$ rpki-client -vvf rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft File: kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft (raw, json) Hash identifier: VrwYcTwqB5b0aa2vA2kEUWoxWt8lBN8RP1I8gtPeAXE= Subject key identifier: 74:66:60:D7:F6:65:53:83:79:09:BB:0F:60:7B:0F:B2:8F:C7:C7:3D Authority key identifier: 91:0F:2F:41:40:8E:13:DA:ED:7C:21:DC:47:2D:C5:C5:8C:45:88:36 Certificate issuer: /CN=A917408F/serialNumber=910F2F41408E13DAED7C21DC472DC5C58C458836 Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft Manifest number: FB Signing time: Sun 05 Apr 2026 05:40:24 +0000 Manifest this update: Sun 05 Apr 2026 05:40:24 +0000 Manifest next update: Sun 12 Apr 2026 05:40:24 +0000 Files and hashes: 1: kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl (hash: XO8CDmbGF4BvLrs4dUsxJyb5AB+b4e1sRgzR4pXrmsA=) 2: 9CEF2622B76E11EF8FCC9767C4F9AE02.roa (hash: BT5lGoepooMPklXWzsmxnmANaCteYyqvqzOaxtbVyhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:40:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917408F, serialNumber=910F2F41408E13DAED7C21DC472DC5C58C458836 Validity Not Before: Apr 5 05:40:24 2026 GMT Not After : Apr 12 05:40:24 2026 GMT Subject: CN=69d1f5c8-b7ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d9:29:ee:e0:08:6b:ac:6a:a7:2c:6e:e6:1c: 4b:da:b7:55:bf:65:ed:02:f0:3e:84:dd:af:1d:01: fb:58:ba:3d:54:98:61:1e:8f:53:34:55:d2:99:7a: c2:27:f7:b9:30:58:f4:6c:96:1d:29:23:fd:15:bb: e2:e1:fa:72:2c:92:85:fa:3a:29:0e:cb:50:03:78: fa:c1:c3:e1:af:34:00:2d:96:d7:5d:b9:2b:d7:8a: 2f:74:c6:34:99:a7:b5:43:83:2a:fd:84:07:04:b0: bc:d7:bb:ba:a1:49:31:10:3e:8a:38:14:50:ac:06: 3a:6d:47:cd:5a:64:b6:0e:60:a8:e4:87:d7:8b:52: 73:39:0e:1c:7e:f4:b8:fd:1d:c6:6e:86:1e:f5:73: fc:1c:4b:e3:bb:7c:0c:97:62:74:fd:ed:24:4d:dc: 08:ae:69:1a:0d:f7:b5:1b:e6:29:dc:28:9b:bf:33: e0:b7:61:cc:ad:ee:c0:dd:73:15:0a:7c:ab:25:f3: 4e:cf:c4:1e:db:c5:ef:a1:ae:ea:29:f0:10:ab:3f: 14:ae:a1:ee:db:fb:e4:3d:d5:22:98:cd:fd:43:14: 59:cb:48:01:ce:81:51:a0:4b:82:25:ee:10:89:4b: 8c:d4:0f:10:16:38:36:14:ee:34:ca:b5:95:02:3f: bf:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:66:60:D7:F6:65:53:83:79:09:BB:0F:60:7B:0F:B2:8F:C7:C7:3D X509v3 Authority Key Identifier: keyid:91:0F:2F:41:40:8E:13:DA:ED:7C:21:DC:47:2D:C5:C5:8C:45:88:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:32:4c:69:3f:23:f7:80:9f:3a:ea:17:84:23:44:93:6b:e5: e7:8f:44:ff:bb:fd:97:54:4b:f7:c4:66:aa:51:28:64:0c:f1: 22:5c:b8:6f:f0:8d:04:f6:db:b2:05:d1:2a:67:97:3b:ab:f3: b8:1a:db:e5:ef:6d:13:9f:96:75:20:dd:fb:db:7c:4a:17:28: 36:bb:94:9c:9c:ee:7f:e5:d5:1d:df:22:7c:86:84:98:11:5d: 13:41:f5:b4:9b:cc:4a:40:43:2c:5e:cc:b5:80:4b:5c:9a:c8: fc:56:95:d0:10:63:61:14:20:34:70:16:6e:9d:28:91:f9:1b: c4:31:b6:ed:5b:9b:04:95:00:30:a2:74:88:08:db:7b:cd:c9: d1:d6:42:f2:31:c1:42:22:93:0c:c7:cc:9a:ef:cd:17:87:af: c5:f9:a6:62:af:b1:c1:7d:6a:c9:31:15:cc:9b:37:cf:f2:fa: d9:fc:12:77:f0:a3:f4:e6:20:a6:03:05:c7:d0:8d:39:12:98: 69:7a:53:48:5d:96:93:56:d4:f8:d6:da:15:94:00:45:b8:4f: 21:8c:e2:28:8b:5c:ab:84:7b:e5:4d:78:ea:32:55:c4:04:54: 14:a7:88:9d:9b:9c:48:11:e0:9d:fc:f5:40:a0:e2:41:44:d9: 4e:82:e2:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQwOEYxMTAvBgNVBAUTKDkxMEYyRjQxNDA4RTEzREFFRDdDMjFEQzQ3MkRDNUM1 OEM0NTg4MzYwHhcNMjYwNDA1MDU0MDI0WhcNMjYwNDEyMDU0MDI0WjAYMRYwFAYD VQQDEw02OWQxZjVjOC1iN2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3dkp7uAIa6xqpyxu5hxL2rdVv2XtAvA+hN2vHQH7WLo9VJhhHo9TNFXSmXrC J/e5MFj0bJYdKSP9Fbvi4fpyLJKF+jopDstQA3j6wcPhrzQALZbXXbkr14ovdMY0 mae1Q4Mq/YQHBLC817u6oUkxED6KOBRQrAY6bUfNWmS2DmCo5IfXi1JzOQ4cfvS4 /R3GboYe9XP8HEvju3wMl2J0/e0kTdwIrmkaDfe1G+Yp3CibvzPgt2HMre7A3XMV CnyrJfNOz8Qe28Xvoa7qKfAQqz8UrqHu2/vkPdUimM39QxRZy0gBzoFRoEuCJe4Q iUuM1A8QFjg2FO40yrWVAj+/HQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHRmYNf2 ZVODeQm7D2B7D7KPx8c9MB8GA1UdIwQYMBaAFJEPL0FAjhPa7Xwh3EctxcWMRYg2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDA4Ri8xNkNEOTg1OEI3 NkUxMUVGQUNGMEY4NjVDNEY5QUUwMi9rUTh2UVVDT0U5cnRmQ0hjUnkzRnhZeEZp RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tROHZRVUNPRTlydGZDSGNSeTNGeFl4RmlEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDA4Ri8xNkNEOTg1OEI3NkUxMUVGQUNGMEY4NjVDNEY5QUUwMi9rUTh2UVVDT0U5 cnRmQ0hjUnkzRnhZeEZpRFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQDJMaT8j94CfOuoXhCNEk2vl549E/7v9l1RL98RmqlEoZAzxIly4b/CNBPbb sgXRKmeXO6vzuBrb5e9tE5+WdSDd+9t8ShcoNruUnJzuf+XVHd8ifIaEmBFdE0H1 tJvMSkBDLF7MtYBLXJrI/FaV0BBjYRQgNHAWbp0okfkbxDG27VubBJUAMKJ0iAjb e83J0dZC8jHBQiKTDMfMmu/NF4evxfmmYq+xwX1qyTEVzJs3z/L62fwSd/Cj9OYg pgMFx9CNORKYaXpTSF2Wk1bU+NbaFZQARbhPIYziKItcq4R75U146jJVxARUFKeI nZucSBHgnfz1QKDiQUTZToLiow== -----END CERTIFICATE-----Generated at Sun Apr 5 19:51:15 2026 by rpki-client