$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft File: KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft (raw, json) Hash identifier: WBsQ94gW9Wddc3zyA+xsc00l/FrmFH0tQlLHoShic6U= Subject key identifier: E0:FE:97:39:E0:48:F5:33:08:5C:0F:8D:C3:A5:94:65:C7:62:EB:67 Authority key identifier: 29:EA:9D:81:A2:AF:5F:82:85:AC:07:1B:1E:6E:79:A3:09:C9:F4:38 Certificate issuer: /CN=A91B72D6/serialNumber=29EA9D81A2AF5F8285AC071B1E6E79A309C9F438 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KeqdgaKvX4KFrAcbHm55ownJ9Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft Manifest number: 19 Signing time: Fri 17 Apr 2026 08:39:05 +0000 Manifest this update: Fri 17 Apr 2026 08:39:04 +0000 Manifest next update: Fri 24 Apr 2026 08:39:04 +0000 Files and hashes: 1: KeqdgaKvX4KFrAcbHm55ownJ9Dg.crl (hash: 2lrr9R9V+QIhEnKkijkF1vzDlcfzp6on893ZqkLLaCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.crl rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KeqdgaKvX4KFrAcbHm55ownJ9Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B72D6, serialNumber=29EA9D81A2AF5F8285AC071B1E6E79A309C9F438 Validity Not Before: Apr 17 08:39:04 2026 GMT Not After : Apr 24 08:39:04 2026 GMT Subject: CN=69e1f1a8-673b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0b:f7:b5:33:fd:1b:7a:e7:6e:c2:38:2e:de: 44:f4:f1:b9:44:94:3c:32:6b:a4:5c:75:25:30:b0: 19:3b:83:8e:96:41:6b:5f:0f:0f:ba:34:56:c3:9e: 67:d1:50:7d:c9:f6:c5:fe:f2:b5:cd:51:f2:07:17: a5:98:f8:ac:d6:6d:37:23:6e:04:6b:47:d2:02:ca: 3e:12:22:9d:c5:cc:20:4d:96:41:48:5f:21:7f:94: b7:9a:44:79:1c:8e:4e:1d:07:0e:70:81:d1:80:fb: 35:ed:70:0e:2c:83:33:72:5d:71:e0:20:24:80:a1: 89:fa:6a:18:95:f2:3c:41:33:92:06:d5:82:4a:08: 30:74:1a:98:9d:f6:76:55:60:8d:98:86:b5:88:ac: 81:f0:72:38:5a:eb:9c:9c:e4:af:82:6f:4c:65:0d: 53:60:ec:73:2e:b7:cd:ed:4f:50:44:c6:ef:8b:d8: 88:16:70:be:5d:11:b6:dd:7e:e3:a4:88:48:a9:9b: f7:e1:f0:28:6b:e5:3d:c1:ee:45:10:e1:43:37:e8: 2b:05:11:ce:2d:a6:c5:4d:8c:0c:45:b2:6a:80:97: a5:55:d2:b2:e1:93:6b:4c:ab:79:09:73:0d:a7:5e: 15:92:70:21:d9:4c:ba:5b:06:8d:8d:cf:5d:74:8d: 13:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:FE:97:39:E0:48:F5:33:08:5C:0F:8D:C3:A5:94:65:C7:62:EB:67 X509v3 Authority Key Identifier: keyid:29:EA:9D:81:A2:AF:5F:82:85:AC:07:1B:1E:6E:79:A3:09:C9:F4:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KeqdgaKvX4KFrAcbHm55ownJ9Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:09:99:7e:93:5f:c7:51:4d:e6:3c:76:73:eb:51:25:19:bb: 68:07:69:37:41:0f:51:7c:e8:ca:74:dd:78:65:53:78:dd:2c: 91:d2:02:2c:2d:00:7f:72:37:e7:81:b5:a6:e7:33:b4:5a:e6: 03:20:3b:05:5c:36:d3:70:33:e2:9d:f3:e9:26:6c:73:af:73: 40:8f:7d:de:75:5f:80:36:33:35:e1:e5:22:f8:78:03:d4:3d: 48:b6:f4:7c:27:dc:a0:30:f2:2e:24:39:50:50:56:9e:0f:33: 04:fd:95:b4:0a:ef:a9:40:f3:4a:54:55:33:5e:93:e9:77:7b: 68:57:bd:3c:1d:ad:d1:90:14:31:a3:f1:5f:f0:21:92:f7:fe: 2b:48:54:14:6f:a7:64:ae:b2:a7:c1:ac:5a:00:cc:bb:92:ff: 0c:35:61:ee:15:f4:70:77:bb:82:09:18:fc:64:84:49:75:23: f4:97:4c:85:2d:3c:a8:d8:c1:03:5d:cf:62:e8:e3:67:8e:f0: ee:6a:29:1a:52:57:86:f4:30:de:e1:f5:e6:f3:7e:8d:f4:c5: 17:a3:2d:1c:c2:54:7f:2a:e4:24:0d:7b:d8:24:de:48:0b:38: 44:2b:14:c2:23:70:81:5c:6e:3e:22:58:78:dc:e3:a2:b1:4e: e2:fd:d7:eb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NzJENjExMC8GA1UEBRMoMjlFQTlEODFBMkFGNUY4Mjg1QUMwNzFCMUU2RTc5QTMw OUM5RjQzODAeFw0yNjA0MTcwODM5MDRaFw0yNjA0MjQwODM5MDRaMBgxFjAUBgNV BAMTDTY5ZTFmMWE4LTY3M2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCVC/e1M/0beuduwjgu3kT08blElDwya6RcdSUwsBk7g46WQWtfDw+6NFbDnmfR UH3J9sX+8rXNUfIHF6WY+KzWbTcjbgRrR9ICyj4SIp3FzCBNlkFIXyF/lLeaRHkc jk4dBw5wgdGA+zXtcA4sgzNyXXHgICSAoYn6ahiV8jxBM5IG1YJKCDB0Gpid9nZV YI2YhrWIrIHwcjha65yc5K+Cb0xlDVNg7HMut83tT1BExu+L2IgWcL5dEbbdfuOk iEipm/fh8Chr5T3B7kUQ4UM36CsFEc4tpsVNjAxFsmqAl6VV0rLhk2tMq3kJcw2n XhWScCHZTLpbBo2Nz110jRPpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU4P6XOeBI 9TMIXA+Nw6WUZcdi62cwHwYDVR0jBBgwFoAUKeqdgaKvX4KFrAcbHm55ownJ9Dgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3MkQ2Lzk3NDhDMDIyMTcx RjExRjFBM0E4RjJGQjA5M0Q4QzY3L0tlcWRnYUt2WDRLRnJBY2JIbTU1b3duSjlE Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS2VxZGdhS3ZYNEtGckFjYkhtNTVvd25KOURnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 MkQ2Lzk3NDhDMDIyMTcxRjExRjFBM0E4RjJGQjA5M0Q4QzY3L0tlcWRnYUt2WDRL RnJBY2JIbTU1b3duSjlEZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBACZl+k1/HUU3mPHZz61ElGbtoB2k3QQ9RfOjKdN14ZVN43SyR0gIsLQB/cjfn gbWm5zO0WuYDIDsFXDbTcDPinfPpJmxzr3NAj33edV+ANjM14eUi+HgD1D1ItvR8 J9ygMPIuJDlQUFaeDzME/ZW0Cu+pQPNKVFUzXpPpd3toV708Ha3RkBQxo/Ff8CGS 9/4rSFQUb6dkrrKnwaxaAMy7kv8MNWHuFfRwd7uCCRj8ZIRJdSP0l0yFLTyo2MED Xc9i6ONnjvDuaikaUleG9DDe4fXm836N9MUXoy0cwlR/KuQkDXvYJN5ICzhEKxTC I3CBXG4+Ilh43OOisU7i/dfr -----END CERTIFICATE-----Generated at Fri Apr 17 13:02:39 2026 by rpki-client