$ rpki-client -vvf rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft File: KsCrS187tbDveb0hpknK_-f5wgo.mft (raw, json) Hash identifier: R3t6DjN91wSH+irGUqKeKqIzP07j+ezN6FCSldGfk0U= Subject key identifier: 3C:48:80:73:91:75:42:CF:FE:69:85:A8:46:73:76:3F:EE:83:93:E7 Authority key identifier: 2A:C0:AB:4B:5F:3B:B5:B0:EF:79:BD:21:A6:49:CA:FF:E7:F9:C2:0A Certificate issuer: /CN=A91B927E/serialNumber=2AC0AB4B5F3BB5B0EF79BD21A649CAFFE7F9C20A Certificate serial: 07AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft Manifest number: 1274 Signing time: Sat 04 Apr 2026 19:13:20 +0000 Manifest this update: Sat 04 Apr 2026 19:13:19 +0000 Manifest next update: Sat 11 Apr 2026 19:13:19 +0000 Files and hashes: 1: KsCrS187tbDveb0hpknK_-f5wgo.crl (hash: lsGCfkevA4Sb3Gysd+WAW15KFjDOnym9BgEKcrhRC60=) 2: 37868F90574711EBB6BA4183C4F9AE02.roa (hash: OYV9eK2HNZwk+SVet5sg0PfolaNTvnaGC/XgX9+ge9A=) 3: 6243075E653411EB98060C17C4F9AE02.roa (hash: v0uC7Tgqg5Ka5gyjZsM8cExfBYnQ3ib9cJkCqTADvOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.crl rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:13:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1965 (0x7ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B927E, serialNumber=2AC0AB4B5F3BB5B0EF79BD21A649CAFFE7F9C20A Validity Not Before: Apr 4 19:13:19 2026 GMT Not After : Apr 11 19:13:19 2026 GMT Subject: CN=69d162d0-a489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:73:43:b6:ea:7f:f9:43:f7:64:41:68:73:f4: f8:eb:4a:0d:1d:32:8b:2a:8e:19:05:1d:9b:54:63: 05:89:46:77:8d:75:78:6c:94:6e:e5:cf:d3:74:e9: 32:73:30:91:8b:34:25:84:f9:59:6b:d8:88:e9:76: d3:44:bf:f2:96:e3:ce:ec:bc:c5:4e:11:d3:93:7e: 01:c7:8e:c1:42:3d:b8:d0:7d:f8:70:cf:5f:6d:9b: c3:b8:36:f7:72:19:0b:2b:43:2d:5f:72:e0:ef:20: 55:2c:46:bc:9a:65:74:e5:56:76:9a:0b:d1:bc:35: ba:7a:8e:ae:d0:13:b0:c8:bc:29:2c:36:d7:8c:e1: 30:e3:df:4c:ff:51:b7:09:02:2f:28:47:25:9c:3c: 12:71:99:a6:54:59:5d:8f:48:4f:d6:80:d9:e6:1c: d4:84:8d:4e:7a:09:0c:e2:19:b2:48:2f:bd:ef:64: d5:3c:51:8f:33:c2:1b:00:2a:a1:7f:84:cd:5f:dd: c9:22:f8:99:6b:5b:12:3b:64:53:b2:8f:e0:07:ef: 84:05:1b:07:b9:46:ac:95:e0:2d:1a:44:4c:f0:7b: 73:de:a9:12:e3:b2:03:f4:4f:76:0a:10:3b:6b:57: 1d:9e:08:df:01:90:ad:4a:ac:1e:b4:54:ef:0c:f4: c5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:48:80:73:91:75:42:CF:FE:69:85:A8:46:73:76:3F:EE:83:93:E7 X509v3 Authority Key Identifier: keyid:2A:C0:AB:4B:5F:3B:B5:B0:EF:79:BD:21:A6:49:CA:FF:E7:F9:C2:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:32:ca:47:3c:32:93:b7:af:a5:36:ea:05:68:45:1b:85:d1: ae:5a:71:86:67:6c:16:9f:62:0a:9b:e0:0b:29:10:71:81:ec: 50:f9:17:89:dc:a6:bc:f3:4e:f3:e4:08:01:5e:9f:30:86:8d: 25:59:28:e4:ee:ef:49:f6:2e:1e:c8:1f:e8:16:14:8a:2b:bf: e5:cc:3c:94:9e:93:c0:38:78:15:ff:f0:a8:51:cd:0b:2b:8b: 7a:87:f2:b0:91:0f:ac:0d:8a:37:7e:41:5b:2c:1f:c3:24:a4: 89:a7:70:50:86:f5:26:e7:7a:da:8c:4b:c3:60:44:5a:5c:49: ea:69:7f:82:77:6d:a6:ae:bb:f9:d0:fd:0a:59:35:6a:38:c4: 6d:50:c9:9a:68:98:36:9a:69:2b:cd:b5:5d:25:e7:80:1e:4f: 14:ff:cb:68:ee:55:27:a4:f3:16:d1:0f:6e:96:49:49:72:61: bd:f4:8f:53:5d:c1:19:22:a7:b8:25:6a:d9:a9:67:76:e9:bc: 2c:6b:32:0b:84:cc:9e:5b:3e:20:c5:55:a8:b6:dc:47:75:cf: a8:cd:9a:8d:d7:42:55:96:1e:72:a8:af:4b:3f:6d:76:16:5b: 3f:2d:c8:67:7d:2c:55:8d:b4:99:47:69:7e:73:5a:5f:2b:59: 36:2a:dd:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyN0UxMTAvBgNVBAUTKDJBQzBBQjRCNUYzQkI1QjBFRjc5QkQyMUE2NDlDQUZG RTdGOUMyMEEwHhcNMjYwNDA0MTkxMzE5WhcNMjYwNDExMTkxMzE5WjAYMRYwFAYD VQQDEw02OWQxNjJkMC1hNDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0XNDtup/+UP3ZEFoc/T460oNHTKLKo4ZBR2bVGMFiUZ3jXV4bJRu5c/TdOky czCRizQlhPlZa9iI6XbTRL/yluPO7LzFThHTk34Bx47BQj240H34cM9fbZvDuDb3 chkLK0MtX3Lg7yBVLEa8mmV05VZ2mgvRvDW6eo6u0BOwyLwpLDbXjOEw499M/1G3 CQIvKEclnDwScZmmVFldj0hP1oDZ5hzUhI1OegkM4hmySC+972TVPFGPM8IbACqh f4TNX93JIviZa1sSO2RTso/gB++EBRsHuUasleAtGkRM8Htz3qkS47ID9E92ChA7 a1cdngjfAZCtSqwetFTvDPTFoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDxIgHOR dULP/mmFqEZzdj/ug5PnMB8GA1UdIwQYMBaAFCrAq0tfO7Ww73m9IaZJyv/n+cIK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI3RS9DQ0Q2RUQxQzY4 REYxMUVBOTdCMTU1MjRDNEY5QUUwMi9Lc0NyUzE4N3RiRHZlYjBocGtuS18tZjV3 Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tzQ3JTMTg3dGJEdmViMGhwa25LXy1mNXdnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI3RS9DQ0Q2RUQxQzY4REYxMUVBOTdCMTU1MjRDNEY5QUUwMi9Lc0NyUzE4N3Ri RHZlYjBocGtuS18tZjV3Z28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtTLKRzwyk7evpTbqBWhFG4XRrlpxhmdsFp9iCpvgCykQcYHsUPkXidymvPNO 8+QIAV6fMIaNJVko5O7vSfYuHsgf6BYUiiu/5cw8lJ6TwDh4Ff/wqFHNCyuLeofy sJEPrA2KN35BWywfwySkiadwUIb1Jud62oxLw2BEWlxJ6ml/gndtpq67+dD9Clk1 ajjEbVDJmmiYNpppK821XSXngB5PFP/LaO5VJ6TzFtEPbpZJSXJhvfSPU13BGSKn uCVq2alndum8LGsyC4TMnls+IMVVqLbcR3XPqM2ajddCVZYecqivSz9tdhZbPy3I Z30sVY20mUdpfnNaXytZNirdqA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:54:16 2026 by rpki-client