$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft File: kcSXberT3od45cDc_yYDlxrC1Ns.mft (raw, json) Hash identifier: rhpdm6+tLIZm7xlqbEZDmzhG77yKRq894dgIz5TEmXw= Subject key identifier: AD:B6:DF:24:77:32:06:5E:0D:3F:CD:58:8B:6B:E3:F2:CB:23:D6:1B Authority key identifier: 91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB Certificate issuer: /CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Certificate serial: 029F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft Manifest number: 0288 Signing time: Mon 11 May 2026 01:49:52 +0000 Manifest this update: Mon 11 May 2026 01:49:52 +0000 Manifest next update: Mon 18 May 2026 01:49:52 +0000 Files and hashes: 1: kcSXberT3od45cDc_yYDlxrC1Ns.crl (hash: b7TMue4jlNIZynUFrPCPEiQA9d/s/r1NgRS8dffg8Ho=) 2: 24783DA46F3211EDA3DCF033C4F9AE02.roa (hash: sa00jH8bw4HUITlYrffZw+f88KkU69vSq0M65+ZIMYI=) 3: 24FDC2446F3211EDA3DCF033C4F9AE02.roa (hash: yctNWWiZhPVXhgLMblmsUERi9o24TYY6zYqQrUfyMsc=) 4: 25DD10F26F3211EDA3DCF033C4F9AE02.roa (hash: lyLkwnvPiADGaBvpMXNqGtu0ktHuqEPAoUGEfoeoW7E=) 5: D29F544CFCD711EEB654B271C4F9AE02.roa (hash: 3uTrRG1V9dC0o0IOwmSmMEJhHbML0nSq3yiQY+3J84k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 01:49:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 671 (0x29f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F84, serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Validity Not Before: May 11 01:49:52 2026 GMT Not After : May 18 01:49:52 2026 GMT Subject: CN=6a0135c0-811e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8a:3a:2c:c7:9d:55:6e:c1:c5:9e:e5:51:1c: 56:04:48:80:85:67:63:af:c4:70:f0:8d:9d:04:5f: 15:90:bb:9f:54:d2:2a:2d:ed:41:ee:4c:68:78:a4: bf:95:12:45:9b:ef:61:92:b3:b5:db:bf:cc:1d:09: 95:4a:07:49:1e:c5:17:c2:1f:d2:fe:b8:a7:48:99: 7a:a5:a8:f8:2e:ff:a6:bc:f9:2f:bf:f8:87:f7:03: 3d:91:30:8b:70:70:3f:78:cf:f5:68:52:2e:2e:3e: b0:5c:34:85:10:0c:d0:e3:ea:56:f6:e8:38:69:39: 95:a6:15:a8:77:c7:2d:bf:89:71:38:29:bc:d5:be: e1:a7:58:66:7a:c0:e7:ba:3f:c7:9e:90:17:0c:83: e1:9e:92:f3:35:8b:24:1b:b9:aa:05:47:4d:d3:51: 72:91:72:0f:11:d3:12:0a:b0:df:38:2c:dd:14:0b: 75:7b:9c:84:e1:2a:7d:e5:7a:f6:6d:b5:f4:a6:b7: 87:76:1a:e7:eb:a1:ac:d9:39:42:04:fa:4b:8d:a5: 1a:86:8d:b1:19:ce:62:bc:90:b2:e1:08:cd:de:94: 66:5b:da:18:6e:80:e8:f6:c7:62:81:f7:e2:31:b9: 44:90:a3:da:8c:ea:1c:b6:ed:27:b4:ac:fa:e6:1d: 15:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B6:DF:24:77:32:06:5E:0D:3F:CD:58:8B:6B:E3:F2:CB:23:D6:1B X509v3 Authority Key Identifier: keyid:91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:64:0d:40:80:1f:30:8f:07:cc:d7:d5:ff:de:6b:59:26:d5: 52:b1:61:c5:4d:6b:8e:1d:76:a4:27:18:9b:16:d7:b8:ef:9c: c2:e1:26:ed:27:00:9e:4e:99:76:4e:c5:35:44:89:74:af:bb: f2:21:4b:bf:3d:09:95:0a:b9:be:7c:37:1e:43:b8:d3:5a:76: b9:a6:94:3d:cd:e0:87:61:6c:32:64:c7:a6:36:a5:d6:9c:f2: d7:ce:aa:53:e7:f4:83:a5:e6:a7:c0:3a:37:77:5c:2a:95:80: 65:4f:88:5d:b0:f1:d1:8e:07:6c:cd:f5:b0:13:9c:06:21:e7: 88:02:da:bc:fe:21:85:fb:6d:55:bc:6c:30:4b:dc:41:4b:04: ec:f7:96:1a:e9:c7:6c:66:c0:74:46:8f:03:07:2b:6d:4c:fe: 64:b5:92:39:4e:cf:3a:85:2f:43:5f:3b:71:18:fa:2d:ea:39: f0:3b:9d:d6:b9:63:f7:2a:48:0a:6a:49:c7:f5:c5:4e:6e:3c: 5b:8d:be:b2:e4:5e:d9:fa:f1:dc:44:09:53:8b:04:37:7e:3d: fa:78:8d:6e:83:d7:2f:6b:de:5c:b3:b1:2c:a7:a0:a1:d6:45: 73:55:c8:16:41:93:5f:35:c7:32:4b:84:72:65:50:9a:f3:95: 05:2c:2c:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGODQxMTAvBgNVBAUTKDkxQzQ5NzZERUFEM0RFODc3OEU1QzBEQ0ZGMjYwMzk3 MUFDMkQ0REIwHhcNMjYwNTExMDE0OTUyWhcNMjYwNTE4MDE0OTUyWjAYMRYwFAYD VQQDEw02YTAxMzVjMC04MTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYo6LMedVW7BxZ7lURxWBEiAhWdjr8Rw8I2dBF8VkLufVNIqLe1B7kxoeKS/ lRJFm+9hkrO127/MHQmVSgdJHsUXwh/S/rinSJl6paj4Lv+mvPkvv/iH9wM9kTCL cHA/eM/1aFIuLj6wXDSFEAzQ4+pW9ug4aTmVphWod8ctv4lxOCm81b7hp1hmesDn uj/HnpAXDIPhnpLzNYskG7mqBUdN01FykXIPEdMSCrDfOCzdFAt1e5yE4Sp95Xr2 bbX0preHdhrn66Gs2TlCBPpLjaUaho2xGc5ivJCy4QjN3pRmW9oYboDo9sdigffi MblEkKPajOoctu0ntKz65h0VEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK223yR3 MgZeDT/NWItr4/LLI9YbMB8GA1UdIwQYMBaAFJHEl23q096HeOXA3P8mA5cawtTb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y4NC9GNDNBM0YwNDZG MkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNvZDQ1Y0RjX3lZRGx4ckMx TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tjU1hiZXJUM29kNDVjRGNfeVlEbHhyQzFOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y4NC9GNDNBM0YwNDZGMkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNv ZDQ1Y0RjX3lZRGx4ckMxTnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU2QNQIAfMI8HzNfV/95rWSbVUrFhxU1rjh12pCcYmxbXuO+cwuEm7ScAnk6Z dk7FNUSJdK+78iFLvz0JlQq5vnw3HkO401p2uaaUPc3gh2FsMmTHpjal1pzy186q U+f0g6Xmp8A6N3dcKpWAZU+IXbDx0Y4HbM31sBOcBiHniALavP4hhfttVbxsMEvc QUsE7PeWGunHbGbAdEaPAwcrbUz+ZLWSOU7POoUvQ187cRj6Leo58Dud1rlj9ypI CmpJx/XFTm48W42+suRe2frx3EQJU4sEN349+niNboPXL2veXLOxLKegodZFc1XI FkGTXzXHMkuEcmVQmvOVBSws0A== -----END CERTIFICATE-----Generated at Wed May 13 03:13:18 2026 by rpki-client