$ rpki-client -vvf rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft File: kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft (raw, json) Hash identifier: NF4q2RVnVDPjps8IdOwUSctz1WNx0H+wm0O9zIcMqm8= Subject key identifier: 02:20:0C:E8:19:42:63:59:88:D7:AB:C3:B3:02:D4:25:80:9B:E0:9A Authority key identifier: 91:0F:2F:41:40:8E:13:DA:ED:7C:21:DC:47:2D:C5:C5:8C:45:88:36 Certificate issuer: /CN=A917408F/serialNumber=910F2F41408E13DAED7C21DC472DC5C58C458836 Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft Manifest number: 0100 Signing time: Wed 15 Apr 2026 05:47:42 +0000 Manifest this update: Wed 15 Apr 2026 05:47:42 +0000 Manifest next update: Wed 22 Apr 2026 05:47:42 +0000 Files and hashes: 1: kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl (hash: QzbzIrLi/p/lOnlNIi/Y5bah47ydi/AnlCnedXYnQ2A=) 2: 9CEF2622B76E11EF8FCC9767C4F9AE02.roa (hash: BT5lGoepooMPklXWzsmxnmANaCteYyqvqzOaxtbVyhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 05:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917408F, serialNumber=910F2F41408E13DAED7C21DC472DC5C58C458836 Validity Not Before: Apr 15 05:47:42 2026 GMT Not After : Apr 22 05:47:42 2026 GMT Subject: CN=69df267e-f298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5a:08:78:99:64:41:3a:12:b0:17:4d:f7:30: 9a:e6:1a:63:8b:57:31:29:9b:f2:ad:be:0d:0a:bd: ce:4c:0e:e8:88:e7:7b:48:07:92:79:ac:e7:1b:29: ca:17:01:4b:6d:ea:a0:f7:f4:d6:6c:c4:b2:b7:d4: 1d:f9:63:12:f8:c5:89:02:4a:82:9f:46:b0:1c:80: 32:d1:ca:01:21:6c:d6:85:e2:2c:16:53:e3:26:1a: 2b:55:99:a9:8f:4a:ee:18:a2:e0:ce:1a:6e:ac:00: c4:d8:1f:ab:49:9e:ef:40:ff:82:4a:de:9e:3b:15: 31:b4:4a:5f:68:ec:6b:2b:c5:09:66:74:f4:3d:c2: 87:a0:2e:97:45:a9:df:ae:d8:99:0c:6c:da:36:a0: ad:9a:31:6b:0d:7f:d8:38:7d:72:af:c4:f8:9e:a1: c6:05:56:c4:ee:11:24:6a:8b:a5:a6:8b:9c:db:18: 29:cf:b5:ec:8f:67:6f:aa:76:a1:85:d4:c5:50:75: 33:22:d8:c9:6e:1d:86:dd:29:b7:0a:2a:f4:65:db: 56:cf:c8:48:7f:bb:09:03:75:bf:20:ff:51:0c:b4: 0c:12:9d:c4:80:1c:3a:ad:8b:77:33:b5:09:c0:c4: da:42:2c:d6:bc:49:cd:bf:ea:90:77:7f:4f:da:5d: 31:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:20:0C:E8:19:42:63:59:88:D7:AB:C3:B3:02:D4:25:80:9B:E0:9A X509v3 Authority Key Identifier: keyid:91:0F:2F:41:40:8E:13:DA:ED:7C:21:DC:47:2D:C5:C5:8C:45:88:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:85:aa:bb:21:ca:11:2b:14:03:24:08:5b:6a:6b:6b:e4:3d: 03:88:a1:67:3c:1f:48:bc:42:49:c9:ad:ea:65:e2:79:fa:dd: 6f:ba:ea:a5:48:66:5b:7f:38:85:4c:15:f5:b8:28:b2:a5:8e: 28:d0:23:db:23:44:93:a8:f5:47:55:97:42:fd:0f:2e:83:dd: a0:00:18:f2:63:e6:f5:da:10:5c:85:ac:2b:7c:63:6c:ce:d3: a3:df:20:da:fe:a3:7a:cd:82:04:2a:e1:33:10:e8:17:0c:58: 69:13:84:e7:bf:b1:2c:dc:38:55:49:8e:ec:36:11:19:f9:f4: 77:c3:77:f2:44:c5:7e:c2:de:1d:8c:35:40:57:cc:7a:e9:fc: a3:22:40:ea:58:af:23:94:7e:3f:16:d9:78:3c:e6:01:1d:21: 9c:9b:c8:a2:48:26:96:db:0b:75:90:b6:5f:65:07:fc:b2:a8: 60:7e:b8:b1:f6:9a:9a:3a:46:e4:1d:3b:a2:e6:bb:03:b3:b2: fc:58:92:24:44:98:c5:48:cf:36:0a:e3:de:fa:4a:a9:64:ba: 24:bb:7b:70:4f:63:d2:dd:3f:dc:5c:5d:b1:1a:c4:13:4c:5c: f3:ef:2f:a5:b1:c1:ff:84:2e:07:a3:3f:99:86:03:5a:b7:37: 95:12:de:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQwOEYxMTAvBgNVBAUTKDkxMEYyRjQxNDA4RTEzREFFRDdDMjFEQzQ3MkRDNUM1 OEM0NTg4MzYwHhcNMjYwNDE1MDU0NzQyWhcNMjYwNDIyMDU0NzQyWjAYMRYwFAYD VQQDEw02OWRmMjY3ZS1mMjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1loIeJlkQToSsBdN9zCa5hpji1cxKZvyrb4NCr3OTA7oiOd7SAeSeaznGynK FwFLbeqg9/TWbMSyt9Qd+WMS+MWJAkqCn0awHIAy0coBIWzWheIsFlPjJhorVZmp j0ruGKLgzhpurADE2B+rSZ7vQP+CSt6eOxUxtEpfaOxrK8UJZnT0PcKHoC6XRanf rtiZDGzaNqCtmjFrDX/YOH1yr8T4nqHGBVbE7hEkaoulpouc2xgpz7Xsj2dvqnah hdTFUHUzItjJbh2G3Sm3Cir0ZdtWz8hIf7sJA3W/IP9RDLQMEp3EgBw6rYt3M7UJ wMTaQizWvEnNv+qQd39P2l0xFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAIgDOgZ QmNZiNerw7MC1CWAm+CaMB8GA1UdIwQYMBaAFJEPL0FAjhPa7Xwh3EctxcWMRYg2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDA4Ri8xNkNEOTg1OEI3 NkUxMUVGQUNGMEY4NjVDNEY5QUUwMi9rUTh2UVVDT0U5cnRmQ0hjUnkzRnhZeEZp RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tROHZRVUNPRTlydGZDSGNSeTNGeFl4RmlEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDA4Ri8xNkNEOTg1OEI3NkUxMUVGQUNGMEY4NjVDNEY5QUUwMi9rUTh2UVVDT0U5 cnRmQ0hjUnkzRnhZeEZpRFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAioWquyHKESsUAyQIW2pra+Q9A4ihZzwfSLxCScmt6mXiefrdb7rqpUhmW384 hUwV9bgosqWOKNAj2yNEk6j1R1WXQv0PLoPdoAAY8mPm9doQXIWsK3xjbM7To98g 2v6jes2CBCrhMxDoFwxYaROE57+xLNw4VUmO7DYRGfn0d8N38kTFfsLeHYw1QFfM eun8oyJA6livI5R+PxbZeDzmAR0hnJvIokgmltsLdZC2X2UH/LKoYH64sfaamjpG 5B07oua7A7Oy/FiSJESYxUjPNgrj3vpKqWS6JLt7cE9j0t0/3FxdsRrEE0xc8+8v pbHB/4QuB6M/mYYDWrc3lRLeiQ== -----END CERTIFICATE-----Generated at Fri Apr 17 07:33:25 2026 by rpki-client