$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft File: kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft (raw, json) Hash identifier: UxpMkqDM+7Nf8XsbIi5o88Oa//Sb3rrSveIy05fCAxs= Subject key identifier: B4:54:73:52:CB:97:2A:18:0F:6A:07:65:09:A0:A4:E6:28:0A:C3:ED Authority key identifier: 91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09 Certificate issuer: /CN=A91FF5B9/serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft Manifest number: C9 Signing time: Sun 05 Apr 2026 06:21:08 +0000 Manifest this update: Sun 05 Apr 2026 06:21:08 +0000 Manifest next update: Sun 12 Apr 2026 06:21:08 +0000 Files and hashes: 1: kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl (hash: GLjtKIfZ5V+ctr4/pZrjvWONcpXa5xDGeR9bJ4zxY+c=) 2: E658E72CB4A611F08CEAB576C4F9AE02.roa (hash: GxZwvDHfJBJSbzbkszrsfMF/m9l39R3m3cmVTDMbpig=) 3: B754B304107A11F19C5931212E3D8C67.roa (hash: X42bQpbtp0QuU2Rc7u3h3Q36DtuhWPyQ8ylGJu3nBJ8=) 4: DA700744185511F09304D972C4F9AE02.roa (hash: esj/3vUrMHPqtCAfRwLH6nR9IZBIZp4+dFrygvFkia0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF5B9, serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09 Validity Not Before: Apr 5 06:21:08 2026 GMT Not After : Apr 12 06:21:08 2026 GMT Subject: CN=69d1ff54-3222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:19:58:eb:6c:85:12:ac:7e:7e:8b:5a:de:76: 6b:da:be:44:7b:5f:8c:50:4f:da:61:21:38:75:ff: d1:d7:f3:2c:96:b9:76:32:fb:4a:ce:da:6c:0a:14: aa:7b:b8:ec:78:53:22:e0:16:a5:7a:80:b7:db:b7: 26:19:7d:0e:be:e3:7b:b0:7c:53:f1:6a:45:9c:46: d0:49:4f:41:77:70:12:e0:f2:b6:3b:07:c1:b0:d8: 74:8d:dd:d2:93:7d:d7:51:a5:ea:08:25:3b:13:78: f3:82:bb:ed:90:74:5f:e4:66:b5:47:5d:20:9f:bb: 69:93:24:9c:fb:11:f0:75:59:84:30:07:12:88:28: 2e:ee:27:f9:4e:06:b3:19:c9:79:08:8b:21:f3:f0: 2e:62:20:55:a6:32:56:db:87:36:87:24:c1:f6:48: 19:f5:fe:c7:4b:0e:15:6a:4f:79:9b:47:31:66:b2: b9:b1:b0:7b:74:49:25:c3:28:07:20:0d:b5:e6:2d: f4:24:2b:c7:bd:c3:99:6a:60:56:05:f8:8e:a2:20: c0:5c:21:67:4b:42:44:94:96:ee:05:5e:3a:8f:95: 5e:c7:44:8b:68:a1:59:a5:5b:14:b5:f9:99:05:fb: 37:a6:7f:33:00:79:0f:c3:d2:75:7d:8f:34:72:51: 64:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:54:73:52:CB:97:2A:18:0F:6A:07:65:09:A0:A4:E6:28:0A:C3:ED X509v3 Authority Key Identifier: keyid:91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:ae:b3:e5:26:60:31:93:7e:10:bc:bb:c6:bf:78:7f:63:cd: 12:ee:f5:54:cb:aa:64:41:e8:19:c6:09:93:34:b7:7b:a4:8e: 00:d5:89:93:e4:98:f4:11:b5:a1:dc:a0:b4:5c:bd:02:15:8a: 7a:cd:29:9e:e7:c5:81:dd:db:c0:95:0e:0f:20:4c:7b:03:0d: 9c:45:9b:cd:ee:99:8a:64:df:99:b3:0c:c8:c4:73:43:83:ab: cc:2e:63:0b:d0:32:d8:0f:8a:fb:5a:43:73:c2:2d:d4:ab:2f: 27:e0:da:f5:1a:cd:13:f1:38:42:55:cc:e7:ec:ed:80:70:c4: 54:92:73:48:fc:97:b5:98:b4:ae:6d:37:c0:e0:a3:2e:b3:69: 3d:76:52:52:7f:03:7f:d2:49:ad:15:fb:ac:5b:d9:14:f9:f1: 17:99:04:3f:ae:f2:89:ab:c3:ee:6f:85:bd:76:8f:4e:2a:eb: 2a:60:75:25:43:4e:d3:d4:d8:99:86:e1:88:00:b0:b3:a5:b9: ed:9c:9e:5b:ba:b9:5a:35:4c:cc:e0:4e:e4:d7:48:f4:28:c7: d2:18:6c:d3:ea:34:0c:da:f4:3b:82:63:d4:f9:11:97:5d:cf: ca:9b:04:7b:d6:8a:37:f7:92:f7:09:a5:d3:91:37:7f:ea:73: f5:78:c6:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY1QjkxMTAvBgNVBAUTKDkxMTc2RDE2OUM0MkYwM0Q5NTI4MkJCQkEyMDRDNEU0 NEQzMUVEMDkwHhcNMjYwNDA1MDYyMTA4WhcNMjYwNDEyMDYyMTA4WjAYMRYwFAYD VQQDEw02OWQxZmY1NC0zMjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshlY62yFEqx+fota3nZr2r5Ee1+MUE/aYSE4df/R1/Mslrl2MvtKztpsChSq e7jseFMi4BaleoC327cmGX0OvuN7sHxT8WpFnEbQSU9Bd3AS4PK2OwfBsNh0jd3S k33XUaXqCCU7E3jzgrvtkHRf5Ga1R10gn7tpkySc+xHwdVmEMAcSiCgu7if5Tgaz Gcl5CIsh8/AuYiBVpjJW24c2hyTB9kgZ9f7HSw4Vak95m0cxZrK5sbB7dEklwygH IA215i30JCvHvcOZamBWBfiOoiDAXCFnS0JElJbuBV46j5Vex0SLaKFZpVsUtfmZ Bfs3pn8zAHkPw9J1fY80clFkoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLRUc1LL lyoYD2oHZQmgpOYoCsPtMB8GA1UdIwQYMBaAFJEXbRacQvA9lSgru6IExORNMe0J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVCOS81MjAyRDAyODBE RjkxMUYwOEU2RTc2MkFDNEY5QUUwMi9rUmR0RnB4QzhEMlZLQ3U3b2dURTVFMHg3 UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tSZHRGcHhDOEQyVktDdTdvZ1RFNUUweDdRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjVCOS81MjAyRDAyODBERjkxMUYwOEU2RTc2MkFDNEY5QUUwMi9rUmR0RnB4QzhE MlZLQ3U3b2dURTVFMHg3UWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiK6z5SZgMZN+ELy7xr94f2PNEu71VMuqZEHoGcYJkzS3e6SOANWJk+SY9BG1 odygtFy9AhWKes0pnufFgd3bwJUODyBMewMNnEWbze6ZimTfmbMMyMRzQ4OrzC5j C9Ay2A+K+1pDc8It1KsvJ+Da9RrNE/E4QlXM5+ztgHDEVJJzSPyXtZi0rm03wOCj LrNpPXZSUn8Df9JJrRX7rFvZFPnxF5kEP67yiavD7m+FvXaPTirrKmB1JUNO09TY mYbhiACws6W57ZyeW7q5WjVMzOBO5NdI9CjH0hhs0+o0DNr0O4Jj1PkRl13PypsE e9aKN/eS9wml05E3f+pz9XjGcg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:49:04 2026 by rpki-client