$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft File: KTvwacT02DHu52nVsTnjAh2zSwA.mft (raw, json) Hash identifier: XWwwtbP9j0B7BpVlnWxc4+MQR36Vvi5KP1VH8A1Ahoo= Subject key identifier: 15:31:59:2F:18:71:48:3E:24:64:34:6E:D1:F6:73:04:59:FD:3E:90 Authority key identifier: 29:3B:F0:69:C4:F4:D8:31:EE:E7:69:D5:B1:39:E3:02:1D:B3:4B:00 Certificate issuer: /CN=A91CE65A/serialNumber=293BF069C4F4D831EEE769D5B139E3021DB34B00 Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft Manifest number: 0145 Signing time: Sun 05 Apr 2026 04:45:15 +0000 Manifest this update: Sun 05 Apr 2026 04:45:15 +0000 Manifest next update: Sun 12 Apr 2026 04:45:15 +0000 Files and hashes: 1: KTvwacT02DHu52nVsTnjAh2zSwA.crl (hash: ZIlii46UosjeZj+3HhgiX6fWvhYz/rjQxxr2qGpmhsg=) 2: 62959E66682B11F09ECB0C24C4F9AE02.roa (hash: MuAhFwAwASJtjgbbeqMge30aVjeav/nUmbfnNFDWvGc=) 3: AAF88862D51811F0B469126CC4F9AE02.roa (hash: +QQBiTJ12auhqCjWR/SYaD0xY7aR7A8XJnlI57+FIP0=) 4: AB61CD86D51811F09422126CC4F9AE02.roa (hash: wLQqscjsnYEYzLsf7dryhLVTKS2UxVldfhWeV31D8Ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.crl rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE65A, serialNumber=293BF069C4F4D831EEE769D5B139E3021DB34B00 Validity Not Before: Apr 5 04:45:15 2026 GMT Not After : Apr 12 04:45:15 2026 GMT Subject: CN=69d1e8db-64fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5e:f1:55:1a:eb:fe:ae:89:87:01:26:ec:6f: 90:1f:1a:13:55:c6:d9:93:15:ad:ad:a8:23:95:a6: d0:3f:dc:47:3f:cf:bf:df:7e:e0:d7:66:89:7a:c7: ca:a7:b6:21:4c:86:1a:fa:71:80:b0:b6:b2:19:e8: 29:7d:ea:dc:d8:32:55:9d:55:ad:d7:07:e0:dd:96: c4:d6:20:ab:11:8d:a1:1a:83:e8:de:94:42:c6:fc: 2a:d9:31:95:0c:06:ff:f5:ed:aa:11:47:87:41:02: 9d:03:c7:d3:02:69:4d:8e:e9:73:5d:7c:e4:2f:89: bd:33:da:16:4d:72:53:fd:2b:a9:ed:8d:d9:9f:81: 73:8f:b3:af:cd:61:e7:cf:8f:72:ed:a8:6f:43:77: eb:65:6c:79:35:61:6a:58:4d:ad:a6:c2:25:a7:7f: 90:32:3a:bf:6a:24:83:f3:e3:d6:42:68:42:99:28: a9:88:75:9d:0e:fa:7e:c1:10:1b:56:8c:50:9c:9f: 17:d0:ad:98:78:c2:6c:84:87:d8:5d:72:13:db:44: df:c5:74:c2:4c:25:53:cc:41:24:fe:d3:d3:ff:86: 35:69:80:11:9e:d9:29:58:06:34:c3:dc:4b:21:78: 40:36:22:cd:ef:64:ae:fa:e9:df:44:d7:0f:d7:ba: e9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:31:59:2F:18:71:48:3E:24:64:34:6E:D1:F6:73:04:59:FD:3E:90 X509v3 Authority Key Identifier: keyid:29:3B:F0:69:C4:F4:D8:31:EE:E7:69:D5:B1:39:E3:02:1D:B3:4B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:a3:08:fb:b9:4e:f4:24:c1:80:60:4a:67:e9:84:1c:3f:0f: 0f:ea:1d:0b:69:e3:9b:8d:19:95:e1:2a:ce:cc:2f:a2:6a:60: b9:1f:d8:cc:32:3d:81:f0:f9:7e:e0:52:b3:b2:9d:6e:d5:e5: 49:1d:70:28:a0:b9:c3:1b:a8:30:eb:05:38:3d:b3:51:67:b4: 5c:ec:4f:aa:c4:68:f1:76:74:1b:15:17:e0:aa:e7:d0:22:69: 5c:9f:82:90:da:af:a3:d0:14:66:6e:52:d5:7c:fa:88:bf:08: 45:1b:29:d0:bc:2b:7e:4b:02:03:18:92:4a:c7:2b:59:3e:37: 2c:ae:88:a4:d0:f4:af:bc:ea:ba:5f:70:6b:a2:ab:57:0a:01: c5:c9:a2:a0:bb:fc:d8:b1:18:e0:ac:22:3b:8a:93:02:90:5b: 0d:42:06:a4:c2:86:17:5c:c3:0a:07:12:88:64:bc:26:f8:70: 76:c2:9b:21:cf:ca:fb:b4:68:ed:d8:02:cd:6f:d8:ff:59:d3: 34:3a:ff:e3:5d:47:9f:82:49:7b:63:99:76:78:e5:86:58:68: 84:e9:5a:73:59:01:c7:62:fd:3c:ea:b7:45:64:af:39:76:43: 34:51:97:9c:52:6d:0d:0a:96:91:30:08:b5:ab:66:10:0e:8d: 68:84:d6:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2NUExMTAvBgNVBAUTKDI5M0JGMDY5QzRGNEQ4MzFFRUU3NjlENUIxMzlFMzAy MURCMzRCMDAwHhcNMjYwNDA1MDQ0NTE1WhcNMjYwNDEyMDQ0NTE1WjAYMRYwFAYD VQQDEw02OWQxZThkYi02NGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv17xVRrr/q6JhwEm7G+QHxoTVcbZkxWtragjlabQP9xHP8+/337g12aJesfK p7YhTIYa+nGAsLayGegpferc2DJVnVWt1wfg3ZbE1iCrEY2hGoPo3pRCxvwq2TGV DAb/9e2qEUeHQQKdA8fTAmlNjulzXXzkL4m9M9oWTXJT/Sup7Y3Zn4Fzj7OvzWHn z49y7ahvQ3frZWx5NWFqWE2tpsIlp3+QMjq/aiSD8+PWQmhCmSipiHWdDvp+wRAb VoxQnJ8X0K2YeMJshIfYXXIT20TfxXTCTCVTzEEk/tPT/4Y1aYARntkpWAY0w9xL IXhANiLN72Su+unfRNcP17rpOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBUxWS8Y cUg+JGQ0btH2cwRZ/T6QMB8GA1UdIwQYMBaAFCk78GnE9Ngx7udp1bE54wIds0sA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTY1QS82NkU2RkUzNjQ5 N0ExMUVGQUY1NTE4NDJDNEY5QUUwMi9LVHZ3YWNUMDJESHU1Mm5Wc1RuakFoMnpT d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tUdndhY1QwMkRIdTUyblZzVG5qQWgyelN3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTY1QS82NkU2RkUzNjQ5N0ExMUVGQUY1NTE4NDJDNEY5QUUwMi9LVHZ3YWNUMDJE SHU1Mm5Wc1RuakFoMnpTd0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADaMI+7lO9CTBgGBKZ+mEHD8PD+odC2njm40ZleEqzswvompguR/YzDI9gfD5 fuBSs7KdbtXlSR1wKKC5wxuoMOsFOD2zUWe0XOxPqsRo8XZ0GxUX4Krn0CJpXJ+C kNqvo9AUZm5S1Xz6iL8IRRsp0LwrfksCAxiSSscrWT43LK6IpND0r7zqul9wa6Kr VwoBxcmioLv82LEY4KwiO4qTApBbDUIGpMKGF1zDCgcSiGS8JvhwdsKbIc/K+7Ro 7dgCzW/Y/1nTNDr/411Hn4JJe2OZdnjlhlhohOlac1kBx2L9POq3RWSvOXZDNFGX nFJtDQqWkTAItatmEA6NaITWnA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:51:02 2026 by rpki-client