$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft File: KB6VPa5xcoChbkvFbkE1LoR2PLw.mft (raw, json) Hash identifier: SAPmVzBhQhpWzpOlbcp6sZ/0mw8JUMJq2NhX3rwBwPg= Subject key identifier: B6:A2:63:6B:F8:3B:AC:6F:9D:C4:3F:AD:D4:7E:9D:25:C6:ED:8B:9A Authority key identifier: 28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC Certificate issuer: /CN=A91EEA4D/serialNumber=281E953DAE717280A16E4BC56E41352E84763CBC Certificate serial: 08D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft Manifest number: 14F7 Signing time: Sat 04 Apr 2026 18:55:30 +0000 Manifest this update: Sat 04 Apr 2026 18:55:29 +0000 Manifest next update: Sat 11 Apr 2026 18:55:29 +0000 Files and hashes: 1: KB6VPa5xcoChbkvFbkE1LoR2PLw.crl (hash: SjJel/ZotN/UhqHNLVkix7ZIYDVuHH7g6zJ9AOWbEfM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2258 (0x8d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D, serialNumber=281E953DAE717280A16E4BC56E41352E84763CBC Validity Not Before: Apr 4 18:55:29 2026 GMT Not After : Apr 11 18:55:29 2026 GMT Subject: CN=69d15ea2-5976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:04:9c:42:ab:13:fd:f1:e9:de:3c:54:12:99: 10:41:f6:8b:c8:16:b2:03:71:44:9c:df:e8:6a:7d: 6e:93:fc:d6:2d:1a:9a:c6:7d:7c:89:35:8b:b8:95: c8:7e:37:e1:b1:70:6f:79:1e:22:08:56:19:24:cc: f7:c1:0b:48:27:06:8c:28:97:cc:21:54:4c:1a:6b: d9:4c:1c:ce:3c:0f:e4:4d:08:8f:a2:b8:52:6f:a2: 3c:bc:1b:53:9e:21:14:18:4b:3c:4f:3e:20:0e:cc: e1:4d:e2:20:83:e6:00:69:a7:47:7a:18:49:3d:f4: 82:75:31:d9:16:5d:4d:c4:af:d6:72:a2:86:d8:b7: 91:c0:11:1c:60:0c:6e:a9:25:f7:9b:66:31:7e:66: 43:3f:55:c8:65:e4:28:ea:71:df:aa:db:f3:6a:1c: a4:db:f3:9c:11:e2:7b:20:8b:22:4a:3e:5d:56:46: 83:bb:bb:e4:eb:ac:8f:03:27:16:38:3f:0b:f5:c2: 30:d6:97:67:70:14:ba:ab:df:d8:f4:37:8a:0d:8f: 06:08:9a:5c:2b:e7:94:78:0a:b2:f6:c4:25:7f:50: 84:f3:ea:42:6f:00:cb:d1:ce:c6:4c:e8:18:43:7c: 7a:f5:f8:2e:3b:bc:7d:94:20:2e:30:a1:19:8d:92: f0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A2:63:6B:F8:3B:AC:6F:9D:C4:3F:AD:D4:7E:9D:25:C6:ED:8B:9A X509v3 Authority Key Identifier: keyid:28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:f9:0a:b0:b5:a8:3d:28:7f:e0:60:be:5a:b2:6b:00:1c:0e: 8a:76:5d:78:2a:96:6c:a6:2c:3d:13:3b:25:0a:0c:f7:52:ee: 78:e1:ba:0a:5a:05:55:11:7a:96:93:91:0f:c8:77:1c:94:1c: 0c:7d:db:4f:30:6c:10:f3:21:c1:f1:d3:08:19:21:ab:89:14: 8e:a0:f0:8e:f0:a7:c7:e9:85:ec:91:b8:76:5a:c6:70:b7:ba: 75:24:36:4f:a9:d5:4f:6f:33:41:6b:8a:49:ac:58:7f:b4:34: 8e:2c:fd:19:95:71:43:72:a7:22:90:53:77:c6:bc:1b:43:63: c8:b2:f5:5b:fb:8c:a1:82:b2:02:d1:40:35:e7:65:3a:4c:e3: 36:b2:3c:b9:3e:10:59:a6:19:eb:42:d2:e4:46:1b:db:4c:a0: f1:83:ad:d8:c0:7f:80:17:35:b7:a7:81:e2:5c:a2:4a:d0:2b: fc:d6:0e:15:0b:a3:9c:bb:a0:d9:9c:de:06:52:21:c3:95:c7: 41:ba:76:40:11:a1:12:2f:54:63:e4:b0:19:e5:69:75:0e:8d: 39:95:f0:ce:0b:0c:d3:ea:76:e7:95:02:ae:ce:e1:fd:99:07: b8:dd:bd:21:a2:f2:41:de:f9:c9:db:9c:95:c4:22:66:3f:5f: 15:d2:77:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNEQxMTAvBgNVBAUTKDI4MUU5NTNEQUU3MTcyODBBMTZFNEJDNTZFNDEzNTJF ODQ3NjNDQkMwHhcNMjYwNDA0MTg1NTI5WhcNMjYwNDExMTg1NTI5WjAYMRYwFAYD VQQDEw02OWQxNWVhMi01OTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmgScQqsT/fHp3jxUEpkQQfaLyBayA3FEnN/oan1uk/zWLRqaxn18iTWLuJXI fjfhsXBveR4iCFYZJMz3wQtIJwaMKJfMIVRMGmvZTBzOPA/kTQiPorhSb6I8vBtT niEUGEs8Tz4gDszhTeIgg+YAaadHehhJPfSCdTHZFl1NxK/WcqKG2LeRwBEcYAxu qSX3m2YxfmZDP1XIZeQo6nHfqtvzahyk2/OcEeJ7IIsiSj5dVkaDu7vk66yPAycW OD8L9cIw1pdncBS6q9/Y9DeKDY8GCJpcK+eUeAqy9sQlf1CE8+pCbwDL0c7GTOgY Q3x69fguO7x9lCAuMKEZjZLwOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLaiY2v4 O6xvncQ/rdR+nSXG7YuaMB8GA1UdIwQYMBaAFCgelT2ucXKAoW5LxW5BNS6Edjy8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE0RC82NjFGNzNFQzQ3 MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9LQjZWUGE1eGNvQ2hia3ZGYmtFMUxvUjJQ THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tCNlZQYTV4Y29DaGJrdkZia0UxTG9SMlBMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE0RC82NjFGNzNFQzQ3MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9LQjZWUGE1eGNv Q2hia3ZGYmtFMUxvUjJQTHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAfkKsLWoPSh/4GC+WrJrABwOinZdeCqWbKYsPRM7JQoM91LueOG6CloFVRF6 lpORD8h3HJQcDH3bTzBsEPMhwfHTCBkhq4kUjqDwjvCnx+mF7JG4dlrGcLe6dSQ2 T6nVT28zQWuKSaxYf7Q0jiz9GZVxQ3KnIpBTd8a8G0NjyLL1W/uMoYKyAtFANedl OkzjNrI8uT4QWaYZ60LS5EYb20yg8YOt2MB/gBc1t6eB4lyiStAr/NYOFQujnLug 2ZzeBlIhw5XHQbp2QBGhEi9UY+SwGeVpdQ6NOZXwzgsM0+p255UCrs7h/ZkHuN29 IaLyQd75yduclcQiZj9fFdJ3Ww== -----END CERTIFICATE-----Generated at Mon Apr 6 08:26:02 2026 by rpki-client