$ rpki-client -vvf rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft File: kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft (raw, json) Hash identifier: q+nvLK9pqUq0gM1a5JgidoqtQWzgfMbUb+rXf/BCZq4= Subject key identifier: 03:7E:53:DE:FA:5B:94:64:49:CA:73:35:FD:78:D6:09:C6:07:E1:EC Authority key identifier: 91:2A:B3:9F:C7:BB:CB:EF:1C:F2:67:E9:D3:F7:19:C9:A4:F0:A1:14 Certificate issuer: /CN=A91478C3/serialNumber=912AB39FC7BBCBEF1CF267E9D3F719C9A4F0A114 Certificate serial: 0F06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft Manifest number: 0EFB Signing time: Thu 16 Apr 2026 17:31:57 +0000 Manifest this update: Thu 16 Apr 2026 17:31:56 +0000 Manifest next update: Thu 23 Apr 2026 17:31:56 +0000 Files and hashes: 1: kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl (hash: 4JcIPPnc5yHgTkgSxk1ML6y3LY9GFJy0x2Lb3ydRUkM=) 2: 36477FF69D2E11E99A95DC2AC4F9AE02.roa (hash: 7Zntvgptxi7t6rq+AQ6AjwkrN9jO9paj8Ccr/LfGYDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3846 (0xf06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91478C3, serialNumber=912AB39FC7BBCBEF1CF267E9D3F719C9A4F0A114 Validity Not Before: Apr 16 17:31:56 2026 GMT Not After : Apr 23 17:31:56 2026 GMT Subject: CN=69e11d0d-6a89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4d:e9:d3:12:d2:59:94:0f:c1:18:4a:21:61: c9:fa:b2:fd:0e:37:97:e3:a9:67:f0:a1:24:d9:4b: 37:ff:89:47:b7:7f:74:ab:c3:c7:b2:fc:22:93:e6: a0:af:86:ff:75:67:b9:19:f8:1c:84:72:0b:35:b8: 45:f9:3c:bb:19:a2:f1:81:e7:e2:44:7e:4c:14:69: 4a:f0:3e:a1:c2:3b:89:01:64:61:dc:ea:e0:38:91: e2:04:13:17:55:26:0e:2e:dc:54:cb:62:af:40:06: c3:02:29:19:3c:74:05:ff:0c:69:79:82:6b:35:ad: c2:a5:83:81:4d:7d:b3:13:fa:ce:76:df:f6:a5:e9: 06:2a:a6:be:c4:7d:40:d7:a5:86:09:d5:98:7f:9f: b2:9d:cc:c5:e4:75:0c:99:3c:f6:45:1d:90:23:20: 1c:45:02:5a:67:37:dc:fe:59:26:c2:7b:97:a0:3a: 53:77:6a:2f:0a:82:37:bb:84:99:53:90:b0:4d:5b: b0:8a:d3:2e:35:dc:c3:f4:5e:35:61:41:fc:27:80: 9f:3d:b4:c5:c7:4e:cb:6d:bb:f9:8f:de:65:6c:69: 4a:f5:10:fa:eb:fd:d1:b0:e2:e9:2c:90:00:40:3c: c7:2a:ba:74:6f:ac:bf:19:6f:e1:47:4b:30:56:ee: d9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7E:53:DE:FA:5B:94:64:49:CA:73:35:FD:78:D6:09:C6:07:E1:EC X509v3 Authority Key Identifier: keyid:91:2A:B3:9F:C7:BB:CB:EF:1C:F2:67:E9:D3:F7:19:C9:A4:F0:A1:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478C3/E3D9194C9D2C11E980221829C4F9AE02/kSqzn8e7y-8c8mfp0_cZyaTwoRQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:30:e7:b3:c3:ce:37:04:70:30:77:8b:bb:29:4d:52:a7:98: c2:90:49:14:a7:2f:3d:28:a7:b8:07:02:58:84:5a:ca:b9:36: 93:d3:b1:37:97:82:70:e9:c7:a8:dc:37:97:58:93:33:c8:a8: 66:4b:98:55:40:9f:6c:34:e7:ed:ac:26:1e:97:7e:15:ba:45: 84:41:d2:20:48:72:8a:b0:2f:11:3c:cb:9b:75:de:71:42:05: f6:fa:f7:2c:14:35:71:fe:93:f6:3b:11:05:37:58:c5:80:2a: 8d:0b:b5:48:6a:e4:e9:1e:17:8a:fc:48:f6:96:ed:0d:fa:73: a8:ad:4e:e7:34:ef:96:ea:0a:ce:83:5b:71:94:72:b4:49:e9: fc:a4:d1:35:7e:8a:0c:14:d7:ca:73:6a:54:64:56:28:a0:21: 45:3a:1c:c3:12:ea:dc:d1:23:9f:2e:a8:5a:90:f7:fe:32:4d: 94:bd:50:0a:f1:e7:c5:10:e5:11:ca:c3:d3:c7:69:89:da:cf: 7b:f3:a0:ff:7c:5f:c3:f2:5f:b5:79:eb:92:24:9b:f5:70:27: 44:f6:df:3c:4f:ae:43:57:34:f9:ee:c6:65:03:2c:a5:1e:18: 6c:b9:25:2a:ba:98:cb:df:ca:90:4e:1c:df:07:2a:f9:ec:94: 5b:f1:78:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4QzMxMTAvBgNVBAUTKDkxMkFCMzlGQzdCQkNCRUYxQ0YyNjdFOUQzRjcxOUM5 QTRGMEExMTQwHhcNMjYwNDE2MTczMTU2WhcNMjYwNDIzMTczMTU2WjAYMRYwFAYD VQQDEw02OWUxMWQwZC02YTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq03p0xLSWZQPwRhKIWHJ+rL9DjeX46ln8KEk2Us3/4lHt390q8PHsvwik+ag r4b/dWe5GfgchHILNbhF+Ty7GaLxgefiRH5MFGlK8D6hwjuJAWRh3OrgOJHiBBMX VSYOLtxUy2KvQAbDAikZPHQF/wxpeYJrNa3CpYOBTX2zE/rOdt/2pekGKqa+xH1A 16WGCdWYf5+ynczF5HUMmTz2RR2QIyAcRQJaZzfc/lkmwnuXoDpTd2ovCoI3u4SZ U5CwTVuwitMuNdzD9F41YUH8J4CfPbTFx07Lbbv5j95lbGlK9RD66/3RsOLpLJAA QDzHKrp0b6y/GW/hR0swVu7ZqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAN+U976 W5RkScpzNf141gnGB+HsMB8GA1UdIwQYMBaAFJEqs5/Hu8vvHPJn6dP3Gcmk8KEU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzhDMy9FM0Q5MTk0QzlE MkMxMUU5ODAyMjE4MjlDNEY5QUUwMi9rU3F6bjhlN3ktOGM4bWZwMF9jWnlhVHdv UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTcXpuOGU3eS04YzhtZnAwX2NaeWFUd29SUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzhDMy9FM0Q5MTk0QzlEMkMxMUU5ODAyMjE4MjlDNEY5QUUwMi9rU3F6bjhlN3kt OGM4bWZwMF9jWnlhVHdvUlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkjDns8PONwRwMHeLuylNUqeYwpBJFKcvPSinuAcCWIRayrk2k9OxN5eCcOnH qNw3l1iTM8ioZkuYVUCfbDTn7awmHpd+FbpFhEHSIEhyirAvETzLm3XecUIF9vr3 LBQ1cf6T9jsRBTdYxYAqjQu1SGrk6R4XivxI9pbtDfpzqK1O5zTvluoKzoNbcZRy tEnp/KTRNX6KDBTXynNqVGRWKKAhRTocwxLq3NEjny6oWpD3/jJNlL1QCvHnxRDl EcrD08dpidrPe/Og/3xfw/JftXnrkiSb9XAnRPbfPE+uQ1c0+e7GZQMspR4YbLkl KrqYy9/KkE4c3wcq+eyUW/F4Ow== -----END CERTIFICATE-----Generated at Fri Apr 17 05:31:36 2026 by rpki-client