$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.mft File: K2gwqzfLNO8nOiCi8ugmQplgE9o.mft (raw, json) Hash identifier: 0Q5zDGFKXWmzzufdUHr9Uqe2wEgJLbDM9G/me2Fhi+g= Subject key identifier: B3:E2:38:5F:86:C8:D0:0D:4C:F0:83:F7:54:EE:75:58:AA:C3:5C:74 Authority key identifier: 2B:68:30:AB:37:CB:34:EF:27:3A:20:A2:F2:E8:26:42:99:60:13:DA Certificate issuer: /CN=A91E3E80/serialNumber=2B6830AB37CB34EF273A20A2F2E82642996013DA Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K2gwqzfLNO8nOiCi8ugmQplgE9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.mft Manifest number: 97 Signing time: Sun 05 Apr 2026 06:47:04 +0000 Manifest this update: Sun 05 Apr 2026 06:47:04 +0000 Manifest next update: Sun 12 Apr 2026 06:47:04 +0000 Files and hashes: 1: K2gwqzfLNO8nOiCi8ugmQplgE9o.crl (hash: Yunoe/Qqcolt9ABF1qeH9ktpHEcbPcFSzIUm2oZWfYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.crl rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K2gwqzfLNO8nOiCi8ugmQplgE9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:47:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E80, serialNumber=2B6830AB37CB34EF273A20A2F2E82642996013DA Validity Not Before: Apr 5 06:47:04 2026 GMT Not After : Apr 12 06:47:04 2026 GMT Subject: CN=69d20568-e6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8f:d8:91:ea:86:90:18:ab:af:e4:fc:21:55: 6f:da:6e:a9:20:52:a9:17:2d:b0:c4:b3:a1:2b:35: 81:e1:0b:d0:fb:36:81:e6:94:a5:f4:42:b2:c9:c0: fc:03:17:81:77:eb:02:7d:c7:a2:a7:a1:84:61:c3: 05:08:32:f0:38:05:79:30:cf:a7:da:2a:96:66:da: 7a:2a:f5:06:59:9e:2a:b4:fb:c8:3a:1b:8b:98:0b: ca:8c:b4:ea:89:63:26:5c:38:3a:c5:6d:a6:ba:20: d2:d2:cc:3e:16:21:cc:03:68:26:f8:e9:75:49:b4: 40:b4:43:85:5e:66:a3:33:7c:60:5e:49:ec:93:a1: 63:2c:04:9e:ab:56:8f:ce:ae:f6:7e:fd:17:fd:f7: a8:bc:d1:b1:fb:db:4c:f4:9f:4b:96:a9:19:b8:6d: 13:c5:1a:7d:b0:fc:40:cc:fd:79:11:fc:b2:ee:fa: 59:2d:72:2d:c1:d4:03:9a:a2:4e:93:31:a5:c2:c0: 71:d9:a1:34:50:75:3b:13:3b:b4:44:0e:7c:ae:4c: 36:83:35:79:66:eb:0f:d7:b7:92:5c:07:49:2c:3d: 2d:7b:63:ab:2f:0a:22:6c:3c:11:46:06:82:04:f4: 3d:01:eb:23:99:1b:ed:af:41:cf:64:48:dd:34:6d: 9f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E2:38:5F:86:C8:D0:0D:4C:F0:83:F7:54:EE:75:58:AA:C3:5C:74 X509v3 Authority Key Identifier: keyid:2B:68:30:AB:37:CB:34:EF:27:3A:20:A2:F2:E8:26:42:99:60:13:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K2gwqzfLNO8nOiCi8ugmQplgE9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:a7:f2:1f:1d:e7:6a:11:17:7d:56:b2:92:ea:2b:90:62:be: 6e:88:78:f4:a1:7b:2d:64:cf:fa:51:f4:40:72:c5:36:18:09: 96:62:89:5e:eb:c6:4f:27:ce:20:c2:78:f0:a1:3c:f7:f5:da: 94:ab:5d:0f:03:2c:43:c3:3c:d5:d2:72:ec:ff:f9:17:83:93: 0a:b7:ae:27:4a:6b:54:41:3d:9c:cd:02:c2:35:29:69:7e:31: ec:15:0e:dc:50:a0:e9:3a:fc:ff:26:0a:56:11:12:c9:3f:eb: c6:8d:61:10:9b:7f:7e:b4:2c:c6:36:25:c2:db:ca:74:7a:45: cc:45:54:13:6e:fb:ec:29:8c:2c:66:7a:d2:0e:1e:ab:84:67: 3f:70:4f:2f:93:66:e5:07:ff:1b:84:50:08:18:fc:a5:d8:9e: 2b:d0:bd:1e:fb:ed:b5:ef:b2:4d:0b:f2:02:59:72:ee:db:ee: d0:23:6c:7b:64:fd:dd:0d:38:9f:f2:89:be:fe:bd:dc:7f:0c: bc:37:20:e9:b9:cc:54:c4:3e:8d:a9:00:8f:8f:95:2c:71:2e: 2b:e9:49:0c:85:4e:df:de:b7:5c:83:30:d5:ce:a3:7c:27:f8: 15:3b:67:63:e3:4d:15:9f:04:9d:ee:0c:4c:b7:61:b8:2d:67: 36:79:a8:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNFODAxMTAvBgNVBAUTKDJCNjgzMEFCMzdDQjM0RUYyNzNBMjBBMkYyRTgyNjQy OTk2MDEzREEwHhcNMjYwNDA1MDY0NzA0WhcNMjYwNDEyMDY0NzA0WjAYMRYwFAYD VQQDEw02OWQyMDU2OC1lNmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqY/YkeqGkBirr+T8IVVv2m6pIFKpFy2wxLOhKzWB4QvQ+zaB5pSl9EKyycD8 AxeBd+sCfceip6GEYcMFCDLwOAV5MM+n2iqWZtp6KvUGWZ4qtPvIOhuLmAvKjLTq iWMmXDg6xW2muiDS0sw+FiHMA2gm+Ol1SbRAtEOFXmajM3xgXknsk6FjLASeq1aP zq72fv0X/feovNGx+9tM9J9LlqkZuG0TxRp9sPxAzP15Efyy7vpZLXItwdQDmqJO kzGlwsBx2aE0UHU7Ezu0RA58rkw2gzV5ZusP17eSXAdJLD0te2OrLwoibDwRRgaC BPQ9AesjmRvtr0HPZEjdNG2fOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLPiOF+G yNANTPCD91TudViqw1x0MB8GA1UdIwQYMBaAFCtoMKs3yzTvJzogovLoJkKZYBPa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0U4MC8zRTQwMkFFQTRC NjYxMUYwQjg4NTI0MzlDNEY5QUUwMi9LMmd3cXpmTE5POG5PaUNpOHVnbVFwbGdF OW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0syZ3dxemZMTk84bk9pQ2k4dWdtUXBsZ0U5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0U4MC8zRTQwMkFFQTRCNjYxMUYwQjg4NTI0MzlDNEY5QUUwMi9LMmd3cXpmTE5P OG5PaUNpOHVnbVFwbGdFOW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWKfyHx3nahEXfVaykuorkGK+boh49KF7LWTP+lH0QHLFNhgJlmKJXuvGTyfO IMJ48KE89/XalKtdDwMsQ8M81dJy7P/5F4OTCreuJ0prVEE9nM0CwjUpaX4x7BUO 3FCg6Tr8/yYKVhESyT/rxo1hEJt/frQsxjYlwtvKdHpFzEVUE2777CmMLGZ60g4e q4RnP3BPL5Nm5Qf/G4RQCBj8pdieK9C9Hvvtte+yTQvyAlly7tvu0CNse2T93Q04 n/KJvv693H8MvDcg6bnMVMQ+jakAj4+VLHEuK+lJDIVO3963XIMw1c6jfCf4FTtn Y+NNFZ8Ene4MTLdhuC1nNnmopA== -----END CERTIFICATE-----Generated at Mon Apr 6 10:11:46 2026 by rpki-client