$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft File: kBUoySF5F9lWch0caFZlNFvrVv0.mft (raw, json) Hash identifier: tQjCmoeyiFupR/bfw1eZ4oFociUsL94Q7WDpgl9U7/U= Subject key identifier: 7D:F7:5C:2B:60:15:C4:12:D5:38:36:45:78:C7:B2:B3:C1:3F:F2:89 Authority key identifier: 90:15:28:C9:21:79:17:D9:56:72:1D:1C:68:56:65:34:5B:EB:56:FD Certificate issuer: /CN=A91CFAB9/serialNumber=901528C9217917D956721D1C685665345BEB56FD Certificate serial: 03DA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft Manifest number: 03D4 Signing time: Fri 17 Apr 2026 00:11:47 +0000 Manifest this update: Fri 17 Apr 2026 00:11:46 +0000 Manifest next update: Fri 24 Apr 2026 00:11:46 +0000 Files and hashes: 1: kBUoySF5F9lWch0caFZlNFvrVv0.crl (hash: b1Ltcyx54qE6ORqNnYRsc05uRJiQ9Hzac9eTnR/xfX0=) 2: 39A335D6CB3F11ECBEBC9A1DC4F9AE02.roa (hash: cp7bTb5LQaah3kkUkaBafNzpnRd6bBUnxxFCOx5DKVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.crl rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:11:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 986 (0x3da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFAB9, serialNumber=901528C9217917D956721D1C685665345BEB56FD Validity Not Before: Apr 17 00:11:46 2026 GMT Not After : Apr 24 00:11:46 2026 GMT Subject: CN=69e17ac3-b1b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fe:5d:2e:dd:b5:18:da:4a:e4:bb:92:99:99: 34:a3:21:2d:09:55:f6:20:3e:eb:d0:38:ef:c3:2a: ec:14:ed:6f:6f:9c:17:ac:a9:4a:5f:eb:0b:5e:db: 5c:f1:62:d6:d7:b6:65:c8:fa:35:64:51:5a:36:cc: 57:c3:94:b6:2d:8b:f4:b9:4c:ad:6f:90:4e:d9:c4: 28:a0:a8:62:aa:d2:29:df:1c:c1:e4:96:91:db:14: 24:a9:dd:d2:d9:53:c0:04:ed:e5:8e:fb:ac:5b:74: 1e:c4:82:6c:a4:0f:47:19:16:43:f5:a6:13:e8:c1: 3c:f6:e9:c8:90:5e:9b:c9:84:c2:0c:36:4c:b9:5b: 38:ab:1e:32:54:4f:ac:59:b6:06:bc:15:db:e6:9f: 07:53:c9:75:fe:c2:0c:04:5f:e9:52:b4:5b:c4:a0: e3:a0:c1:c3:73:52:92:89:89:0c:48:77:c0:d9:5a: 50:c9:69:32:e4:66:00:e2:31:42:e5:cb:76:99:c0: a6:67:33:68:2f:57:d1:44:71:f0:36:30:fa:79:af: 62:e5:df:cc:d3:4f:f1:80:06:b0:78:5b:0f:d3:20: e1:84:82:f0:02:28:c6:db:52:05:df:57:ad:02:32: 9a:8b:dc:70:0f:ac:fc:fc:58:ca:a8:ac:9e:f5:fe: 72:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F7:5C:2B:60:15:C4:12:D5:38:36:45:78:C7:B2:B3:C1:3F:F2:89 X509v3 Authority Key Identifier: keyid:90:15:28:C9:21:79:17:D9:56:72:1D:1C:68:56:65:34:5B:EB:56:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:65:32:09:14:4b:cb:d2:3d:71:87:de:1a:f8:55:7b:96:68: e8:22:6a:b9:55:08:9f:64:1c:46:cf:93:70:7e:2e:fb:84:3d: c3:8d:fc:c1:d5:c4:49:60:d4:80:a7:36:43:56:7c:4f:09:a0: 58:35:d4:95:47:06:7e:00:1f:8e:e4:4f:a6:7e:3b:3b:61:5c: 93:87:db:56:8b:67:eb:db:bb:8b:07:b7:0d:5c:62:a3:0e:47: 4d:20:c7:78:55:ed:0e:05:2c:2e:ca:c6:fb:86:d6:d3:70:13: 8d:bd:c6:13:5b:4e:3c:14:4b:4c:bb:72:6f:20:6b:84:1d:80: 82:1e:0b:c0:27:75:8e:2f:73:dc:56:b7:45:d5:90:ba:ab:0f: 8a:11:07:4d:8d:5f:74:46:d0:3f:55:59:d2:da:5b:96:1c:e6: 42:00:0f:fb:e0:a4:c2:a8:53:2c:b4:1f:c8:73:cd:95:a3:a1: 9a:63:33:bc:2e:7a:80:0e:96:18:73:c3:27:05:97:ad:2b:53: 50:1e:26:d3:f9:aa:02:f9:e2:a1:37:d8:8c:a9:94:e4:e6:48: c9:31:26:e4:7f:00:25:57:b8:8c:f2:22:cb:d9:6e:5e:d8:b1: 0b:31:c9:0a:b7:02:e5:87:7b:e5:9c:e6:6d:db:44:3f:7b:58: aa:bc:eb:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBQjkxMTAvBgNVBAUTKDkwMTUyOEM5MjE3OTE3RDk1NjcyMUQxQzY4NTY2NTM0 NUJFQjU2RkQwHhcNMjYwNDE3MDAxMTQ2WhcNMjYwNDI0MDAxMTQ2WjAYMRYwFAYD VQQDEw02OWUxN2FjMy1iMWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxv5dLt21GNpK5LuSmZk0oyEtCVX2ID7r0DjvwyrsFO1vb5wXrKlKX+sLXttc 8WLW17ZlyPo1ZFFaNsxXw5S2LYv0uUytb5BO2cQooKhiqtIp3xzB5JaR2xQkqd3S 2VPABO3ljvusW3QexIJspA9HGRZD9aYT6ME89unIkF6byYTCDDZMuVs4qx4yVE+s WbYGvBXb5p8HU8l1/sIMBF/pUrRbxKDjoMHDc1KSiYkMSHfA2VpQyWky5GYA4jFC 5ct2mcCmZzNoL1fRRHHwNjD6ea9i5d/M00/xgAaweFsP0yDhhILwAijG21IF31et AjKai9xwD6z8/FjKqKye9f5y0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH33XCtg FcQS1Tg2RXjHsrPBP/KJMB8GA1UdIwQYMBaAFJAVKMkheRfZVnIdHGhWZTRb61b9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkFCOS8xQ0Q0NEY5RUM3 N0ExMUVDQjk0MzRDMkNDNEY5QUUwMi9rQlVveVNGNUY5bFdjaDBjYUZabE5GdnJW djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tCVW95U0Y1RjlsV2NoMGNhRlpsTkZ2clZ2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkFCOS8xQ0Q0NEY5RUM3N0ExMUVDQjk0MzRDMkNDNEY5QUUwMi9rQlVveVNGNUY5 bFdjaDBjYUZabE5GdnJWdjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc2UyCRRLy9I9cYfeGvhVe5Zo6CJquVUIn2QcRs+TcH4u+4Q9w438wdXESWDU gKc2Q1Z8TwmgWDXUlUcGfgAfjuRPpn47O2Fck4fbVotn69u7iwe3DVxiow5HTSDH eFXtDgUsLsrG+4bW03ATjb3GE1tOPBRLTLtybyBrhB2Agh4LwCd1ji9z3Fa3RdWQ uqsPihEHTY1fdEbQP1VZ0tpblhzmQgAP++CkwqhTLLQfyHPNlaOhmmMzvC56gA6W GHPDJwWXrStTUB4m0/mqAvnioTfYjKmU5OZIyTEm5H8AJVe4jPIiy9luXtixCzHJ CrcC5Yd75ZzmbdtEP3tYqrzrBw== -----END CERTIFICATE-----Generated at Fri Apr 17 06:09:58 2026 by rpki-client