfN/y6gKpe 19Tu/7XwRTt4nAEqyGT7p3pInK8I7+BNtMvSTmXSfSborpDzzxieClm8apTzfMgD ZXX5wO3pSdW+czHPKQPOKwQoqkOsnUeJX59szWrZfHC03Hsg/xaSZAsF5QCQo7XI qkzHUkojC5YxdHaBkkKjz/3Qyw== -----END CERTIFICATE-----Generated at Fri Apr 17 14:24:58 2026 by rpki-client