$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft File: KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft (raw, json) Hash identifier: c5JzUiAgBenasjFttXRBogBXRIYPhIfCEB5REEG11Go= Subject key identifier: 1B:56:00:EF:EC:42:06:77:B4:2F:1C:52:B5:C2:6F:E0:11:00:42:3C Authority key identifier: 28:C0:60:7D:96:83:1A:3D:18:09:33:45:B3:72:58:EE:3B:D7:F3:E7 Certificate issuer: /CN=A91C5AEE/serialNumber=28C0607D96831A3D18093345B37258EE3BD7F3E7 Certificate serial: 01EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft Manifest number: 01E6 Signing time: Fri 17 Apr 2026 03:05:58 +0000 Manifest this update: Fri 17 Apr 2026 03:05:58 +0000 Manifest next update: Fri 24 Apr 2026 03:05:58 +0000 Files and hashes: 1: KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl (hash: 6SCMjcjdCvceJWcfTRWGmLTeGVZjgcxJg1nrBivBAFo=) 2: 21525A1C520B11EE8B79021AC4F9AE02.roa (hash: KWX82VUSGhT9UsPkifLZyX4n6ROSHucaBgxHHGSJG/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:05:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5AEE, serialNumber=28C0607D96831A3D18093345B37258EE3BD7F3E7 Validity Not Before: Apr 17 03:05:58 2026 GMT Not After : Apr 24 03:05:58 2026 GMT Subject: CN=69e1a396-7475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:28:4d:fa:10:b3:3c:24:11:b3:32:e5:57:60: fc:46:25:7f:b0:d9:30:47:64:df:8e:f0:75:26:f7: c7:bf:1b:6b:85:fc:30:b9:7e:df:45:e0:c0:39:ca: 87:b9:78:61:14:d1:62:4c:e4:da:d3:a0:e6:67:10: 1e:3d:38:6b:66:84:6b:d0:97:34:a5:aa:9f:31:54: 61:96:28:c2:c5:31:ab:10:15:0e:94:57:68:29:52: ad:44:96:c8:2f:a7:e9:d9:6d:53:c5:54:54:38:b7: 28:3a:21:c2:a4:bf:ce:d3:2d:ac:47:e1:ae:49:4a: ab:e3:67:05:38:b5:d8:2b:8c:e2:91:0a:01:4c:63: 2f:d1:73:d4:b0:32:02:7e:a5:ad:14:fe:d6:8f:06: 40:65:f6:e5:7f:70:c3:31:a2:4e:a1:73:12:9c:85: b2:e1:d6:a8:36:62:0c:c5:6c:a7:d7:d4:28:c4:10: 81:98:2a:57:88:10:c1:5e:92:d3:7c:cf:af:2e:b4: 78:60:2f:d0:dd:b8:57:26:01:36:83:df:67:d8:11: 01:1c:1c:d7:88:dd:36:e9:22:ca:94:15:ea:43:8a: 45:8b:06:c9:96:ba:2f:7e:fb:b8:6a:5e:b7:7b:c5: 52:ac:e3:cc:ff:79:22:8c:90:ec:92:04:d2:05:77: a7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:56:00:EF:EC:42:06:77:B4:2F:1C:52:B5:C2:6F:E0:11:00:42:3C X509v3 Authority Key Identifier: keyid:28:C0:60:7D:96:83:1A:3D:18:09:33:45:B3:72:58:EE:3B:D7:F3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:23:7f:41:02:35:7c:b0:93:01:41:d5:a3:27:c1:5a:a8:03: 72:70:98:b7:0c:df:81:44:c6:de:bd:8a:dd:0c:05:e5:47:bc: 4a:d8:76:a7:7d:e7:31:48:4b:15:e9:80:a1:90:74:be:65:41: eb:aa:dc:1b:1e:cb:d4:d9:dc:36:bb:ae:09:75:d6:0b:54:36: 8d:c2:ba:8e:61:9f:96:9a:32:3c:7e:1b:ac:d0:18:87:25:1f: b0:4b:27:79:f1:43:1c:ae:10:aa:28:68:33:33:65:c5:42:0e: 55:c0:cf:73:5b:ed:7c:ef:02:6a:ee:21:16:ba:1f:48:7d:f4: 6a:70:8a:d9:b0:a3:93:01:7b:3f:61:02:4c:4c:f5:4c:9c:82: cf:4e:d5:ba:e3:57:34:56:5d:7d:0f:05:3d:f9:73:68:30:b6: 2c:50:26:ee:d3:7f:23:06:83:2f:42:f1:c7:fa:84:11:50:03: 09:5f:45:d3:8d:a3:7f:51:d4:e8:4f:47:ce:87:36:16:a8:f6: 77:7f:29:3f:6c:75:6b:cd:85:70:97:f2:25:a3:97:95:e8:a8: 45:e0:c9:1e:0a:7c:e7:dc:f5:60:5a:40:44:eb:91:75:23:45: d4:6d:09:8a:d9:29:9b:84:d1:66:31:d6:ac:a4:ae:6d:4b:ed: 12:66:0b:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVBRUUxMTAvBgNVBAUTKDI4QzA2MDdEOTY4MzFBM0QxODA5MzM0NUIzNzI1OEVF M0JEN0YzRTcwHhcNMjYwNDE3MDMwNTU4WhcNMjYwNDI0MDMwNTU4WjAYMRYwFAYD VQQDEw02OWUxYTM5Ni03NDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvChN+hCzPCQRszLlV2D8RiV/sNkwR2TfjvB1JvfHvxtrhfwwuX7fReDAOcqH uXhhFNFiTOTa06DmZxAePThrZoRr0Jc0paqfMVRhlijCxTGrEBUOlFdoKVKtRJbI L6fp2W1TxVRUOLcoOiHCpL/O0y2sR+GuSUqr42cFOLXYK4zikQoBTGMv0XPUsDIC fqWtFP7WjwZAZfblf3DDMaJOoXMSnIWy4daoNmIMxWyn19QoxBCBmCpXiBDBXpLT fM+vLrR4YC/Q3bhXJgE2g99n2BEBHBzXiN026SLKlBXqQ4pFiwbJlrovfvu4al63 e8VSrOPM/3kijJDskgTSBXenEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBtWAO/s QgZ3tC8cUrXCb+ARAEI8MB8GA1UdIwQYMBaAFCjAYH2Wgxo9GAkzRbNyWO471/Pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUFFRS8zRTM5MDFGMjUy MDcxMUVFQjU3QjU4NzdDNEY5QUUwMi9LTUJnZlphREdqMFlDVE5GczNKWTdqdlg4 LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tNQmdmWmFER2owWUNUTkZzM0pZN2p2WDgtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUFFRS8zRTM5MDFGMjUyMDcxMUVFQjU3QjU4NzdDNEY5QUUwMi9LTUJnZlphREdq MFlDVE5GczNKWTdqdlg4LWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbSN/QQI1fLCTAUHVoyfBWqgDcnCYtwzfgUTG3r2K3QwF5Ue8Sth2p33nMUhL FemAoZB0vmVB66rcGx7L1NncNruuCXXWC1Q2jcK6jmGflpoyPH4brNAYhyUfsEsn efFDHK4QqihoMzNlxUIOVcDPc1vtfO8Cau4hFrofSH30anCK2bCjkwF7P2ECTEz1 TJyCz07VuuNXNFZdfQ8FPflzaDC2LFAm7tN/IwaDL0Lxx/qEEVADCV9F042jf1HU 6E9Hzoc2Fqj2d38pP2x1a82FcJfyJaOXleioReDJHgp859z1YFpAROuRdSNF1G0J itkpm4TRZjHWrKSubUvtEmYL4Q== -----END CERTIFICATE-----Generated at Sat Apr 18 08:39:22 2026 by rpki-client