$ rpki-client -vvf rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft File: ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft (raw, json) Hash identifier: eFMfXAsSHtFgq4V6go5JsI3Gv+A4NoMe6T7QNZtjdlY= Subject key identifier: CE:C4:34:2C:D5:57:A7:C8:72:01:0D:3D:FA:98:8B:63:14:8A:7F:73 Authority key identifier: 91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F Certificate issuer: /CN=A91128B5/serialNumber=91AEE960DC41FF98ED1B3723343173938126DC9F Certificate serial: 0695 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft Manifest number: 0681 Signing time: Thu 16 Apr 2026 22:25:46 +0000 Manifest this update: Thu 16 Apr 2026 22:25:45 +0000 Manifest next update: Thu 23 Apr 2026 22:25:45 +0000 Files and hashes: 1: ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl (hash: GhEIvUy6A3wKGjm+SQM5MkF8wqReWayZR1GEe+/YktM=) 2: 74BDB7D0B96C11EB956C1D2DC4F9AE02.roa (hash: KuRVVtBymL1UcskS7Gi0UHbMc11CttUTwLtw4F6P+/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 22:25:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1685 (0x695) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128B5, serialNumber=91AEE960DC41FF98ED1B3723343173938126DC9F Validity Not Before: Apr 16 22:25:45 2026 GMT Not After : Apr 23 22:25:45 2026 GMT Subject: CN=69e161e9-dde0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:db:82:e8:b5:a3:c4:a8:68:9a:4d:f4:43:49: 95:24:a9:2c:63:79:c8:8b:29:dc:09:af:72:7e:b4: f9:11:f1:5d:b8:68:3b:11:ed:dd:09:3b:99:8e:f3: 5e:6d:1a:bd:bf:bd:46:21:fb:95:8e:9c:b5:a1:55: cd:b0:24:50:76:23:34:f6:6a:3c:e3:dd:b3:2e:21: 71:5f:da:8d:eb:f6:0b:4c:07:05:25:cc:b7:61:6b: 4a:2f:fd:2e:e2:6d:1d:9e:4c:bf:ee:b6:82:95:6b: b2:8f:8e:c1:ac:04:70:46:9b:51:03:d2:d9:40:3f: f3:e5:8e:b7:63:bb:69:96:d4:70:53:24:fd:70:2f: 32:42:1a:64:25:17:3d:21:cb:04:cf:81:4b:78:b6: 2e:37:90:9b:6b:11:a6:6d:2b:9d:e0:7b:b8:a6:13: 11:80:05:cf:3f:53:9d:97:65:74:79:a1:d1:11:f7: ab:87:28:b0:29:b1:61:76:b1:f0:cb:bf:35:09:f7: ce:a2:bc:a9:51:2b:22:09:65:94:18:70:d0:52:cd: 50:e3:9e:09:9d:d5:b8:7f:c4:a2:b7:92:fa:8a:d8: e4:c5:42:b3:69:9b:82:ac:7b:27:ed:51:81:d5:e9: da:01:11:7e:cf:29:37:c2:98:a7:0d:7b:05:2a:c1: cc:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C4:34:2C:D5:57:A7:C8:72:01:0D:3D:FA:98:8B:63:14:8A:7F:73 X509v3 Authority Key Identifier: keyid:91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:f7:a9:13:3f:98:f8:34:15:dd:9f:a0:5b:f5:e3:47:be:bc: be:63:51:d8:59:0c:62:9d:39:4c:0e:47:fe:e6:cd:cb:98:6e: ea:0c:9c:ab:3d:00:d8:a9:00:82:4f:76:09:70:8f:73:7c:67: d9:85:20:3b:fc:f9:d3:99:a5:c1:a1:3d:a9:be:74:20:eb:88: 49:af:75:37:cb:2c:52:7a:bb:46:2a:e0:d6:64:5f:73:eb:1d: f1:0a:e7:18:c8:43:91:c8:15:89:7e:ea:19:80:3d:ac:24:4a: 3b:24:86:4b:da:3c:29:91:c7:05:f3:1d:fa:3e:f8:ef:3f:10: 77:57:cb:fe:97:06:43:28:7b:0d:6f:9e:1c:21:99:ef:a2:c0: a6:38:b4:b6:5f:1d:d2:ff:be:77:30:e7:1b:0b:03:ee:c5:b0: 86:96:25:75:b5:7b:0c:67:af:1b:a3:05:b6:ef:3e:cd:70:f9: b8:1e:ae:90:eb:4a:6d:b9:a2:35:da:c8:01:89:29:66:94:a4: 2b:f9:1c:69:20:38:66:6e:64:da:66:d1:f7:58:36:61:f7:91: 98:ad:fb:41:d3:a1:eb:41:d6:8c:c5:ba:6e:99:f5:2c:e3:dc: fa:d7:6b:15:5c:f8:fd:53:ee:40:d3:0b:00:d0:99:d5:bd:47: 76:82:4c:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4QjUxMTAvBgNVBAUTKDkxQUVFOTYwREM0MUZGOThFRDFCMzcyMzM0MzE3Mzkz ODEyNkRDOUYwHhcNMjYwNDE2MjIyNTQ1WhcNMjYwNDIzMjIyNTQ1WjAYMRYwFAYD VQQDEw02OWUxNjFlOS1kZGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5tuC6LWjxKhomk30Q0mVJKksY3nIiyncCa9yfrT5EfFduGg7Ee3dCTuZjvNe bRq9v71GIfuVjpy1oVXNsCRQdiM09mo8492zLiFxX9qN6/YLTAcFJcy3YWtKL/0u 4m0dnky/7raClWuyj47BrARwRptRA9LZQD/z5Y63Y7tpltRwUyT9cC8yQhpkJRc9 IcsEz4FLeLYuN5CbaxGmbSud4Hu4phMRgAXPP1Odl2V0eaHREferhyiwKbFhdrHw y781CffOorypUSsiCWWUGHDQUs1Q454JndW4f8Sit5L6itjkxUKzaZuCrHsn7VGB 1enaARF+zyk3wpinDXsFKsHMhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM7ENCzV V6fIcgENPfqYi2MUin9zMB8GA1UdIwQYMBaAFJGu6WDcQf+Y7Rs3IzQxc5OBJtyf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhCNS8zRUJDRDFEQUI5 NkIxMUVCQjE2RUVGMkNDNEY5QUUwMi9rYTdwWU54Ql81anRHemNqTkRGems0RW0z SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2thN3BZTnhCXzVqdEd6Y2pOREZ6azRFbTNKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhCNS8zRUJDRDFEQUI5NkIxMUVCQjE2RUVGMkNDNEY5QUUwMi9rYTdwWU54Ql81 anRHemNqTkRGems0RW0zSjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe/epEz+Y+DQV3Z+gW/XjR768vmNR2FkMYp05TA5H/ubNy5hu6gycqz0A2KkA gk92CXCPc3xn2YUgO/z505mlwaE9qb50IOuISa91N8ssUnq7Rirg1mRfc+sd8Qrn GMhDkcgViX7qGYA9rCRKOySGS9o8KZHHBfMd+j747z8Qd1fL/pcGQyh7DW+eHCGZ 76LApji0tl8d0v++dzDnGwsD7sWwhpYldbV7DGevG6MFtu8+zXD5uB6ukOtKbbmi NdrIAYkpZpSkK/kcaSA4Zm5k2mbR91g2YfeRmK37QdOh60HWjMW6bpn1LOPc+tdr FVz4/VPuQNMLANCZ1b1HdoJMqg== -----END CERTIFICATE-----Generated at Fri Apr 17 12:59:32 2026 by rpki-client