$ rpki-client -vvf rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft File: kGjeIDMsvR2zmyN0NbF03nCZTwM.mft (raw, json) Hash identifier: QFU1vavd1hGMwL80T7Qf279AMMjiQSuab7LpPMyVBZ4= Subject key identifier: 99:B5:5F:E1:BE:D0:24:F1:9C:A2:45:B5:A9:8C:CE:46:92:59:BF:B0 Authority key identifier: 90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03 Certificate issuer: /CN=A91813E4/serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03 Certificate serial: 0698 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft Manifest number: 068A Signing time: Thu 16 Apr 2026 22:26:07 +0000 Manifest this update: Thu 16 Apr 2026 22:26:06 +0000 Manifest next update: Thu 23 Apr 2026 22:26:06 +0000 Files and hashes: 1: kGjeIDMsvR2zmyN0NbF03nCZTwM.crl (hash: na0XYFAM767kZTkr/WKKUlLexMUTia3lofEhPOLHTak=) 2: 9609416A33D611EFB34E2C40C4F9AE02.roa (hash: VEOYpLopU2c9FdbzxqgEzKYlCo37XOpklpOWcyDo3bI=) 3: BE7CCC22322911F189DD034AA5833773.roa (hash: EZBejfYuKCx6QKKVXG9spabvgPR78DL4iU1w9GXCeXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 22:26:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1688 (0x698) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91813E4, serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03 Validity Not Before: Apr 16 22:26:06 2026 GMT Not After : Apr 23 22:26:06 2026 GMT Subject: CN=69e161fe-5d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:b1:0a:57:29:ea:c7:e3:88:26:41:90:b9:67: 87:78:c4:96:5b:7b:9e:86:db:dc:72:d5:03:ee:93: 14:d2:33:a5:7c:91:6a:d3:2d:19:88:b5:38:d7:9a: 3d:90:17:09:19:c5:1e:9b:2b:8f:32:0b:4f:af:df: 4c:64:d8:0e:0f:1a:69:ec:67:8b:52:5e:c9:9f:ed: a1:32:fc:48:41:68:73:0b:80:fc:2f:b3:b4:2e:fb: 7f:fb:3f:07:b0:f6:fc:54:e5:c1:f5:4f:8e:83:7a: 16:69:34:09:1f:15:7a:85:8b:50:9f:d4:e4:99:5b: 4d:a7:12:4b:cc:c4:b3:51:16:10:a4:2e:5d:d7:e9: f3:d6:6c:26:45:fb:32:80:15:f4:d2:4f:72:9a:d9: e7:58:bd:fa:24:53:02:6c:0d:fb:51:5f:2d:27:55: 36:1d:12:f3:e8:82:4c:31:4a:14:33:fd:ed:6c:66: e4:22:50:f3:23:43:96:d0:24:b4:0a:db:a6:48:1b: f8:66:a8:35:29:0c:df:31:c6:68:3f:6d:87:0b:85: 51:24:2e:2b:0f:54:24:14:e8:62:7d:52:12:01:dd: 6e:81:bd:9c:eb:25:56:20:26:d2:05:0b:14:a9:6c: 31:b3:0b:bb:4e:da:53:27:a4:ed:70:33:78:60:3d: 6a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B5:5F:E1:BE:D0:24:F1:9C:A2:45:B5:A9:8C:CE:46:92:59:BF:B0 X509v3 Authority Key Identifier: keyid:90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:20:2f:5a:4e:d5:3b:14:bc:b5:2f:8d:45:fd:cc:6c:06:81: 89:b5:c0:b4:ab:6c:dc:5c:79:04:d6:c9:5b:4b:f3:5f:40:26: 3e:00:ae:3c:d6:c2:e0:1b:b7:65:54:42:2b:24:db:7f:8c:dc: 64:ed:04:f7:62:1c:2a:4b:f3:a6:b6:48:f7:da:96:e3:1f:41: 42:61:31:52:31:8f:55:7d:3a:fd:88:4e:6c:ec:c1:c3:18:01: 10:53:06:01:41:00:fa:f8:3f:d6:3e:ac:bd:42:08:ff:70:20: 47:f5:c1:7d:ce:26:9e:e5:2f:43:4d:23:cd:37:c4:f1:23:4b: ad:90:1e:73:b5:80:7c:7c:8c:26:d8:c0:a5:81:44:c2:da:30: fd:7d:1c:e5:86:ee:5d:d7:81:37:d0:1e:09:5a:a6:c1:50:ec: 92:93:3e:db:17:18:5d:c7:14:0a:5a:1f:43:1a:a8:2d:d1:a2: 43:55:a6:a6:86:b0:98:53:0d:ec:42:2d:e4:a1:ea:6d:bf:a9: 44:0b:87:50:b8:f9:86:89:cb:ab:f0:bf:74:77:83:00:68:ef: 08:d6:2c:35:be:78:3d:5a:c5:ac:9f:09:b7:f6:90:f8:86:7b: 57:b6:77:95:f4:54:4d:f7:47:29:6a:51:a9:45:fa:06:1d:30: 9c:67:cc:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzRTQxMTAvBgNVBAUTKDkwNjhERTIwMzMyQ0JEMURCMzlCMjM3NDM1QjE3NERF NzA5OTRGMDMwHhcNMjYwNDE2MjIyNjA2WhcNMjYwNDIzMjIyNjA2WjAYMRYwFAYD VQQDEw02OWUxNjFmZS01ZDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9bEKVynqx+OIJkGQuWeHeMSWW3uehtvcctUD7pMU0jOlfJFq0y0ZiLU415o9 kBcJGcUemyuPMgtPr99MZNgODxpp7GeLUl7Jn+2hMvxIQWhzC4D8L7O0Lvt/+z8H sPb8VOXB9U+Og3oWaTQJHxV6hYtQn9TkmVtNpxJLzMSzURYQpC5d1+nz1mwmRfsy gBX00k9ymtnnWL36JFMCbA37UV8tJ1U2HRLz6IJMMUoUM/3tbGbkIlDzI0OW0CS0 CtumSBv4Zqg1KQzfMcZoP22HC4VRJC4rD1QkFOhifVISAd1ugb2c6yVWICbSBQsU qWwxswu7TtpTJ6TtcDN4YD1qsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJm1X+G+ 0CTxnKJFtamMzkaSWb+wMB8GA1UdIwQYMBaAFJBo3iAzLL0ds5sjdDWxdN5wmU8D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTNFNC8yNzUwNTg4MkI5 QTIxMUVCOTVDNjg4MzlDNEY5QUUwMi9rR2plSURNc3ZSMnpteU4wTmJGMDNuQ1pU d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tHamVJRE1zdlIyem15TjBOYkYwM25DWlR3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTNFNC8yNzUwNTg4MkI5QTIxMUVCOTVDNjg4MzlDNEY5QUUwMi9rR2plSURNc3ZS MnpteU4wTmJGMDNuQ1pUd00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACiAvWk7VOxS8tS+NRf3MbAaBibXAtKts3Fx5BNbJW0vzX0AmPgCuPNbC4Bu3 ZVRCKyTbf4zcZO0E92IcKkvzprZI99qW4x9BQmExUjGPVX06/YhObOzBwxgBEFMG AUEA+vg/1j6svUII/3AgR/XBfc4mnuUvQ00jzTfE8SNLrZAec7WAfHyMJtjApYFE wtow/X0c5YbuXdeBN9AeCVqmwVDskpM+2xcYXccUClofQxqoLdGiQ1WmpoawmFMN 7EIt5KHqbb+pRAuHULj5honLq/C/dHeDAGjvCNYsNb54PVrFrJ8Jt/aQ+IZ7V7Z3 lfRUTfdHKWpRqUX6Bh0wnGfMEA== -----END CERTIFICATE-----Generated at Fri Apr 17 15:05:55 2026 by rpki-client