$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.mft File: km2a3G-4c9dlu0EicoDB8RhG7hc.mft (raw, json) Hash identifier: CmXRNgAh7QI+vhz++08tL9j0mMrik+kncm9wL7JVXQg= Subject key identifier: F2:C6:F5:2B:F4:06:CC:0C:8F:3C:73:A2:DE:FA:34:0D:4F:4E:BC:BE Authority key identifier: 92:6D:9A:DC:6F:B8:73:D7:65:BB:41:22:72:80:C1:F1:18:46:EE:17 Certificate issuer: /CN=A91EBA0E/serialNumber=926D9ADC6FB873D765BB41227280C1F11846EE17 Certificate serial: 0260 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/km2a3G-4c9dlu0EicoDB8RhG7hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.mft Manifest number: 024F Signing time: Sun 05 Apr 2026 02:01:55 +0000 Manifest this update: Sun 05 Apr 2026 02:01:55 +0000 Manifest next update: Sun 12 Apr 2026 02:01:55 +0000 Files and hashes: 1: km2a3G-4c9dlu0EicoDB8RhG7hc.crl (hash: 4TaDaSkrlmqRj7/W4DS8mJBcTcEHzE7aq8ys86yCBxA=) 2: 1B5E26228FA911EF90043A7CC4F9AE02.roa (hash: fY7nCOHqK93oVhC5DmscMwb888TwpZD1ZSvnmNHDxkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.crl rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/km2a3G-4c9dlu0EicoDB8RhG7hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 608 (0x260) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA0E, serialNumber=926D9ADC6FB873D765BB41227280C1F11846EE17 Validity Not Before: Apr 5 02:01:55 2026 GMT Not After : Apr 12 02:01:55 2026 GMT Subject: CN=69d1c293-2e6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e3:ac:50:5c:a0:eb:c1:b7:d2:d2:19:21:55: 9a:c2:44:1b:de:e6:98:c0:a2:40:fa:2d:e7:bd:1a: 09:55:a0:3a:07:a3:58:c5:23:ad:ed:60:66:ab:25: 5d:f7:97:93:7d:a3:7b:bc:37:b5:c8:ca:7c:40:47: 48:94:55:df:98:ec:9e:4e:32:21:77:07:3f:43:6f: 77:9b:17:e0:23:74:4e:78:34:69:95:5c:9d:af:99: da:ab:c1:26:cd:a5:35:6a:25:9f:21:21:53:c7:45: cc:b6:32:8c:9e:a1:f8:bf:27:e2:bf:2d:ae:91:06: 47:c4:fa:0c:42:cc:f2:cd:db:41:eb:0f:0b:93:6e: 60:c3:e1:ca:bb:db:70:b1:67:5a:77:95:a1:83:24: 2e:11:67:c3:43:63:1b:4e:6e:25:20:b7:6c:65:64: 24:36:71:90:b0:a7:cc:75:d3:cc:1f:3a:ed:0f:34: fc:7e:4f:ef:ff:5b:81:62:5e:66:88:52:b6:a0:65: 41:c2:3a:c1:a0:83:0b:97:94:ca:9a:5b:0d:f6:ce: ee:06:93:20:f4:d7:f3:34:71:89:b8:33:ac:17:6d: e3:08:26:01:08:f8:d9:d2:98:af:24:50:12:8f:34: fd:4f:ba:4c:68:ab:03:22:ac:f7:21:a1:73:3a:62: 78:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C6:F5:2B:F4:06:CC:0C:8F:3C:73:A2:DE:FA:34:0D:4F:4E:BC:BE X509v3 Authority Key Identifier: keyid:92:6D:9A:DC:6F:B8:73:D7:65:BB:41:22:72:80:C1:F1:18:46:EE:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/km2a3G-4c9dlu0EicoDB8RhG7hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA0E/DBBED206C00511EDA255FA10C4F9AE02/km2a3G-4c9dlu0EicoDB8RhG7hc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:6b:96:83:54:d3:44:8f:ff:1c:7b:d8:1f:83:81:b3:63:89: a2:cc:02:e0:eb:d4:34:02:37:a8:88:ba:ec:3c:96:9d:ea:6c: b3:f3:ee:98:6c:2a:f5:e5:e4:47:e7:76:ac:c2:19:cb:95:1b: 8e:87:58:35:0b:0f:08:9c:88:2a:06:1a:86:41:69:63:ae:b7: 62:31:a1:77:9a:42:31:13:fc:25:cd:ad:9e:15:d4:12:cb:c6: ea:2c:9e:42:6e:a3:37:46:0b:d5:d1:0a:21:25:3a:83:a7:be: 96:c8:2a:65:ba:aa:32:00:e7:28:e3:ee:55:68:ab:3a:64:8b: 01:21:af:6e:38:1b:78:5d:5f:55:b9:9a:de:3c:66:2c:70:b6: bb:cb:1a:71:0d:4b:17:85:1e:cf:41:37:1f:c5:c0:2f:66:54: df:75:27:a8:a7:51:7b:64:9f:aa:f2:de:05:f8:3f:2b:28:0e: 27:1f:5a:c6:da:22:a0:5c:99:5a:f3:86:6f:d6:75:87:e8:0e: c8:83:2e:1b:6c:3c:b6:88:fc:c2:cb:16:5f:ce:8a:9d:2d:d3: eb:5e:29:f7:15:2f:49:f1:f4:e4:5e:f8:0c:5a:c6:7b:c9:c4: b9:52:21:77:eb:2f:c8:2a:4b:3e:40:05:23:76:db:b3:67:b1: 4a:95:6d:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBMEUxMTAvBgNVBAUTKDkyNkQ5QURDNkZCODczRDc2NUJCNDEyMjcyODBDMUYx MTg0NkVFMTcwHhcNMjYwNDA1MDIwMTU1WhcNMjYwNDEyMDIwMTU1WjAYMRYwFAYD VQQDEw02OWQxYzI5My0yZTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsuOsUFyg68G30tIZIVWawkQb3uaYwKJA+i3nvRoJVaA6B6NYxSOt7WBmqyVd 95eTfaN7vDe1yMp8QEdIlFXfmOyeTjIhdwc/Q293mxfgI3ROeDRplVydr5naq8Em zaU1aiWfISFTx0XMtjKMnqH4vyfivy2ukQZHxPoMQszyzdtB6w8Lk25gw+HKu9tw sWdad5WhgyQuEWfDQ2MbTm4lILdsZWQkNnGQsKfMddPMHzrtDzT8fk/v/1uBYl5m iFK2oGVBwjrBoIMLl5TKmlsN9s7uBpMg9NfzNHGJuDOsF23jCCYBCPjZ0pivJFAS jzT9T7pMaKsDIqz3IaFzOmJ4qQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPLG9Sv0 BswMjzxzot76NA1PTry+MB8GA1UdIwQYMBaAFJJtmtxvuHPXZbtBInKAwfEYRu4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkEwRS9EQkJFRDIwNkMw MDUxMUVEQTI1NUZBMTBDNEY5QUUwMi9rbTJhM0ctNGM5ZGx1MEVpY29EQjhSaEc3 aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ttMmEzRy00YzlkbHUwRWljb0RCOFJoRzdoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkEwRS9EQkJFRDIwNkMwMDUxMUVEQTI1NUZBMTBDNEY5QUUwMi9rbTJhM0ctNGM5 ZGx1MEVpY29EQjhSaEc3aGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABGuWg1TTRI//HHvYH4OBs2OJoswC4OvUNAI3qIi67DyWnepss/PumGwq9eXk R+d2rMIZy5UbjodYNQsPCJyIKgYahkFpY663YjGhd5pCMRP8Jc2tnhXUEsvG6iye Qm6jN0YL1dEKISU6g6e+lsgqZbqqMgDnKOPuVWirOmSLASGvbjgbeF1fVbma3jxm LHC2u8sacQ1LF4Uez0E3H8XAL2ZU33UnqKdRe2SfqvLeBfg/KygOJx9axtoioFyZ WvOGb9Z1h+gOyIMuG2w8toj8wssWX86KnS3T614p9xUvSfH05F74DFrGe8nEuVIh d+svyCpLPkAFI3bbs2exSpVtsA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:38:40 2026 by rpki-client