$ rpki-client -vvf rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft File: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft (raw, json) Hash identifier: 72t2XK+pAFB2vEIcZzLaLuuD6W7A2XU8S89Ly4RL3DQ= Subject key identifier: 3D:2B:DC:6A:F5:47:E7:87:F2:C3:87:40:48:F0:68:A3:CC:C4:AA:D1 Authority key identifier: 2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46 Certificate issuer: /CN=A916DDB4/serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546 Certificate serial: 068F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft Manifest number: 0685 Signing time: Mon 20 Apr 2026 22:24:59 +0000 Manifest this update: Mon 20 Apr 2026 22:24:58 +0000 Manifest next update: Mon 27 Apr 2026 22:24:58 +0000 Files and hashes: 1: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl (hash: hjtoM6jm+QbRrOiN5WnX3LLY+0UnR8skJQrFflr7GmM=) 2: B951F87ABE6D11EF933FE870C4F9AE02.roa (hash: S40NIyhP5u7/UlmLJYX9/RykdcdP5gu6OSoqCbZEohA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 22:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1679 (0x68f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DDB4, serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546 Validity Not Before: Apr 20 22:24:58 2026 GMT Not After : Apr 27 22:24:58 2026 GMT Subject: CN=69e6a7ba-9b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ec:92:97:99:71:92:ce:e8:7b:f8:3f:79:6b: 2a:93:2f:de:73:73:a3:71:20:bf:ab:9a:4f:cb:c7: d3:6f:45:c1:f0:dd:f3:1a:78:45:ea:4c:83:b6:27: e1:0a:78:d1:a3:e1:3a:d6:68:36:d9:78:63:4e:7f: c3:cc:2d:32:ba:f5:39:81:0f:c5:18:9d:76:56:34: 51:7e:0b:90:cf:55:77:34:b8:66:ac:3c:f2:47:7d: 5e:6e:30:13:84:fe:c7:68:9a:45:8c:e4:47:10:62: 61:43:d4:21:fc:4f:bc:b4:5d:6d:98:d4:c5:24:a1: ae:85:94:db:ce:c5:ca:13:ae:4c:be:7f:74:00:65: 19:cf:11:2f:c4:9b:3d:0b:5d:82:ec:f8:e8:c3:e4: 77:ab:86:ed:d1:7d:2e:83:fb:3c:c2:88:8f:b8:fa: d8:dd:f6:d6:9a:75:6f:62:1f:64:bb:89:46:4d:dc: f5:75:dd:d6:34:6f:85:52:24:e8:56:ed:c4:74:8d: 57:9e:c2:7b:82:a4:5d:02:1a:00:72:35:59:21:2e: 46:f0:64:bb:0b:a2:26:04:e7:66:92:2b:c4:55:81: d0:3b:31:42:ee:61:90:a4:03:c9:e3:b1:00:48:51: 0f:12:41:07:11:80:66:20:ca:67:ee:46:ee:07:a4: b2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2B:DC:6A:F5:47:E7:87:F2:C3:87:40:48:F0:68:A3:CC:C4:AA:D1 X509v3 Authority Key Identifier: keyid:2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c8:83:e3:96:bf:43:3e:0f:de:b8:96:f7:c6:05:33:e2:61: db:d4:4d:79:1b:77:05:61:da:dd:cc:8a:98:38:9e:e6:15:bb: 33:d0:1e:d2:4a:77:82:34:1c:01:47:e2:99:2e:69:25:60:7e: 66:9b:44:84:82:e1:e4:8d:e8:fa:99:cb:ab:ca:5e:95:cf:0f: 2c:7d:89:ff:1d:0a:83:d1:f4:c0:09:a8:de:df:cc:a2:ed:00: 40:03:f7:2d:07:b3:3e:4e:50:88:e0:eb:ac:eb:90:cd:62:a8: 26:58:3c:f7:ac:f1:12:b6:ae:79:46:67:cb:73:9a:e7:23:34: 58:7e:08:a9:e8:6b:4e:1f:2b:dd:93:d7:a9:b2:48:cb:2c:78: 5a:e4:d5:7b:3f:23:08:49:74:1e:a8:3e:95:74:e6:68:ca:a6: fd:fd:d3:aa:3d:9f:bf:a3:28:bf:44:64:50:c1:f3:2c:8a:70: ec:b6:ed:4e:5a:39:9c:a1:52:b5:f3:de:58:c2:01:ac:18:95: a0:3f:32:f3:5e:25:c0:a6:81:d4:66:a6:6a:54:d9:81:35:4f: 70:63:16:af:87:26:14:e1:bf:23:5d:80:a5:64:d5:e7:bb:4c: 33:40:42:26:9c:9f:71:c1:25:78:69:95:b4:da:66:b3:7c:6c: e3:77:62:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkREQjQxMTAvBgNVBAUTKDJBNDc3NTM3RjMyM0VGQjU5REJEOERCRUIzQUZBQjFG MTU4MkY1NDYwHhcNMjYwNDIwMjIyNDU4WhcNMjYwNDI3MjIyNDU4WjAYMRYwFAYD VQQDEw02OWU2YTdiYS05YjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAheySl5lxks7oe/g/eWsqky/ec3OjcSC/q5pPy8fTb0XB8N3zGnhF6kyDtifh CnjRo+E61mg22XhjTn/DzC0yuvU5gQ/FGJ12VjRRfguQz1V3NLhmrDzyR31ebjAT hP7HaJpFjORHEGJhQ9Qh/E+8tF1tmNTFJKGuhZTbzsXKE65Mvn90AGUZzxEvxJs9 C12C7Pjow+R3q4bt0X0ug/s8woiPuPrY3fbWmnVvYh9ku4lGTdz1dd3WNG+FUiTo Vu3EdI1XnsJ7gqRdAhoAcjVZIS5G8GS7C6ImBOdmkivEVYHQOzFC7mGQpAPJ47EA SFEPEkEHEYBmIMpn7kbuB6SyGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD0r3Gr1 R+eH8sOHQEjwaKPMxKrRMB8GA1UdIwQYMBaAFCpHdTfzI++1nb2NvrOvqx8VgvVG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RERCNC9BNjAwODMxNkI5 MzIxMUVCQjk1RDA2M0NDNEY5QUUwMi9La2QxTl9Najc3V2R2WTItczYtckh4V0M5 VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0trZDFOX01qNzdXZHZZMi1zNi1ySHhXQzlVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RERCNC9BNjAwODMxNkI5MzIxMUVCQjk1RDA2M0NDNEY5QUUwMi9La2QxTl9Najc3 V2R2WTItczYtckh4V0M5VVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf8iD45a/Qz4P3riW98YFM+Jh29RNeRt3BWHa3cyKmDie5hW7M9Ae0kp3gjQc AUfimS5pJWB+ZptEhILh5I3o+pnLq8pelc8PLH2J/x0Kg9H0wAmo3t/Mou0AQAP3 LQezPk5QiODrrOuQzWKoJlg896zxEraueUZny3Oa5yM0WH4IqehrTh8r3ZPXqbJI yyx4WuTVez8jCEl0Hqg+lXTmaMqm/f3Tqj2fv6Mov0RkUMHzLIpw7LbtTlo5nKFS tfPeWMIBrBiVoD8y814lwKaB1GamalTZgTVPcGMWr4cmFOG/I12ApWTV57tMM0BC JpyfccEleGmVtNpms3xs43diCQ== -----END CERTIFICATE-----Generated at Wed Apr 22 03:36:01 2026 by rpki-client