$ rpki-client -vvf rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft File: Kt1a2PtDrdgNUrtYNpPDG42asuw.mft (raw, json) Hash identifier: sPllECvynGL4JsqJo0hQ4OQt+COMvBV+ZMFWAVV3CTc= Subject key identifier: A0:F2:47:22:78:7D:DE:CC:F7:61:C2:17:9C:CF:01:A6:30:75:46:76 Authority key identifier: 2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC Certificate issuer: /CN=A913149F/serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC Certificate serial: 0CE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft Manifest number: 0CDD Signing time: Tue 12 May 2026 18:22:02 +0000 Manifest this update: Tue 12 May 2026 18:22:01 +0000 Manifest next update: Tue 19 May 2026 18:22:01 +0000 Files and hashes: 1: Kt1a2PtDrdgNUrtYNpPDG42asuw.crl (hash: 1AD0KWAlEbuh4kpVRihK0gP1EvR0YEqmQzvsG/8JM3Q=) 2: 78550A2608FE11EAA003E778C4F9AE02.roa (hash: QuCnvPryU+p8dBWWOPW2KrTltF89H58QfoFBQxj01yQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3301 (0xce5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913149F, serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC Validity Not Before: May 12 18:22:01 2026 GMT Not After : May 19 18:22:01 2026 GMT Subject: CN=6a036fca-59f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b5:47:c9:5a:67:bb:de:4f:91:06:64:95:8c: 05:a5:93:ec:ba:14:80:98:33:f2:8a:97:b4:89:6f: 30:b1:40:1b:58:d2:9a:c4:76:be:65:e2:4d:42:5c: 73:1a:12:86:ac:26:f5:40:28:31:f2:fe:b8:c6:e8: 76:b9:8b:4d:83:a0:88:8b:6f:9a:a1:92:08:81:43: 97:6e:fd:e4:c0:c2:a7:67:d3:da:d2:c0:60:c4:9a: 3e:0e:dd:32:b5:ac:89:f0:10:3c:05:d5:20:6d:17: 4c:c0:4d:43:92:a7:15:cb:92:06:ab:ff:c6:22:c5: 61:b6:74:88:15:a7:7b:1e:aa:e4:c4:1e:9f:f9:1f: 8d:ed:57:cc:03:04:80:b9:2d:d7:5b:41:7d:4b:a1: 79:33:b7:21:09:df:f6:a2:97:f5:7b:8c:e6:ba:51: fd:e7:55:b7:04:e5:a2:4b:e6:bc:72:b9:89:66:fe: 7a:82:59:35:64:9a:aa:ab:2f:40:e6:c7:b8:da:e4: 0f:4d:1b:99:a0:40:74:9d:d7:f5:a0:c7:9e:55:5e: a3:01:29:ed:2b:d1:22:59:4c:07:0e:42:53:d5:48: b3:bf:2a:59:c4:be:ac:c2:8c:4b:97:e6:16:5e:06: 01:f2:9e:c6:c9:96:02:c8:73:a7:1d:ad:19:20:e5: 78:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F2:47:22:78:7D:DE:CC:F7:61:C2:17:9C:CF:01:A6:30:75:46:76 X509v3 Authority Key Identifier: keyid:2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:4a:dd:f3:a2:b7:74:a1:28:32:c4:2d:22:1c:b6:4f:f0:6d: e6:c2:66:bc:ae:15:b8:62:cf:ea:b6:d8:6b:f8:98:40:0e:1a: 69:6b:0c:26:1a:8c:cb:f5:3f:aa:00:0a:91:ff:38:b3:26:14: fa:5f:32:b6:5a:9f:ab:db:f0:76:c9:3f:35:eb:b0:a4:f7:ca: d8:b9:74:6b:d1:40:bd:90:a1:18:e9:96:fb:0e:ec:bb:67:05: e1:4b:66:af:8a:73:6d:d8:d8:19:59:35:d6:c3:7a:f2:b1:63: f9:e6:3c:ae:04:0a:0b:5a:6e:b3:36:46:5c:14:07:b3:50:53: f2:49:9e:71:e2:9f:82:dd:88:5c:e3:36:54:99:70:3b:dc:a2: fe:4a:81:af:9d:ae:cb:d9:57:b4:37:67:49:cc:36:78:7e:8e: 53:07:73:33:e7:2f:3b:60:a0:a6:9f:92:96:87:ea:a8:02:57: 25:6d:40:2f:7e:a2:cf:2e:b2:5c:81:c0:71:bf:a1:2a:39:d4: ee:11:b9:7b:09:ad:26:84:99:a4:1d:74:0f:46:24:bf:71:41: b5:4a:0c:60:cd:ef:f5:5b:f3:25:36:12:f9:40:ff:05:fb:dc: 92:8b:3b:c8:32:d3:ac:df:02:35:9c:a3:5d:df:5b:91:e2:c6: e4:32:f2:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE0OUYxMTAvBgNVBAUTKDJBREQ1QUQ4RkI0M0FERDgwRDUyQkI1ODM2OTNDMzFC OEQ5QUIyRUMwHhcNMjYwNTEyMTgyMjAxWhcNMjYwNTE5MTgyMjAxWjAYMRYwFAYD VQQDEw02YTAzNmZjYS01OWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbVHyVpnu95PkQZklYwFpZPsuhSAmDPyipe0iW8wsUAbWNKaxHa+ZeJNQlxz GhKGrCb1QCgx8v64xuh2uYtNg6CIi2+aoZIIgUOXbv3kwMKnZ9Pa0sBgxJo+Dt0y tayJ8BA8BdUgbRdMwE1DkqcVy5IGq//GIsVhtnSIFad7HqrkxB6f+R+N7VfMAwSA uS3XW0F9S6F5M7chCd/2opf1e4zmulH951W3BOWiS+a8crmJZv56glk1ZJqqqy9A 5se42uQPTRuZoEB0ndf1oMeeVV6jASntK9EiWUwHDkJT1UizvypZxL6swoxLl+YW XgYB8p7GyZYCyHOnHa0ZIOV45QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKDyRyJ4 fd7M92HCF5zPAaYwdUZ2MB8GA1UdIwQYMBaAFCrdWtj7Q63YDVK7WDaTwxuNmrLs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTQ5Ri9ERjAxNTgwODA4 RkMxMUVBQTg5MUE1NzVDNEY5QUUwMi9LdDFhMlB0RHJkZ05VcnRZTnBQREc0MmFz dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t0MWEyUHREcmRnTlVydFlOcFBERzQyYXN1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTQ5Ri9ERjAxNTgwODA4RkMxMUVBQTg5MUE1NzVDNEY5QUUwMi9LdDFhMlB0RHJk Z05VcnRZTnBQREc0MmFzdXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmkrd86K3dKEoMsQtIhy2T/Bt5sJmvK4VuGLP6rbYa/iYQA4aaWsMJhqMy/U/ qgAKkf84syYU+l8ytlqfq9vwdsk/NeuwpPfK2Ll0a9FAvZChGOmW+w7su2cF4Utm r4pzbdjYGVk11sN68rFj+eY8rgQKC1puszZGXBQHs1BT8kmeceKfgt2IXOM2VJlw O9yi/kqBr52uy9lXtDdnScw2eH6OUwdzM+cvO2Cgpp+SlofqqAJXJW1AL36izy6y XIHAcb+hKjnU7hG5ewmtJoSZpB10D0Ykv3FBtUoMYM3v9VvzJTYS+UD/Bfvckos7 yDLTrN8CNZyjXd9bkeLG5DLyFA== -----END CERTIFICATE-----Generated at Wed May 13 03:30:25 2026 by rpki-client