$ rpki-client -vvf rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft File: kUhQxLilE7L45O3EtVeHB3djcq4.mft (raw, json) Hash identifier: t7o540zdkf3+p6LW3ke1JEjPuNKFBxLwablW/yPeLnQ= Subject key identifier: 8F:D2:2C:E9:57:B3:CE:C5:10:3F:04:7A:28:BA:72:84:E3:2A:9C:04 Authority key identifier: 91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE Certificate issuer: /CN=A91215B3/serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE Certificate serial: 0248 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft Manifest number: 0237 Signing time: Wed 13 May 2026 02:50:37 +0000 Manifest this update: Wed 13 May 2026 02:50:37 +0000 Manifest next update: Wed 20 May 2026 02:50:37 +0000 Files and hashes: 1: kUhQxLilE7L45O3EtVeHB3djcq4.crl (hash: kp823rBXkTKdHSm0eWju5UEEgp3XSTUKy1L2hFOR5S4=) 2: D8F27C903AD811EF960D9329C4F9AE02.roa (hash: vs2Gbdu50+XToE8E4WRhYDNiQq7PIlKd89VDKs3X2wE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 584 (0x248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91215B3, serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE Validity Not Before: May 13 02:50:37 2026 GMT Not After : May 20 02:50:37 2026 GMT Subject: CN=6a03e6fd-3acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:85:9b:5c:d8:1c:1e:a1:35:e1:9d:c3:a3:4c: bd:25:4d:c7:0e:30:8f:9b:0f:25:d0:33:75:57:99: 5a:34:5e:e8:be:70:a2:27:4e:d3:1a:00:92:ea:c5: 4d:35:9b:b7:8d:7c:c3:b3:b2:7f:d6:f7:50:a3:c7: 0d:1d:63:39:80:48:a5:a7:39:56:eb:4b:60:67:20: 9b:1d:78:cd:8f:2a:0c:5e:af:d1:85:1b:b4:8d:05: 76:31:46:33:81:b0:0b:c0:a2:19:05:c7:bd:6c:29: d0:f0:1f:dd:b5:92:f7:4e:09:a6:fd:9a:c2:be:ed: 0f:d8:3d:7b:80:ed:98:a5:ff:ea:5f:7c:81:82:42: 69:9e:55:ce:30:34:3e:11:a4:85:f8:d6:29:9b:d0: 1a:5f:c6:c3:d7:0f:13:e9:90:fb:01:69:08:aa:dd: e6:fb:5e:ab:1e:da:b6:18:c7:34:67:d5:d5:19:20: 9d:db:bc:1c:ed:b1:f2:01:07:69:81:b6:79:7d:8f: 9f:8c:b9:5d:a4:88:3d:cd:d7:52:db:fb:fb:36:8d: ab:b0:11:ea:a3:09:eb:73:c2:20:f5:45:8b:2c:85: 56:60:8b:c5:32:5a:b6:c2:7b:ca:2d:c4:93:72:92: c3:b2:2d:98:ee:4c:b0:95:a7:72:9c:c6:cc:28:3b: 48:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D2:2C:E9:57:B3:CE:C5:10:3F:04:7A:28:BA:72:84:E3:2A:9C:04 X509v3 Authority Key Identifier: keyid:91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:e8:8b:24:45:77:54:da:83:69:77:8c:4b:43:76:c3:94:d4: 2b:5a:d9:95:9f:d0:45:ee:19:97:f9:1d:23:18:26:13:c6:bb: 0c:57:f6:6d:75:68:61:fe:df:44:3b:14:9f:84:19:c8:16:7c: 18:ce:11:a4:70:d7:f9:ac:83:13:2e:aa:cb:6e:dd:6b:7c:c1: 05:76:5d:2d:79:79:0f:da:ed:58:9f:9c:a9:50:f8:a0:99:01: 0c:e6:b1:eb:7b:55:d1:0f:8b:7b:9b:dd:88:51:85:eb:98:7c: 7a:c6:81:fb:80:3c:ec:4e:44:3c:9c:8b:cc:2a:3d:f9:2e:b7: 70:47:a2:13:d5:29:36:dc:06:59:52:07:e4:e1:71:32:8d:43: 79:2b:c9:85:2b:05:fa:ff:55:a4:c9:9e:f4:cd:a6:a4:e6:5b: a7:b5:f0:f0:e6:2a:12:11:f0:2a:47:aa:57:57:dc:b5:3b:b1: cb:c2:15:df:a1:dd:14:a3:d8:2b:95:02:85:7e:42:8b:cc:73: 51:08:49:48:8d:2f:14:ce:77:ed:95:96:c1:45:ee:7f:d0:b1: 71:2f:99:88:9e:15:69:c3:f1:9f:32:0f:cc:34:76:53:fb:de: d0:91:9b:8d:1e:ed:da:5b:3e:0a:05:42:40:9f:8a:90:75:2c: 25:95:34:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE1QjMxMTAvBgNVBAUTKDkxNDg1MEM0QjhBNTEzQjJGOEU0RURDNEI1NTc4NzA3 Nzc2MzcyQUUwHhcNMjYwNTEzMDI1MDM3WhcNMjYwNTIwMDI1MDM3WjAYMRYwFAYD VQQDEw02YTAzZTZmZC0zYWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnoWbXNgcHqE14Z3Do0y9JU3HDjCPmw8l0DN1V5laNF7ovnCiJ07TGgCS6sVN NZu3jXzDs7J/1vdQo8cNHWM5gEilpzlW60tgZyCbHXjNjyoMXq/RhRu0jQV2MUYz gbALwKIZBce9bCnQ8B/dtZL3Tgmm/ZrCvu0P2D17gO2Ypf/qX3yBgkJpnlXOMDQ+ EaSF+NYpm9AaX8bD1w8T6ZD7AWkIqt3m+16rHtq2GMc0Z9XVGSCd27wc7bHyAQdp gbZ5fY+fjLldpIg9zddS2/v7No2rsBHqownrc8Ig9UWLLIVWYIvFMlq2wnvKLcST cpLDsi2Y7kywladynMbMKDtIBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI/SLOlX s87FED8Eeii6coTjKpwEMB8GA1UdIwQYMBaAFJFIUMS4pROy+OTtxLVXhwd3Y3Ku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTVCMy9FNkY2OEYwNjBC NEIxMUVFQUI5QUFENzlDNEY5QUUwMi9rVWhReExpbEU3TDQ1TzNFdFZlSEIzZGpj cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tVaFF4TGlsRTdMNDVPM0V0VmVIQjNkamNxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTVCMy9FNkY2OEYwNjBCNEIxMUVFQUI5QUFENzlDNEY5QUUwMi9rVWhReExpbEU3 TDQ1TzNFdFZlSEIzZGpjcTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoeiLJEV3VNqDaXeMS0N2w5TUK1rZlZ/QRe4Zl/kdIxgmE8a7DFf2bXVoYf7f RDsUn4QZyBZ8GM4RpHDX+ayDEy6qy27da3zBBXZdLXl5D9rtWJ+cqVD4oJkBDOax 63tV0Q+Le5vdiFGF65h8esaB+4A87E5EPJyLzCo9+S63cEeiE9UpNtwGWVIH5OFx Mo1DeSvJhSsF+v9VpMme9M2mpOZbp7Xw8OYqEhHwKkeqV1fctTuxy8IV36HdFKPY K5UChX5Ci8xzUQhJSI0vFM537ZWWwUXuf9CxcS+ZiJ4VacPxnzIPzDR2U/ve0JGb jR7t2ls+CgVCQJ+KkHUsJZU0Dg== -----END CERTIFICATE-----Generated at Wed May 13 06:35:51 2026 by rpki-client