$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft File: kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft (raw, json) Hash identifier: w436XsGEGSOBFiz+wHJ3pxvzm/1OdD/K3Rx7K6vSSfs= Subject key identifier: D5:93:C2:D2:6B:7D:B1:C4:23:19:D2:FB:8F:0A:9A:11:93:99:D1:50 Authority key identifier: 91:26:EF:E5:0D:5E:3B:53:1F:EE:E4:54:9A:B3:0B:FE:7A:54:55:07 Certificate issuer: /CN=A917F4D3/serialNumber=9126EFE50D5E3B531FEEE4549AB30BFE7A545507 Certificate serial: 028A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft Manifest number: 0284 Signing time: Fri 17 Apr 2026 01:34:59 +0000 Manifest this update: Fri 17 Apr 2026 01:34:59 +0000 Manifest next update: Fri 24 Apr 2026 01:34:59 +0000 Files and hashes: 1: kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl (hash: zHfwIQLgYMzb6Chd7k4Wo03CDdjNblgymJvrJhnGTRc=) 2: 32091726626D11ED87BDAC82C4F9AE02.roa (hash: K2gsbb3RIWZ1Guz5GtLGoXVH7gl18al99665lqSZyuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:34:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 650 (0x28a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F4D3, serialNumber=9126EFE50D5E3B531FEEE4549AB30BFE7A545507 Validity Not Before: Apr 17 01:34:59 2026 GMT Not After : Apr 24 01:34:59 2026 GMT Subject: CN=69e18e43-385c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4d:18:37:94:2e:7b:55:e8:db:0f:6d:0c:55: ee:d0:57:c5:fe:76:ce:e7:12:a4:97:7f:eb:d6:b9: cc:f9:fa:5a:b6:6b:01:fa:93:f8:0e:fd:72:62:77: 55:70:b2:d2:2a:7c:37:c4:ee:a3:f9:b4:9e:49:dd: a6:68:03:d6:ca:c7:f4:40:20:e5:f8:b0:75:da:58: 36:05:00:88:4f:d4:8d:46:b6:ef:47:a2:8c:61:ef: 76:fe:19:9e:8e:7b:19:62:19:60:76:b7:90:ea:6f: 65:fe:eb:8d:4c:fb:70:d6:62:4e:4b:77:11:ff:68: df:24:b1:06:8c:0c:14:8e:85:f7:f0:e8:97:05:dc: a8:06:80:78:bb:8b:d8:b6:3f:8b:e5:6d:9e:c4:90: 40:8e:23:70:75:eb:e4:97:9a:b0:01:3a:24:b3:87: c7:f1:e5:18:85:f2:e9:3f:28:b7:8e:f4:c5:3d:a9: bc:15:37:0f:73:ab:ee:27:dd:77:99:82:57:7e:8d: 2e:e2:45:39:f9:c9:ef:fc:da:f7:8e:60:61:47:fb: 6c:50:f2:a2:de:af:4f:be:e0:3e:cd:b7:21:b2:9a: d6:7a:d3:53:f3:de:0e:c5:53:27:73:d2:a6:1c:8c: 75:a5:71:42:76:4c:f0:c6:9c:70:55:b4:6d:e2:92: 00:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:93:C2:D2:6B:7D:B1:C4:23:19:D2:FB:8F:0A:9A:11:93:99:D1:50 X509v3 Authority Key Identifier: keyid:91:26:EF:E5:0D:5E:3B:53:1F:EE:E4:54:9A:B3:0B:FE:7A:54:55:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:6e:12:5a:0d:41:74:6f:ef:67:33:c6:80:c2:5f:8d:de:41: a8:ae:4c:07:54:fd:d9:7e:af:03:74:50:a9:37:86:65:f0:31: 29:2d:08:f3:62:3f:23:94:44:25:18:4a:ca:b1:a6:a1:4a:ef: b4:f6:76:58:b6:4b:2a:9b:8a:c8:b9:65:45:54:e7:c1:47:ff: 35:04:de:4b:4d:b8:11:69:28:c5:74:d1:f0:b9:33:6d:ad:5b: 5b:d6:f9:ed:0c:57:5b:da:e6:09:ea:ab:56:7d:d1:ec:ad:19: 18:4e:d5:34:35:91:8f:0f:97:59:2e:d9:87:d8:a4:08:e7:2c: ae:65:5f:c2:4d:9c:33:10:3e:89:81:ed:26:b6:03:cb:a1:a3: 12:1a:4c:f2:12:90:1f:15:3e:e2:af:03:28:59:b2:80:72:d9: 1d:e2:fc:a0:33:3a:1b:13:1f:47:fc:15:d3:e3:93:df:c4:31: 1a:bf:8b:d2:d0:da:4d:de:f4:26:8a:ce:86:bc:b9:d6:23:4c: cb:12:25:51:53:7f:6b:9c:29:89:32:9e:39:6c:6e:5f:0b:2b: 27:4b:bf:41:f4:f7:62:b1:33:40:64:23:c9:7a:07:72:4d:98: 41:2a:f7:87:17:e4:25:80:8d:4c:fe:70:e4:4e:6c:9c:60:7e: 59:15:1d:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y0RDMxMTAvBgNVBAUTKDkxMjZFRkU1MEQ1RTNCNTMxRkVFRTQ1NDlBQjMwQkZF N0E1NDU1MDcwHhcNMjYwNDE3MDEzNDU5WhcNMjYwNDI0MDEzNDU5WjAYMRYwFAYD VQQDEw02OWUxOGU0My0zODVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwE0YN5Que1Xo2w9tDFXu0FfF/nbO5xKkl3/r1rnM+fpatmsB+pP4Dv1yYndV cLLSKnw3xO6j+bSeSd2maAPWysf0QCDl+LB12lg2BQCIT9SNRrbvR6KMYe92/hme jnsZYhlgdreQ6m9l/uuNTPtw1mJOS3cR/2jfJLEGjAwUjoX38OiXBdyoBoB4u4vY tj+L5W2exJBAjiNwdevkl5qwAToks4fH8eUYhfLpPyi3jvTFPam8FTcPc6vuJ913 mYJXfo0u4kU5+cnv/Nr3jmBhR/tsUPKi3q9PvuA+zbchsprWetNT894OxVMnc9Km HIx1pXFCdkzwxpxwVbRt4pIAiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNWTwtJr fbHEIxnS+48KmhGTmdFQMB8GA1UdIwQYMBaAFJEm7+UNXjtTH+7kVJqzC/56VFUH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjREMy82ODAzNEM2ODYy NjYxMUVEODI0MkM3ODZDNEY5QUUwMi9rU2J2NVExZU8xTWY3dVJVbXJNTF9ucFVW UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTYnY1UTFlTzFNZjd1UlVtck1MX25wVVZRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjREMy82ODAzNEM2ODYyNjYxMUVEODI0MkM3ODZDNEY5QUUwMi9rU2J2NVExZU8x TWY3dVJVbXJNTF9ucFVWUWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyW4SWg1BdG/vZzPGgMJfjd5BqK5MB1T92X6vA3RQqTeGZfAxKS0I82I/I5RE JRhKyrGmoUrvtPZ2WLZLKpuKyLllRVTnwUf/NQTeS024EWkoxXTR8Lkzba1bW9b5 7QxXW9rmCeqrVn3R7K0ZGE7VNDWRjw+XWS7Zh9ikCOcsrmVfwk2cMxA+iYHtJrYD y6GjEhpM8hKQHxU+4q8DKFmygHLZHeL8oDM6GxMfR/wV0+OT38QxGr+L0tDaTd70 JorOhry51iNMyxIlUVN/a5wpiTKeOWxuXwsrJ0u/QfT3YrEzQGQjyXoHck2YQSr3 hxfkJYCNTP5w5E5snGB+WRUd0w== -----END CERTIFICATE-----Generated at Fri Apr 17 13:52:20 2026 by rpki-client