$ rpki-client -vvf rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft File: Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft (raw, json) Hash identifier: M75d6pNH0/8C7aZUj8eIRkGrZKaghY83vFYdBo40OfU= Subject key identifier: 4D:9D:C3:CE:88:CC:F7:9A:6C:C4:A0:52:6F:FF:7F:55:36:44:C8:17 Authority key identifier: 2B:3D:21:1F:C9:99:8D:F2:03:5E:20:D9:1A:A5:5E:DE:C6:28:F0:A3 Certificate issuer: /CN=A912B75A/serialNumber=2B3D211FC9998DF2035E20D91AA55EDEC628F0A3 Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft Manifest number: 0147 Signing time: Wed 13 May 2026 05:16:28 +0000 Manifest this update: Wed 13 May 2026 05:16:27 +0000 Manifest next update: Wed 20 May 2026 05:16:27 +0000 Files and hashes: 1: Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl (hash: mGIkckNV4eGK6Sgwiw6fRbL/QYnOrq914cCIxMFzX5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 05:16:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B75A, serialNumber=2B3D211FC9998DF2035E20D91AA55EDEC628F0A3 Validity Not Before: May 13 05:16:27 2026 GMT Not After : May 20 05:16:27 2026 GMT Subject: CN=6a04092b-4b7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b9:68:6f:4f:ac:9a:67:4a:02:eb:cf:aa:0a: ca:b0:f8:24:c3:38:9f:0a:a5:62:0e:4a:e1:d6:69: 27:83:ed:e9:bd:4a:d1:a3:10:01:9d:60:d3:d8:f5: 17:45:21:b9:f7:0d:b7:bf:81:30:fe:d3:23:36:49: f8:83:62:00:35:ee:12:58:1d:88:4a:0c:b1:2c:d2: 73:39:b7:b6:3c:86:43:00:50:76:95:cc:d1:9d:17: ce:c3:07:ab:8a:0a:4f:43:a0:93:2e:5f:d2:22:c2: 4f:51:e2:ff:7f:f3:5e:f9:88:94:07:d6:0a:55:c5: 2b:d3:1b:1b:1c:7f:b2:3f:e0:47:d7:ac:cb:fa:77: 92:fe:95:a8:c3:09:b9:f1:49:f2:5f:18:98:20:79: 4d:df:b4:2d:f1:db:8e:69:f8:15:5f:7c:84:49:77: 40:8f:cd:f3:88:8c:e5:26:63:7f:05:53:0b:d5:a8: 87:f3:f5:ff:ea:4f:16:3b:e5:b2:2d:49:26:85:a4: f6:c4:86:ed:c5:43:eb:67:e8:ac:e3:04:80:29:ed: 11:e6:04:a1:5c:cd:35:fc:4e:56:f5:b4:e9:35:6a: 71:69:b9:98:3d:47:b9:97:de:b6:e1:dc:64:a6:ef: 6e:c8:47:bf:80:c7:20:0b:3b:21:60:50:94:c6:7e: 4f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:9D:C3:CE:88:CC:F7:9A:6C:C4:A0:52:6F:FF:7F:55:36:44:C8:17 X509v3 Authority Key Identifier: keyid:2B:3D:21:1F:C9:99:8D:F2:03:5E:20:D9:1A:A5:5E:DE:C6:28:F0:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:0c:c7:89:08:e7:03:b8:ed:6d:76:2e:a9:c5:97:59:dd:b5: b3:78:09:76:aa:8c:8f:53:b6:f1:2c:ad:f9:c6:a6:d7:49:03: 68:2d:22:cb:c4:51:04:ca:9b:70:4f:c8:3d:5b:3d:9e:d9:07: 20:58:84:36:6d:fe:a0:4e:16:ff:6a:ac:1a:48:47:b2:86:92: ea:f6:a3:23:98:89:c3:53:16:75:78:64:4e:09:7d:8c:17:df: d7:cc:19:df:5c:98:77:18:59:2d:85:c0:d9:ae:ba:44:4b:75: 99:65:52:83:b7:75:cd:20:b7:a4:c4:59:e4:a8:a2:7a:44:09: 96:11:74:6b:29:04:ea:cc:d0:60:9e:7a:5d:25:e4:b8:14:95: 30:18:78:62:78:3e:24:34:fa:4a:b0:43:f6:4e:6f:cb:bc:97: ae:62:49:ab:53:13:e9:ca:f9:82:90:d7:be:1e:ef:c5:7f:37: e1:3c:0c:f1:78:45:cf:8c:c9:ed:90:75:98:8c:76:37:8f:f4: ed:f2:7d:c0:9f:bc:45:25:39:73:82:c3:11:08:0d:92:80:17: d3:ef:80:4c:2b:36:ca:d4:73:36:d3:ea:41:ee:31:dd:ab:41: c2:ba:57:40:cf:e5:4d:b0:d3:40:56:ae:a0:e9:82:f4:79:81: 87:1c:9a:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI3NUExMTAvBgNVBAUTKDJCM0QyMTFGQzk5OThERjIwMzVFMjBEOTFBQTU1RURF QzYyOEYwQTMwHhcNMjYwNTEzMDUxNjI3WhcNMjYwNTIwMDUxNjI3WjAYMRYwFAYD VQQDEw02YTA0MDkyYi00YjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLlob0+smmdKAuvPqgrKsPgkwzifCqViDkrh1mkng+3pvUrRoxABnWDT2PUX RSG59w23v4Ew/tMjNkn4g2IANe4SWB2ISgyxLNJzObe2PIZDAFB2lczRnRfOwwer igpPQ6CTLl/SIsJPUeL/f/Ne+YiUB9YKVcUr0xsbHH+yP+BH16zL+neS/pWowwm5 8UnyXxiYIHlN37Qt8duOafgVX3yESXdAj83ziIzlJmN/BVML1aiH8/X/6k8WO+Wy LUkmhaT2xIbtxUPrZ+is4wSAKe0R5gShXM01/E5W9bTpNWpxabmYPUe5l9624dxk pu9uyEe/gMcgCzshYFCUxn5PxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE2dw86I zPeabMSgUm//f1U2RMgXMB8GA1UdIwQYMBaAFCs9IR/JmY3yA14g2RqlXt7GKPCj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjc1QS8xQjIyRTFGRTVC OUExMUVGODIwMjc2NDBDNEY5QUUwMi9LejBoSDhtWmpmSURYaURaR3FWZTNzWW84 S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t6MGhIOG1aamZJRFhpRFpHcVZlM3NZbzhLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Qjc1QS8xQjIyRTFGRTVCOUExMUVGODIwMjc2NDBDNEY5QUUwMi9LejBoSDhtWmpm SURYaURaR3FWZTNzWW84S00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXgzHiQjnA7jtbXYuqcWXWd21s3gJdqqMj1O28Syt+cam10kDaC0iy8RRBMqb cE/IPVs9ntkHIFiENm3+oE4W/2qsGkhHsoaS6vajI5iJw1MWdXhkTgl9jBff18wZ 31yYdxhZLYXA2a66REt1mWVSg7d1zSC3pMRZ5KiiekQJlhF0aykE6szQYJ56XSXk uBSVMBh4Yng+JDT6SrBD9k5vy7yXrmJJq1MT6cr5gpDXvh7vxX834TwM8XhFz4zJ 7ZB1mIx2N4/07fJ9wJ+8RSU5c4LDEQgNkoAX0++ATCs2ytRzNtPqQe4x3atBwrpX QM/lTbDTQFauoOmC9HmBhxya2w== -----END CERTIFICATE-----Generated at Wed May 13 10:57:41 2026 by rpki-client