$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft File: kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft (raw, json) Hash identifier: rChS6dUfohxnW4hF7j+jqyaPWyrw2nqJbhisUQxXex8= Subject key identifier: 75:9A:13:27:4D:8A:E1:2B:08:62:68:06:E0:CB:FE:65:7E:6D:B0:80 Authority key identifier: 93:04:23:4E:73:90:49:14:3A:85:91:A3:74:5A:53:E4:B9:2A:D8:D8 Certificate issuer: /CN=A91DE323/serialNumber=9304234E739049143A8591A3745A53E4B92AD8D8 Certificate serial: 0208 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft Manifest number: 01FA Signing time: Fri 17 Apr 2026 03:06:05 +0000 Manifest this update: Fri 17 Apr 2026 03:06:05 +0000 Manifest next update: Fri 24 Apr 2026 03:06:05 +0000 Files and hashes: 1: kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.crl (hash: PPkk4IuRu2r75gW7Kxblxw0AJfki6qEc83Qqw+FdKOU=) 2: 4AB01838FF1D11F0816C691B85EE528E.roa (hash: 73GQqCwii1vmNrsS7r1xrrm5FcLJovRSf9upFdGwKjE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.crl rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:06:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 520 (0x208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE323, serialNumber=9304234E739049143A8591A3745A53E4B92AD8D8 Validity Not Before: Apr 17 03:06:05 2026 GMT Not After : Apr 24 03:06:05 2026 GMT Subject: CN=69e1a39d-f67e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:33:f9:8f:3e:c4:c1:04:cc:57:1b:fd:ed:ae: c6:95:45:5d:e3:dd:6b:4f:f1:8e:a4:f6:e3:e7:aa: 85:36:10:55:56:00:44:dc:b0:24:c3:84:9d:19:e5: f6:b6:a1:8d:85:f1:bf:2a:c0:4b:f0:2e:99:f2:ed: 06:5d:73:99:86:21:48:d8:2a:76:9a:98:32:3d:d6: 06:80:ad:08:8b:24:51:1b:e1:13:74:e3:9b:9d:19: 2a:8f:52:a3:ec:47:8a:d0:45:a6:07:5d:90:70:9a: 38:66:65:2b:ca:75:c2:bd:2e:e9:e3:e2:56:4e:2a: a9:49:4e:69:bf:09:22:e9:fb:16:5b:ba:c5:4c:2c: bb:d3:69:2d:f2:68:6d:9e:fe:38:b5:01:30:77:42: df:89:f8:4b:12:df:f0:75:54:25:b5:70:ac:ec:80: 29:e4:c7:d4:14:1e:0c:bf:65:b3:82:4f:82:0e:09: c3:3f:0d:02:78:46:52:dc:cf:5a:64:d4:75:ab:be: 05:a0:35:47:c4:11:ea:30:ab:9e:fb:10:b0:ac:14: b9:8f:e7:ab:0e:db:1e:ac:79:f5:07:5b:dc:e5:93: 9e:bf:76:47:23:1b:8b:ab:32:82:86:52:cb:d1:e3: 75:08:06:1d:a8:74:93:95:c4:0f:2f:7e:5a:02:fc: 7d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:9A:13:27:4D:8A:E1:2B:08:62:68:06:E0:CB:FE:65:7E:6D:B0:80 X509v3 Authority Key Identifier: keyid:93:04:23:4E:73:90:49:14:3A:85:91:A3:74:5A:53:E4:B9:2A:D8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:f6:d1:95:5e:4f:b7:53:d4:2d:28:b6:e4:dc:da:50:c7:f7: 89:8f:f4:6a:96:19:06:82:85:06:86:ea:27:19:80:5d:c2:28: 44:74:4e:1e:d2:79:b4:e3:b2:12:62:11:6b:74:5f:09:24:9d: 61:e4:11:3a:73:26:0f:3a:ee:f2:71:be:50:f2:bc:e8:01:33: c7:d7:ec:92:1c:74:bf:9d:5b:27:24:54:78:19:5d:43:8b:c2: 98:a7:31:60:c4:39:62:a6:a9:bc:af:26:5d:34:f2:97:ba:90: 96:68:3f:b0:2a:7f:6e:5f:3c:35:7f:76:1f:1b:94:30:e1:17: c7:8b:c9:bf:43:4b:8a:d4:6c:5c:20:c1:28:93:43:80:8a:27: 29:7a:a3:13:bd:31:a1:66:ef:60:ed:ed:74:aa:e1:36:c9:ee: ff:ae:7e:d3:dd:7b:b5:d4:77:c3:6e:06:66:ee:90:42:b7:c6: f7:c5:26:61:ce:bb:35:28:dd:9a:ea:be:7b:34:02:f8:dd:c0: 6e:a5:8b:e2:00:d3:6c:71:3d:8e:95:c9:ac:0c:49:b1:ba:be: e8:d3:9a:b0:68:7d:a5:c5:a4:8a:9d:0f:6c:d2:55:d4:27:f6: 1f:7f:fa:cb:30:05:91:99:5e:f2:f2:60:b1:c1:df:49:ac:5e: 22:bf:b6:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUzMjMxMTAvBgNVBAUTKDkzMDQyMzRFNzM5MDQ5MTQzQTg1OTFBMzc0NUE1M0U0 QjkyQUQ4RDgwHhcNMjYwNDE3MDMwNjA1WhcNMjYwNDI0MDMwNjA1WjAYMRYwFAYD VQQDEw02OWUxYTM5ZC1mNjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8jP5jz7EwQTMVxv97a7GlUVd491rT/GOpPbj56qFNhBVVgBE3LAkw4SdGeX2 tqGNhfG/KsBL8C6Z8u0GXXOZhiFI2Cp2mpgyPdYGgK0IiyRRG+ETdOObnRkqj1Kj 7EeK0EWmB12QcJo4ZmUrynXCvS7p4+JWTiqpSU5pvwki6fsWW7rFTCy702kt8mht nv44tQEwd0LfifhLEt/wdVQltXCs7IAp5MfUFB4Mv2Wzgk+CDgnDPw0CeEZS3M9a ZNR1q74FoDVHxBHqMKue+xCwrBS5j+erDtserHn1B1vc5ZOev3ZHIxuLqzKChlLL 0eN1CAYdqHSTlcQPL35aAvx9DwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHWaEydN iuErCGJoBuDL/mV+bbCAMB8GA1UdIwQYMBaAFJMEI05zkEkUOoWRo3RaU+S5KtjY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTMyMy85RTYxRTQyNDUy NUYxMUVFODBCQTBENzRDNEY5QUUwMi9rd1FqVG5PUVNSUTZoWkdqZEZwVDVMa3Ey TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t3UWpUbk9RU1JRNmhaR2pkRnBUNUxrcTJOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTMyMy85RTYxRTQyNDUyNUYxMUVFODBCQTBENzRDNEY5QUUwMi9rd1FqVG5PUVNS UTZoWkdqZEZwVDVMa3EyTmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApvbRlV5Pt1PULSi25NzaUMf3iY/0apYZBoKFBobqJxmAXcIoRHROHtJ5tOOy EmIRa3RfCSSdYeQROnMmDzru8nG+UPK86AEzx9fskhx0v51bJyRUeBldQ4vCmKcx YMQ5YqapvK8mXTTyl7qQlmg/sCp/bl88NX92HxuUMOEXx4vJv0NLitRsXCDBKJND gIonKXqjE70xoWbvYO3tdKrhNsnu/65+0917tdR3w24GZu6QQrfG98UmYc67NSjd muq+ezQC+N3AbqWL4gDTbHE9jpXJrAxJsbq+6NOasGh9pcWkip0PbNJV1Cf2H3/6 yzAFkZle8vJgscHfSaxeIr+2SQ== -----END CERTIFICATE-----Generated at Fri Apr 17 18:45:28 2026 by rpki-client