$ rpki-client -vvf rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.mft File: Ka_QrBIi6e_viwKNMY-OZPUTYCY.mft (raw, json) Hash identifier: XFtPD5sutIpWwB5y5yBYCvB0S1c25pe9Hkbpjeu2oGk= Subject key identifier: BF:37:11:20:F3:3B:FD:0C:3F:CB:16:53:E7:42:0C:2E:90:A6:13:A0 Authority key identifier: 29:AF:D0:AC:12:22:E9:EF:EF:8B:02:8D:31:8F:8E:64:F5:13:60:26 Certificate issuer: /CN=A9153944/serialNumber=29AFD0AC1222E9EFEF8B028D318F8E64F5136026 Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ka_QrBIi6e_viwKNMY-OZPUTYCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.mft Manifest number: 04 Signing time: Fri 17 Apr 2026 05:34:07 +0000 Manifest this update: Fri 17 Apr 2026 05:34:06 +0000 Manifest next update: Fri 24 Apr 2026 05:34:06 +0000 Files and hashes: 1: Ka_QrBIi6e_viwKNMY-OZPUTYCY.crl (hash: oNDvKR9w6e6S+zLnbshT4f/Rhql9bAJNMgyUeb7knkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.crl rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ka_QrBIi6e_viwKNMY-OZPUTYCY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:34:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153944, serialNumber=29AFD0AC1222E9EFEF8B028D318F8E64F5136026 Validity Not Before: Apr 17 05:34:06 2026 GMT Not After : Apr 24 05:34:06 2026 GMT Subject: CN=69e1c64f-be7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:61:c7:f2:55:bd:cd:82:12:f3:b6:dd:a9:ba: 71:fd:da:12:13:78:77:88:ab:60:d3:35:d3:32:bc: 30:22:2d:bf:f6:cd:4f:b1:4a:a0:1b:d5:c2:64:3d: 38:47:b2:fb:ff:ad:58:40:19:16:b8:60:2b:ec:14: 9f:1e:c7:08:98:5a:af:40:a6:be:0b:69:96:ec:d9: ec:dd:8a:1e:d5:f7:2c:c7:c6:35:35:59:ca:2a:d6: 2c:93:06:67:9e:90:65:e1:29:8f:ff:8f:aa:54:d3: 20:c7:a4:8a:af:dd:55:cd:df:2b:63:3a:91:59:3b: 5f:3f:2b:36:1e:48:fd:ce:cd:4f:3a:3a:c9:7d:38: 10:00:82:8b:ea:01:7f:16:45:19:fb:97:90:06:0c: 1c:fc:6b:16:9e:a9:fb:7c:e5:a3:05:a4:aa:9d:7b: bf:f2:2a:a1:db:1d:4e:57:4d:59:55:f4:87:32:7e: bd:a1:53:90:93:66:0d:e6:06:ec:f1:1a:7d:37:3e: 59:1f:4d:10:5f:42:14:fc:5c:e9:a5:07:08:f7:3a: 54:87:18:13:f9:c7:1a:aa:02:de:97:cc:85:a1:76: 1a:0d:62:8b:26:f2:8b:d5:46:fd:05:7d:ce:89:1e: 07:8e:7a:a1:1e:eb:fd:76:45:8d:55:80:d9:01:6b: fa:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:37:11:20:F3:3B:FD:0C:3F:CB:16:53:E7:42:0C:2E:90:A6:13:A0 X509v3 Authority Key Identifier: keyid:29:AF:D0:AC:12:22:E9:EF:EF:8B:02:8D:31:8F:8E:64:F5:13:60:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ka_QrBIi6e_viwKNMY-OZPUTYCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:35:99:b4:a1:29:2d:48:1d:b4:f4:39:77:fa:37:db:0c:cd: 8f:86:34:86:da:79:8f:fc:4a:03:e8:e1:88:05:7a:90:10:04: f8:a7:f2:bd:72:f4:50:ec:b1:23:6f:7f:16:02:ca:ea:e4:74: b7:b2:21:2e:86:5a:f1:af:47:80:7c:3c:21:98:47:96:12:6e: f0:7d:80:55:c2:54:a5:95:ea:b5:04:0b:3b:80:4e:a7:62:c8: 09:eb:7e:4a:c7:bf:7d:d9:9f:f3:6b:da:7b:5e:9f:2c:98:e7: 8c:92:79:94:58:0a:24:df:94:7d:ae:01:e6:f9:df:5e:b7:c9: 9b:2c:b4:51:2f:1c:65:05:d0:ad:bd:45:1a:4f:85:c0:ba:bf: a0:b1:d9:af:ef:b4:7b:ab:ba:91:03:1c:a6:7f:3a:76:12:63: f5:6f:3e:9d:ad:f6:c1:e6:92:f4:f2:0e:f6:35:55:f2:bd:ce: 55:04:66:0c:ad:75:be:e5:a9:61:7c:a0:0d:3d:09:00:83:f8: 85:c1:ff:71:d3:27:af:60:91:cf:d9:e1:90:e2:86:95:6a:66: 48:8e:d7:21:98:f5:a3:91:e2:cf:0d:44:bb:26:0b:f2:19:3f: cf:52:7f:41:ea:27:7f:c3:96:a5:bf:3b:16:e9:e1:06:a4:3e: af:8a:38:48 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Mzk0NDExMC8GA1UEBRMoMjlBRkQwQUMxMjIyRTlFRkVGOEIwMjhEMzE4RjhFNjRG NTEzNjAyNjAeFw0yNjA0MTcwNTM0MDZaFw0yNjA0MjQwNTM0MDZaMBgxFjAUBgNV BAMTDTY5ZTFjNjRmLWJlN2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLYcfyVb3NghLztt2punH92hITeHeIq2DTNdMyvDAiLb/2zU+xSqAb1cJkPThH svv/rVhAGRa4YCvsFJ8exwiYWq9Apr4LaZbs2ezdih7V9yzHxjU1Wcoq1iyTBmee kGXhKY//j6pU0yDHpIqv3VXN3ytjOpFZO18/KzYeSP3OzU86Osl9OBAAgovqAX8W RRn7l5AGDBz8axaeqft85aMFpKqde7/yKqHbHU5XTVlV9Icyfr2hU5CTZg3mBuzx Gn03PlkfTRBfQhT8XOmlBwj3OlSHGBP5xxqqAt6XzIWhdhoNYosm8ovVRv0Ffc6J HgeOeqEe6/12RY1VgNkBa/pFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvzcRIPM7 /Qw/yxZT50IMLpCmE6AwHwYDVR0jBBgwFoAUKa/QrBIi6e/viwKNMY+OZPUTYCYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzOTQ0L0RDNzcwMTBBMzU2 OTExRjFCRjdENkNBNzdDRUU1MjhFL0thX1FyQklpNmVfdml3S05NWS1PWlBVVFlD WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvS2FfUXJCSWk2ZV92aXdLTk1ZLU9aUFVUWUNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz OTQ0L0RDNzcwMTBBMzU2OTExRjFCRjdENkNBNzdDRUU1MjhFL0thX1FyQklpNmVf dml3S05NWS1PWlBVVFlDWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBINZm0oSktSB209Dl3+jfbDM2PhjSG2nmP/EoD6OGIBXqQEAT4p/K9cvRQ7LEj b38WAsrq5HS3siEuhlrxr0eAfDwhmEeWEm7wfYBVwlSlleq1BAs7gE6nYsgJ635K x7992Z/za9p7Xp8smOeMknmUWAok35R9rgHm+d9et8mbLLRRLxxlBdCtvUUaT4XA ur+gsdmv77R7q7qRAxymfzp2EmP1bz6drfbB5pL08g72NVXyvc5VBGYMrXW+5alh fKANPQkAg/iFwf9x0yevYJHP2eGQ4oaVamZIjtchmPWjkeLPDUS7JgvyGT/PUn9B 6id/w5alvzsW6eEGpD6vijhI -----END CERTIFICATE-----Generated at Fri Apr 17 17:52:43 2026 by rpki-client