$ rpki-client -vvf rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft File: 4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft (raw, json) Hash identifier: 0wpTbeOGrHig8tLQ0eQX7mechCVuxo2YLYOiIkJSIoo= Subject key identifier: CE:D5:91:1C:61:DA:03:B6:7A:08:D2:D3:76:39:83:65:80:4E:02:9C Authority key identifier: E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29 Certificate issuer: /CN=A917A93E/serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29 Certificate serial: 010A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft Manifest number: 0106 Signing time: Fri 17 Apr 2026 05:54:11 +0000 Manifest this update: Fri 17 Apr 2026 05:54:11 +0000 Manifest next update: Fri 24 Apr 2026 05:54:11 +0000 Files and hashes: 1: 4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl (hash: ke2qqdXx45TJh2etKGqGXqW0LAVGAF+9vLbrT6uoXcw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A93E, serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29 Validity Not Before: Apr 17 05:54:11 2026 GMT Not After : Apr 24 05:54:11 2026 GMT Subject: CN=69e1cb03-74d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:09:6e:8c:c0:97:1e:92:f9:85:7e:f9:3b:99: bc:11:95:0c:68:5e:e5:b0:4a:83:0d:e8:64:73:d4: 48:f4:72:73:7b:4d:72:2b:47:ac:43:ca:bb:2c:8a: 26:5d:52:00:7e:dc:7d:61:49:dc:a0:5f:b6:87:56: df:05:2d:32:73:25:30:69:c7:01:70:9e:eb:b5:9e: ba:82:9f:ba:5c:65:c1:74:59:ce:a0:e1:9e:59:a5: 43:5f:ee:69:2a:c4:ec:8b:86:59:20:d2:e4:01:d0: 8e:4d:2e:e8:f0:81:4f:64:a1:2f:ad:ab:de:79:bd: 01:7b:0d:0e:64:e9:80:db:aa:81:c1:ef:61:15:51: 6f:c5:17:df:ff:e5:be:e0:48:88:ad:69:bd:51:e5: f9:b6:1f:04:cc:62:17:4c:ed:3b:e5:d2:21:ae:02: 29:5d:8b:a4:c1:ca:c0:4b:3e:ad:e0:ff:90:ed:e7: 9c:42:29:7c:ce:8e:5c:39:7f:42:d7:f9:59:81:0b: 2e:46:d0:54:6e:9d:88:52:b8:8d:60:b2:ae:d0:49: bd:29:4f:65:bd:78:11:ec:16:f1:a5:a6:a3:88:68: 8f:f6:f0:7c:43:b8:73:62:09:61:f7:bf:ed:a6:8e: e6:ef:38:63:f1:ac:45:9a:ff:66:2d:37:8f:95:0e: 10:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D5:91:1C:61:DA:03:B6:7A:08:D2:D3:76:39:83:65:80:4E:02:9C X509v3 Authority Key Identifier: keyid:E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:ce:c3:ce:8d:f1:27:77:75:ee:73:46:dc:b5:52:5e:a8:92: 0d:5c:1a:fe:d9:c8:4a:34:df:b5:8d:90:cf:3c:4a:93:7f:86: f4:9f:45:6f:57:99:a4:d7:9e:49:78:da:5b:db:c4:b0:34:7c: 17:ad:94:26:6d:79:1b:2b:d3:ba:21:82:d5:b9:43:6c:b1:22: cc:7d:bc:b1:50:61:ac:99:4b:9e:d3:9a:4b:96:23:88:1d:32: 3f:70:81:af:bd:35:03:f9:08:42:a3:96:d1:c1:45:b3:80:ee: 41:70:01:a3:48:c2:ee:7d:60:2e:a8:a7:6d:72:5f:fb:ff:7f: 03:df:78:af:8d:93:15:c1:17:5c:14:fa:65:78:5e:17:53:1b: e5:78:80:07:dd:f3:74:2d:55:1c:62:06:f8:01:5a:0c:d4:ff: c2:23:d0:65:2a:9f:71:e8:1a:45:53:ef:f6:06:9b:1e:e4:33: dd:6f:cc:69:59:7d:25:94:d6:07:8c:1a:52:7f:f7:02:cb:be: 00:e6:43:73:f7:2e:bf:c5:b0:4a:2a:22:6c:68:53:49:ac:e9: ae:d1:97:e8:0e:5f:1e:fb:e2:d2:9e:d4:b9:80:17:84:0d:01: db:3c:50:a2:d8:51:35:5f:6e:2a:b1:0a:5d:88:62:d9:d3:b6: 6c:fa:f3:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E5M0UxMTAvBgNVBAUTKEUwQUI2RDk3NzI2NURCMEQ1QzU4RDQzM0EyOEIzQ0My MDUxQTBDMjkwHhcNMjYwNDE3MDU1NDExWhcNMjYwNDI0MDU1NDExWjAYMRYwFAYD VQQDEw02OWUxY2IwMy03NGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6QlujMCXHpL5hX75O5m8EZUMaF7lsEqDDehkc9RI9HJze01yK0esQ8q7LIom XVIAftx9YUncoF+2h1bfBS0ycyUwaccBcJ7rtZ66gp+6XGXBdFnOoOGeWaVDX+5p KsTsi4ZZINLkAdCOTS7o8IFPZKEvraveeb0Bew0OZOmA26qBwe9hFVFvxRff/+W+ 4EiIrWm9UeX5th8EzGIXTO075dIhrgIpXYukwcrASz6t4P+Q7eecQil8zo5cOX9C 1/lZgQsuRtBUbp2IUriNYLKu0Em9KU9lvXgR7BbxpaajiGiP9vB8Q7hzYglh97/t po7m7zhj8axFmv9mLTePlQ4Q1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM7VkRxh 2gO2egjS03Y5g2WATgKcMB8GA1UdIwQYMBaAFOCrbZdyZdsNXFjUM6KLPMIFGgwp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTkzRS80NzFCMzcyOEI3 OUExMUVGOEVDNDk5NTFDNEY5QUUwMi80S3R0bDNKbDJ3MWNXTlF6b29zOHdnVWFE Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRLdHRsM0psMncxY1dOUXpvb3M4d2dVYURDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTkzRS80NzFCMzcyOEI3OUExMUVGOEVDNDk5NTFDNEY5QUUwMi80S3R0bDNKbDJ3 MWNXTlF6b29zOHdnVWFEQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAks7Dzo3xJ3d17nNG3LVSXqiSDVwa/tnISjTftY2QzzxKk3+G9J9Fb1eZpNee SXjaW9vEsDR8F62UJm15GyvTuiGC1blDbLEizH28sVBhrJlLntOaS5YjiB0yP3CB r701A/kIQqOW0cFFs4DuQXABo0jC7n1gLqinbXJf+/9/A994r42TFcEXXBT6ZXhe F1Mb5XiAB93zdC1VHGIG+AFaDNT/wiPQZSqfcegaRVPv9gabHuQz3W/MaVl9JZTW B4waUn/3Asu+AOZDc/cuv8WwSioibGhTSazprtGX6A5fHvvi0p7UuYAXhA0B2zxQ othRNV9uKrEKXYhi2dO2bPrzZw== -----END CERTIFICATE-----Generated at Fri Apr 17 13:06:02 2026 by rpki-client