$ rpki-client -vvf rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft File: kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft (raw, json) Hash identifier: zMIm/nzthbr+3xSNYTpThBqV29D2RT65LHraYl84kDo= Subject key identifier: D9:E4:E4:BB:F0:18:91:51:C3:54:48:BA:AA:88:F1:99:69:1B:8A:61 Authority key identifier: 91:F4:93:9A:BA:ED:40:FA:36:6E:CC:76:35:9D:CA:2B:CB:68:CE:47 Certificate issuer: /CN=A9115CB5/serialNumber=91F4939ABAED40FA366ECC76359DCA2BCB68CE47 Certificate serial: 05F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft Manifest number: 05E8 Signing time: Sat 04 Apr 2026 22:44:23 +0000 Manifest this update: Sat 04 Apr 2026 22:44:22 +0000 Manifest next update: Sat 11 Apr 2026 22:44:22 +0000 Files and hashes: 1: kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl (hash: YMid08U0bEiu4oGdEyboaMWOSRuBuyHkkRua1fYTUt0=) 2: C41538940B4711EC99840631C4F9AE02.roa (hash: V6JHUzOLGDXoFaxiTUAua6l+IvXzjhCqWaQC1lRJApU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 22:44:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1526 (0x5f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115CB5, serialNumber=91F4939ABAED40FA366ECC76359DCA2BCB68CE47 Validity Not Before: Apr 4 22:44:22 2026 GMT Not After : Apr 11 22:44:22 2026 GMT Subject: CN=69d19447-74de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:31:7e:47:aa:fa:b8:8c:bd:ce:38:eb:c6:da: 8a:b2:43:6a:63:88:18:21:4b:ab:a9:95:2e:6d:f6: 2e:42:eb:97:52:b2:1b:e4:01:ac:c2:50:28:14:ac: d4:73:79:4d:f8:38:13:0f:b0:92:82:14:60:f7:ff: a4:81:3e:25:bb:1c:66:91:c4:57:b1:8c:7b:22:aa: 4d:16:b3:1b:c8:94:e8:ea:ee:c1:d6:3f:84:e0:69: 31:70:14:96:64:05:9d:26:93:7b:a2:da:d0:4d:69: 69:a8:19:f9:b4:7d:f8:5d:cc:fa:81:60:f9:1d:d0: d1:ba:e5:0c:b2:ef:3f:02:aa:5c:07:1e:15:78:73: 26:af:fa:1c:4d:22:7f:89:02:28:bc:f4:23:7e:ae: 0d:7c:2f:44:9a:a4:1e:34:18:62:67:02:ca:5b:a6: ef:4e:39:5b:24:d6:7f:6d:78:9f:c0:0f:1f:b7:d4: a1:91:02:20:a6:c2:0f:71:46:3c:df:16:1a:36:ce: 04:4d:19:ac:7d:de:f7:07:2b:bd:7e:69:9a:93:ba: f1:4f:02:3a:7f:05:c7:18:1b:37:d1:ae:b6:0d:8b: 0c:f4:ee:b2:db:f3:8a:73:7f:0e:0b:fc:70:53:2a: 3d:49:fd:5c:28:c2:71:60:95:74:b4:8e:f5:44:d3: e5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E4:E4:BB:F0:18:91:51:C3:54:48:BA:AA:88:F1:99:69:1B:8A:61 X509v3 Authority Key Identifier: keyid:91:F4:93:9A:BA:ED:40:FA:36:6E:CC:76:35:9D:CA:2B:CB:68:CE:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfSTmrrtQPo2bsx2NZ3KK8tozkc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115CB5/D9FD2DFEF37F11EBB283E74AC4F9AE02/kfSTmrrtQPo2bsx2NZ3KK8tozkc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b1:e3:ff:7d:f6:5e:06:29:3c:03:0a:7b:8e:de:a6:d0:34: 46:23:c1:5d:a5:c8:37:e1:2a:1d:8a:66:51:8d:04:42:8f:07: 44:cd:ed:40:a8:e5:9d:ef:b3:fd:d8:64:e5:75:4a:03:8c:c9: 1d:2a:4c:8e:cd:f8:5a:15:d2:c1:d5:ad:c1:40:27:78:ae:b3: bd:25:f5:a7:1c:50:4b:7a:00:25:55:97:ba:99:0a:b8:60:dc: cb:c0:01:be:9e:8b:d9:55:41:a4:64:ac:c2:33:bd:d0:fa:9c: e8:25:66:aa:e8:4a:af:44:c2:92:cd:67:bd:c2:a9:cc:cf:56: c6:ed:e4:c7:33:eb:3a:2d:95:d5:68:9d:57:e4:fa:bc:e8:29: cd:a1:70:db:df:1c:cf:63:fc:c5:c9:17:c0:70:81:0a:c5:30: 5a:6d:93:c2:3a:24:df:89:a2:70:70:a5:c6:84:ac:92:bb:26: 98:d8:db:d1:95:24:da:d2:aa:ff:f0:9c:8b:e1:2b:50:7b:aa: a5:1f:87:80:e5:76:11:a2:49:cd:b0:a4:e7:9b:6a:eb:df:8a: 7e:a3:8b:01:27:f7:b6:a9:ae:41:ce:00:c1:22:d5:a1:85:74: 4f:9a:5e:6b:7f:b1:06:ce:2a:de:58:1b:a6:8d:80:31:ed:51: 7b:cc:67:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVDQjUxMTAvBgNVBAUTKDkxRjQ5MzlBQkFFRDQwRkEzNjZFQ0M3NjM1OURDQTJC Q0I2OENFNDcwHhcNMjYwNDA0MjI0NDIyWhcNMjYwNDExMjI0NDIyWjAYMRYwFAYD VQQDEw02OWQxOTQ0Ny03NGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDF+R6r6uIy9zjjrxtqKskNqY4gYIUurqZUubfYuQuuXUrIb5AGswlAoFKzU c3lN+DgTD7CSghRg9/+kgT4luxxmkcRXsYx7IqpNFrMbyJTo6u7B1j+E4GkxcBSW ZAWdJpN7otrQTWlpqBn5tH34Xcz6gWD5HdDRuuUMsu8/AqpcBx4VeHMmr/ocTSJ/ iQIovPQjfq4NfC9EmqQeNBhiZwLKW6bvTjlbJNZ/bXifwA8ft9ShkQIgpsIPcUY8 3xYaNs4ETRmsfd73Byu9fmmak7rxTwI6fwXHGBs30a62DYsM9O6y2/OKc38OC/xw Uyo9Sf1cKMJxYJV0tI71RNPlfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNnk5Lvw GJFRw1RIuqqI8ZlpG4phMB8GA1UdIwQYMBaAFJH0k5q67UD6Nm7MdjWdyivLaM5H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUNCNS9EOUZEMkRGRUYz N0YxMUVCQjI4M0U3NEFDNEY5QUUwMi9rZlNUbXJydFFQbzJic3gyTlozS0s4dG96 a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmU1RtcnJ0UVBvMmJzeDJOWjNLSzh0b3prYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUNCNS9EOUZEMkRGRUYzN0YxMUVCQjI4M0U3NEFDNEY5QUUwMi9rZlNUbXJydFFQ bzJic3gyTlozS0s4dG96a2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALrHj/332XgYpPAMKe47eptA0RiPBXaXIN+EqHYpmUY0EQo8HRM3tQKjlne+z /dhk5XVKA4zJHSpMjs34WhXSwdWtwUAneK6zvSX1pxxQS3oAJVWXupkKuGDcy8AB vp6L2VVBpGSswjO90Pqc6CVmquhKr0TCks1nvcKpzM9Wxu3kxzPrOi2V1WidV+T6 vOgpzaFw298cz2P8xckXwHCBCsUwWm2Twjok34micHClxoSskrsmmNjb0ZUk2tKq //Cci+ErUHuqpR+HgOV2EaJJzbCk55tq69+KfqOLASf3tqmuQc4AwSLVoYV0T5pe a3+xBs4q3lgbpo2AMe1Re8xnVw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:40:17 2026 by rpki-client