$ rpki-client -vvf rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft File: KncXIyWXseQO6_FQ58uUIvRdim0.mft (raw, json) Hash identifier: 87XabGnZaGiR8mAHARfmV7/2OngnvbpsVC76ocN7ny8= Subject key identifier: 0E:E5:2F:6F:F7:3F:FA:CE:1A:63:E2:8D:D8:F4:67:F4:A7:39:CA:01 Authority key identifier: 2A:77:17:23:25:97:B1:E4:0E:EB:F1:50:E7:CB:94:22:F4:5D:8A:6D Certificate issuer: /CN=A913E5F9/serialNumber=2A7717232597B1E40EEBF150E7CB9422F45D8A6D Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KncXIyWXseQO6_FQ58uUIvRdim0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft Manifest number: 2F Signing time: Wed 15 Apr 2026 08:15:51 +0000 Manifest this update: Wed 15 Apr 2026 08:15:51 +0000 Manifest next update: Wed 22 Apr 2026 08:15:51 +0000 Files and hashes: 1: KncXIyWXseQO6_FQ58uUIvRdim0.crl (hash: jHn227il+XVwgtljOHWO71cgvLntPPJORKhAmLF830c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.crl rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KncXIyWXseQO6_FQ58uUIvRdim0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 08:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E5F9, serialNumber=2A7717232597B1E40EEBF150E7CB9422F45D8A6D Validity Not Before: Apr 15 08:15:51 2026 GMT Not After : Apr 22 08:15:51 2026 GMT Subject: CN=69df4937-3af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:67:f6:08:44:93:7b:75:a5:bd:3b:3f:e6:be: 80:2a:fd:68:27:63:a7:a0:f7:26:da:5e:47:85:0e: 6f:f0:47:39:1f:67:be:25:a3:e2:58:42:71:a7:a0: 7a:ca:a5:ea:ad:fb:67:6a:31:51:47:cc:85:53:bb: 0b:62:92:f0:5e:bb:1b:cc:45:52:ec:a9:14:b3:73: 00:69:2d:b1:59:ea:bd:ad:1e:b8:66:c2:7f:c3:a4: dc:a7:54:38:2e:59:58:c4:61:97:96:d0:51:d5:b7: 6e:83:ed:97:6d:87:5b:ef:e8:2c:c4:b0:7d:19:2a: 8e:89:ff:b8:73:6a:c0:1b:7e:db:7e:98:ec:5c:46: 9f:c2:ff:5d:8e:8b:84:4f:5f:1e:89:b5:c4:d2:d9: df:2f:ae:34:99:d4:0e:37:55:cd:41:96:00:db:4a: 2e:9a:25:a4:e0:f1:e7:76:6d:14:74:bb:c8:ca:b8: 4d:53:c3:55:80:65:f2:0f:5e:40:62:9e:a9:ab:9e: f0:e5:8f:40:93:33:82:e0:a6:6b:51:64:12:07:5b: b9:5d:f3:77:ca:54:1e:a8:4d:fe:fe:56:83:9a:21: bd:d8:61:b3:5e:05:46:38:4d:51:55:f0:48:26:b8: 91:95:0c:b3:18:5d:6e:e5:1e:c3:57:e9:f7:db:42: 47:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E5:2F:6F:F7:3F:FA:CE:1A:63:E2:8D:D8:F4:67:F4:A7:39:CA:01 X509v3 Authority Key Identifier: keyid:2A:77:17:23:25:97:B1:E4:0E:EB:F1:50:E7:CB:94:22:F4:5D:8A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KncXIyWXseQO6_FQ58uUIvRdim0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:20:b6:5a:2c:e6:99:43:ef:f8:ab:7f:26:8a:82:20:17:38: f2:0b:9e:86:1e:ec:80:04:bd:ef:b5:e8:d1:40:9c:69:4e:0f: 01:92:9c:c6:71:c1:02:e4:9a:6a:8f:f4:0d:cd:2a:4e:e1:c9: ca:ee:8c:ac:11:1d:55:ec:bb:f4:b6:7d:3f:28:28:f8:93:f8: eb:61:7d:9e:bb:fa:51:90:ea:76:67:70:58:f6:5d:19:1c:34: 12:8d:a5:b2:a0:d2:37:d4:61:83:dd:35:13:8b:a7:db:fe:9b: a2:01:8e:d2:d9:17:e1:7a:92:40:c4:1b:8c:b3:5a:2c:ce:34: 25:59:85:c0:af:b2:49:3f:43:45:f5:d3:33:e5:f1:59:6c:45: 1d:4f:65:bd:08:e5:23:0d:0a:a4:95:16:41:9a:d0:7b:ae:8c: 81:42:08:0f:3c:2d:8d:cf:dc:f6:fb:2a:bb:df:20:ab:12:43: dc:64:37:d6:a2:e7:98:0a:dc:d9:76:6f:67:61:ad:c5:9a:0c: 98:ed:c8:28:2b:e9:0a:5c:3c:85:5b:c6:ab:b7:91:98:32:bb: 23:92:74:3b:6e:48:30:55:e8:78:53:fc:f4:a7:a7:30:76:1a: a7:09:f3:30:85:3c:46:b1:c8:b8:52:1a:f0:88:5d:da:16:4d: d3:56:16:76 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RTVGOTExMC8GA1UEBRMoMkE3NzE3MjMyNTk3QjFFNDBFRUJGMTUwRTdDQjk0MjJG NDVEOEE2RDAeFw0yNjA0MTUwODE1NTFaFw0yNjA0MjIwODE1NTFaMBgxFjAUBgNV BAMTDTY5ZGY0OTM3LTNhZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnZ/YIRJN7daW9Oz/mvoAq/WgnY6eg9ybaXkeFDm/wRzkfZ74lo+JYQnGnoHrK peqt+2dqMVFHzIVTuwtikvBeuxvMRVLsqRSzcwBpLbFZ6r2tHrhmwn/DpNynVDgu WVjEYZeW0FHVt26D7Zdth1vv6CzEsH0ZKo6J/7hzasAbftt+mOxcRp/C/12Oi4RP Xx6JtcTS2d8vrjSZ1A43Vc1BlgDbSi6aJaTg8ed2bRR0u8jKuE1Tw1WAZfIPXkBi nqmrnvDlj0CTM4LgpmtRZBIHW7ld83fKVB6oTf7+VoOaIb3YYbNeBUY4TVFV8Egm uJGVDLMYXW7lHsNX6ffbQkcfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUDuUvb/c/ +s4aY+KN2PRn9Kc5ygEwHwYDVR0jBBgwFoAUKncXIyWXseQO6/FQ58uUIvRdim0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFNUY5LzAwNkJBMzQ0RjY5 MTExRjBBRTI3ODg1MjNBNkY1NkJDL0tuY1hJeVdYc2VRTzZfRlE1OHVVSXZSZGlt MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS25jWEl5V1hzZVFPNl9GUTU4dVVJdlJkaW0wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF NUY5LzAwNkJBMzQ0RjY5MTExRjBBRTI3ODg1MjNBNkY1NkJDL0tuY1hJeVdYc2VR TzZfRlE1OHVVSXZSZGltMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAXILZaLOaZQ+/4q38mioIgFzjyC56GHuyABL3vtejRQJxpTg8BkpzGccEC5Jpq j/QNzSpO4cnK7oysER1V7Lv0tn0/KCj4k/jrYX2eu/pRkOp2Z3BY9l0ZHDQSjaWy oNI31GGD3TUTi6fb/puiAY7S2RfhepJAxBuMs1oszjQlWYXAr7JJP0NF9dMz5fFZ bEUdT2W9COUjDQqklRZBmtB7royBQggPPC2Nz9z2+yq73yCrEkPcZDfWoueYCtzZ dm9nYa3FmgyY7cgoK+kKXDyFW8art5GYMrsjknQ7bkgwVeh4U/z0p6cwdhqnCfMw hTxGsci4UhrwiF3aFk3TVhZ2 -----END CERTIFICATE-----Generated at Fri Apr 17 07:22:34 2026 by rpki-client