$ rpki-client -vvf rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft File: KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft (raw, json) Hash identifier: zg+EStoCbA+GGSjzUz+CSBqYW1Yj0qnPnt3+uLhf/oc= Subject key identifier: 33:A1:46:F4:2A:CA:7B:DE:C2:4E:B5:97:70:91:FB:26:88:D5:68:64 Authority key identifier: 2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B Certificate issuer: /CN=A91233D4/serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B Certificate serial: 0B10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft Manifest number: 0AFA Signing time: Tue 12 May 2026 19:26:37 +0000 Manifest this update: Tue 12 May 2026 19:26:36 +0000 Manifest next update: Tue 19 May 2026 19:26:36 +0000 Files and hashes: 1: KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl (hash: ZubppcHXN5ceDEYr9HYSRQ8QqYML5qTKC5z5/ZgqjCs=) 2: A08B108A78D411EAA8C57711C4F9AE02.roa (hash: N/vJ3gYa2yZt4lT/pvPMJti4tbnPowjmmGAT5w4Jh4Y=) 3: A1D479B878D411EAA8C57711C4F9AE02.roa (hash: obRBQ6LEWosfS1i2NAWPUNb1MMXwUPUFHNc2IZBZzak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:26:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2832 (0xb10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91233D4, serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B Validity Not Before: May 12 19:26:36 2026 GMT Not After : May 19 19:26:36 2026 GMT Subject: CN=6a037eed-effe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:08:ce:a9:cd:89:7a:58:d4:88:7c:e8:45:df: 1c:35:11:f6:8c:c6:79:fc:a9:f4:84:f0:37:db:44: 1d:e8:57:0c:f2:18:a4:a3:69:29:1f:33:1f:18:d3: 85:b9:70:b2:4e:67:42:47:4a:56:f9:8f:37:0b:06: 79:e1:b6:22:90:25:18:de:d9:52:3e:1b:b7:ed:76: dd:8a:62:03:93:49:f1:f3:5d:52:a1:8e:cd:d1:2c: fb:5c:a8:de:fc:33:67:b9:fb:6d:51:05:12:65:a1: 2e:cf:5d:b0:10:49:82:e5:9d:25:ce:d2:a1:62:ea: 40:26:00:62:0b:85:48:ab:05:04:24:fe:06:02:91: a6:64:54:db:60:52:f7:46:3a:27:4d:51:da:f1:40: af:25:1e:48:54:1a:b7:3a:43:e0:34:ac:5d:f4:80: 0c:c5:dc:5d:41:09:a9:1f:a4:f7:40:28:65:02:ff: 61:2e:38:5a:21:52:8c:e4:d4:ec:be:86:66:10:dc: 55:16:26:d4:06:c6:63:b7:55:f2:8a:98:c0:53:41: b1:e9:fe:05:6c:be:10:24:61:80:f1:40:b1:47:e1: 70:88:83:32:25:a1:3b:a5:5d:5a:cb:29:76:37:69: 02:8e:fe:2f:95:c0:f5:f6:8a:25:25:07:2b:30:aa: 6c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A1:46:F4:2A:CA:7B:DE:C2:4E:B5:97:70:91:FB:26:88:D5:68:64 X509v3 Authority Key Identifier: keyid:2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:1b:18:f1:e9:2c:18:ad:2d:2d:62:7c:1e:4f:ad:51:12:b5: 67:27:c1:40:3d:4f:73:90:67:e3:73:ff:87:35:fb:96:49:de: b9:cf:1f:d1:c0:1f:7c:ad:05:0b:be:55:e0:c5:75:e5:46:ac: 05:0a:2a:9c:14:74:49:d4:c9:aa:00:76:8c:9a:94:b3:3f:6d: d6:1d:7f:c1:6f:de:d0:e1:9c:49:b5:a6:b8:54:fd:5b:f1:15: 4e:88:4f:e4:15:05:f1:b2:02:4d:0d:73:7c:45:97:00:c2:13: bf:d4:9d:a0:5f:79:20:4b:dd:ea:2c:c2:09:de:ca:32:a1:b7: fd:2c:b9:1b:b8:28:a7:f7:15:76:55:3c:47:7f:95:e4:4c:fd: a8:b9:4c:48:9d:00:f4:28:36:68:0c:a8:a0:3b:81:fe:82:64: a9:20:7a:fa:fd:c7:eb:62:7f:30:1d:9b:e5:a5:c7:f2:04:d9: 5a:a2:d6:5e:81:1e:c8:a0:bb:09:15:39:35:c4:2e:2d:bb:b1: ad:be:53:b9:10:6e:2e:4b:d1:79:58:1c:23:12:b6:43:9c:19: 24:97:3f:5d:fa:1c:63:80:01:42:fa:c8:4a:7f:40:82:c4:e4: 36:7d:3a:bf:07:2d:b1:94:4f:09:16:f8:bd:7c:73:fa:10:ca: 5a:7c:2d:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMzRDQxMTAvBgNVBAUTKDJBOTNFMTQ1OTc2NjUwNjE5NURGRkM5OUI1MjMzNjJC RTVBQzBENkIwHhcNMjYwNTEyMTkyNjM2WhcNMjYwNTE5MTkyNjM2WjAYMRYwFAYD VQQDEw02YTAzN2VlZC1lZmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwjOqc2JeljUiHzoRd8cNRH2jMZ5/Kn0hPA320Qd6FcM8hiko2kpHzMfGNOF uXCyTmdCR0pW+Y83CwZ54bYikCUY3tlSPhu37XbdimIDk0nx811SoY7N0Sz7XKje /DNnufttUQUSZaEuz12wEEmC5Z0lztKhYupAJgBiC4VIqwUEJP4GApGmZFTbYFL3 RjonTVHa8UCvJR5IVBq3OkPgNKxd9IAMxdxdQQmpH6T3QChlAv9hLjhaIVKM5NTs voZmENxVFibUBsZjt1XyipjAU0Gx6f4FbL4QJGGA8UCxR+FwiIMyJaE7pV1ayyl2 N2kCjv4vlcD19oolJQcrMKpsMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDOhRvQq ynvewk61l3CR+yaI1WhkMB8GA1UdIwQYMBaAFCqT4UWXZlBhld/8mbUjNivlrA1r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNENC8yNUEwNjE4MDZC MUYxMUVBODEzMEE2NUZDNEY5QUUwMi9LcFBoUlpkbVVHR1YzX3ladFNNMkstV3NE V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0twUGhSWmRtVUdHVjNfeVp0U00ySy1Xc0RXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzNENC8yNUEwNjE4MDZCMUYxMUVBODEzMEE2NUZDNEY5QUUwMi9LcFBoUlpkbVVH R1YzX3ladFNNMkstV3NEV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcRsY8eksGK0tLWJ8Hk+tURK1ZyfBQD1Pc5Bn43P/hzX7lkneuc8f0cAffK0F C75V4MV15UasBQoqnBR0SdTJqgB2jJqUsz9t1h1/wW/e0OGcSbWmuFT9W/EVTohP 5BUF8bICTQ1zfEWXAMITv9SdoF95IEvd6izCCd7KMqG3/Sy5G7gop/cVdlU8R3+V 5Ez9qLlMSJ0A9Cg2aAyooDuB/oJkqSB6+v3H62J/MB2b5aXH8gTZWqLWXoEeyKC7 CRU5NcQuLbuxrb5TuRBuLkvReVgcIxK2Q5wZJJc/XfocY4ABQvrISn9AgsTkNn06 vwctsZRPCRb4vXxz+hDKWnwtnw== -----END CERTIFICATE-----Generated at Wed May 13 08:33:55 2026 by rpki-client