$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft File: K7fm9k6JPZEwSosliGA1DWdQVK0.mft (raw, json) Hash identifier: qwhU01s+4xgMiCr55diRiKcs/C1Ho7RkGmkjZgVuNMw= Subject key identifier: 50:E2:8B:D0:A4:B1:A9:70:D4:9A:39:E4:03:DD:41:46:86:3B:8A:F8 Authority key identifier: 2B:B7:E6:F6:4E:89:3D:91:30:4A:8B:25:88:60:35:0D:67:50:54:AD Certificate issuer: /CN=A91F08D9/serialNumber=2BB7E6F64E893D91304A8B258860350D675054AD Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7fm9k6JPZEwSosliGA1DWdQVK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft Manifest number: 7D Signing time: Fri 17 Apr 2026 07:26:20 +0000 Manifest this update: Fri 17 Apr 2026 07:26:19 +0000 Manifest next update: Fri 24 Apr 2026 07:26:19 +0000 Files and hashes: 1: K7fm9k6JPZEwSosliGA1DWdQVK0.crl (hash: c78D0MEHzIbxzCoBz/ELoonUDydqZO1rGLv36MJ0cuE=) 2: 87B1CF3484AB11F08EC73477C4F9AE02.roa (hash: wj3CysiZUbw6+gol3WXIUNIf6f/KPaKD87i7kYiUu3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.crl rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7fm9k6JPZEwSosliGA1DWdQVK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:26:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F08D9, serialNumber=2BB7E6F64E893D91304A8B258860350D675054AD Validity Not Before: Apr 17 07:26:19 2026 GMT Not After : Apr 24 07:26:19 2026 GMT Subject: CN=69e1e09c-18a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:16:ad:1e:b0:80:6e:15:a3:7c:5a:ec:82:ce: c9:50:3b:e8:4a:b3:bd:7f:38:f1:35:db:40:3a:a1: aa:15:84:eb:18:68:43:9c:3f:db:14:0d:df:1f:26: 0b:3a:5d:7e:a2:16:7e:00:bf:27:49:1e:80:62:59: 39:bd:a1:b8:c2:d9:48:2f:69:a1:03:2c:90:e9:68: 73:d5:ae:a0:8d:41:49:5a:5d:16:4f:15:74:07:b9: 88:29:1b:bd:77:57:30:e0:89:5d:45:0a:ec:e4:53: 77:cd:0a:b7:93:a7:bb:ea:bc:f6:a9:72:b6:dc:54: da:c4:76:c5:eb:5b:62:f2:bd:f9:cf:e0:3f:fc:f3: 08:ec:82:dc:a7:84:06:92:47:62:87:48:05:9d:00: 21:71:75:ef:c6:2b:d8:a2:2b:0a:d3:0b:79:e5:8b: 39:40:8c:d8:d0:c0:5d:7e:32:ea:46:77:a1:59:ec: 69:12:73:c8:82:f0:86:92:4a:0c:e8:b3:06:50:1c: f2:36:5b:10:8d:a2:c3:6f:14:a7:6c:b9:05:31:7d: a9:44:15:bc:db:11:8b:b5:79:d1:40:b0:48:9e:d4: e9:6c:ed:e1:e9:c9:aa:e9:78:ae:88:e2:36:55:9e: 6a:41:b3:71:5d:44:62:bd:24:9b:09:c6:d4:2a:1c: 6a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E2:8B:D0:A4:B1:A9:70:D4:9A:39:E4:03:DD:41:46:86:3B:8A:F8 X509v3 Authority Key Identifier: keyid:2B:B7:E6:F6:4E:89:3D:91:30:4A:8B:25:88:60:35:0D:67:50:54:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7fm9k6JPZEwSosliGA1DWdQVK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:bd:a0:a4:56:d6:42:00:3c:2b:df:a6:59:f3:71:7a:12:7c: e0:a8:d8:9c:21:2a:29:50:75:ae:75:12:ab:b5:a2:0a:c0:9d: 9d:28:fd:a6:8a:2d:f5:2c:e6:aa:f8:ca:03:4d:84:4e:bc:b5: 41:31:eb:35:e6:9e:2c:07:e5:51:a3:52:19:dc:40:e9:9b:f5: c9:c8:a6:b4:69:03:f9:8b:f6:cf:9e:2b:10:8b:ce:4f:13:bf: de:61:d1:7e:f9:6f:08:8b:fe:7a:83:fb:85:c4:35:f4:fb:f5: 1e:5f:c7:fb:6f:de:4f:06:5c:28:4e:b6:b0:4a:aa:40:17:61: 34:99:88:97:0d:44:21:6e:80:21:36:1d:63:b1:62:a2:34:c3: d3:71:e1:67:11:24:37:ef:72:62:d1:45:02:db:63:a3:de:68: 06:af:2d:2b:5e:a3:63:68:71:f9:aa:f7:0d:73:e8:f1:5d:ae: c6:27:95:e2:f6:4e:ed:ad:e3:45:e6:ac:41:ee:62:59:23:3d: b1:34:ca:6b:4e:9a:b7:71:b9:7b:65:fa:cd:fa:2d:e6:d5:66: ca:ed:b8:04:5b:8c:d0:a4:1f:32:51:bd:1b:26:80:39:5f:7f: aa:d6:02:83:3d:de:45:05:7d:d4:78:d3:c7:70:77:81:ca:9f: 15:68:fe:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA4RDkxMTAvBgNVBAUTKDJCQjdFNkY2NEU4OTNEOTEzMDRBOEIyNTg4NjAzNTBE Njc1MDU0QUQwHhcNMjYwNDE3MDcyNjE5WhcNMjYwNDI0MDcyNjE5WjAYMRYwFAYD VQQDEw02OWUxZTA5Yy0xOGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0RatHrCAbhWjfFrsgs7JUDvoSrO9fzjxNdtAOqGqFYTrGGhDnD/bFA3fHyYL Ol1+ohZ+AL8nSR6AYlk5vaG4wtlIL2mhAyyQ6Whz1a6gjUFJWl0WTxV0B7mIKRu9 d1cw4IldRQrs5FN3zQq3k6e76rz2qXK23FTaxHbF61ti8r35z+A//PMI7ILcp4QG kkdih0gFnQAhcXXvxivYoisK0wt55Ys5QIzY0MBdfjLqRnehWexpEnPIgvCGkkoM 6LMGUBzyNlsQjaLDbxSnbLkFMX2pRBW82xGLtXnRQLBIntTpbO3h6cmq6XiuiOI2 VZ5qQbNxXURivSSbCcbUKhxqvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFDii9Ck salw1Jo55APdQUaGO4r4MB8GA1UdIwQYMBaAFCu35vZOiT2RMEqLJYhgNQ1nUFSt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDhEOS8wRkQ2QUI1Mjgx NzExMUYwOUIxMEFFNTZDNEY5QUUwMi9LN2ZtOWs2SlBaRXdTb3NsaUdBMURXZFFW SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s3Zm05azZKUFpFd1Nvc2xpR0ExRFdkUVZLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDhEOS8wRkQ2QUI1MjgxNzExMUYwOUIxMEFFNTZDNEY5QUUwMi9LN2ZtOWs2SlBa RXdTb3NsaUdBMURXZFFWSzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPL2gpFbWQgA8K9+mWfNxehJ84KjYnCEqKVB1rnUSq7WiCsCdnSj9poot9Szm qvjKA02ETry1QTHrNeaeLAflUaNSGdxA6Zv1ycimtGkD+Yv2z54rEIvOTxO/3mHR fvlvCIv+eoP7hcQ19Pv1Hl/H+2/eTwZcKE62sEqqQBdhNJmIlw1EIW6AITYdY7Fi ojTD03HhZxEkN+9yYtFFAttjo95oBq8tK16jY2hx+ar3DXPo8V2uxieV4vZO7a3j ReasQe5iWSM9sTTKa06at3G5e2X6zfot5tVmyu24BFuM0KQfMlG9GyaAOV9/qtYC gz3eRQV91HjTx3B3gcqfFWj+0w== -----END CERTIFICATE-----Generated at Sun Apr 19 08:28:59 2026 by rpki-client