$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft File: ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft (raw, json) Hash identifier: gP7wcpQhpBGmwNO/iJSRcvLbsj312C4OQN3Z+i9ezZU= Subject key identifier: EA:41:3C:05:9B:6B:2B:EC:E7:D2:D4:BF:0C:97:EC:FB:A8:59:BA:45 Authority key identifier: 92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30 Certificate issuer: /CN=A91ED9F9/serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530 Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft Manifest number: 019F Signing time: Fri 17 Apr 2026 03:59:52 +0000 Manifest this update: Fri 17 Apr 2026 03:59:52 +0000 Manifest next update: Fri 24 Apr 2026 03:59:52 +0000 Files and hashes: 1: ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl (hash: 9e30AbtvH6Tnn7dZqmeRXtWAZrH7qqVJby9gEYvWDJo=) 2: BAE1F274190511F0826DA721C4F9AE02.roa (hash: wp5Bbdm9q2bQP+NH3qhWvc9NbTFLA+VfDHmL/JL9bns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:59:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED9F9, serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530 Validity Not Before: Apr 17 03:59:52 2026 GMT Not After : Apr 24 03:59:52 2026 GMT Subject: CN=69e1b038-240b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d4:4c:06:83:ec:42:ff:01:97:c8:df:64:65: 7d:ae:47:62:41:19:f1:83:3f:23:39:e0:81:bf:ec: 2f:2e:f9:3a:ec:e5:68:91:92:2a:3f:b1:8f:7b:8f: 97:8d:56:86:aa:89:ba:d1:2b:87:1d:f5:4c:92:f8: c4:76:78:b4:23:b0:8c:e4:e9:3f:e3:65:d5:b0:8d: 4f:d0:67:b5:7a:e9:bf:2b:65:49:b6:53:73:cc:d7: 03:8a:b9:0d:43:8c:2f:85:ff:fa:c4:34:24:81:d5: 69:2c:93:65:e8:91:0d:f3:87:d8:a7:ee:53:f2:c3: db:0f:30:4a:cf:95:35:ee:2b:97:20:4f:66:5e:e5: bb:f4:2b:b2:d3:f6:9c:22:cf:7d:97:64:4f:28:08: 8e:2b:04:1b:49:57:2c:ed:e1:00:26:59:a8:e9:05: 84:f9:08:28:1c:ef:05:d7:ed:c2:e7:dc:21:49:3b: 5a:b8:e9:a3:09:85:6e:f7:6c:1d:09:a2:bf:0a:c4: 19:8b:5c:f4:3c:fb:7e:e4:40:cf:c6:99:1f:99:fd: e4:fb:e8:5c:d7:15:8d:da:42:ca:f2:78:5f:3b:dd: d9:ed:0e:82:3b:b7:3a:7c:96:02:a8:fb:7b:8b:92: 18:b2:79:b3:d9:e7:cf:c1:54:7c:e6:00:ee:12:3f: 04:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:41:3C:05:9B:6B:2B:EC:E7:D2:D4:BF:0C:97:EC:FB:A8:59:BA:45 X509v3 Authority Key Identifier: keyid:92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:30:7c:a3:ca:65:d9:27:1a:04:04:53:ce:8f:f5:f3:f2:50: 46:7d:b7:90:d9:78:2c:ef:d3:5f:d1:4f:2a:34:81:c5:fd:ad: e1:f2:46:97:98:2e:f9:f2:e3:aa:35:5b:68:1a:18:ea:64:ec: e1:26:f6:95:0f:77:0b:6e:1d:78:92:42:b8:04:a9:5c:90:a8: c2:ea:52:90:d2:07:23:1f:1c:92:fa:0e:53:2d:5a:2f:77:70: 47:27:2a:07:da:36:af:fb:3d:b8:37:d5:27:a2:a8:6f:11:40: a6:19:3e:d8:b2:15:3b:32:70:60:71:28:08:b0:3e:97:61:9b: 0f:1e:87:e4:1e:06:3b:5c:cd:17:d5:54:af:f2:47:0a:93:76: 83:c7:02:e2:77:5f:85:89:c8:e5:1d:c8:6d:43:11:3d:98:61: 5a:60:3e:c7:10:91:2b:22:5c:72:1f:06:e3:1c:00:31:33:a3: 87:e5:24:d6:76:da:2d:8b:9a:7f:eb:fc:86:6e:86:ee:ed:40: 3e:b2:ee:2c:34:b5:0f:7d:78:16:02:83:7d:1f:94:4f:02:11: 62:42:c2:32:f0:50:2a:15:35:10:0f:59:91:b7:a3:40:e8:da: 2f:2f:68:01:45:19:35:ef:96:1a:76:00:97:50:0e:e1:d7:3e: 4a:c6:93:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ5RjkxMTAvBgNVBAUTKDkyRUZENUMwQjkyMDFBN0VEMzk2NUYyRDk4QjZEOUVC NjYyOTA1MzAwHhcNMjYwNDE3MDM1OTUyWhcNMjYwNDI0MDM1OTUyWjAYMRYwFAYD VQQDEw02OWUxYjAzOC0yNDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA09RMBoPsQv8Bl8jfZGV9rkdiQRnxgz8jOeCBv+wvLvk67OVokZIqP7GPe4+X jVaGqom60SuHHfVMkvjEdni0I7CM5Ok/42XVsI1P0Ge1eum/K2VJtlNzzNcDirkN Q4wvhf/6xDQkgdVpLJNl6JEN84fYp+5T8sPbDzBKz5U17iuXIE9mXuW79Cuy0/ac Is99l2RPKAiOKwQbSVcs7eEAJlmo6QWE+QgoHO8F1+3C59whSTtauOmjCYVu92wd CaK/CsQZi1z0PPt+5EDPxpkfmf3k++hc1xWN2kLK8nhfO93Z7Q6CO7c6fJYCqPt7 i5IYsnmz2efPwVR85gDuEj8E7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOpBPAWb ayvs59LUvwyX7PuoWbpFMB8GA1UdIwQYMBaAFJLv1cC5IBp+05ZfLZi22etmKQUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDlGOS82ODYwRDVBMEM5 NTIxMUVFQjdBRERENEVDNEY5QUUwMi9rdV9Wd0xrZ0duN1RsbDh0bUxiWjYyWXBC VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t1X1Z3TGtnR243VGxsOHRtTGJaNjJZcEJUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDlGOS82ODYwRDVBMEM5NTIxMUVFQjdBRERENEVDNEY5QUUwMi9rdV9Wd0xrZ0du N1RsbDh0bUxiWjYyWXBCVEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWzB8o8pl2ScaBARTzo/18/JQRn23kNl4LO/TX9FPKjSBxf2t4fJGl5gu+fLj qjVbaBoY6mTs4Sb2lQ93C24deJJCuASpXJCowupSkNIHIx8ckvoOUy1aL3dwRycq B9o2r/s9uDfVJ6KobxFAphk+2LIVOzJwYHEoCLA+l2GbDx6H5B4GO1zNF9VUr/JH CpN2g8cC4ndfhYnI5R3IbUMRPZhhWmA+xxCRKyJcch8G4xwAMTOjh+Uk1nbaLYua f+v8hm6G7u1APrLuLDS1D314FgKDfR+UTwIRYkLCMvBQKhU1EA9ZkbejQOjaLy9o AUUZNe+WGnYAl1AO4dc+SsaTAQ== -----END CERTIFICATE-----Generated at Fri Apr 17 08:09:15 2026 by rpki-client