$ rpki-client -vvf rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft File: kNWYT8dsavN1n-qq7ix1ilRoIxE.mft (raw, json) Hash identifier: GR+8XdtMkPGsupTqIpnH5IftDfcU3mmRDHO/+KIqDc0= Subject key identifier: 33:A9:59:F2:47:67:67:3E:7C:8D:86:FB:B0:23:7E:9A:BE:5D:50:3C Authority key identifier: 90:D5:98:4F:C7:6C:6A:F3:75:9F:EA:AA:EE:2C:75:8A:54:68:23:11 Certificate issuer: /CN=A9121E02/serialNumber=90D5984FC76C6AF3759FEAAAEE2C758A54682311 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNWYT8dsavN1n-qq7ix1ilRoIxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft Manifest number: 19 Signing time: Mon 11 May 2026 09:10:27 +0000 Manifest this update: Mon 11 May 2026 09:10:27 +0000 Manifest next update: Mon 18 May 2026 09:10:27 +0000 Files and hashes: 1: kNWYT8dsavN1n-qq7ix1ilRoIxE.crl (hash: JylSm4vORJ0BDrRxmJTJ4DgsbiRhK7CKNlhNnaUkIjM=) 2: E667E45629D211F19DF1399897833773.roa (hash: In+uAzwGHzP5ECvS0wGnb/464h9DxbhINKbE8cQ+KEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.crl rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNWYT8dsavN1n-qq7ix1ilRoIxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 09:10:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121E02, serialNumber=90D5984FC76C6AF3759FEAAAEE2C758A54682311 Validity Not Before: May 11 09:10:27 2026 GMT Not After : May 18 09:10:27 2026 GMT Subject: CN=6a019d03-966b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c4:8c:0a:f9:37:47:d5:4a:73:1f:a8:84:a8: 9a:a1:54:7e:9f:84:f8:19:1a:19:16:70:96:13:a1: cf:98:dc:17:5c:10:7a:50:2b:82:ce:ca:b7:2a:06: 50:4b:8c:22:2f:9d:91:a1:6b:4f:e6:2a:3d:5e:bd: 5e:72:02:fe:dd:bd:5b:d9:78:0a:5a:a5:4f:1c:90: c9:e4:d8:a3:7e:54:d1:de:d6:04:57:f5:9d:94:9a: dc:a7:0b:3a:c2:2c:99:8a:2f:53:18:b0:3e:86:8e: dc:fd:79:6a:a0:e6:50:4c:07:09:55:cf:09:ac:5d: 31:7b:48:cb:5c:b3:3a:31:f1:81:02:78:11:23:1c: b9:ca:18:5c:24:32:9f:ff:5e:61:81:64:2b:0f:8d: f0:fa:fa:68:f0:8a:fe:ad:5a:6c:40:2e:a3:7b:31: 51:40:ee:a5:44:9d:be:03:96:00:fe:4d:23:72:5f: e3:02:43:2b:14:a6:11:ed:5f:3e:66:55:85:66:fc: 16:48:d7:f7:49:5d:34:8f:08:1e:d2:70:0f:48:f7: 0f:70:42:fb:e1:94:6f:45:90:94:12:51:85:d3:77: 62:0c:37:88:a0:d5:97:7b:1e:97:2c:62:18:c5:e6: 0c:77:00:f8:05:aa:9f:e6:ea:98:82:be:54:01:1e: d2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A9:59:F2:47:67:67:3E:7C:8D:86:FB:B0:23:7E:9A:BE:5D:50:3C X509v3 Authority Key Identifier: keyid:90:D5:98:4F:C7:6C:6A:F3:75:9F:EA:AA:EE:2C:75:8A:54:68:23:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNWYT8dsavN1n-qq7ix1ilRoIxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:28:79:ac:a1:f7:1f:0e:0a:d3:d9:14:75:bc:56:13:0a:1b: 48:04:3a:c7:2c:fc:e5:14:a0:94:26:63:e1:c5:59:77:e3:5a: e5:5e:f6:37:9c:f4:0f:30:3e:95:ac:90:de:c7:e4:5f:5d:c4: 1f:ae:fd:92:99:4a:f4:84:ce:08:c5:8a:3a:f0:4e:20:46:5d: 55:a3:83:83:74:20:e8:d2:c7:2f:b6:b1:10:86:89:c0:11:ab: ed:94:20:bf:23:17:49:5a:a9:a6:f8:19:3d:66:9a:40:d5:5d: 7f:96:c4:ee:df:bd:c0:a0:96:5c:7c:ed:69:1a:af:f0:d2:36: 1b:84:1f:39:9f:7c:fd:df:3f:cc:33:b6:51:bc:9f:06:1c:6e: 24:6c:86:b7:6d:e4:50:63:7f:f4:3d:9e:cb:8b:b6:78:44:bb: 85:da:40:ff:22:90:54:92:67:cc:0b:d1:02:37:4c:73:83:9b: 45:65:76:28:fd:8a:05:8c:e7:09:53:c4:9b:3e:a2:21:e3:cf: c2:dc:b6:55:9c:b2:ad:b6:55:15:87:08:f2:86:f2:06:ca:1d: ea:f1:af:eb:2d:90:9a:f0:c1:64:0d:0a:f3:80:cc:30:27:eb: de:d3:98:1e:3f:f3:84:aa:7d:3d:6b:56:6d:00:e5:0d:ea:d3: 46:c8:05:34 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MUUwMjExMC8GA1UEBRMoOTBENTk4NEZDNzZDNkFGMzc1OUZFQUFBRUUyQzc1OEE1 NDY4MjMxMTAeFw0yNjA1MTEwOTEwMjdaFw0yNjA1MTgwOTEwMjdaMBgxFjAUBgNV BAMTDTZhMDE5ZDAzLTk2NmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDxIwK+TdH1UpzH6iEqJqhVH6fhPgZGhkWcJYToc+Y3BdcEHpQK4LOyrcqBlBL jCIvnZGha0/mKj1evV5yAv7dvVvZeApapU8ckMnk2KN+VNHe1gRX9Z2UmtynCzrC LJmKL1MYsD6Gjtz9eWqg5lBMBwlVzwmsXTF7SMtcszox8YECeBEjHLnKGFwkMp// XmGBZCsPjfD6+mjwiv6tWmxALqN7MVFA7qVEnb4DlgD+TSNyX+MCQysUphHtXz5m VYVm/BZI1/dJXTSPCB7ScA9I9w9wQvvhlG9FkJQSUYXTd2IMN4ig1Zd7HpcsYhjF 5gx3APgFqp/m6piCvlQBHtK9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUM6lZ8kdn Zz58jYb7sCN+mr5dUDwwHwYDVR0jBBgwFoAUkNWYT8dsavN1n+qq7ix1ilRoIxEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIxRTAyL0ExN0Y0QjRBMjlE MjExRjFBMjYxNTg5Mzk3ODMzNzczL2tOV1lUOGRzYXZOMW4tcXE3aXgxaWxSb0l4 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva05XWVQ4ZHNhdk4xbi1xcTdpeDFpbFJvSXhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIx RTAyL0ExN0Y0QjRBMjlEMjExRjFBMjYxNTg5Mzk3ODMzNzczL2tOV1lUOGRzYXZO MW4tcXE3aXgxaWxSb0l4RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCMKHmsofcfDgrT2RR1vFYTChtIBDrHLPzlFKCUJmPhxVl341rlXvY3nPQPMD6V rJDex+RfXcQfrv2SmUr0hM4IxYo68E4gRl1Vo4ODdCDo0scvtrEQhonAEavtlCC/ IxdJWqmm+Bk9ZppA1V1/lsTu373AoJZcfO1pGq/w0jYbhB85n3z93z/MM7ZRvJ8G HG4kbIa3beRQY3/0PZ7Li7Z4RLuF2kD/IpBUkmfMC9ECN0xzg5tFZXYo/YoFjOcJ U8SbPqIh48/C3LZVnLKttlUVhwjyhvIGyh3q8a/rLZCa8MFkDQrzgMwwJ+ve05ge P/OEqn09a1ZtAOUN6tNGyAU0 -----END CERTIFICATE-----Generated at Wed May 13 04:51:11 2026 by rpki-client