$ rpki-client -vvf rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft File: KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft (raw, json) Hash identifier: TLyGCwcZaZwL7DF3CrI36ZXXU0mlBWUWMEE9UZWGp6s= Subject key identifier: E8:E0:6F:90:B3:F0:EF:4E:5F:8E:DB:B4:0B:A5:A6:61:73:31:E8:19 Authority key identifier: 28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 Certificate issuer: /CN=A91E868C/serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Certificate serial: 0F69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft Manifest number: 0F05 Signing time: Thu 16 Apr 2026 17:36:40 +0000 Manifest this update: Thu 16 Apr 2026 17:36:40 +0000 Manifest next update: Thu 23 Apr 2026 17:36:40 +0000 Files and hashes: 1: KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl (hash: SALkFN0hunUKE5SBnpVqnw5LQhSxPiUB2Au/TgsxMCU=) 2: 433917A83D8211EEA0E4DD46C4F9AE02.roa (hash: KOAlra/c7OfhaqRuBqqmBdCQXMOimlFzYXSJ4DGlkSM=) 3: 41A09C683D8211EEA0E4DD46C4F9AE02.roa (hash: yBAKdOeuYpOHwpfvu2EJBrKJc+IZbXKkxfMi4yfRU/Q=) 4: DED77BB2FA2F11EF98728875C4F9AE02.roa (hash: g+9ZIN0bzKl4hPUjZROdg1CsqMAMZorZF/Wv0UBIawM=) 5: 40BA3F5C3D8211EEA0E4DD46C4F9AE02.roa (hash: j5kN5uvsFGRLFFFzFP46xJ6l0wo2CCqq8dwowySMLUk=) 6: 5915642864AB11EEBFD54F2EC4F9AE02.roa (hash: rIqL842ksTXKO2fhExD42Yq0dnrl1cNwx4ESowKkH4A=) 7: 10E905682CCE11F1BB1925E192833773.roa (hash: 6g6Ja4w+RYbHzuKLTfgElgeDFmZnmZ9tKzWcakJqqZs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3945 (0xf69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E868C, serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Validity Not Before: Apr 16 17:36:40 2026 GMT Not After : Apr 23 17:36:40 2026 GMT Subject: CN=69e11e28-485e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:50:04:70:74:31:70:d4:76:97:22:20:c9:28: 93:08:34:11:59:9b:92:3c:cf:3d:70:d4:81:c2:2a: 10:d5:73:7f:ee:5a:39:1b:c8:aa:f3:dc:0c:50:95: 06:23:e1:37:d3:33:f2:50:55:12:0c:14:67:88:a6: 45:9d:14:45:d1:dd:29:92:3a:33:e6:b4:56:2f:52: 1c:df:8c:63:c3:a0:5a:28:e4:ae:a6:32:c3:57:96: 7c:30:a7:5d:ab:ad:a0:e7:2d:0a:9a:77:9c:94:1e: 4a:be:56:25:f6:26:27:6e:61:b7:5b:31:ac:c8:a8: ca:35:00:5e:57:85:54:17:4e:85:3f:a8:54:45:c7: 71:54:a8:02:92:43:8b:6f:45:94:68:01:36:36:41: 1f:b8:df:05:e8:fe:48:33:8e:40:ba:d5:92:5e:88: c0:71:00:64:05:3f:ff:01:7b:36:4c:4e:f9:f3:c2: bf:84:53:9b:a2:f1:27:b3:40:e9:24:08:7c:20:99: dc:49:54:a0:90:b5:f3:94:4e:f7:88:fb:7f:f6:30: 34:9e:b0:1c:ca:07:88:9c:78:ef:bd:19:5a:d0:d7: 69:1e:e0:a0:8b:94:9b:50:7c:c4:1b:e1:12:2a:e5: b8:d4:31:3c:59:9a:36:87:7b:81:e1:e9:b8:c7:0e: 5f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E0:6F:90:B3:F0:EF:4E:5F:8E:DB:B4:0B:A5:A6:61:73:31:E8:19 X509v3 Authority Key Identifier: keyid:28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:a6:69:4b:d5:94:02:91:37:c2:02:f8:6c:4c:aa:43:98:fe: 4b:55:07:1d:16:82:e8:2b:88:62:10:29:15:4d:71:be:73:9b: 85:d8:04:03:d8:98:07:ab:e0:79:69:da:f2:20:f1:b9:aa:ce: 01:dc:65:14:67:95:77:f6:8a:73:55:fd:c2:cb:6b:04:c8:a4: 05:a4:1c:6c:f0:36:41:bb:1c:47:29:14:9b:82:0e:01:98:ea: 59:86:47:3d:9a:d0:fd:76:00:64:a0:f5:97:4a:78:c3:e9:ff: 7b:a3:de:3b:f4:55:d6:83:80:c7:34:95:ad:ee:1f:6b:a4:03: ff:32:9e:88:93:13:8a:62:e5:28:b9:51:69:b9:a5:27:fc:8b: 46:d2:81:7d:7d:f2:c2:47:3a:2d:f2:97:c0:b3:81:11:3c:50: ce:f5:ac:00:d5:45:75:4c:0f:af:b3:0a:ce:4a:ef:2e:2f:e6: f0:e0:75:38:c7:c7:b0:fb:79:1e:ae:0b:e5:35:70:42:b0:bb: 01:d7:6f:9d:d1:56:52:24:aa:95:80:f5:85:a1:f1:68:6a:de: ee:21:dc:3a:f7:2d:45:3f:0b:0e:c8:ac:ef:9e:15:22:34:01: 5a:f5:02:94:bc:1d:0a:42:0e:a3:89:9b:6c:f6:94:88:4b:de: 2b:4e:fc:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg2OEMxMTAvBgNVBAUTKDI4RTY3MEMyRTM3MDEyRjA1QzYzQkI1NjZFMjAzQzUx REM0NUUyQjIwHhcNMjYwNDE2MTczNjQwWhcNMjYwNDIzMTczNjQwWjAYMRYwFAYD VQQDEw02OWUxMWUyOC00ODVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFAEcHQxcNR2lyIgySiTCDQRWZuSPM89cNSBwioQ1XN/7lo5G8iq89wMUJUG I+E30zPyUFUSDBRniKZFnRRF0d0pkjoz5rRWL1Ic34xjw6BaKOSupjLDV5Z8MKdd q62g5y0KmneclB5KvlYl9iYnbmG3WzGsyKjKNQBeV4VUF06FP6hURcdxVKgCkkOL b0WUaAE2NkEfuN8F6P5IM45AutWSXojAcQBkBT//AXs2TE7588K/hFObovEns0Dp JAh8IJncSVSgkLXzlE73iPt/9jA0nrAcygeInHjvvRla0NdpHuCgi5SbUHzEG+ES KuW41DE8WZo2h3uB4em4xw5fLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOjgb5Cz 8O9OX47btAulpmFzMegZMB8GA1UdIwQYMBaAFCjmcMLjcBLwXGO7Vm4gPFHcReKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODY4Qy8zRkI5MzM2OEE5 REIxMUU5ODQyODUyODZDNEY5QUUwMi9LT1p3d3VOd0V2QmNZN3RXYmlBOFVkeEY0 ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tPWnd3dU53RXZCY1k3dFdiaUE4VWR4RjRySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODY4Qy8zRkI5MzM2OEE5REIxMUU5ODQyODUyODZDNEY5QUUwMi9LT1p3d3VOd0V2 QmNZN3RXYmlBOFVkeEY0ckkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiqZpS9WUApE3wgL4bEyqQ5j+S1UHHRaC6CuIYhApFU1xvnObhdgEA9iYB6vg eWna8iDxuarOAdxlFGeVd/aKc1X9wstrBMikBaQcbPA2QbscRykUm4IOAZjqWYZH PZrQ/XYAZKD1l0p4w+n/e6PeO/RV1oOAxzSVre4fa6QD/zKeiJMTimLlKLlRabml J/yLRtKBfX3ywkc6LfKXwLOBETxQzvWsANVFdUwPr7MKzkrvLi/m8OB1OMfHsPt5 Hq4L5TVwQrC7AddvndFWUiSqlYD1haHxaGre7iHcOvctRT8LDsis754VIjQBWvUC lLwdCkIOo4mbbPaUiEveK0784Q== -----END CERTIFICATE-----Generated at Fri Apr 17 19:45:14 2026 by rpki-client