$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft File: kfPcWc0PodJBy3h1fR2qksKsn2A.mft (raw, json) Hash identifier: 6jYwL5as8TvY/o73YBvopa39xK1TQLmESnOlNJX+x3w= Subject key identifier: 38:EB:15:25:F1:5D:05:B2:B1:1D:5A:84:88:AC:89:95:C4:7B:8E:50 Authority key identifier: 91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60 Certificate issuer: /CN=A91A0432/serialNumber=91F3DC59CD0FA1D241CB78757D1DAA92C2AC9F60 Certificate serial: 043B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft Manifest number: 0433 Signing time: Tue 21 Apr 2026 00:14:41 +0000 Manifest this update: Tue 21 Apr 2026 00:14:41 +0000 Manifest next update: Tue 28 Apr 2026 00:14:41 +0000 Files and hashes: 1: kfPcWc0PodJBy3h1fR2qksKsn2A.crl (hash: S9bYiEaZC10fDmuMYKBT1P8ZqaCxPLkeKAurdhEvMHY=) 2: 4114509A597511EFA2B79A84C4F9AE02.roa (hash: 0n2WFP3OGMlXX26nzPcGgu1jYPaSSjw1YClglsZ8Waw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.crl rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 00:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1083 (0x43b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0432, serialNumber=91F3DC59CD0FA1D241CB78757D1DAA92C2AC9F60 Validity Not Before: Apr 21 00:14:41 2026 GMT Not After : Apr 28 00:14:41 2026 GMT Subject: CN=69e6c171-8b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8b:74:ad:67:f4:da:70:38:c5:d6:73:5b:1f: a7:a2:a4:d3:23:88:9d:e1:bd:b5:cf:65:47:0a:80: 86:a7:c8:09:54:68:a7:71:78:a6:d4:f5:1b:e4:d7: 96:c3:4f:6a:2f:a7:6c:91:dc:64:ad:e9:a1:08:fe: 33:aa:96:45:fc:14:ee:3c:fc:aa:87:c9:b9:74:2c: 4f:08:a6:44:66:b4:e6:bb:81:46:72:9a:d9:df:15: c8:36:c9:61:2c:16:d6:10:12:63:79:89:70:24:a9: 01:07:b1:f8:b9:27:33:fd:05:e3:5b:86:7f:14:6f: 3c:ec:30:ae:6f:0a:01:f9:c1:06:55:15:cd:ce:c9: 07:dd:19:7d:11:1a:67:b6:2d:34:3b:b9:d1:8e:23: ba:9f:a5:03:53:27:8c:7c:9a:09:c1:b3:63:5a:16: c4:e9:99:40:29:95:1b:c8:42:c8:fd:9e:90:4d:b4: b0:ae:e4:3c:77:8e:bd:83:64:58:70:2f:ea:25:6c: 0e:1e:d1:4b:55:c6:7c:8c:fe:2e:e1:e9:db:23:d0: b5:c5:da:3a:42:ae:1e:35:e1:d7:7f:08:9d:0f:82: 77:15:08:9e:9c:d2:6b:19:e2:fe:95:9e:c2:58:e4: 20:49:a4:73:e7:56:57:62:85:ea:b4:5a:ec:d7:c9: 3c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:EB:15:25:F1:5D:05:B2:B1:1D:5A:84:88:AC:89:95:C4:7B:8E:50 X509v3 Authority Key Identifier: keyid:91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:7a:cd:0e:a9:2b:dc:88:60:4a:29:52:7c:ae:36:8b:a0:cf: f1:58:b8:84:d4:60:f5:d7:d9:04:a2:d5:32:5c:a7:77:06:1a: f9:ec:95:90:e8:73:3d:df:8f:06:6f:57:91:8f:c8:8b:74:71: ac:b3:d2:8f:a3:4d:f8:01:05:c6:7e:ee:ae:a6:a0:dd:16:37: d5:4b:15:bc:74:ce:6d:aa:d2:de:04:d6:41:d3:6e:df:bf:e3: 41:fd:52:1c:ef:65:2c:26:db:9c:1b:e1:9f:37:59:49:7a:4f: 2f:5c:90:12:4a:cd:59:b3:27:42:82:6d:00:51:7d:93:2a:85: a8:0e:5e:cc:f9:9b:b1:95:f8:7a:b2:91:e5:81:5a:fb:a0:8c: 70:86:91:64:a4:24:77:14:89:c2:7e:ec:8f:21:bb:4c:b7:3d: 8f:70:29:8f:54:49:fc:0c:a1:66:61:f6:f4:7b:7a:d5:02:d7: 5d:7f:ec:ca:90:ad:ca:1d:cb:cc:7f:05:1a:e0:ca:1b:66:9d: 86:76:99:2b:ba:76:27:39:a3:2e:6a:06:62:64:9d:46:c1:3b: d4:db:93:67:51:ec:79:60:e7:c5:cd:b1:2f:89:a7:b7:8a:74: 02:f0:83:c2:c5:a5:e7:e2:63:8b:32:c7:fc:83:fc:46:20:ac: 7b:02:7a:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA0MzIxMTAvBgNVBAUTKDkxRjNEQzU5Q0QwRkExRDI0MUNCNzg3NTdEMURBQTky QzJBQzlGNjAwHhcNMjYwNDIxMDAxNDQxWhcNMjYwNDI4MDAxNDQxWjAYMRYwFAYD VQQDEw02OWU2YzE3MS04YjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqIt0rWf02nA4xdZzWx+noqTTI4id4b21z2VHCoCGp8gJVGincXim1PUb5NeW w09qL6dskdxkremhCP4zqpZF/BTuPPyqh8m5dCxPCKZEZrTmu4FGcprZ3xXINslh LBbWEBJjeYlwJKkBB7H4uScz/QXjW4Z/FG887DCubwoB+cEGVRXNzskH3Rl9ERpn ti00O7nRjiO6n6UDUyeMfJoJwbNjWhbE6ZlAKZUbyELI/Z6QTbSwruQ8d469g2RY cC/qJWwOHtFLVcZ8jP4u4enbI9C1xdo6Qq4eNeHXfwidD4J3FQienNJrGeL+lZ7C WOQgSaRz51ZXYoXqtFrs18k88wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDjrFSXx XQWysR1ahIisiZXEe45QMB8GA1UdIwQYMBaAFJHz3FnND6HSQct4dX0dqpLCrJ9g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDQzMi9GNUJGNjk5Q0E0 Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi9rZlBjV2MwUG9kSkJ5M2gxZlIycWtzS3Nu MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmUGNXYzBQb2RKQnkzaDFmUjJxa3NLc24yQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDQzMi9GNUJGNjk5Q0E0Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi9rZlBjV2MwUG9k SkJ5M2gxZlIycWtzS3NuMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM3rNDqkr3IhgSilSfK42i6DP8Vi4hNRg9dfZBKLVMlyndwYa+eyVkOhzPd+P Bm9XkY/Ii3RxrLPSj6NN+AEFxn7urqag3RY31UsVvHTObarS3gTWQdNu37/jQf1S HO9lLCbbnBvhnzdZSXpPL1yQEkrNWbMnQoJtAFF9kyqFqA5ezPmbsZX4erKR5YFa +6CMcIaRZKQkdxSJwn7sjyG7TLc9j3Apj1RJ/AyhZmH29Ht61QLXXX/sypCtyh3L zH8FGuDKG2adhnaZK7p2JzmjLmoGYmSdRsE71NuTZ1HseWDnxc2xL4mnt4p0AvCD wsWl5+JjizLH/IP8RiCsewJ6Rg== -----END CERTIFICATE-----Generated at Wed Apr 22 05:26:06 2026 by rpki-client