$ rpki-client -vvf rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft File: KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft (raw, json) Hash identifier: YJ4dONZvI5i1eg/csdR+AM/Y+fey9y5KmeImSvlZ1iI= Subject key identifier: EF:CB:59:A1:5D:ED:8D:EF:BF:18:A8:F9:7A:17:AB:9B:9E:4F:88:5D Authority key identifier: 28:17:D4:A8:64:4A:EC:41:9A:DC:CE:E3:0C:4E:87:A2:4D:2F:F5:7B Certificate issuer: /CN=A9158650/serialNumber=2817D4A8644AEC419ADCCEE30C4E87A24D2FF57B Certificate serial: 0251 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft Manifest number: 024A Signing time: Fri 17 Apr 2026 02:09:08 +0000 Manifest this update: Fri 17 Apr 2026 02:09:08 +0000 Manifest next update: Fri 24 Apr 2026 02:09:08 +0000 Files and hashes: 1: KBfUqGRK7EGa3M7jDE6Hok0v9Xs.crl (hash: 7pEPxI4qHHSty4k85lXzEfL2MKU7JjyEuBdgcTIFjoQ=) 2: EA5A9A32BDAA11ED92995562C4F9AE02.roa (hash: c33kuST7gT7ebNkTWc7XNN3mabw1ea/YNIBXvt3Yc/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.crl rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 593 (0x251) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158650, serialNumber=2817D4A8644AEC419ADCCEE30C4E87A24D2FF57B Validity Not Before: Apr 17 02:09:08 2026 GMT Not After : Apr 24 02:09:08 2026 GMT Subject: CN=69e19644-f469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cf:a6:87:4d:64:36:2c:b9:b6:1b:36:77:16: 11:66:9c:ed:c3:02:8e:e5:22:3a:46:6d:1a:ad:29: d0:76:5b:4c:63:a2:99:d6:69:b7:96:55:7c:5d:40: 46:c9:fc:d8:a3:93:a0:f9:3c:ab:ac:8c:19:ec:e1: 95:f8:8c:5c:0c:25:48:80:9b:73:80:94:c3:fd:3f: 53:62:42:fc:b0:6e:34:07:65:ad:ae:ed:9a:8a:ce: 51:e1:aa:5d:f9:5c:f9:b8:5c:38:94:d4:de:45:3a: e3:33:55:68:d3:37:19:a8:42:8d:ff:25:31:5b:43: bc:30:f5:91:79:27:72:44:6b:dd:7c:11:21:c8:96: 61:c1:4a:7d:17:1c:7b:55:15:22:b9:e6:d7:21:be: 88:a4:97:e4:95:4c:a1:fa:b7:3a:5d:da:c2:2b:be: 16:a7:95:b7:7a:71:7a:19:6d:e9:08:8d:34:5b:a4: 5a:af:ed:84:41:1b:cc:03:0a:c9:11:a8:88:c4:06: 94:23:16:6b:91:06:fa:f0:63:71:99:8c:27:40:45: 20:fa:20:75:4e:c9:89:bc:01:fc:8b:32:5f:04:65: 41:16:9d:07:7b:97:51:87:3b:69:a0:73:4a:7b:5a: e4:3e:e3:00:4b:96:65:0e:5f:a6:c6:30:03:76:34: 5e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:CB:59:A1:5D:ED:8D:EF:BF:18:A8:F9:7A:17:AB:9B:9E:4F:88:5D X509v3 Authority Key Identifier: keyid:28:17:D4:A8:64:4A:EC:41:9A:DC:CE:E3:0C:4E:87:A2:4D:2F:F5:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:5c:3f:b3:c6:af:16:d1:0b:f4:8e:8c:d6:fa:99:1a:97:8d: 0c:a1:0a:67:ed:00:42:64:8b:32:22:4a:b7:61:42:eb:38:c0: 1c:45:f5:71:c1:f3:32:99:36:38:90:36:c5:0c:3c:9d:77:60: 7c:49:2a:cf:37:ae:76:38:48:b8:fd:e5:e5:05:b0:3c:45:c6: ec:41:06:3d:1e:86:42:52:6f:42:0c:02:2c:29:49:f5:37:fe: ee:28:ef:5d:14:a3:b8:4d:d9:8b:43:05:e3:be:f2:48:8a:28: 31:a2:81:bb:23:75:28:9c:c5:43:92:cf:72:d9:f5:b5:03:51: ae:b9:b7:c8:dd:7e:92:96:11:8e:db:a5:07:fa:19:c7:d5:59: dc:54:42:68:2c:46:77:fc:53:4f:05:36:73:94:72:de:9c:fa: a6:c5:13:2f:c4:c9:5b:c6:fa:2d:bd:ba:9d:32:e8:44:de:fb: 11:e9:39:e4:32:89:0f:57:6c:2b:b5:2b:3e:d0:cd:13:12:57: 20:14:af:42:9b:0e:aa:cf:f1:2e:42:43:94:1a:20:da:b8:a1: fc:95:8c:2e:db:4d:d7:48:b0:3e:e1:75:6d:c8:1f:9b:5d:0c: c1:95:d3:32:ce:c7:91:14:39:dc:18:2d:16:ce:6c:cb:38:93: 66:b8:41:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg2NTAxMTAvBgNVBAUTKDI4MTdENEE4NjQ0QUVDNDE5QURDQ0VFMzBDNEU4N0Ey NEQyRkY1N0IwHhcNMjYwNDE3MDIwOTA4WhcNMjYwNDI0MDIwOTA4WjAYMRYwFAYD VQQDEw02OWUxOTY0NC1mNDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqs+mh01kNiy5ths2dxYRZpztwwKO5SI6Rm0arSnQdltMY6KZ1mm3llV8XUBG yfzYo5Og+TyrrIwZ7OGV+IxcDCVIgJtzgJTD/T9TYkL8sG40B2Wtru2ais5R4apd +Vz5uFw4lNTeRTrjM1Vo0zcZqEKN/yUxW0O8MPWReSdyRGvdfBEhyJZhwUp9Fxx7 VRUiuebXIb6IpJfklUyh+rc6XdrCK74Wp5W3enF6GW3pCI00W6Rar+2EQRvMAwrJ EaiIxAaUIxZrkQb68GNxmYwnQEUg+iB1TsmJvAH8izJfBGVBFp0He5dRhztpoHNK e1rkPuMAS5ZlDl+mxjADdjRexwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO/LWaFd 7Y3vvxio+XoXq5ueT4hdMB8GA1UdIwQYMBaAFCgX1KhkSuxBmtzO4wxOh6JNL/V7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODY1MC83NzU4RDJDMkJE QTcxMUVEQUVDRDRBNURDNEY5QUUwMi9LQmZVcUdSSzdFR2EzTTdqREU2SG9rMHY5 WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tCZlVxR1JLN0VHYTNNN2pERTZIb2swdjlYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODY1MC83NzU4RDJDMkJEQTcxMUVEQUVDRDRBNURDNEY5QUUwMi9LQmZVcUdSSzdF R2EzTTdqREU2SG9rMHY5WHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATlw/s8avFtEL9I6M1vqZGpeNDKEKZ+0AQmSLMiJKt2FC6zjAHEX1ccHzMpk2 OJA2xQw8nXdgfEkqzzeudjhIuP3l5QWwPEXG7EEGPR6GQlJvQgwCLClJ9Tf+7ijv XRSjuE3Zi0MF477ySIooMaKBuyN1KJzFQ5LPctn1tQNRrrm3yN1+kpYRjtulB/oZ x9VZ3FRCaCxGd/xTTwU2c5Ry3pz6psUTL8TJW8b6Lb26nTLoRN77Eek55DKJD1ds K7UrPtDNExJXIBSvQpsOqs/xLkJDlBog2rih/JWMLttN10iwPuF1bcgfm10MwZXT Ms7HkRQ53BgtFs5syziTZrhB9Q== -----END CERTIFICATE-----Generated at Fri Apr 17 09:47:48 2026 by rpki-client