$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft File: KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft (raw, json) Hash identifier: wndriVcXhkDyoLCMAhYK9i/NxQss5X5sINsSQjsmO+o= Subject key identifier: 08:68:35:8E:F4:71:E8:DD:8E:E1:C9:D7:AF:FF:CB:71:66:78:6E:92 Authority key identifier: 2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 Certificate issuer: /CN=A91A4EF9/serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft Manifest number: 018F Signing time: Sun 05 Apr 2026 03:53:14 +0000 Manifest this update: Sun 05 Apr 2026 03:53:13 +0000 Manifest next update: Sun 12 Apr 2026 03:53:13 +0000 Files and hashes: 1: KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl (hash: i7SX9ECPw6v0L3QJJwBVrl10gIPqkWk0n79yL26BRBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:53:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4EF9, serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Validity Not Before: Apr 5 03:53:13 2026 GMT Not After : Apr 12 03:53:13 2026 GMT Subject: CN=69d1dcaa-5911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:dd:44:2e:82:9b:1a:9b:ef:76:ee:81:ff:66: 29:8a:f5:55:12:db:76:48:32:3d:b4:21:75:3c:0f: 25:d9:35:2a:7c:1f:e7:29:85:a1:90:2f:78:d5:41: 1c:d1:17:b9:7b:15:ee:f3:e0:0e:0c:70:f6:7f:6a: 04:82:e9:50:22:0a:c6:99:f9:d8:1e:49:ad:98:36: fe:8d:44:9a:c3:9c:e3:e2:e0:5c:8a:22:7e:e1:b2: eb:16:6e:d2:90:a8:bd:ad:67:df:d6:4b:2f:ed:c5: 91:ce:38:ff:ee:45:cc:eb:cc:87:72:1f:1b:ce:79: ad:45:e2:22:74:b8:73:b3:99:33:8c:8e:9e:15:42: 4a:5f:3a:85:ea:23:92:a7:13:a9:48:c4:22:04:29: 1d:47:d3:93:12:e3:a7:0e:c5:b9:e6:58:3a:c4:21: 9a:77:cf:2f:44:b3:30:7b:d1:a5:09:6a:f0:9a:69: 9f:bb:51:e5:79:0e:58:40:05:55:83:da:8e:f8:c0: a9:61:ae:0c:e4:ed:d7:51:bb:eb:9b:9d:d1:32:e8: f7:1b:f0:a4:c5:66:87:54:bd:7c:ea:0d:18:c9:42: 0a:da:b9:04:c0:56:cc:4b:8a:cd:f1:1f:5d:14:ce: 69:d9:c0:58:06:fd:b6:a8:3b:00:7e:c9:fd:30:a6: 17:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:68:35:8E:F4:71:E8:DD:8E:E1:C9:D7:AF:FF:CB:71:66:78:6E:92 X509v3 Authority Key Identifier: keyid:2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:62:77:5b:93:8d:36:6d:54:f4:b3:90:56:ee:cd:94:fa:1c: e6:6c:b6:f5:e7:94:ee:38:d8:a3:db:3d:90:7b:64:20:89:a3: a1:5c:e7:94:14:ec:ef:8c:2c:0d:13:93:ef:80:2a:00:bc:53: 5e:19:ae:0f:cb:99:8a:c6:d1:c5:53:ed:31:fa:53:a4:2d:ec: 11:92:de:ca:63:e8:06:c0:a5:65:f7:06:b4:60:2d:4c:14:48: 38:93:eb:9d:ba:12:a9:48:20:27:8c:b4:c4:69:df:28:f7:e0: 64:9c:48:37:be:22:b4:9c:84:a1:21:55:3b:5a:d3:30:76:b9: b3:b5:c1:36:93:7a:e2:7a:40:9b:2c:2d:86:d4:0d:ae:d5:c2: 1c:33:4e:a2:49:7e:b5:9b:73:d0:66:db:05:2c:84:58:26:3e: 7f:64:15:49:87:ea:49:d8:44:df:aa:c1:18:1d:2a:99:94:94: dd:ae:42:bc:c6:75:81:63:f3:55:5b:a7:ae:83:e7:c3:71:c1: a0:d8:3c:50:5f:f9:58:cb:7c:a5:0f:7c:a3:bd:2d:7f:ef:b5: 31:7b:a1:ae:e8:2d:02:04:c4:4e:6d:56:d7:e7:a7:b7:19:47: 00:4a:7d:c9:9f:32:3e:01:07:af:e6:b5:39:f6:0e:46:69:40: 1d:ca:34:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRFRjkxMTAvBgNVBAUTKDJBQzUzRTI2MjAyRjRCQ0JDMTQ4MDZGMTNFOUU4NjBE MEFDNjc3RjkwHhcNMjYwNDA1MDM1MzEzWhcNMjYwNDEyMDM1MzEzWjAYMRYwFAYD VQQDEw02OWQxZGNhYS01OTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApN1ELoKbGpvvdu6B/2YpivVVEtt2SDI9tCF1PA8l2TUqfB/nKYWhkC941UEc 0Re5exXu8+AODHD2f2oEgulQIgrGmfnYHkmtmDb+jUSaw5zj4uBciiJ+4bLrFm7S kKi9rWff1ksv7cWRzjj/7kXM68yHch8bznmtReIidLhzs5kzjI6eFUJKXzqF6iOS pxOpSMQiBCkdR9OTEuOnDsW55lg6xCGad88vRLMwe9GlCWrwmmmfu1HleQ5YQAVV g9qO+MCpYa4M5O3XUbvrm53RMuj3G/CkxWaHVL186g0YyUIK2rkEwFbMS4rN8R9d FM5p2cBYBv22qDsAfsn9MKYXMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAhoNY70 cejdjuHJ16//y3FmeG6SMB8GA1UdIwQYMBaAFCrFPiYgL0vLwUgG8T6ehg0Kxnf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVGOS83RTlFMjNGOEQx MzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4dkJTQWJ4UHA2R0RRckdk X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tzVS1KaUF2Uzh2QlNBYnhQcDZHRFFyR2Rfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEVGOS83RTlFMjNGOEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4 dkJTQWJ4UHA2R0RRckdkX2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX2J3W5ONNm1U9LOQVu7NlPoc5my29eeU7jjYo9s9kHtkIImjoVznlBTs74ws DROT74AqALxTXhmuD8uZisbRxVPtMfpTpC3sEZLeymPoBsClZfcGtGAtTBRIOJPr nboSqUggJ4y0xGnfKPfgZJxIN74itJyEoSFVO1rTMHa5s7XBNpN64npAmywthtQN rtXCHDNOokl+tZtz0GbbBSyEWCY+f2QVSYfqSdhE36rBGB0qmZSU3a5CvMZ1gWPz VVunroPnw3HBoNg8UF/5WMt8pQ98o70tf++1MXuhrugtAgTETm1W1+entxlHAEp9 yZ8yPgEHr+a1OfYORmlAHco0SA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:50:30 2026 by rpki-client