$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft File: KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft (raw, json) Hash identifier: NJ/EHZwRGB7I+OljssDVkLmX5ubeMqgABurwdRiQ6sg= Subject key identifier: E5:C2:A0:9A:55:08:68:A1:C7:5B:AD:EE:72:E8:74:6A:C3:8A:13:4A Authority key identifier: 2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 Certificate issuer: /CN=A91A4EF9/serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Certificate serial: 0195 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft Manifest number: 0195 Signing time: Fri 17 Apr 2026 04:04:18 +0000 Manifest this update: Fri 17 Apr 2026 04:04:17 +0000 Manifest next update: Fri 24 Apr 2026 04:04:17 +0000 Files and hashes: 1: KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl (hash: esn8ziaboddJ0AyOrwpKi7CtRbAowRT4dTvuibpAT38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:04:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 405 (0x195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4EF9, serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Validity Not Before: Apr 17 04:04:17 2026 GMT Not After : Apr 24 04:04:17 2026 GMT Subject: CN=69e1b142-cd22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6e:ea:87:1f:63:59:b5:e0:b7:a5:a1:bb:61: a3:7f:85:ee:b3:05:cd:88:9c:ea:3a:7f:78:09:6b: eb:6e:cc:21:e5:91:a6:ce:6e:d2:0b:dc:ee:a0:58: 24:c7:0e:18:ae:60:1b:ff:51:94:ef:2b:11:b6:63: 3b:09:29:d8:81:80:a5:6a:82:c3:20:52:9e:dc:cd: d8:87:7e:36:f8:d1:e2:2e:82:b2:de:91:fe:d6:b4: 7c:2d:89:39:ea:8a:d0:c0:d1:40:fb:a6:91:93:cb: 1f:4b:00:03:2b:4f:2a:52:98:83:40:4c:47:2c:e2: 9c:49:92:ec:3b:f6:a2:8a:29:14:c5:0b:a9:17:d3: f3:ee:fb:b1:22:36:96:e3:5a:64:ba:a7:20:71:a0: 75:64:4b:61:d1:6f:d8:41:79:d3:52:8c:dc:84:d3: 70:7e:ff:f5:31:d9:3a:bd:73:b1:93:29:5a:35:33: 66:1e:b4:e3:d7:a4:d7:72:24:e2:fc:23:ce:7e:64: b1:c6:83:70:10:60:b7:1c:2c:4d:c9:e1:ac:6c:55: 4b:b5:b5:0e:02:c0:09:b6:2d:03:08:a0:71:0d:49: 9f:d0:e0:af:c5:c6:a7:0b:32:25:66:0e:9f:bf:66: 54:50:28:2e:80:d9:3f:27:be:20:10:28:b1:aa:cc: 52:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C2:A0:9A:55:08:68:A1:C7:5B:AD:EE:72:E8:74:6A:C3:8A:13:4A X509v3 Authority Key Identifier: keyid:2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:e2:95:41:12:08:52:58:5c:38:35:d6:8c:67:9a:f1:18:d8: 01:bb:61:3d:ac:0b:69:0d:c7:57:0d:16:c1:8e:8d:57:da:1b: 41:af:7d:a0:8a:1f:17:f3:19:43:1d:06:6b:1d:2d:ab:12:ea: b0:f3:10:c3:d0:df:55:65:ff:56:8e:13:36:57:da:db:20:1f: 63:0d:a0:c3:01:51:1f:09:4a:e7:61:e4:45:57:16:e3:86:9a: a7:06:7d:58:57:46:54:9c:a5:d7:36:2b:2a:67:2a:90:c3:39: 1a:b0:3d:c2:fc:63:d9:8b:bc:34:02:f0:92:fc:41:ea:96:c8: 3c:60:15:9c:c2:2f:4a:15:d5:ae:06:11:e9:a0:43:1e:ba:60: bd:37:8f:9b:9f:93:ab:69:87:d4:8e:e2:7b:24:ae:b1:bc:c1: 14:b2:5d:45:99:49:7c:8a:68:c2:75:4b:44:21:73:08:43:0f: 60:86:7c:23:5f:95:cd:fc:d6:35:f4:05:c7:11:69:7e:23:e5: cf:a8:b3:0e:6b:10:20:7a:3b:a6:46:d4:30:be:ce:89:ba:90: bc:c4:1a:40:75:3f:61:12:82:7d:41:4e:2f:b7:93:fe:5d:b2: a6:dd:3d:23:0b:83:52:43:65:82:13:70:1d:58:a0:54:cb:6c: 15:f7:a7:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRFRjkxMTAvBgNVBAUTKDJBQzUzRTI2MjAyRjRCQ0JDMTQ4MDZGMTNFOUU4NjBE MEFDNjc3RjkwHhcNMjYwNDE3MDQwNDE3WhcNMjYwNDI0MDQwNDE3WjAYMRYwFAYD VQQDEw02OWUxYjE0Mi1jZDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtm7qhx9jWbXgt6Whu2Gjf4XuswXNiJzqOn94CWvrbswh5ZGmzm7SC9zuoFgk xw4YrmAb/1GU7ysRtmM7CSnYgYClaoLDIFKe3M3Yh342+NHiLoKy3pH+1rR8LYk5 6orQwNFA+6aRk8sfSwADK08qUpiDQExHLOKcSZLsO/aiiikUxQupF9Pz7vuxIjaW 41pkuqcgcaB1ZEth0W/YQXnTUozchNNwfv/1Mdk6vXOxkylaNTNmHrTj16TXciTi /CPOfmSxxoNwEGC3HCxNyeGsbFVLtbUOAsAJti0DCKBxDUmf0OCvxcanCzIlZg6f v2ZUUCgugNk/J74gECixqsxSQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOXCoJpV CGihx1ut7nLodGrDihNKMB8GA1UdIwQYMBaAFCrFPiYgL0vLwUgG8T6ehg0Kxnf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVGOS83RTlFMjNGOEQx MzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4dkJTQWJ4UHA2R0RRckdk X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tzVS1KaUF2Uzh2QlNBYnhQcDZHRFFyR2Rfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEVGOS83RTlFMjNGOEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4 dkJTQWJ4UHA2R0RRckdkX2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFuKVQRIIUlhcODXWjGea8RjYAbthPawLaQ3HVw0WwY6NV9obQa99oIofF/MZ Qx0Gax0tqxLqsPMQw9DfVWX/Vo4TNlfa2yAfYw2gwwFRHwlK52HkRVcW44aapwZ9 WFdGVJyl1zYrKmcqkMM5GrA9wvxj2Yu8NALwkvxB6pbIPGAVnMIvShXVrgYR6aBD HrpgvTePm5+Tq2mH1I7ieySusbzBFLJdRZlJfIpownVLRCFzCEMPYIZ8I1+VzfzW NfQFxxFpfiPlz6izDmsQIHo7pkbUML7OibqQvMQaQHU/YRKCfUFOL7eT/l2ypt09 IwuDUkNlghNwHVigVMtsFfen1A== -----END CERTIFICATE-----Generated at Fri Apr 17 12:01:23 2026 by rpki-client