$ rpki-client -vvf rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft File: kUhQxLilE7L45O3EtVeHB3djcq4.mft (raw, json) Hash identifier: ZNKIz3MIYz5RlxGZCDjRUjVVQtFEstTpkpklbwAsaYM= Subject key identifier: 38:00:C1:5B:B8:03:73:47:02:1E:1E:26:6D:45:AC:E7:37:97:5F:57 Authority key identifier: 91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE Certificate issuer: /CN=A91215B3/serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE Certificate serial: 023B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft Manifest number: 022A Signing time: Fri 17 Apr 2026 02:38:44 +0000 Manifest this update: Fri 17 Apr 2026 02:38:44 +0000 Manifest next update: Fri 24 Apr 2026 02:38:44 +0000 Files and hashes: 1: kUhQxLilE7L45O3EtVeHB3djcq4.crl (hash: kRE7TjunUMiqEbc/iIeqeTbDEm/R5d2ac4vYFHp4ucg=) 2: D8F27C903AD811EF960D9329C4F9AE02.roa (hash: vs2Gbdu50+XToE8E4WRhYDNiQq7PIlKd89VDKs3X2wE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:38:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 571 (0x23b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91215B3, serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE Validity Not Before: Apr 17 02:38:44 2026 GMT Not After : Apr 24 02:38:44 2026 GMT Subject: CN=69e19d34-12d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:44:83:1d:7e:7a:32:d3:d5:a1:0f:14:9a:f7: bf:7b:a2:df:a8:0b:b8:98:02:f0:71:d2:44:10:bf: 7e:8d:0b:43:51:9e:03:9d:5c:4c:f3:a9:71:eb:76: c7:c5:99:dc:e9:3c:85:6b:b5:3a:01:48:3b:68:35: 93:1f:cb:fe:59:a4:2c:af:8f:89:d7:b5:ff:a3:e8: ba:fc:0b:44:5d:6e:b6:1e:fc:bf:74:7b:a8:30:74: 9c:50:c5:3b:a0:ce:cd:81:52:29:41:f3:0b:4b:6c: 4b:99:fd:1b:85:ad:4b:31:a2:3a:e7:1d:e6:2f:cc: 00:29:d0:da:56:55:23:9a:ee:d4:66:bf:fc:d4:cf: 49:29:67:68:fc:4a:18:64:57:79:8a:2d:95:47:f3: 85:97:7e:f7:51:ff:b6:58:a1:82:c0:e9:91:8c:f5: 2d:49:d8:a0:c7:cc:d6:b5:6f:29:73:68:b2:99:c0: 4d:bd:3e:b3:c4:3b:c3:22:5b:8a:48:90:65:2b:24: 54:9f:69:71:17:3a:89:30:f9:6f:c0:04:21:e2:58: ab:a9:9d:76:5e:a0:08:33:30:af:20:b3:87:f5:d1: fb:7f:dc:0f:64:1a:5b:fc:c0:70:38:b0:40:5a:35: 13:f1:e9:33:61:db:4b:68:14:13:93:86:89:70:70: 43:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:00:C1:5B:B8:03:73:47:02:1E:1E:26:6D:45:AC:E7:37:97:5F:57 X509v3 Authority Key Identifier: keyid:91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:24:7d:ba:f8:d4:5c:87:5a:60:a7:74:b8:39:6f:d0:51:5a: ad:b6:2c:00:97:df:0a:30:33:6c:d8:f8:1c:ae:fc:e9:06:3d: c5:d0:b7:db:09:39:8b:3a:a8:3c:ae:ae:49:32:d9:9f:56:9d: 6a:47:f8:a2:3b:ca:49:2c:b5:c6:e0:62:80:ff:22:15:e7:cd: f3:9f:7d:fc:1e:c5:1a:c7:08:7b:9a:e5:28:70:86:ed:49:c6: 00:78:c0:d5:2e:2b:67:20:8e:ba:a3:df:b4:0c:77:32:dc:9a: c3:7e:30:69:2b:01:83:6a:48:ca:a2:b6:f5:d4:06:0f:aa:7c: 70:d9:60:b7:db:b1:2b:78:5a:43:89:45:1b:bf:34:01:e6:fd: 0c:39:b5:b5:ab:55:ef:a6:f6:dd:80:18:20:fc:cb:0b:4a:b3: 4f:fd:10:75:05:6c:af:ce:5c:1b:8b:c2:65:43:d9:8d:99:64: 24:e6:bb:17:43:e5:3b:f8:d4:6b:7d:76:cb:9c:10:5c:f2:44: 23:ca:6f:3f:01:f4:51:62:e6:27:68:1a:7f:39:2b:00:bc:ad: fa:00:aa:8e:e0:ad:74:a0:b4:21:da:42:03:0b:f8:6f:c2:02: de:88:68:9d:a3:73:a4:ec:ba:06:2d:d2:87:39:55:fb:51:a1: 89:98:2d:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE1QjMxMTAvBgNVBAUTKDkxNDg1MEM0QjhBNTEzQjJGOEU0RURDNEI1NTc4NzA3 Nzc2MzcyQUUwHhcNMjYwNDE3MDIzODQ0WhcNMjYwNDI0MDIzODQ0WjAYMRYwFAYD VQQDEw02OWUxOWQzNC0xMmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukSDHX56MtPVoQ8Umve/e6LfqAu4mALwcdJEEL9+jQtDUZ4DnVxM86lx63bH xZnc6TyFa7U6AUg7aDWTH8v+WaQsr4+J17X/o+i6/AtEXW62Hvy/dHuoMHScUMU7 oM7NgVIpQfMLS2xLmf0bha1LMaI65x3mL8wAKdDaVlUjmu7UZr/81M9JKWdo/EoY ZFd5ii2VR/OFl373Uf+2WKGCwOmRjPUtSdigx8zWtW8pc2iymcBNvT6zxDvDIluK SJBlKyRUn2lxFzqJMPlvwAQh4lirqZ12XqAIMzCvILOH9dH7f9wPZBpb/MBwOLBA WjUT8ekzYdtLaBQTk4aJcHBDnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDgAwVu4 A3NHAh4eJm1FrOc3l19XMB8GA1UdIwQYMBaAFJFIUMS4pROy+OTtxLVXhwd3Y3Ku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTVCMy9FNkY2OEYwNjBC NEIxMUVFQUI5QUFENzlDNEY5QUUwMi9rVWhReExpbEU3TDQ1TzNFdFZlSEIzZGpj cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tVaFF4TGlsRTdMNDVPM0V0VmVIQjNkamNxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTVCMy9FNkY2OEYwNjBCNEIxMUVFQUI5QUFENzlDNEY5QUUwMi9rVWhReExpbEU3 TDQ1TzNFdFZlSEIzZGpjcTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjiR9uvjUXIdaYKd0uDlv0FFarbYsAJffCjAzbNj4HK786QY9xdC32wk5izqo PK6uSTLZn1adakf4ojvKSSy1xuBigP8iFefN8599/B7FGscIe5rlKHCG7UnGAHjA 1S4rZyCOuqPftAx3Mtyaw34waSsBg2pIyqK29dQGD6p8cNlgt9uxK3haQ4lFG780 Aeb9DDm1tatV76b23YAYIPzLC0qzT/0QdQVsr85cG4vCZUPZjZlkJOa7F0PlO/jU a312y5wQXPJEI8pvPwH0UWLmJ2gafzkrALyt+gCqjuCtdKC0IdpCAwv4b8IC3oho naNzpOy6Bi3ShzlV+1GhiZgtfg== -----END CERTIFICATE-----Generated at Fri Apr 17 19:22:43 2026 by rpki-client