$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft File: KgD9XV6u-B8ysAsuXILF7NrBJpM.mft (raw, json) Hash identifier: wPGweOiijB6SS2dRVkT4PB3kWF0CpQny3JvJailtu5s= Subject key identifier: 83:99:88:3B:1E:08:90:B0:99:F1:22:A5:88:DE:7E:82:5A:43:0C:72 Authority key identifier: 2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93 Certificate issuer: /CN=A91B6B4B/serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693 Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft Manifest number: BA Signing time: Fri 17 Apr 2026 06:45:57 +0000 Manifest this update: Fri 17 Apr 2026 06:45:56 +0000 Manifest next update: Fri 24 Apr 2026 06:45:56 +0000 Files and hashes: 1: KgD9XV6u-B8ysAsuXILF7NrBJpM.crl (hash: wdiAlxXV4rg7fvdLp8zarV03s//6x898fRCClXpo0WM=) 2: B3F95F9A24C411F0A4C45287C4F9AE02.roa (hash: QsP9uqEiNFI8mG4UNJDemIDsWI8VClhN6iYFmbVOcY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:45:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6B4B, serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693 Validity Not Before: Apr 17 06:45:56 2026 GMT Not After : Apr 24 06:45:56 2026 GMT Subject: CN=69e1d725-6ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0f:f1:b5:ad:3d:97:b8:5e:29:8f:6b:ae:92: e9:fe:bf:37:da:f7:37:9a:aa:45:25:66:c6:b0:ed: fa:b8:d8:d5:b4:fd:27:d8:32:55:fa:e7:b7:8d:86: bb:51:84:12:be:c4:70:01:4e:85:54:1e:dc:27:88: 67:39:4a:06:05:d2:9b:64:ce:d7:25:ec:55:f4:51: 8c:bc:22:aa:98:1c:fa:e9:1b:7a:bb:cd:b2:ab:be: f2:50:4e:d1:01:a7:2d:4a:5f:03:a1:fd:54:9c:57: 6a:35:18:b4:2d:77:a9:4f:49:46:c1:41:af:d5:17: 4b:49:c6:54:46:07:7a:08:f0:75:f7:a5:85:fd:d8: a7:92:c2:2a:a3:c1:b8:f1:b6:73:8c:1c:cf:fe:2c: d1:08:7a:18:b7:03:c9:13:5f:04:48:1f:ab:8a:5b: 8c:aa:7e:57:16:3d:ed:8b:d9:d7:a8:d0:d9:b3:6c: 4f:23:6d:93:9a:2d:68:b9:d7:c4:24:37:d6:b5:8e: 18:7e:7c:37:b8:91:1b:82:2b:83:51:4e:01:41:2b: 22:4d:98:61:cd:cb:40:05:4c:4b:73:f3:a5:e1:89: 92:eb:4a:ba:fb:f2:54:c4:cd:71:3f:23:37:a3:62: 96:f7:4b:69:08:0d:c1:33:61:65:ca:16:2d:6b:d0: 0f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:99:88:3B:1E:08:90:B0:99:F1:22:A5:88:DE:7E:82:5A:43:0C:72 X509v3 Authority Key Identifier: keyid:2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:e1:13:00:bc:0a:b9:c1:a2:57:14:ba:1e:75:90:a8:29:22: b9:1d:ad:36:67:5d:f2:ce:62:1f:82:f6:6a:08:8c:48:a5:78: 90:40:4b:b9:12:11:45:69:29:f7:95:5e:fd:2c:7b:94:5a:84: f1:94:f2:d4:43:42:f5:ff:d5:e8:8a:3d:48:87:d3:4c:6b:c2: ff:70:85:94:01:35:15:08:08:02:22:4c:aa:3a:49:c1:5a:ac: 4e:17:76:dc:77:ad:89:4c:2f:af:73:c3:b8:c7:fa:15:11:34: 10:0b:fa:c1:44:02:bf:19:12:27:f2:0d:36:97:3a:64:49:76: b5:cd:cc:2a:da:2d:24:d9:23:d9:8c:2f:2c:da:8a:54:9a:0e: e7:03:79:97:a8:e7:0c:70:a3:93:57:8c:a8:0a:4b:75:dc:5e: 10:69:f9:de:5a:8f:05:db:2b:de:c9:54:40:25:d5:ea:22:f0: 1d:11:47:09:58:99:53:7d:3f:f0:ab:d5:1b:c4:1d:15:a0:a4: c4:a2:9b:72:43:5d:a3:6e:60:e5:05:f6:b9:88:b0:f9:8d:3e: f4:bc:eb:52:f0:fa:f7:09:0f:1b:ca:b2:23:8c:ef:0d:9b:38: 0b:8f:6a:51:c7:bc:56:30:9a:ce:e6:6f:55:98:5b:47:59:3c: d7:3b:8e:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZCNEIxMTAvBgNVBAUTKDJBMDBGRDVENUVBRUY4MUYzMkIwMEIyRTVDODJDNUVD REFDMTI2OTMwHhcNMjYwNDE3MDY0NTU2WhcNMjYwNDI0MDY0NTU2WjAYMRYwFAYD VQQDEw02OWUxZDcyNS02YmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5A/xta09l7heKY9rrpLp/r832vc3mqpFJWbGsO36uNjVtP0n2DJV+ue3jYa7 UYQSvsRwAU6FVB7cJ4hnOUoGBdKbZM7XJexV9FGMvCKqmBz66Rt6u82yq77yUE7R AactSl8Dof1UnFdqNRi0LXepT0lGwUGv1RdLScZURgd6CPB196WF/dinksIqo8G4 8bZzjBzP/izRCHoYtwPJE18ESB+riluMqn5XFj3ti9nXqNDZs2xPI22Tmi1oudfE JDfWtY4Yfnw3uJEbgiuDUU4BQSsiTZhhzctABUxLc/Ol4YmS60q6+/JUxM1xPyM3 o2KW90tpCA3BM2FlyhYta9APmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIOZiDse CJCwmfEipYjefoJaQwxyMB8GA1UdIwQYMBaAFCoA/V1ervgfMrALLlyCxezawSaT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkI0Qi9CQjQyQzFERTI0 QzMxMUYwOTZDNjg0ODFDNEY5QUUwMi9LZ0Q5WFY2dS1COHlzQXN1WElMRjdOckJK cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tnRDlYVjZ1LUI4eXNBc3VYSUxGN05yQkpwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkI0Qi9CQjQyQzFERTI0QzMxMUYwOTZDNjg0ODFDNEY5QUUwMi9LZ0Q5WFY2dS1C OHlzQXN1WElMRjdOckJKcE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABuETALwKucGiVxS6HnWQqCkiuR2tNmdd8s5iH4L2agiMSKV4kEBLuRIRRWkp 95Ve/Sx7lFqE8ZTy1ENC9f/V6Io9SIfTTGvC/3CFlAE1FQgIAiJMqjpJwVqsThd2 3HetiUwvr3PDuMf6FRE0EAv6wUQCvxkSJ/INNpc6ZEl2tc3MKtotJNkj2YwvLNqK VJoO5wN5l6jnDHCjk1eMqApLddxeEGn53lqPBdsr3slUQCXV6iLwHRFHCViZU30/ 8KvVG8QdFaCkxKKbckNdo25g5QX2uYiw+Y0+9LzrUvD69wkPG8qyI4zvDZs4C49q Uce8VjCazuZvVZhbR1k81zuOJw== -----END CERTIFICATE-----Generated at Fri Apr 17 20:43:13 2026 by rpki-client