$ rpki-client -vvf rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft File: kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft (raw, json) Hash identifier: rVjLqY49SlXs8letTtB73X03o1sB07MET7JHikS/B58= Subject key identifier: 5E:8C:D1:97:97:6C:32:02:25:9A:16:91:54:E5:F9:5D:CA:20:4B:0D Authority key identifier: 93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01 Certificate issuer: /CN=A912EDB7/serialNumber=93159C9B6133F4806FBB28C6225E943963A6B001 Certificate serial: 0D27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft Manifest number: 0D1B Signing time: Tue 12 May 2026 18:07:23 +0000 Manifest this update: Tue 12 May 2026 18:07:22 +0000 Manifest next update: Tue 19 May 2026 18:07:22 +0000 Files and hashes: 1: kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl (hash: WIymzO9H6ZYCGu9HbxnNVlSJ83t5Ubcl6zwhzAdurSY=) 2: 18CA7386E35511EDA63D5182C4F9AE02.roa (hash: YjPccAzJNBU/ZdWKFo5jYPgMQyoV2n/b3P7n6tGh3TQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:07:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3367 (0xd27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912EDB7, serialNumber=93159C9B6133F4806FBB28C6225E943963A6B001 Validity Not Before: May 12 18:07:22 2026 GMT Not After : May 19 18:07:22 2026 GMT Subject: CN=6a036c5b-c215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:86:2f:3b:cf:2d:94:aa:58:6f:3d:e4:23:4a: e6:92:a7:b6:b9:75:42:b9:f7:c2:d6:90:29:ce:6b: 32:e9:a2:5c:98:48:56:ba:e1:d5:29:0b:3a:ab:5b: d9:b4:0c:e7:29:6d:50:8b:c8:df:00:4f:65:ee:75: 82:e0:1f:02:72:29:57:15:6d:1a:9e:6e:9e:20:c0: b7:9b:c5:13:0a:b9:65:7b:3a:46:0b:37:20:bc:7b: 25:cc:d1:8d:a3:06:b4:59:d3:4b:82:63:97:95:16: c7:f8:c9:63:9e:f1:2a:21:76:69:d5:b1:6f:1f:34: c4:11:a7:ec:f3:0e:8d:e9:c9:f0:04:6e:4a:a6:9a: 0e:04:64:3b:57:a1:0b:fb:a4:69:de:e4:a3:5c:80: 4c:79:7f:dd:31:a2:3b:6e:75:b4:f0:82:bd:30:6f: bf:03:4c:31:c5:ab:5d:0d:8f:07:75:19:9e:57:5a: 0e:07:45:a3:19:65:e7:84:94:c9:9f:ee:cb:e9:c3: d7:e0:20:71:99:12:12:f5:44:69:1c:6f:19:24:d3: 67:20:88:8e:ae:a2:92:6c:b3:d1:d7:5e:eb:0b:a4: 41:25:02:dd:36:e4:43:5e:3b:e3:f5:ae:90:fd:87: 2c:7d:26:b8:39:d3:74:90:62:87:7a:40:b4:59:67: 59:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8C:D1:97:97:6C:32:02:25:9A:16:91:54:E5:F9:5D:CA:20:4B:0D X509v3 Authority Key Identifier: keyid:93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:9d:de:ac:9a:91:19:d6:4e:51:ef:1f:85:1b:de:e6:b0:f1: f6:42:33:ff:97:18:63:18:7a:d1:e4:62:46:62:9c:95:c4:ec: d5:32:5e:11:16:3b:38:69:38:e5:20:55:3e:0f:fe:f6:ae:78: cb:c0:6f:b5:d4:ba:94:c1:12:ac:79:a1:20:08:cb:c1:51:93: c2:db:f8:13:70:b4:1f:83:53:2c:b3:4a:12:75:fb:7f:1a:c6: 27:16:dd:77:65:20:82:cc:57:51:49:5c:a8:eb:bd:cc:9f:f5: 7e:af:81:52:12:5d:34:0e:48:5d:5a:1f:87:c2:a3:85:2c:7e: 0c:78:aa:27:a4:44:d7:41:2d:45:97:df:77:4f:b7:34:a9:b3: 45:a9:b3:4a:80:f2:fe:12:df:e7:c2:65:85:48:6a:e0:ac:37: 4e:4d:93:ce:fb:1b:32:55:ad:38:e1:e1:ca:ab:20:a3:60:d7: d9:ba:df:01:ba:1f:4c:8d:f2:65:a4:2f:af:d7:c5:12:80:c0: bf:4b:ac:95:44:7f:e9:16:6f:d3:bf:f4:bb:ff:ff:79:e3:1f: 01:c3:f5:1b:d2:e5:17:e6:16:f8:88:f8:48:ea:20:94:f2:0c: d8:a9:f0:47:f9:10:95:73:71:a5:ab:a1:4d:5f:ca:b9:ee:99: 92:b2:59:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkVEQjcxMTAvBgNVBAUTKDkzMTU5QzlCNjEzM0Y0ODA2RkJCMjhDNjIyNUU5NDM5 NjNBNkIwMDEwHhcNMjYwNTEyMTgwNzIyWhcNMjYwNTE5MTgwNzIyWjAYMRYwFAYD VQQDEw02YTAzNmM1Yi1jMjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnIYvO88tlKpYbz3kI0rmkqe2uXVCuffC1pApzmsy6aJcmEhWuuHVKQs6q1vZ tAznKW1Qi8jfAE9l7nWC4B8CcilXFW0anm6eIMC3m8UTCrllezpGCzcgvHslzNGN owa0WdNLgmOXlRbH+MljnvEqIXZp1bFvHzTEEafs8w6N6cnwBG5KppoOBGQ7V6EL +6Rp3uSjXIBMeX/dMaI7bnW08IK9MG+/A0wxxatdDY8HdRmeV1oOB0WjGWXnhJTJ n+7L6cPX4CBxmRIS9URpHG8ZJNNnIIiOrqKSbLPR117rC6RBJQLdNuRDXjvj9a6Q /YcsfSa4OdN0kGKHekC0WWdZlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF6M0ZeX bDICJZoWkVTl+V3KIEsNMB8GA1UdIwQYMBaAFJMVnJthM/SAb7soxiJelDljprAB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRURCNy80NjE2MkFEQUZF RDIxMUU5ODdGRkMyMTdDNEY5QUUwMi9reFdjbTJFejlJQnZ1eWpHSWw2VU9XT21z QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t4V2NtMkV6OUlCdnV5akdJbDZVT1dPbXNBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RURCNy80NjE2MkFEQUZFRDIxMUU5ODdGRkMyMTdDNEY5QUUwMi9reFdjbTJFejlJ QnZ1eWpHSWw2VU9XT21zQUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZZ3erJqRGdZOUe8fhRve5rDx9kIz/5cYYxh60eRiRmKclcTs1TJeERY7OGk4 5SBVPg/+9q54y8BvtdS6lMESrHmhIAjLwVGTwtv4E3C0H4NTLLNKEnX7fxrGJxbd d2UggsxXUUlcqOu9zJ/1fq+BUhJdNA5IXVofh8KjhSx+DHiqJ6RE10EtRZffd0+3 NKmzRamzSoDy/hLf58JlhUhq4Kw3Tk2TzvsbMlWtOOHhyqsgo2DX2brfAbofTI3y ZaQvr9fFEoDAv0uslUR/6RZv07/0u///eeMfAcP1G9LlF+YW+Ij4SOoglPIM2Knw R/kQlXNxpauhTV/Kue6ZkrJZPQ== -----END CERTIFICATE-----Generated at Wed May 13 03:38:02 2026 by rpki-client