$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft File: KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft (raw, json) Hash identifier: 7ebwYot0OhG6cFVKFvQL+pmMpLuy2nBHrmee8BDaBFE= Subject key identifier: 02:F0:84:E1:64:F0:63:C3:09:60:7F:99:2C:BE:6B:26:CA:55:CC:20 Authority key identifier: 28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD Certificate issuer: /CN=A91ACC22/serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD Certificate serial: 10AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft Manifest number: 1096 Signing time: Sat 04 Apr 2026 17:14:41 +0000 Manifest this update: Sat 04 Apr 2026 17:14:41 +0000 Manifest next update: Sat 11 Apr 2026 17:14:41 +0000 Files and hashes: 1: KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl (hash: VsIra5BJ2paIk1+PWSoGvQB5LJlNHvgdFNyEmLEUjkA=) 2: 2A3D8B5EA97D11EABA31B843C4F9AE02.roa (hash: xjuxHTm+G9he/JFBNF/J7ScezC0X5PCaznrRtGeATtQ=) 3: EF66DDE4E46A11EB9552D31BC4F9AE02.roa (hash: vMIdusdjtj9hlcGq2gI+hsj/mLp2lRpI2Yrz/QIdsz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4267 (0x10ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACC22, serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD Validity Not Before: Apr 4 17:14:41 2026 GMT Not After : Apr 11 17:14:41 2026 GMT Subject: CN=69d14701-7480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:53:3d:f5:5d:55:73:c3:fa:72:3a:e5:eb:d3: 3e:c4:61:11:48:df:a0:49:6e:0e:72:0d:e5:f2:05: a1:87:29:71:8e:e0:a6:96:e0:19:4a:6f:1f:42:17: a4:5c:73:ad:9b:2d:ff:a8:08:cb:70:25:94:94:7c: ce:28:25:6c:db:ed:cc:82:40:b1:2f:0b:a4:51:e1: 1e:e5:13:72:43:ea:85:7b:fb:69:ba:f4:ba:38:5d: 60:fb:3d:b4:80:7c:5e:98:00:d1:18:5d:a4:b5:56: 8b:8d:11:fd:c1:e1:63:b7:a9:8e:c1:1b:23:36:ec: 93:96:95:98:87:89:56:a8:6d:03:98:28:66:cd:a3: 6a:25:80:5d:db:14:ce:30:e2:62:e0:39:be:ba:a8: a0:12:4a:8a:fa:ad:e6:46:5a:6f:78:85:a1:68:83: f6:75:87:20:40:c2:e2:60:e0:37:3b:e0:c8:e8:a4: 46:9f:ee:39:64:77:c1:59:a8:88:1d:c3:fb:8b:ca: c3:46:dd:2b:63:ab:8c:cc:3c:01:63:7e:4f:bd:8c: fe:4e:8d:20:8f:aa:8c:37:b5:b8:b0:e4:b3:fa:c6: 9d:52:30:0d:5a:56:0d:a9:05:5e:1f:88:48:88:f4: eb:9d:ff:7f:1a:0b:b8:61:b6:91:ad:18:63:54:22: dd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F0:84:E1:64:F0:63:C3:09:60:7F:99:2C:BE:6B:26:CA:55:CC:20 X509v3 Authority Key Identifier: keyid:28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:4e:a3:e3:ed:33:41:bb:e3:80:c5:8e:d9:bb:8d:ae:ce:5c: d2:46:49:f7:9b:55:90:3e:06:76:96:e3:e0:31:d5:d3:8a:f7: 09:b2:72:83:8e:40:70:ed:9d:5b:97:1d:32:72:16:9f:a4:1b: b4:58:d6:33:7d:f2:1c:ef:f7:1a:32:bd:f9:b9:06:67:a1:1b: 71:31:3a:05:6c:ae:fb:5f:c1:10:87:54:8a:8d:8d:07:13:f6: 7f:d1:75:f6:c4:0a:78:74:02:74:3f:f9:bc:5a:e0:46:00:d6: 47:34:14:8d:2e:0d:9d:f9:12:f5:7a:f2:24:c2:82:44:82:4f: 9d:ed:9a:51:6a:d0:fc:08:90:d3:2b:a8:8e:43:1e:fd:d7:d6: ce:2a:be:81:14:85:f5:66:fe:07:ef:9c:22:e5:73:d3:a2:2a: b0:43:d4:d8:1c:99:b1:bf:a4:a0:7a:5a:8c:ac:25:45:41:9c: 40:d2:bc:ff:e9:79:0d:e3:34:06:a5:bf:2f:ba:8c:83:a9:aa: be:72:d8:59:98:28:56:7f:0e:07:1b:c8:40:b7:86:7f:a5:de: 9b:3e:55:8e:cc:25:7e:24:4e:6d:16:85:a0:91:c6:e3:09:4f: 96:c5:8a:80:97:67:62:1b:d3:8c:96:b2:7f:38:f5:fb:77:f3: 88:bb:7d:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNDMjIxMTAvBgNVBAUTKDI4RjVFNjVENzUwNTk2MURDNTUwQTk0OTI0REJDRUZC QjY3Njk0QkQwHhcNMjYwNDA0MTcxNDQxWhcNMjYwNDExMTcxNDQxWjAYMRYwFAYD VQQDEw02OWQxNDcwMS03NDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVM99V1Vc8P6cjrl69M+xGERSN+gSW4Ocg3l8gWhhylxjuCmluAZSm8fQhek XHOtmy3/qAjLcCWUlHzOKCVs2+3MgkCxLwukUeEe5RNyQ+qFe/tpuvS6OF1g+z20 gHxemADRGF2ktVaLjRH9weFjt6mOwRsjNuyTlpWYh4lWqG0DmChmzaNqJYBd2xTO MOJi4Dm+uqigEkqK+q3mRlpveIWhaIP2dYcgQMLiYOA3O+DI6KRGn+45ZHfBWaiI HcP7i8rDRt0rY6uMzDwBY35PvYz+To0gj6qMN7W4sOSz+sadUjANWlYNqQVeH4hI iPTrnf9/Ggu4YbaRrRhjVCLdvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFALwhOFk 8GPDCWB/mSy+aybKVcwgMB8GA1UdIwQYMBaAFCj15l11BZYdxVCpSSTbzvu2dpS9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0MyMi82OTA2QzZGQTRD NzQxMUU5QjdDNEJCNTVDNEY5QUUwMi9LUFhtWFhVRmxoM0ZVS2xKSk52Ty03WjJs TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tQWG1YWFVGbGgzRlVLbEpKTnZPLTdaMmxMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0MyMi82OTA2QzZGQTRDNzQxMUU5QjdDNEJCNTVDNEY5QUUwMi9LUFhtWFhVRmxo M0ZVS2xKSk52Ty03WjJsTDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm06j4+0zQbvjgMWO2buNrs5c0kZJ95tVkD4Gdpbj4DHV04r3CbJyg45AcO2d W5cdMnIWn6QbtFjWM33yHO/3GjK9+bkGZ6EbcTE6BWyu+1/BEIdUio2NBxP2f9F1 9sQKeHQCdD/5vFrgRgDWRzQUjS4NnfkS9XryJMKCRIJPne2aUWrQ/AiQ0yuojkMe /dfWziq+gRSF9Wb+B++cIuVz06IqsEPU2ByZsb+koHpajKwlRUGcQNK8/+l5DeM0 BqW/L7qMg6mqvnLYWZgoVn8OBxvIQLeGf6Xemz5VjswlfiRObRaFoJHG4wlPlsWK gJdnYhvTjJayfzj1+3fziLt94w== -----END CERTIFICATE-----Generated at Mon Apr 6 13:38:03 2026 by rpki-client