$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft File: K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft (raw, json) Hash identifier: G+aHaiwN+cqQMknpzxeEJNPlEfTMK+dbEJEBuzBYwvo= Subject key identifier: 15:9F:E6:3E:E2:01:CC:9B:A1:EC:97:AC:7C:15:6C:6D:AA:DD:51:8B Authority key identifier: 2B:CA:12:D4:6D:46:11:ED:6E:F1:88:6F:36:44:68:DF:3D:02:ED:E5 Certificate issuer: /CN=A91AE25A/serialNumber=2BCA12D46D4611ED6EF1886F364468DF3D02EDE5 Certificate serial: 01F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft Manifest number: 01ED Signing time: Sun 05 Apr 2026 02:49:26 +0000 Manifest this update: Sun 05 Apr 2026 02:49:26 +0000 Manifest next update: Sun 12 Apr 2026 02:49:26 +0000 Files and hashes: 1: K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl (hash: bNNfHwdbMF/XtASr/GdoCtHQltsjTNoSd9BS2VJwKwU=) 2: AB366D1C409611EE92C55F40C4F9AE02.roa (hash: Lf5S48RM+H6jGhhi+lkOyHY5YBcAJOA0fAYnMQrcmBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:49:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 497 (0x1f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE25A, serialNumber=2BCA12D46D4611ED6EF1886F364468DF3D02EDE5 Validity Not Before: Apr 5 02:49:26 2026 GMT Not After : Apr 12 02:49:26 2026 GMT Subject: CN=69d1cdb6-61ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cf:93:28:4b:7e:ff:5e:0b:48:5a:c3:57:8e: 4c:33:05:59:17:bf:74:5f:7e:cf:6a:cf:1b:2a:21: 35:c4:05:8d:85:bc:6f:4f:a3:bc:00:4d:b8:9f:dc: 50:8a:db:93:15:2c:c4:bf:aa:77:e1:63:6e:5a:4d: 35:2b:73:7f:65:37:18:22:87:f8:4b:c1:5d:95:56: ec:c2:08:c5:0d:a9:fb:bb:a5:a6:12:e3:8d:0f:78: 74:ac:ce:06:5f:58:1a:0f:8c:ee:33:79:10:58:d3: 93:4d:df:80:71:69:bb:ca:39:1d:ff:76:07:94:fe: 47:4c:81:26:43:7d:7d:5b:aa:05:4a:7a:fd:4e:c7: 1a:34:50:83:92:0e:42:88:ec:10:01:9e:9c:71:77: 4a:34:24:6b:90:26:e7:5d:12:5d:b9:79:0d:3e:5a: 3b:6a:73:80:9b:28:cc:80:6a:bf:4b:e0:28:ce:e3: ad:fb:ee:fb:df:7b:5e:ae:6b:81:f5:6d:82:20:63: a0:ff:1f:da:fb:1c:88:a1:4f:41:fa:84:11:1f:95: 50:ea:08:3f:97:89:ee:dc:69:78:0b:11:2a:19:bd: d3:d1:c3:d0:67:ab:cc:60:e0:70:17:fa:cf:b0:b3: 3d:45:5d:dd:a2:62:de:ac:24:9c:81:68:ec:1e:7d: ea:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:9F:E6:3E:E2:01:CC:9B:A1:EC:97:AC:7C:15:6C:6D:AA:DD:51:8B X509v3 Authority Key Identifier: keyid:2B:CA:12:D4:6D:46:11:ED:6E:F1:88:6F:36:44:68:DF:3D:02:ED:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8oS1G1GEe1u8YhvNkRo3z0C7eU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE25A/2C96F508409611EEB46E6F3FC4F9AE02/K8oS1G1GEe1u8YhvNkRo3z0C7eU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:f9:0c:fc:d6:02:b2:18:1c:a3:ec:e2:35:06:24:0f:34:30: 04:e4:da:33:b5:f2:f2:9a:f7:9f:07:90:4c:37:15:e9:41:6f: a6:66:e2:a4:cc:9b:9b:5a:d8:48:cc:30:4c:f5:df:d5:5b:2d: f1:aa:b1:af:04:e0:35:a5:09:b0:82:65:b7:d5:c2:e5:5c:28: 34:3d:a4:55:64:91:3b:5d:2d:ac:53:12:d1:75:4c:80:1d:df: f3:b7:fb:69:8b:2f:fb:ba:ae:47:e3:ba:23:bb:f7:1b:82:c3: cf:e8:53:a8:31:b2:d4:01:e3:c8:ad:44:83:c2:5e:18:b7:40: 6e:15:d8:55:1d:75:2b:a2:1b:23:df:bb:27:65:ad:35:ef:84: d0:76:37:3f:8c:05:b4:2c:bb:26:7b:6b:8d:5b:e4:92:17:84: 54:b0:0b:3c:d2:26:d7:4f:bc:ca:69:d1:fe:4a:ad:ce:f8:12: 40:bc:6d:57:96:70:7b:9f:14:e8:4a:ea:91:1f:1c:3d:dc:fb: 18:d6:48:75:43:44:92:b8:ad:00:25:eb:82:96:69:0f:65:eb: 8a:60:95:c9:f5:77:b1:49:03:35:a7:2e:1f:55:43:f8:1b:45: 66:3c:86:a3:60:9a:85:94:7a:ea:3f:56:c4:01:cf:53:19:ac: de:f7:af:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUyNUExMTAvBgNVBAUTKDJCQ0ExMkQ0NkQ0NjExRUQ2RUYxODg2RjM2NDQ2OERG M0QwMkVERTUwHhcNMjYwNDA1MDI0OTI2WhcNMjYwNDEyMDI0OTI2WjAYMRYwFAYD VQQDEw02OWQxY2RiNi02MWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAts+TKEt+/14LSFrDV45MMwVZF790X37Pas8bKiE1xAWNhbxvT6O8AE24n9xQ ituTFSzEv6p34WNuWk01K3N/ZTcYIof4S8FdlVbswgjFDan7u6WmEuOND3h0rM4G X1gaD4zuM3kQWNOTTd+AcWm7yjkd/3YHlP5HTIEmQ319W6oFSnr9TscaNFCDkg5C iOwQAZ6ccXdKNCRrkCbnXRJduXkNPlo7anOAmyjMgGq/S+AozuOt++7733termuB 9W2CIGOg/x/a+xyIoU9B+oQRH5VQ6gg/l4nu3Gl4CxEqGb3T0cPQZ6vMYOBwF/rP sLM9RV3domLerCScgWjsHn3qbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBWf5j7i AcyboeyXrHwVbG2q3VGLMB8GA1UdIwQYMBaAFCvKEtRtRhHtbvGIbzZEaN89Au3l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTI1QS8yQzk2RjUwODQw OTYxMUVFQjQ2RTZGM0ZDNEY5QUUwMi9LOG9TMUcxR0VlMXU4WWh2TmtSbzN6MEM3 ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s4b1MxRzFHRWUxdThZaHZOa1JvM3owQzdlVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTI1QS8yQzk2RjUwODQwOTYxMUVFQjQ2RTZGM0ZDNEY5QUUwMi9LOG9TMUcxR0Vl MXU4WWh2TmtSbzN6MEM3ZVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoPkM/NYCshgco+ziNQYkDzQwBOTaM7Xy8pr3nweQTDcV6UFvpmbipMybm1rY SMwwTPXf1Vst8aqxrwTgNaUJsIJlt9XC5VwoND2kVWSRO10trFMS0XVMgB3f87f7 aYsv+7quR+O6I7v3G4LDz+hTqDGy1AHjyK1Eg8JeGLdAbhXYVR11K6IbI9+7J2Wt Ne+E0HY3P4wFtCy7JntrjVvkkheEVLALPNIm10+8ymnR/kqtzvgSQLxtV5Zwe58U 6ErqkR8cPdz7GNZIdUNEkritACXrgpZpD2XrimCVyfV3sUkDNacuH1VD+BtFZjyG o2CahZR66j9WxAHPUxms3vevMQ== -----END CERTIFICATE-----Generated at Sun Apr 5 19:43:02 2026 by rpki-client