$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft File: kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft (raw, json) Hash identifier: tKsh6MIO1l8wt1KhlV4W3SFPtRpuUGrAGBf07gjBHUI= Subject key identifier: 5B:AE:5B:FB:F9:A2:79:4E:E9:FC:E1:7A:6F:AE:1F:C8:14:94:F0:FE Authority key identifier: 91:26:EF:E5:0D:5E:3B:53:1F:EE:E4:54:9A:B3:0B:FE:7A:54:55:07 Certificate issuer: /CN=A917F4D3/serialNumber=9126EFE50D5E3B531FEEE4549AB30BFE7A545507 Certificate serial: 0284 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft Manifest number: 027E Signing time: Sun 05 Apr 2026 01:25:57 +0000 Manifest this update: Sun 05 Apr 2026 01:25:57 +0000 Manifest next update: Sun 12 Apr 2026 01:25:57 +0000 Files and hashes: 1: kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl (hash: OYknjo8w8xfP6se3oOyOIlzZIuV6fWLa7AziZ87r/us=) 2: 32091726626D11ED87BDAC82C4F9AE02.roa (hash: K2gsbb3RIWZ1Guz5GtLGoXVH7gl18al99665lqSZyuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:25:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 644 (0x284) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F4D3, serialNumber=9126EFE50D5E3B531FEEE4549AB30BFE7A545507 Validity Not Before: Apr 5 01:25:57 2026 GMT Not After : Apr 12 01:25:57 2026 GMT Subject: CN=69d1ba25-e4fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0c:89:97:54:30:bc:49:56:43:b7:c1:c7:82: 7d:ec:d9:87:8f:b9:dd:14:d1:c3:a4:68:6d:3a:ec: 2e:e3:01:d3:89:59:73:09:05:9d:ec:2f:6e:5a:97: 37:31:7e:7e:92:b5:96:09:12:d2:87:07:cd:44:1d: 7f:07:1f:7c:1a:23:8e:33:4d:d6:b1:97:bc:61:09: 92:d2:3c:2c:ca:e0:1e:cc:3e:82:d1:f5:8c:a0:8d: 25:6e:da:fb:7f:3b:bb:04:c5:a2:77:de:42:d3:ba: 7a:d8:ab:df:4d:e6:4e:7e:34:55:14:62:a7:44:5f: 93:d0:a4:b6:2a:b7:e5:38:78:c2:9e:42:3c:16:7b: ac:11:bd:2d:95:a4:d9:32:7d:68:12:f7:7b:fd:77: 72:73:fc:9e:bf:3c:49:e2:f6:59:f3:a9:7a:46:2a: 8c:e5:5c:ab:85:2e:18:dd:32:a4:f1:6c:a3:57:cb: 40:8d:8c:ef:d9:4f:0d:5e:25:6e:45:ad:04:8f:5d: 88:13:8b:41:14:fc:18:bc:9b:c5:87:3f:68:a7:02: 7d:94:c1:94:cb:bc:a2:92:99:fe:18:12:75:d2:41: 01:dc:ef:32:41:08:4e:40:53:60:ae:49:e2:3c:ca: d8:5c:6f:0a:c4:e8:0d:79:a4:72:69:b5:b8:59:42: 80:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:AE:5B:FB:F9:A2:79:4E:E9:FC:E1:7A:6F:AE:1F:C8:14:94:F0:FE X509v3 Authority Key Identifier: keyid:91:26:EF:E5:0D:5E:3B:53:1F:EE:E4:54:9A:B3:0B:FE:7A:54:55:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:3e:d8:78:f1:e0:97:98:9c:d5:65:59:5a:e6:06:ec:f9:83: d5:88:66:63:e8:d4:57:1a:2a:d6:bf:61:14:e4:9d:f1:54:52: 4b:ea:55:9a:64:20:2d:f2:8a:66:c6:14:8a:b5:b8:a8:9b:10: 8b:8b:9d:49:46:b3:5e:92:b4:1b:c5:3a:c1:1c:43:0f:55:3a: 51:8c:5f:d3:3c:3d:a1:1c:56:49:8f:aa:23:86:eb:4a:10:9f: ba:93:74:d7:d5:58:bc:3a:14:74:ec:74:ce:0a:f1:74:81:0f: 89:be:58:52:1d:b5:be:1a:2e:bb:37:4f:b7:5d:2f:36:e5:ea: 6f:63:70:e1:fe:c3:ad:71:ec:b9:f6:1e:29:e4:62:a3:1c:97: 8e:b4:6f:cc:1e:41:94:25:4a:b7:75:62:e9:f7:84:b1:9f:cc: 83:34:cf:a6:8f:8f:f6:bd:b1:dc:af:60:93:8b:27:c0:6f:68: ed:e7:e4:96:ef:40:20:c9:92:27:0e:a6:46:2e:98:46:61:87: 1a:7f:eb:5e:6e:2d:06:92:1d:bf:3a:63:4f:dc:c4:51:4b:00: 85:ed:3d:1a:59:aa:54:38:76:ce:4c:cf:de:e2:84:4a:54:84: 82:72:82:d2:16:71:83:96:ec:80:84:d6:99:a4:15:78:80:1d: e4:a9:e7:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y0RDMxMTAvBgNVBAUTKDkxMjZFRkU1MEQ1RTNCNTMxRkVFRTQ1NDlBQjMwQkZF N0E1NDU1MDcwHhcNMjYwNDA1MDEyNTU3WhcNMjYwNDEyMDEyNTU3WjAYMRYwFAYD VQQDEw02OWQxYmEyNS1lNGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnAyJl1QwvElWQ7fBx4J97NmHj7ndFNHDpGhtOuwu4wHTiVlzCQWd7C9uWpc3 MX5+krWWCRLShwfNRB1/Bx98GiOOM03WsZe8YQmS0jwsyuAezD6C0fWMoI0lbtr7 fzu7BMWid95C07p62KvfTeZOfjRVFGKnRF+T0KS2KrflOHjCnkI8FnusEb0tlaTZ Mn1oEvd7/Xdyc/yevzxJ4vZZ86l6RiqM5VyrhS4Y3TKk8WyjV8tAjYzv2U8NXiVu Ra0Ej12IE4tBFPwYvJvFhz9opwJ9lMGUy7yikpn+GBJ10kEB3O8yQQhOQFNgrkni PMrYXG8KxOgNeaRyabW4WUKAjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFuuW/v5 onlO6fzhem+uH8gUlPD+MB8GA1UdIwQYMBaAFJEm7+UNXjtTH+7kVJqzC/56VFUH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjREMy82ODAzNEM2ODYy NjYxMUVEODI0MkM3ODZDNEY5QUUwMi9rU2J2NVExZU8xTWY3dVJVbXJNTF9ucFVW UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTYnY1UTFlTzFNZjd1UlVtck1MX25wVVZRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjREMy82ODAzNEM2ODYyNjYxMUVEODI0MkM3ODZDNEY5QUUwMi9rU2J2NVExZU8x TWY3dVJVbXJNTF9ucFVWUWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdz7YePHgl5ic1WVZWuYG7PmD1YhmY+jUVxoq1r9hFOSd8VRSS+pVmmQgLfKK ZsYUirW4qJsQi4udSUazXpK0G8U6wRxDD1U6UYxf0zw9oRxWSY+qI4brShCfupN0 19VYvDoUdOx0zgrxdIEPib5YUh21vhouuzdPt10vNuXqb2Nw4f7DrXHsufYeKeRi oxyXjrRvzB5BlCVKt3Vi6feEsZ/MgzTPpo+P9r2x3K9gk4snwG9o7efklu9AIMmS Jw6mRi6YRmGHGn/rXm4tBpIdvzpjT9zEUUsAhe09GlmqVDh2zkzP3uKESlSEgnKC 0hZxg5bsgITWmaQVeIAd5Knndg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:54:02 2026 by rpki-client