$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft File: K5XY2CKKiRR9gBk9l3DrUK7du2s.mft (raw, json) Hash identifier: eS1KelRxviet2otQSVrweBK8VWpyk1QfCEOydV3p1Yg= Subject key identifier: 29:24:80:CC:9D:44:7A:5E:28:97:F1:C1:4A:7C:DA:1A:BD:52:FC:24 Authority key identifier: 2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B Certificate issuer: /CN=A91FF5A9/serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B Certificate serial: 1765 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft Manifest number: 174C Signing time: Sat 04 Apr 2026 16:29:39 +0000 Manifest this update: Sat 04 Apr 2026 16:29:38 +0000 Manifest next update: Sat 11 Apr 2026 16:29:38 +0000 Files and hashes: 1: K5XY2CKKiRR9gBk9l3DrUK7du2s.crl (hash: Wy7CSvZ0AzLc5StJ60ECNkvABHQIq7uGegyI4KKRupE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:29:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5989 (0x1765) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF5A9, serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B Validity Not Before: Apr 4 16:29:38 2026 GMT Not After : Apr 11 16:29:38 2026 GMT Subject: CN=69d13c72-c1dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1e:ad:47:cf:77:ac:26:7c:db:58:2d:3d:44: 9e:b1:16:01:45:52:5d:67:db:b3:f4:09:99:d5:1f: 36:77:f8:88:9f:ae:45:fe:bf:c7:dd:8f:fd:0b:81: 47:08:c3:80:f2:13:6b:21:25:44:e2:37:fc:f9:38: 16:69:bb:3f:db:54:af:be:0a:93:be:f2:f3:9a:f1: d3:53:82:16:72:99:ec:5d:63:9d:30:04:d3:55:2d: b6:58:59:e6:2c:ce:c6:9d:47:ee:5d:25:85:54:dd: 6b:9f:3a:c9:44:0c:fc:0d:46:52:53:13:98:e7:83: 89:c7:73:19:d4:df:fb:d8:d2:56:95:ee:ef:5b:b8: 7d:ad:fe:40:56:38:c7:e6:04:b8:b3:0c:a7:b9:fe: 2e:1d:20:8d:7d:87:43:88:db:08:4d:a8:5c:9b:59: fe:ad:22:0b:5e:24:69:d0:ad:d7:d5:7b:f6:4f:5b: 87:4c:10:72:7a:48:c0:a2:59:59:77:df:d8:6f:8c: 24:56:68:d4:40:9d:47:f5:07:f5:09:32:1b:2a:b8: a8:97:32:d6:29:2a:68:c2:10:9c:94:db:95:bf:47: d2:0c:f6:9b:3f:7e:ec:51:a3:ee:ba:0d:62:62:c4: 91:19:a0:42:d9:a9:16:0f:31:4f:7c:4c:19:9c:07: e9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:24:80:CC:9D:44:7A:5E:28:97:F1:C1:4A:7C:DA:1A:BD:52:FC:24 X509v3 Authority Key Identifier: keyid:2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:65:c5:0d:fe:18:d1:5c:26:db:2f:68:d5:3e:8a:4c:97:63: fa:30:19:b0:1b:70:6f:73:35:38:ad:a1:c3:e0:79:75:16:81: 18:7e:b8:36:9e:9b:ea:c9:79:6c:4f:08:55:e2:77:e5:7a:36: 6f:bb:f3:05:d3:b7:30:8a:fd:db:28:9b:66:64:48:54:97:38: 65:c4:2f:f2:32:e8:88:24:8e:1b:cb:d0:a5:b7:f4:ff:4b:e1: 38:bb:28:06:a2:6b:af:7e:10:c1:b7:d1:ae:2e:9f:5c:8d:3f: c7:f3:ae:c3:55:c0:ae:ca:dd:c6:7c:6c:71:22:f2:11:88:12: 91:75:02:c1:b3:03:94:95:43:60:06:d2:a4:23:39:7e:42:fa: 58:14:bd:12:bb:4b:2b:67:6b:e2:c7:23:87:64:4d:af:77:f3: c9:4c:38:46:29:e7:37:85:58:42:27:df:3a:5e:01:f9:9e:3e: 30:96:4b:7a:7c:06:1a:47:0a:32:86:b5:7c:31:b6:1e:d5:09: 72:2b:59:9d:c9:84:f7:12:ce:31:e9:e6:ed:31:79:6c:57:40: 87:0e:8b:46:3d:45:82:4d:4e:bc:d5:0e:12:06:c7:bc:4c:d2: 21:14:9b:c6:2c:f6:ec:79:0b:b6:f7:9c:50:5b:e5:0d:08:d5: 33:28:be:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY1QTkxMTAvBgNVBAUTKDJCOTVEOEQ4MjI4QTg5MTQ3RDgwMTkzRDk3NzBFQjUw QUVEREJCNkIwHhcNMjYwNDA0MTYyOTM4WhcNMjYwNDExMTYyOTM4WjAYMRYwFAYD VQQDEw02OWQxM2M3Mi1jMWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtx6tR893rCZ821gtPUSesRYBRVJdZ9uz9AmZ1R82d/iIn65F/r/H3Y/9C4FH CMOA8hNrISVE4jf8+TgWabs/21SvvgqTvvLzmvHTU4IWcpnsXWOdMATTVS22WFnm LM7GnUfuXSWFVN1rnzrJRAz8DUZSUxOY54OJx3MZ1N/72NJWle7vW7h9rf5AVjjH 5gS4swynuf4uHSCNfYdDiNsITahcm1n+rSILXiRp0K3X1Xv2T1uHTBByekjAollZ d9/Yb4wkVmjUQJ1H9Qf1CTIbKriolzLWKSpowhCclNuVv0fSDPabP37sUaPuug1i YsSRGaBC2akWDzFPfEwZnAfp2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCkkgMyd RHpeKJfxwUp82hq9UvwkMB8GA1UdIwQYMBaAFCuV2NgiiokUfYAZPZdw61Cu3btr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVBOS8wMEI3MTUxQ0ZE MDgxMUU3QTQyOEZGMEZDNEY5QUUwMi9LNVhZMkNLS2lSUjlnQms5bDNEclVLN2R1 MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s1WFkyQ0tLaVJSOWdCazlsM0RyVUs3ZHUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjVBOS8wMEI3MTUxQ0ZEMDgxMUU3QTQyOEZGMEZDNEY5QUUwMi9LNVhZMkNLS2lS UjlnQms5bDNEclVLN2R1MnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoWXFDf4Y0Vwm2y9o1T6KTJdj+jAZsBtwb3M1OK2hw+B5dRaBGH64Np6b6sl5 bE8IVeJ35Xo2b7vzBdO3MIr92yibZmRIVJc4ZcQv8jLoiCSOG8vQpbf0/0vhOLso BqJrr34QwbfRri6fXI0/x/Ouw1XArsrdxnxscSLyEYgSkXUCwbMDlJVDYAbSpCM5 fkL6WBS9ErtLK2dr4scjh2RNr3fzyUw4RinnN4VYQiffOl4B+Z4+MJZLenwGGkcK Moa1fDG2HtUJcitZncmE9xLOMenm7TF5bFdAhw6LRj1Fgk1OvNUOEgbHvEzSIRSb xiz27HkLtvecUFvlDQjVMyi+AA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:59:35 2026 by rpki-client