$ rpki-client -vvf rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft File: khLuorkaMmYPdScf7IWJswnDifA.mft (raw, json) Hash identifier: DvRdh3G5jl6l0RC5z0SyXZmEq96JNXRhSHmK7FYkM0U= Subject key identifier: C0:43:1C:FC:BB:02:52:24:B9:F3:63:21:88:65:FB:C6:2D:48:04:EE Authority key identifier: 92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0 Certificate issuer: /CN=A91999F5/serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0 Certificate serial: 0447 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft Manifest number: 043B Signing time: Sun 05 Apr 2026 00:05:55 +0000 Manifest this update: Sun 05 Apr 2026 00:05:54 +0000 Manifest next update: Sun 12 Apr 2026 00:05:54 +0000 Files and hashes: 1: khLuorkaMmYPdScf7IWJswnDifA.crl (hash: gE59CawiPo/KFuOBODamoFMlrh6Hfd/i0JwwMLjBvzA=) 2: F84777FCD9DC11EDA4083A71C4F9AE02.roa (hash: 2dklAfTnHhtRgzsOUzlnr7mFdnQGrY5LhPyI2dkyTlU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1095 (0x447) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91999F5, serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0 Validity Not Before: Apr 5 00:05:54 2026 GMT Not After : Apr 12 00:05:54 2026 GMT Subject: CN=69d1a762-2fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b6:f7:3b:a9:75:68:e6:23:e2:f3:e5:f1:e2: de:8e:b8:78:4f:a9:06:67:5c:e6:0a:00:e3:e5:06: 92:75:9a:11:0a:15:68:95:e8:ae:5c:a4:11:20:86: 86:6e:a9:fe:4f:ea:56:d5:1e:c1:fe:87:54:38:91: ef:66:89:12:aa:b0:33:c9:8e:bd:a8:cd:7b:6d:30: b5:25:6b:66:61:c7:b3:94:1b:56:17:b0:f8:43:30: f3:ff:a1:f7:ac:21:71:c5:30:1e:b7:8a:65:30:b9: 44:bd:53:77:5a:b5:ca:1e:0b:9c:86:6c:76:5e:cd: a3:97:ae:bc:58:ad:7b:72:87:1d:a8:d7:49:db:29: 97:93:f7:12:de:23:db:4b:6a:1a:5f:86:21:b6:c9: 91:83:dc:02:fb:60:45:47:79:96:9f:90:ab:a9:87: 2a:0d:cc:0b:10:97:fb:54:56:67:77:c8:ce:a1:95: 99:a2:89:36:0a:f1:31:99:f4:95:ca:0f:96:68:d3: b6:72:e1:b0:a0:df:21:6e:09:51:47:a2:1c:a0:6e: 1b:6e:bc:79:f1:72:45:44:d8:5b:35:10:db:ad:86: 34:fc:cf:df:a0:c6:1c:32:3a:d1:1e:00:38:45:d7: 54:5c:35:1b:dc:bb:03:83:41:b4:ed:cd:82:af:90: c2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:43:1C:FC:BB:02:52:24:B9:F3:63:21:88:65:FB:C6:2D:48:04:EE X509v3 Authority Key Identifier: keyid:92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:6d:e9:ca:e2:17:9b:44:08:d1:50:d4:f9:31:71:d8:de:3f: f3:eb:38:8a:82:9b:88:50:ac:b4:b9:63:b0:bf:a5:c2:94:ea: dd:95:58:58:fe:3f:47:29:5a:8f:87:44:47:2b:4a:2a:5b:4d: 5a:ac:e7:1a:1c:f2:0a:65:12:4a:32:17:20:16:10:a7:3c:d7: 15:1d:b9:52:1c:38:f3:0b:a9:d6:41:e6:7a:a8:1d:7a:b2:95: 72:92:b6:95:9f:04:12:4a:6f:0d:e1:5c:25:2e:1d:8f:3a:ce: de:f4:fc:f0:c0:b8:ca:79:17:d9:9e:1c:5f:a8:0a:f8:24:9d: 40:a8:c1:b9:59:17:56:b8:d1:22:eb:95:d4:b7:2a:aa:85:a5: 2c:29:db:f0:f3:39:f3:93:f7:fa:d0:16:61:aa:d4:92:8b:3f: cb:b6:5f:49:54:1c:86:30:fd:3b:60:ce:25:0b:f5:e1:2a:02: e8:ff:0b:71:62:76:6f:35:8a:a9:6e:81:f4:a6:ae:f9:e5:01: 2c:a7:6e:f8:5b:0f:e6:6b:93:b2:68:5e:74:a1:c2:e9:f9:9f: 9b:09:f8:a6:73:71:06:2e:32:87:e2:df:eb:cb:51:6a:50:65: 9b:61:db:7c:b0:db:bc:91:94:11:79:49:9d:62:3b:9d:82:fa: 63:f7:9d:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk5RjUxMTAvBgNVBAUTKDkyMTJFRUEyQjkxQTMyNjYwRjc1MjcxRkVDODU4OUIz MDlDMzg5RjAwHhcNMjYwNDA1MDAwNTU0WhcNMjYwNDEyMDAwNTU0WjAYMRYwFAYD VQQDEw02OWQxYTc2Mi0yZmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLb3O6l1aOYj4vPl8eLejrh4T6kGZ1zmCgDj5QaSdZoRChVoleiuXKQRIIaG bqn+T+pW1R7B/odUOJHvZokSqrAzyY69qM17bTC1JWtmYcezlBtWF7D4QzDz/6H3 rCFxxTAet4plMLlEvVN3WrXKHguchmx2Xs2jl668WK17cocdqNdJ2ymXk/cS3iPb S2oaX4YhtsmRg9wC+2BFR3mWn5CrqYcqDcwLEJf7VFZnd8jOoZWZook2CvExmfSV yg+WaNO2cuGwoN8hbglRR6IcoG4bbrx58XJFRNhbNRDbrYY0/M/foMYcMjrRHgA4 RddUXDUb3LsDg0G07c2Cr5DCRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMBDHPy7 AlIkufNjIYhl+8YtSATuMB8GA1UdIwQYMBaAFJIS7qK5GjJmD3UnH+yFibMJw4nw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTlGNS82QTNEQjU3ODlG NzkxMUVDOUNCNDdBMEFDNEY5QUUwMi9raEx1b3JrYU1tWVBkU2NmN0lXSnN3bkRp ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2toTHVvcmthTW1ZUGRTY2Y3SVdKc3duRGlmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTlGNS82QTNEQjU3ODlGNzkxMUVDOUNCNDdBMEFDNEY5QUUwMi9raEx1b3JrYU1t WVBkU2NmN0lXSnN3bkRpZkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYm3pyuIXm0QI0VDU+TFx2N4/8+s4ioKbiFCstLljsL+lwpTq3ZVYWP4/Ryla j4dERytKKltNWqznGhzyCmUSSjIXIBYQpzzXFR25Uhw48wup1kHmeqgderKVcpK2 lZ8EEkpvDeFcJS4djzrO3vT88MC4ynkX2Z4cX6gK+CSdQKjBuVkXVrjRIuuV1Lcq qoWlLCnb8PM585P3+tAWYarUkos/y7ZfSVQchjD9O2DOJQv14SoC6P8LcWJ2bzWK qW6B9Kau+eUBLKdu+FsP5muTsmhedKHC6fmfmwn4pnNxBi4yh+Lf68tRalBlm2Hb fLDbvJGUEXlJnWI7nYL6Y/edxg== -----END CERTIFICATE-----Generated at Mon Apr 6 15:11:17 2026 by rpki-client