$ rpki-client -vvf rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft File: kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft (raw, json) Hash identifier: VZba+f8CXfc7BWu+xCtDDl1GdyiihyB9BT9JJ4ZyU9k= Subject key identifier: EE:68:6A:69:4A:6B:10:F2:84:60:0D:A0:17:F1:12:5D:F0:10:EC:50 Authority key identifier: 90:F6:80:FC:A7:C9:30:FD:1F:DC:53:36:75:38:5A:E9:0F:B4:16:72 Certificate issuer: /CN=A91248C9/serialNumber=90F680FCA7C930FD1FDC533675385AE90FB41672 Certificate serial: 01D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft Manifest number: 01D4 Signing time: Fri 17 Apr 2026 03:19:45 +0000 Manifest this update: Fri 17 Apr 2026 03:19:45 +0000 Manifest next update: Fri 24 Apr 2026 03:19:45 +0000 Files and hashes: 1: kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl (hash: 38u82OoSOuC6rqE5Z3HArWpRuQCQQhfwvT8EC8XKBoA=) 2: 4B3C43EA6EF011EE84DC9B0EC4F9AE02.roa (hash: YTWQLKjMPS+pJcK/98qLOrg1cnW5P2/DgKnTnaoaWiI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:19:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91248C9, serialNumber=90F680FCA7C930FD1FDC533675385AE90FB41672 Validity Not Before: Apr 17 03:19:45 2026 GMT Not After : Apr 24 03:19:45 2026 GMT Subject: CN=69e1a6d1-165a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:94:13:db:62:81:e6:49:3f:fa:f5:f4:c7:92: de:8e:9a:72:c7:5d:8d:a6:e3:af:69:4a:35:52:c3: b3:ac:8f:a3:4b:3e:10:d1:33:5a:0d:fb:6a:8a:d9: b2:bd:e5:93:77:72:53:c9:c9:74:36:05:77:f7:88: 04:3f:83:c1:2b:e2:1b:94:bc:a4:ef:73:3a:54:49: a2:a3:69:88:43:23:cd:1b:d8:86:49:c8:a8:c2:29: 66:da:5d:a5:d6:2c:0c:5a:a5:76:d4:f1:08:fc:28: ef:a7:53:1a:75:be:91:f1:9c:c6:6d:95:0a:9c:27: aa:71:89:a1:37:db:33:9d:96:76:09:48:1d:b1:23: 44:d5:ee:d4:a2:56:0a:aa:ca:6f:94:eb:7f:d6:65: 39:35:25:20:e3:86:9e:d7:dd:a3:15:ad:09:0b:87: 69:a1:47:2e:4e:05:49:d5:1d:ab:53:88:aa:25:00: 81:f5:47:19:eb:18:d8:9b:60:c2:38:96:00:72:ed: 45:f1:02:8a:51:b6:92:ed:ce:cb:f0:dd:51:fd:14: b6:6a:45:1a:ea:29:cf:ad:bf:32:d7:3f:9b:60:a4: 47:08:c8:f0:57:08:d3:45:39:24:1a:fc:30:66:70: 3e:46:cc:e8:73:a4:62:79:ff:8b:88:fb:2c:79:f3: 7c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:68:6A:69:4A:6B:10:F2:84:60:0D:A0:17:F1:12:5D:F0:10:EC:50 X509v3 Authority Key Identifier: keyid:90:F6:80:FC:A7:C9:30:FD:1F:DC:53:36:75:38:5A:E9:0F:B4:16:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:7a:4b:45:6d:8e:64:13:46:32:da:ad:87:25:28:1d:54:46: b2:cf:45:79:ea:fb:42:dc:17:a4:dc:8b:e4:df:b9:e5:86:6a: 9e:76:1c:d6:a3:0b:47:02:2b:85:77:af:73:0d:23:dd:e5:9e: f4:39:ec:51:e7:df:66:2e:a7:6b:bc:5a:ad:6f:be:cc:f5:73: 49:07:31:8f:46:dc:63:50:3a:4d:20:f1:55:c3:1b:8e:6c:19: 9c:7c:2d:31:42:0e:72:5a:61:d6:6c:79:8d:f2:d7:be:2c:fa: cd:a8:e0:fb:52:27:13:c2:e7:30:b3:98:fa:c3:ff:45:cc:f0: dc:e7:f9:a7:d8:20:df:02:b7:41:b5:ae:0c:37:22:65:ed:33: 5f:3a:16:72:f9:41:b8:00:63:00:8c:d8:e2:e5:fb:1f:ee:92: a8:c3:3d:6c:f8:5d:ff:4e:27:d4:59:7a:46:df:6f:9f:41:95: 7d:b9:b4:e9:53:bc:5d:38:2b:1f:89:39:1a:45:73:cc:fc:05: c5:fa:9d:e4:cb:db:25:04:c0:2f:d9:c6:48:41:7c:4e:a4:bc: 6f:ca:c4:43:dc:96:0a:e2:ef:87:d1:e3:4c:f5:22:85:67:1e: 83:a5:cc:f7:89:b8:09:1d:ad:15:c5:6f:51:5c:00:44:da:3c: 52:9e:20:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ4QzkxMTAvBgNVBAUTKDkwRjY4MEZDQTdDOTMwRkQxRkRDNTMzNjc1Mzg1QUU5 MEZCNDE2NzIwHhcNMjYwNDE3MDMxOTQ1WhcNMjYwNDI0MDMxOTQ1WjAYMRYwFAYD VQQDEw02OWUxYTZkMS0xNjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAppQT22KB5kk/+vX0x5Lejppyx12NpuOvaUo1UsOzrI+jSz4Q0TNaDftqitmy veWTd3JTycl0NgV394gEP4PBK+IblLyk73M6VEmio2mIQyPNG9iGSciowilm2l2l 1iwMWqV21PEI/Cjvp1Madb6R8ZzGbZUKnCeqcYmhN9sznZZ2CUgdsSNE1e7UolYK qspvlOt/1mU5NSUg44ae192jFa0JC4dpoUcuTgVJ1R2rU4iqJQCB9UcZ6xjYm2DC OJYAcu1F8QKKUbaS7c7L8N1R/RS2akUa6inPrb8y1z+bYKRHCMjwVwjTRTkkGvww ZnA+Rszoc6Rief+LiPssefN8uQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO5oamlK axDyhGANoBfxEl3wEOxQMB8GA1UdIwQYMBaAFJD2gPynyTD9H9xTNnU4WukPtBZy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDhDOS9BMDU1QjVCMjZF RUQxMUVFQkMxQUFCNTNDNEY5QUUwMi9rUGFBX0tmSk1QMGYzRk0yZFRoYTZRLTBG bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tQYUFfS2ZKTVAwZjNGTTJkVGhhNlEtMEZuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDhDOS9BMDU1QjVCMjZFRUQxMUVFQkMxQUFCNTNDNEY5QUUwMi9rUGFBX0tmSk1Q MGYzRk0yZFRoYTZRLTBGbkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbnpLRW2OZBNGMtqthyUoHVRGss9Feer7QtwXpNyL5N+55YZqnnYc1qMLRwIr hXevcw0j3eWe9DnsUeffZi6na7xarW++zPVzSQcxj0bcY1A6TSDxVcMbjmwZnHwt MUIOclph1mx5jfLXviz6zajg+1InE8LnMLOY+sP/Rczw3Of5p9gg3wK3QbWuDDci Ze0zXzoWcvlBuABjAIzY4uX7H+6SqMM9bPhd/04n1Fl6Rt9vn0GVfbm06VO8XTgr H4k5GkVzzPwFxfqd5MvbJQTAL9nGSEF8TqS8b8rEQ9yWCuLvh9HjTPUihWceg6XM 94m4CR2tFcVvUVwARNo8Up4grg== -----END CERTIFICATE-----Generated at Fri Apr 17 08:10:13 2026 by rpki-client