$ rpki-client -vvf rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft File: kSlbu3W_quuVMbObNux1Id3jDWM.mft (raw, json) Hash identifier: Uuc0t5Pa4XkH5Ool5hzSL5GK5no+VIqbBUJ3Wq/hZxc= Subject key identifier: EE:01:61:67:63:D5:2C:FE:AE:20:0A:98:45:37:B5:FE:98:E5:54:CE Authority key identifier: 91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63 Certificate issuer: /CN=A911D9B2/serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63 Certificate serial: 01FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft Manifest number: 01E0 Signing time: Fri 17 Apr 2026 03:35:05 +0000 Manifest this update: Fri 17 Apr 2026 03:35:04 +0000 Manifest next update: Fri 24 Apr 2026 03:35:04 +0000 Files and hashes: 1: kSlbu3W_quuVMbObNux1Id3jDWM.crl (hash: qYhn6+9SnpvPrkGBrwnNaksSycduhfPIloR7Q9rj+oQ=) 2: 48B227F4E8D111F089B2D8B5616F56BC.roa (hash: WkyL76qiMF9RZhUkNMb3RMO30+J1U+zYYA70lfRZGcY=) 3: 59962840D01911EE96596B16C4F9AE02.roa (hash: y1hStzic/YZJ1I+8JzXAyWcd1KU9dmVU0MUq2vt+Xgs=) 4: 11A28878915611EE83F61C41C4F9AE02.roa (hash: RMJ3MtQdHxz76LVbzxDYjdiseR/569W+/vsBpB/W5j4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 507 (0x1fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D9B2, serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63 Validity Not Before: Apr 17 03:35:04 2026 GMT Not After : Apr 24 03:35:04 2026 GMT Subject: CN=69e1aa69-96bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b6:03:c4:1a:b9:e9:f7:4e:4b:9b:4a:30:7c: e7:21:cb:22:f6:2d:f7:d2:06:b6:19:9c:5f:0c:eb: e3:9d:85:19:00:54:10:ed:94:ac:b8:e7:79:68:25: 9f:aa:d1:99:b6:73:22:16:40:38:40:2f:b2:29:07: 42:8c:14:9c:ed:9a:dc:7a:2f:b2:fe:4c:cb:97:8e: c1:c7:54:d7:21:3a:0c:20:9e:fa:bc:0d:0f:fd:c3: 27:a2:a2:17:04:f1:d8:1d:97:c4:cd:eb:34:7b:5b: f3:93:83:f6:d5:e8:19:8c:eb:2f:ac:f9:3a:64:e0: d9:df:6d:b9:1a:d1:8b:33:ae:5e:1d:64:23:f2:37: 28:b5:14:dc:9e:54:c9:bb:c6:0a:49:6b:9b:48:2a: 56:ff:25:f2:b8:ae:27:0e:69:8e:69:24:05:bb:06: 94:ce:b6:7a:86:88:2f:7a:e0:1b:60:1a:cd:d3:6a: 69:72:6e:82:6b:08:af:e4:b5:f9:1e:81:66:1d:5f: 90:f3:55:65:37:a9:8f:49:1c:f3:ee:66:68:eb:83: a7:aa:60:cc:75:a8:24:1e:eb:8e:00:6a:f8:c5:d6: 68:f6:2a:e8:d0:c8:5f:8c:72:c4:c8:dc:78:72:51: 4b:aa:11:90:05:36:36:3e:0e:e5:68:59:d6:ba:4a: 20:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:01:61:67:63:D5:2C:FE:AE:20:0A:98:45:37:B5:FE:98:E5:54:CE X509v3 Authority Key Identifier: keyid:91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:13:80:89:cb:eb:b3:a8:8b:7f:47:61:c7:ae:14:7b:20:61: 5f:a3:59:7e:b9:f6:04:69:6f:30:12:ec:1f:6a:36:c1:0d:51: c7:b4:7d:c8:bb:0c:39:77:9d:93:02:12:b0:11:6f:d7:75:8c: 5b:1a:82:5c:86:17:52:af:a8:24:36:ff:30:ee:a3:ed:8d:25: d8:5a:12:0d:2c:3d:59:ec:fe:76:cf:95:2d:32:d0:90:63:14: 2b:b0:25:2d:93:f1:d6:66:06:e9:ca:4f:fd:ec:90:99:4e:f7: 13:5d:0a:c8:81:72:32:e2:98:12:29:ce:a1:05:39:39:ae:c9: 49:9c:42:2a:1d:ff:19:3b:5c:bd:b0:12:c9:74:98:f5:ae:06: 76:bb:3c:f1:df:33:9b:e2:3c:63:aa:99:20:8a:bc:dc:1e:b8: 7d:c6:96:6e:75:d2:ed:cc:58:51:b5:a0:21:04:11:d0:2c:f9: 98:98:f2:d8:06:be:1f:2a:a4:06:ed:ed:3e:2d:5f:a1:b9:41: 19:f6:45:ef:58:3d:af:03:56:df:ee:22:f9:90:a2:c8:5c:e5: 5a:55:93:b1:9a:3b:ba:25:e3:bd:a6:53:b2:61:d9:5f:e1:6e: d0:2b:be:70:b1:5e:5f:b4:50:8a:30:e3:7a:57:f3:5f:8c:b0: d5:35:ec:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ5QjIxMTAvBgNVBAUTKDkxMjk1QkJCNzVCRkFBRUI5NTMxQjM5QjM2RUM3NTIx RERFMzBENjMwHhcNMjYwNDE3MDMzNTA0WhcNMjYwNDI0MDMzNTA0WjAYMRYwFAYD VQQDEw02OWUxYWE2OS05NmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrYDxBq56fdOS5tKMHznIcsi9i330ga2GZxfDOvjnYUZAFQQ7ZSsuOd5aCWf qtGZtnMiFkA4QC+yKQdCjBSc7Zrcei+y/kzLl47Bx1TXIToMIJ76vA0P/cMnoqIX BPHYHZfEzes0e1vzk4P21egZjOsvrPk6ZODZ3225GtGLM65eHWQj8jcotRTcnlTJ u8YKSWubSCpW/yXyuK4nDmmOaSQFuwaUzrZ6hogveuAbYBrN02ppcm6Cawiv5LX5 HoFmHV+Q81VlN6mPSRzz7mZo64OnqmDMdagkHuuOAGr4xdZo9iro0MhfjHLEyNx4 clFLqhGQBTY2Pg7laFnWukogzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO4BYWdj 1Sz+riAKmEU3tf6Y5VTOMB8GA1UdIwQYMBaAFJEpW7t1v6rrlTGzmzbsdSHd4w1j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDlCMi8wQTZGM0I0Mjkx NTUxMUVFQTRDMEY2NjhDNEY5QUUwMi9rU2xidTNXX3F1dVZNYk9iTnV4MUlkM2pE V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTbGJ1M1dfcXV1Vk1iT2JOdXgxSWQzakRXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDlCMi8wQTZGM0I0MjkxNTUxMUVFQTRDMEY2NjhDNEY5QUUwMi9rU2xidTNXX3F1 dVZNYk9iTnV4MUlkM2pEV00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzROAicvrs6iLf0dhx64UeyBhX6NZfrn2BGlvMBLsH2o2wQ1Rx7R9yLsMOXed kwISsBFv13WMWxqCXIYXUq+oJDb/MO6j7Y0l2FoSDSw9Wez+ds+VLTLQkGMUK7Al LZPx1mYG6cpP/eyQmU73E10KyIFyMuKYEinOoQU5Oa7JSZxCKh3/GTtcvbASyXSY 9a4Gdrs88d8zm+I8Y6qZIIq83B64fcaWbnXS7cxYUbWgIQQR0Cz5mJjy2Aa+Hyqk Bu3tPi1foblBGfZF71g9rwNW3+4i+ZCiyFzlWlWTsZo7uiXjvaZTsmHZX+Fu0Cu+ cLFeX7RQijDjelfzX4yw1TXsQA== -----END CERTIFICATE-----Generated at Fri Apr 17 09:43:30 2026 by rpki-client