$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.mft File: Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.mft (raw, json) Hash identifier: K4f0a1eiIFpIJy/f9gPK63pVzO7LTiSyIp4zxKk9qP0= Subject key identifier: 6A:8C:58:16:D8:97:09:2F:E2:B2:BD:CA:45:F1:E3:09:93:C2:42:36 Authority key identifier: 2B:3E:E4:4E:A9:CB:5B:81:29:6B:B6:7D:F0:F5:46:F8:AA:C8:A4:B4 Certificate issuer: /CN=A91F4F00/serialNumber=2B3EE44EA9CB5B81296BB67DF0F546F8AAC8A4B4 Certificate serial: 082E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.mft Manifest number: 0823 Signing time: Sat 04 Apr 2026 20:49:55 +0000 Manifest this update: Sat 04 Apr 2026 20:49:55 +0000 Manifest next update: Sat 11 Apr 2026 20:49:55 +0000 Files and hashes: 1: Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.crl (hash: FRWsloiBe8uoRv9wjylyG0+wo+79/ucmVpnVhWRnOmI=) 2: E7BAB834B5F511F0B410AD78C4F9AE02.roa (hash: uxSAnvR6R6IbVNUOgDxpWGpdmYbvPquJW1vjjs3knts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.crl rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2094 (0x82e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4F00, serialNumber=2B3EE44EA9CB5B81296BB67DF0F546F8AAC8A4B4 Validity Not Before: Apr 4 20:49:55 2026 GMT Not After : Apr 11 20:49:55 2026 GMT Subject: CN=69d17973-9a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:26:85:58:35:b4:90:8d:e7:5d:12:83:94:16: 41:5c:fb:78:a0:1b:62:b2:82:11:26:77:89:f8:a8: 6c:57:16:a9:df:f9:1d:14:35:c7:93:55:8b:5e:d4: 4a:d5:4f:29:81:8d:d3:92:56:dd:2c:41:72:e0:7f: b8:ad:b0:18:dc:b9:26:10:ad:60:a9:98:df:48:74: ac:48:40:0c:90:ca:9e:50:04:1b:47:68:52:8b:d1: 81:ed:a2:51:b4:08:53:2c:18:71:da:3f:d0:86:00: d3:e4:05:07:c4:20:1d:6c:1b:fe:6c:73:40:e7:c2: d6:59:9f:b1:b5:e4:11:76:84:ed:fb:22:46:ff:b5: 38:d5:f7:73:ce:f6:fd:b1:b9:2b:c4:e3:ec:64:42: 7e:6e:88:b1:5c:cb:6f:5f:73:0c:d2:2d:a6:da:89: 3e:eb:c9:31:4c:1e:77:5d:8b:09:87:ab:3f:e5:b9: 6f:57:a8:83:86:9b:df:81:51:5e:2c:3f:ab:61:0c: 58:4e:6c:4e:b7:b3:30:15:23:86:d5:cb:25:6b:3b: 2f:19:f1:91:ce:d3:5f:39:17:6c:37:7b:9d:49:5e: 7e:b4:72:87:1c:02:73:9e:f2:59:78:75:f7:ee:e9: 4e:b5:69:43:62:39:71:27:80:77:43:8d:00:80:96: c8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:8C:58:16:D8:97:09:2F:E2:B2:BD:CA:45:F1:E3:09:93:C2:42:36 X509v3 Authority Key Identifier: keyid:2B:3E:E4:4E:A9:CB:5B:81:29:6B:B6:7D:F0:F5:46:F8:AA:C8:A4:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:a0:f7:29:1f:e0:94:b2:2a:f3:15:0b:c2:f6:89:c8:fa:a3: 1a:64:86:69:a4:46:ce:84:a8:1e:eb:d4:ce:c8:05:cf:da:12: 2f:b6:bc:b8:4e:4f:7a:89:c4:2a:8a:56:d3:0d:10:3f:de:c4: c8:4d:08:20:37:35:5b:38:04:b4:88:c6:3b:3f:ff:3e:2d:15: 09:98:7e:ca:e4:ec:03:29:12:e4:1c:db:e0:56:30:f8:9f:c7: d9:79:7c:41:6c:ca:18:40:06:3a:20:59:45:1f:83:37:fd:73: 33:c5:7b:d6:4d:99:64:0b:4d:40:97:d5:ad:b1:eb:eb:48:8e: 52:25:2f:71:bc:c3:65:92:ca:73:dc:83:e3:52:8a:87:59:ad: 75:30:de:ef:a9:46:ea:54:1e:8a:eb:f0:2d:27:60:d3:fe:9a: 78:57:64:11:9e:9c:a9:0b:56:be:73:4b:a5:ad:43:b3:cc:b9: e4:90:96:cd:51:77:d1:1a:35:d7:c7:e0:19:42:c2:f8:65:e0: 5a:ad:ad:63:b3:b3:d8:f9:91:43:05:48:7d:3a:5d:7d:3c:41: a0:f9:3d:c3:76:97:07:81:05:f2:80:76:8e:5b:39:36:e5:58: 08:23:fd:80:2e:ab:6b:5b:66:1f:4c:b8:e0:40:39:8e:7b:25: 3b:97:4d:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGMDAxMTAvBgNVBAUTKDJCM0VFNDRFQTlDQjVCODEyOTZCQjY3REYwRjU0NkY4 QUFDOEE0QjQwHhcNMjYwNDA0MjA0OTU1WhcNMjYwNDExMjA0OTU1WjAYMRYwFAYD VQQDEw02OWQxNzk3My05YTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuiaFWDW0kI3nXRKDlBZBXPt4oBtisoIRJneJ+KhsVxap3/kdFDXHk1WLXtRK 1U8pgY3TklbdLEFy4H+4rbAY3LkmEK1gqZjfSHSsSEAMkMqeUAQbR2hSi9GB7aJR tAhTLBhx2j/QhgDT5AUHxCAdbBv+bHNA58LWWZ+xteQRdoTt+yJG/7U41fdzzvb9 sbkrxOPsZEJ+boixXMtvX3MM0i2m2ok+68kxTB53XYsJh6s/5blvV6iDhpvfgVFe LD+rYQxYTmxOt7MwFSOG1cslazsvGfGRztNfORdsN3udSV5+tHKHHAJznvJZeHX3 7ulOtWlDYjlxJ4B3Q40AgJbIIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGqMWBbY lwkv4rK9ykXx4wmTwkI2MB8GA1UdIwQYMBaAFCs+5E6py1uBKWu2ffD1RviqyKS0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEYwMC8zREE2OTAxNjEz NTcxMUVCQTIzREE3MTRDNEY5QUUwMi9LejdrVHFuTFc0RXBhN1o5OFBWRy1Lcklw TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t6N2tUcW5MVzRFcGE3Wjk4UFZHLUtySXBMUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEYwMC8zREE2OTAxNjEzNTcxMUVCQTIzREE3MTRDNEY5QUUwMi9LejdrVHFuTFc0 RXBhN1o5OFBWRy1LcklwTFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD6D3KR/glLIq8xULwvaJyPqjGmSGaaRGzoSoHuvUzsgFz9oSL7a8uE5PeonE KopW0w0QP97EyE0IIDc1WzgEtIjGOz//Pi0VCZh+yuTsAykS5Bzb4FYw+J/H2Xl8 QWzKGEAGOiBZRR+DN/1zM8V71k2ZZAtNQJfVrbHr60iOUiUvcbzDZZLKc9yD41KK h1mtdTDe76lG6lQeiuvwLSdg0/6aeFdkEZ6cqQtWvnNLpa1Ds8y55JCWzVF30Ro1 18fgGULC+GXgWq2tY7Oz2PmRQwVIfTpdfTxBoPk9w3aXB4EF8oB2jls5NuVYCCP9 gC6ra1tmH0y44EA5jnslO5dNbw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:58:12 2026 by rpki-client