$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft File: _KxvqDHo9aKEE0yVqNAg_LyOyfI.mft (raw, json) Hash identifier: +t4CwO4rsAGA7cAtkE69OUe+mpUvnMTgu44StIAuHes= Subject key identifier: 71:F8:85:40:70:4E:0E:57:EB:C7:1C:DE:A1:0E:97:93:F2:CE:0C:3F Authority key identifier: FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2 Certificate issuer: /CN=A91EB820/serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft Manifest number: 8B Signing time: Fri 17 Apr 2026 07:18:12 +0000 Manifest this update: Fri 17 Apr 2026 07:18:12 +0000 Manifest next update: Fri 24 Apr 2026 07:18:12 +0000 Files and hashes: 1: _KxvqDHo9aKEE0yVqNAg_LyOyfI.crl (hash: kLmtxw+DkiXz1H0StedL7rss9gpqxdTv1cdbqWJNQDY=) 2: D918B46C684211F0BE03503CC4F9AE02.roa (hash: aq1rkL3lbBFNGSwriSfEgnoepxf49LO+cuY4rWY4wMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.crl rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB820, serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2 Validity Not Before: Apr 17 07:18:12 2026 GMT Not After : Apr 24 07:18:12 2026 GMT Subject: CN=69e1deb4-7263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f9:21:2d:6d:47:70:ad:3f:86:0f:31:a4:66: 44:79:19:1d:ac:c1:0e:b4:38:b2:23:b7:03:88:0f: 17:50:67:b9:53:15:29:eb:ac:c4:40:30:f8:6e:5d: 6c:08:01:22:6d:92:8f:da:c0:5c:5d:e9:33:c0:e4: 6c:3c:34:e6:80:81:64:10:a7:59:06:b7:6f:86:51: 3d:b0:54:90:cd:ab:22:11:ca:14:30:b6:57:e0:dc: 74:48:65:8f:a9:d2:03:cd:dd:43:08:3c:d2:58:1e: 45:b7:34:c8:1c:de:38:88:91:07:e2:40:04:68:79: b9:b3:9e:18:53:94:bc:49:a1:a7:50:d8:57:c6:35: 1e:3d:33:80:8f:40:7d:b9:64:e8:95:c4:f9:74:0d: ca:d6:9c:92:40:e1:2d:0a:1c:fb:71:cc:5b:d3:d4: 7e:bd:13:da:91:85:27:7a:02:c7:23:69:72:12:e9: 12:58:b4:25:0f:44:a0:4a:04:75:4e:d4:12:1b:15: 8b:67:be:d0:41:50:2a:f1:f6:fc:39:a3:97:9a:3a: be:69:a9:e0:08:f0:e2:03:0d:2a:06:96:51:50:46: be:bb:0e:ea:48:72:58:34:67:7d:f1:5d:48:17:1a: 09:7a:e6:4a:cd:f8:5c:ee:83:06:87:f3:19:81:27: 56:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F8:85:40:70:4E:0E:57:EB:C7:1C:DE:A1:0E:97:93:F2:CE:0C:3F X509v3 Authority Key Identifier: keyid:FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:9a:09:de:cc:97:e9:ab:0b:c7:15:36:ad:91:39:b5:69:69: 75:0e:28:5f:65:b4:70:10:e3:5a:bf:9b:63:a3:ac:91:e4:9e: ee:5e:b6:17:ea:f9:7a:59:79:15:87:79:10:87:36:26:66:c5: 3a:c7:c2:e1:18:4f:33:73:58:4d:f7:4e:e3:68:81:d3:b2:02: 62:88:3c:da:73:2e:a1:d7:0b:4a:be:ee:3f:3e:60:4b:ab:4f: 1c:95:79:d5:ad:96:2a:9b:56:c2:76:df:3f:da:72:fd:05:6a: 9f:ae:87:41:18:b1:11:cd:b0:f5:07:35:46:e5:f4:11:d2:c0: af:b7:ea:92:c7:19:71:21:ec:ba:61:73:eb:e6:d3:b1:28:27: d4:82:d2:4e:7a:06:b0:46:22:e2:91:7f:95:be:4e:b8:03:7b: b8:1e:68:3e:a1:30:f0:0e:c5:4d:d4:d6:6a:5d:b2:1f:99:53: 88:bf:2e:3d:0d:c3:31:b4:97:a4:98:99:43:1f:dd:55:07:fe: 01:33:65:7f:50:8a:ea:be:99:97:5a:12:5b:5f:95:7c:b2:f4: 0f:13:08:2d:79:1b:dc:13:6a:e1:d6:65:c3:33:16:da:f1:c9: 64:bc:50:f2:94:dd:41:e3:2e:94:1e:7c:25:0d:95:90:c3:a0: 2a:bd:37:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI4MjAxMTAvBgNVBAUTKEZDQUM2RkE4MzFFOEY1QTI4NDEzNEM5NUE4RDAyMEZD QkM4RUM5RjIwHhcNMjYwNDE3MDcxODEyWhcNMjYwNDI0MDcxODEyWjAYMRYwFAYD VQQDEw02OWUxZGViNC03MjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxfkhLW1HcK0/hg8xpGZEeRkdrMEOtDiyI7cDiA8XUGe5UxUp66zEQDD4bl1s CAEibZKP2sBcXekzwORsPDTmgIFkEKdZBrdvhlE9sFSQzasiEcoUMLZX4Nx0SGWP qdIDzd1DCDzSWB5FtzTIHN44iJEH4kAEaHm5s54YU5S8SaGnUNhXxjUePTOAj0B9 uWTolcT5dA3K1pySQOEtChz7ccxb09R+vRPakYUnegLHI2lyEukSWLQlD0SgSgR1 TtQSGxWLZ77QQVAq8fb8OaOXmjq+aangCPDiAw0qBpZRUEa+uw7qSHJYNGd98V1I FxoJeuZKzfhc7oMGh/MZgSdWkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHH4hUBw Tg5X68cc3qEOl5Pyzgw/MB8GA1UdIwQYMBaAFPysb6gx6PWihBNMlajQIPy8jsny MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjgyMC85MEE4QjA4QTY4 NDAxMUYwQTk0MDQ3NkJDNEY5QUUwMi9fS3h2cURIbzlhS0VFMHlWcU5BZ19MeU95 ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19LeHZxREhvOWFLRUUweVZxTkFnX0x5T3lmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjgyMC85MEE4QjA4QTY4NDAxMUYwQTk0MDQ3NkJDNEY5QUUwMi9fS3h2cURIbzlh S0VFMHlWcU5BZ19MeU95ZkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACpoJ3syX6asLxxU2rZE5tWlpdQ4oX2W0cBDjWr+bY6OskeSe7l62F+r5ell5 FYd5EIc2JmbFOsfC4RhPM3NYTfdO42iB07ICYog82nMuodcLSr7uPz5gS6tPHJV5 1a2WKptWwnbfP9py/QVqn66HQRixEc2w9Qc1RuX0EdLAr7fqkscZcSHsumFz6+bT sSgn1ILSTnoGsEYi4pF/lb5OuAN7uB5oPqEw8A7FTdTWal2yH5lTiL8uPQ3DMbSX pJiZQx/dVQf+ATNlf1CK6r6Zl1oSW1+VfLL0DxMILXkb3BNq4dZlwzMW2vHJZLxQ 8pTdQeMulB58JQ2VkMOgKr03aQ== -----END CERTIFICATE-----Generated at Fri Apr 17 09:58:14 2026 by rpki-client