$ rpki-client -vvf rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft File: kB-Ykfv38n1Bah7gazGwFlquHcU.mft (raw, json) Hash identifier: GMFSd+DZdIVaPNcWAh0AEyVgaaus6/BRxlvAefvDeKY= Subject key identifier: 68:24:64:FF:1A:EB:8D:A5:50:A5:1D:96:A0:AF:CE:27:9B:EC:F0:27 Authority key identifier: 90:1F:98:91:FB:F7:F2:7D:41:6A:1E:E0:6B:31:B0:16:5A:AE:1D:C5 Certificate issuer: /CN=A9132D93/serialNumber=901F9891FBF7F27D416A1EE06B31B0165AAE1DC5 Certificate serial: 049E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kB-Ykfv38n1Bah7gazGwFlquHcU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft Manifest number: 0498 Signing time: Wed 13 May 2026 00:04:57 +0000 Manifest this update: Wed 13 May 2026 00:04:57 +0000 Manifest next update: Wed 20 May 2026 00:04:57 +0000 Files and hashes: 1: kB-Ykfv38n1Bah7gazGwFlquHcU.crl (hash: KNAyfcFt+RPSWlU8H6qVo5smaZVX1cfTzLhe0Ex94aU=) 2: 4E0503CA7F3F11ECBB0EA972C4F9AE02.roa (hash: 2diXZhIHeiTIXtGE7hgkGrF2mxwMF4mve/3rvi/DmaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.crl rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kB-Ykfv38n1Bah7gazGwFlquHcU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 00:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1182 (0x49e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132D93, serialNumber=901F9891FBF7F27D416A1EE06B31B0165AAE1DC5 Validity Not Before: May 13 00:04:57 2026 GMT Not After : May 20 00:04:57 2026 GMT Subject: CN=6a03c029-44e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6e:89:f8:58:7c:f7:5d:28:b3:b2:1b:a1:d8: d8:c2:1e:5a:58:f3:2a:9e:36:f7:c7:e3:8d:79:ff: fa:51:2a:1a:fc:d4:c3:4d:72:f3:6e:18:b3:89:13: 84:57:2f:45:76:e8:46:2e:d5:4c:d2:07:aa:3a:2e: 7d:cc:50:1c:7f:01:94:fb:10:2b:6a:36:85:82:e6: c8:6d:d4:95:90:10:48:d8:29:f6:41:2f:d2:e8:a8: b6:b6:ea:64:ec:92:e6:dc:a7:2a:9b:ef:b1:42:1b: 1d:66:73:38:d2:8a:a2:f5:a5:24:da:09:65:3e:fa: e2:d2:1a:98:76:e1:5e:96:ee:c8:0c:8b:29:03:c2: 05:d7:8e:cb:85:02:31:d4:71:f5:b4:72:68:af:95: 06:85:00:7f:f7:6a:f3:f9:b8:75:0b:58:92:8a:e2: d4:2b:78:9f:ff:fc:4f:21:44:6f:b2:87:eb:17:af: 3a:16:9b:e5:8e:13:db:3f:0d:03:da:01:10:4e:52: 0f:78:19:02:f0:3e:e4:0b:f9:e8:ff:8d:35:10:80: 5b:8c:79:9c:46:0d:98:7c:0b:7e:52:9e:5b:fd:f2: 3d:06:3c:33:26:0f:d1:2c:fa:05:db:f2:5e:7c:07: 6f:9d:5e:78:43:b5:2f:ce:bb:7b:5b:a0:b2:84:1b: e1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:24:64:FF:1A:EB:8D:A5:50:A5:1D:96:A0:AF:CE:27:9B:EC:F0:27 X509v3 Authority Key Identifier: keyid:90:1F:98:91:FB:F7:F2:7D:41:6A:1E:E0:6B:31:B0:16:5A:AE:1D:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kB-Ykfv38n1Bah7gazGwFlquHcU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:79:03:26:27:0c:63:04:03:76:fc:06:c0:1c:1f:29:1c:6a: e7:9d:c3:f6:9f:c7:f2:21:07:09:3a:46:25:5b:8f:49:cc:4d: 23:25:78:6f:f3:94:b7:30:13:5a:7a:66:a3:e9:74:91:a7:21: 5c:53:11:44:23:ae:15:04:be:ec:c6:21:9a:2e:fb:85:a9:e1: 76:e6:b9:0f:00:c1:cd:1e:58:e7:e9:df:01:b4:76:e6:bf:ad: 11:35:13:2a:c0:eb:fe:11:5d:d7:d9:a9:01:f4:d1:63:b6:c9: 83:e4:2e:99:02:fb:01:f9:f5:b7:d2:58:14:8b:44:5b:79:e3: 3f:9b:90:bd:66:72:00:6a:ca:f9:b2:7f:2f:41:96:7a:68:c4: 9f:ad:d3:17:72:86:1c:a0:ce:72:25:8d:07:15:d8:a3:83:87: 80:84:c0:68:5d:44:5e:e7:21:2e:da:e8:98:8f:6e:e1:b6:a9: ac:1c:ed:5e:24:1f:01:3d:85:6c:c2:56:2f:77:b1:3f:22:ca: b7:e1:cc:1f:ca:fb:04:33:e3:4e:ee:44:00:e4:0d:9f:2d:83: 98:9f:e4:51:57:6d:ad:77:33:d6:8c:30:40:56:b2:57:8b:a8: fb:b2:3e:d2:ae:d3:85:53:8b:e1:9a:d8:c8:32:ce:39:0b:92: 64:40:19:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJEOTMxMTAvBgNVBAUTKDkwMUY5ODkxRkJGN0YyN0Q0MTZBMUVFMDZCMzFCMDE2 NUFBRTFEQzUwHhcNMjYwNTEzMDAwNDU3WhcNMjYwNTIwMDAwNDU3WjAYMRYwFAYD VQQDEw02YTAzYzAyOS00NGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkG6J+Fh8910os7IbodjYwh5aWPMqnjb3x+ONef/6USoa/NTDTXLzbhiziROE Vy9FduhGLtVM0geqOi59zFAcfwGU+xArajaFgubIbdSVkBBI2Cn2QS/S6Ki2tupk 7JLm3Kcqm++xQhsdZnM40oqi9aUk2gllPvri0hqYduFelu7IDIspA8IF147LhQIx 1HH1tHJor5UGhQB/92rz+bh1C1iSiuLUK3if//xPIURvsofrF686FpvljhPbPw0D 2gEQTlIPeBkC8D7kC/no/401EIBbjHmcRg2YfAt+Up5b/fI9BjwzJg/RLPoF2/Je fAdvnV54Q7Uvzrt7W6CyhBvhCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGgkZP8a 642lUKUdlqCvzieb7PAnMB8GA1UdIwQYMBaAFJAfmJH79/J9QWoe4GsxsBZarh3F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkQ5My8wRjg3NEE3NDdG M0QxMUVDOEExRENDNzFDNEY5QUUwMi9rQi1Za2Z2MzhuMUJhaDdnYXpHd0ZscXVI Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tCLVlrZnYzOG4xQmFoN2dhekd3RmxxdUhjVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkQ5My8wRjg3NEE3NDdGM0QxMUVDOEExRENDNzFDNEY5QUUwMi9rQi1Za2Z2Mzhu MUJhaDdnYXpHd0ZscXVIY1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHHkDJicMYwQDdvwGwBwfKRxq553D9p/H8iEHCTpGJVuPScxNIyV4b/OUtzAT Wnpmo+l0kachXFMRRCOuFQS+7MYhmi77hanhdua5DwDBzR5Y5+nfAbR25r+tETUT KsDr/hFd19mpAfTRY7bJg+QumQL7Afn1t9JYFItEW3njP5uQvWZyAGrK+bJ/L0GW emjEn63TF3KGHKDOciWNBxXYo4OHgITAaF1EXuchLtromI9u4baprBztXiQfAT2F bMJWL3exPyLKt+HMH8r7BDPjTu5EAOQNny2DmJ/kUVdtrXcz1owwQFayV4uo+7I+ 0q7ThVOL4ZrYyDLOOQuSZEAZMQ== -----END CERTIFICATE-----Generated at Wed May 13 07:43:44 2026 by rpki-client