$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft File: kKozD4l2v2xASeZzwoIf0pHUO8E.mft (raw, json) Hash identifier: r4K7k5xMlbA0eRKLbSxliAS85sMO1ZRve3l0o03T4mw= Subject key identifier: F8:77:C3:1C:B5:1E:66:D0:63:66:FA:9E:40:AC:C4:18:52:0A:81:23 Authority key identifier: 90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1 Certificate issuer: /CN=A91AE85E/serialNumber=90AA330F8976BF6C4049E673C2821FD291D43BC1 Certificate serial: 05FD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft Manifest number: 05FD Signing time: Thu 16 Apr 2026 14:18:08 +0000 Manifest this update: Thu 16 Apr 2026 14:18:08 +0000 Manifest next update: Thu 23 Apr 2026 14:18:08 +0000 Files and hashes: 1: kKozD4l2v2xASeZzwoIf0pHUO8E.crl (hash: 2ToABwclgVj5pIeYe41pvESTgh5mXgQNpw5SitWJvQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.crl rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1533 (0x5fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE85E, serialNumber=90AA330F8976BF6C4049E673C2821FD291D43BC1 Validity Not Before: Apr 16 14:18:08 2026 GMT Not After : Apr 23 14:18:08 2026 GMT Subject: CN=69e0efa0-0ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:46:d0:ad:69:70:92:3c:97:e2:66:44:8d:18: 3d:38:e0:ee:c6:bc:87:4a:00:71:d3:43:57:e1:c5: e2:65:b6:f8:af:65:8b:34:9f:d5:50:db:8b:e9:f5: 70:d5:b0:44:fa:16:0f:99:8e:35:07:a9:29:c8:52: 41:78:c7:66:f6:9c:f2:2c:4d:e9:82:5e:14:97:e9: 2a:17:6f:d2:c9:9c:93:3a:a2:2b:1b:0a:92:6b:11: b1:e6:1f:67:95:9a:1a:be:8e:f1:7e:d8:6a:ed:51: 65:38:04:e8:1c:95:c2:3b:be:39:b6:df:0d:34:25: 27:0e:4a:76:28:72:0d:f8:e0:26:e2:bb:63:92:fe: 2d:9d:25:d8:dd:64:09:28:6c:fc:25:74:df:fa:ed: 14:2e:e5:a0:70:4c:65:60:42:3a:b2:cd:70:b6:50: 6f:f2:1e:b2:ff:98:22:e4:1b:b4:aa:20:3e:26:92: 3a:8b:f7:99:62:78:ae:dd:db:f6:ee:c9:c6:b6:1c: 5b:cf:c6:3d:c8:98:d6:74:32:4c:85:b3:13:b8:37: 0e:bf:f2:49:f9:35:49:64:d7:ef:f9:fa:f2:73:9a: 33:30:0d:36:94:6c:44:47:52:57:e0:4d:f5:d2:2c: 17:e8:ef:8d:0b:0f:0c:b6:b8:a5:cd:00:e2:3b:7f: 8e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:77:C3:1C:B5:1E:66:D0:63:66:FA:9E:40:AC:C4:18:52:0A:81:23 X509v3 Authority Key Identifier: keyid:90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:8c:9c:b0:0a:4e:33:4e:f0:1e:c7:38:48:4d:1c:cd:c4:ce: 5c:5f:39:ac:d9:cd:05:55:7a:7d:10:c2:49:ee:74:d4:54:22: ad:53:48:76:f0:4a:30:6c:66:d9:c4:9e:b7:d1:c7:11:2d:24: d4:3a:27:bc:17:0e:20:f9:a5:42:38:e7:b1:00:76:f8:ef:5c: 79:71:b0:22:80:ab:e5:bc:8c:31:42:d0:c3:68:9c:28:5f:dc: 03:62:21:14:85:65:8e:74:54:19:0a:f8:65:c7:dd:51:78:8f: b1:54:2e:be:d6:25:c7:fb:9a:bc:0d:5f:e9:33:93:07:d5:3d: ce:57:38:dd:b4:e8:bf:f7:86:77:c8:34:2e:51:06:70:07:8d: b4:91:ee:10:d8:11:da:e9:4f:f4:54:e1:32:2b:20:e1:a2:83: c9:84:40:b8:75:6b:94:ea:1b:61:e1:fc:4a:6c:df:75:95:33: da:b7:34:66:b0:13:f2:0b:31:d4:43:33:fd:0f:75:76:eb:ce: eb:2a:6f:0d:c3:65:09:e1:16:c6:db:e1:ae:3d:14:e6:1f:c1: af:b1:89:01:cb:4c:f3:95:6f:d6:fe:13:b0:17:0e:62:96:c9: af:90:62:1d:86:2d:05:92:74:07:24:e7:99:72:1f:fb:fd:3a: 9f:91:af:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU4NUUxMTAvBgNVBAUTKDkwQUEzMzBGODk3NkJGNkM0MDQ5RTY3M0MyODIxRkQy OTFENDNCQzEwHhcNMjYwNDE2MTQxODA4WhcNMjYwNDIzMTQxODA4WjAYMRYwFAYD VQQDEw02OWUwZWZhMC0wYWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUbQrWlwkjyX4mZEjRg9OODuxryHSgBx00NX4cXiZbb4r2WLNJ/VUNuL6fVw 1bBE+hYPmY41B6kpyFJBeMdm9pzyLE3pgl4Ul+kqF2/SyZyTOqIrGwqSaxGx5h9n lZoavo7xfthq7VFlOAToHJXCO745tt8NNCUnDkp2KHIN+OAm4rtjkv4tnSXY3WQJ KGz8JXTf+u0ULuWgcExlYEI6ss1wtlBv8h6y/5gi5Bu0qiA+JpI6i/eZYniu3dv2 7snGthxbz8Y9yJjWdDJMhbMTuDcOv/JJ+TVJZNfv+fryc5ozMA02lGxER1JX4E31 0iwX6O+NCw8MtrilzQDiO3+OBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPh3wxy1 HmbQY2b6nkCsxBhSCoEjMB8GA1UdIwQYMBaAFJCqMw+Jdr9sQEnmc8KCH9KR1DvB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTg1RS8xQTE2RUI4NkYz RUExMUVCQjI1OEJBN0JDNEY5QUUwMi9rS296RDRsMnYyeEFTZVp6d29JZjBwSFVP OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tLb3pENGwydjJ4QVNlWnp3b0lmMHBIVU84RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTg1RS8xQTE2RUI4NkYzRUExMUVCQjI1OEJBN0JDNEY5QUUwMi9rS296RDRsMnYy eEFTZVp6d29JZjBwSFVPOEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmoycsApOM07wHsc4SE0czcTOXF85rNnNBVV6fRDCSe501FQirVNIdvBKMGxm 2cSet9HHES0k1DonvBcOIPmlQjjnsQB2+O9ceXGwIoCr5byMMULQw2icKF/cA2Ih FIVljnRUGQr4ZcfdUXiPsVQuvtYlx/uavA1f6TOTB9U9zlc43bTov/eGd8g0LlEG cAeNtJHuENgR2ulP9FThMisg4aKDyYRAuHVrlOobYeH8SmzfdZUz2rc0ZrAT8gsx 1EMz/Q91duvO6ypvDcNlCeEWxtvhrj0U5h/Br7GJActM85Vv1v4TsBcOYpbJr5Bi HYYtBZJ0ByTnmXIf+/06n5GvLg== -----END CERTIFICATE-----Generated at Fri Apr 17 19:00:27 2026 by rpki-client