$ rpki-client -vvf rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft File: KOAXfHClckcH27FJ7VV8D4FW4Ok.mft (raw, json) Hash identifier: hKY8wdv5kR09UfzEiP2hj6icUl1vcaxaGqDis8oNCQ0= Subject key identifier: 90:68:46:39:FD:54:21:7B:8D:0B:DB:F4:76:BB:4E:FF:CC:D6:31:FF Authority key identifier: 28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9 Certificate issuer: /CN=A9136109/serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9 Certificate serial: 0692 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft Manifest number: 0680 Signing time: Tue 12 May 2026 22:40:21 +0000 Manifest this update: Tue 12 May 2026 22:40:21 +0000 Manifest next update: Tue 19 May 2026 22:40:21 +0000 Files and hashes: 1: KOAXfHClckcH27FJ7VV8D4FW4Ok.crl (hash: hYvMWzJ/NQrBLonDK9cSRqyjzuekI1Ab70sLyAmCTBk=) 2: 590697D6465611EE8128031BC4F9AE02.roa (hash: 8NcFmfcZYrRsP7z1vxHhvTJh2ryA3DW6xQ/HYbHt6tE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 22:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1682 (0x692) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136109, serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9 Validity Not Before: May 12 22:40:21 2026 GMT Not After : May 19 22:40:21 2026 GMT Subject: CN=6a03ac55-fcc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0d:2c:c8:bd:68:32:74:99:37:d4:00:dc:3b: ea:5f:5a:1c:93:b1:5c:7a:bd:9e:86:26:5a:ba:65: fb:3f:b4:3b:8f:ec:af:9b:f2:61:b9:33:c4:5f:d6: 91:f0:b6:84:6d:00:3c:9f:79:ce:99:9d:bb:e8:96: 98:86:b5:dd:30:24:cf:79:75:4d:38:3c:e8:1e:63: 21:56:c0:f7:b6:3c:7d:ef:93:10:29:71:93:ca:54: dd:21:0f:aa:fb:eb:28:3d:38:bc:4b:be:83:52:95: 18:b5:a6:da:2b:9b:ee:31:d3:2c:b7:f3:9e:9b:96: 09:6b:fb:40:68:d7:eb:bd:b6:a9:9d:73:f3:60:35: af:de:ad:ac:9d:0d:b9:3a:41:ac:96:37:f0:75:d5: aa:1a:0d:7a:7b:f5:40:54:fc:ea:8a:60:6a:7b:91: 38:a2:7c:9d:f3:97:8c:09:62:d4:a5:a4:72:de:f5: 25:31:bc:a3:fa:8f:7e:ab:7f:28:0b:76:d8:ee:7b: b0:8f:f6:d3:c5:3d:b4:f1:6d:b4:4c:3e:87:45:29: e2:08:4b:19:9f:6f:2d:6e:73:3d:4e:a0:7d:08:7e: a9:84:ad:81:50:9a:23:81:36:7f:3a:5d:7d:af:b9: 2e:1b:fe:d7:a1:b9:2d:d8:42:05:6a:50:fa:b8:48: 95:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:68:46:39:FD:54:21:7B:8D:0B:DB:F4:76:BB:4E:FF:CC:D6:31:FF X509v3 Authority Key Identifier: keyid:28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:93:29:96:b2:61:fe:d7:97:50:b6:d9:0d:53:88:67:96:63: f8:54:9a:b0:eb:81:cc:3f:0e:27:a4:f6:fc:02:9a:a5:cf:86: 47:e6:87:08:b6:ad:9c:ce:00:56:2a:df:24:47:9c:66:ea:a6: 6d:a9:69:2b:34:07:be:5c:8c:cf:24:ec:9e:d9:bd:99:3d:98: 7e:5e:6d:6a:c5:a0:fe:62:49:4d:5b:b0:cb:1c:9e:c4:2a:89: 3f:01:4e:16:09:45:15:22:84:75:ee:4b:c4:fb:6e:ae:1f:ac: 86:97:64:52:68:53:24:de:7b:a3:ad:03:01:6b:a5:6a:29:7d: 31:5e:d7:e5:63:c5:7f:a9:bb:87:b3:9a:c5:ec:0a:cf:74:6b: 9b:c8:ac:70:2e:a6:d6:b6:7a:d3:27:53:2c:03:f7:21:57:88: 20:03:41:0e:cb:ce:c4:97:79:c0:e7:dd:bf:22:4a:9d:68:92: 16:87:2d:1b:f5:5e:bc:ea:36:23:0a:51:38:e3:c8:ae:4b:f7: e6:c8:84:f7:15:a7:2d:30:aa:44:ae:d6:dd:48:99:09:4a:71: fb:c8:f0:ac:f6:24:4f:98:d4:96:69:66:ad:4a:c7:0c:d7:17: e5:fb:70:9d:ba:0f:ed:76:08:f1:31:76:9f:14:b7:1e:33:1f: 02:d5:b3:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYxMDkxMTAvBgNVBAUTKDI4RTAxNzdDNzBBNTcyNDcwN0RCQjE0OUVENTU3QzBG ODE1NkUwRTkwHhcNMjYwNTEyMjI0MDIxWhcNMjYwNTE5MjI0MDIxWjAYMRYwFAYD VQQDEw02YTAzYWM1NS1mY2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnw0syL1oMnSZN9QA3DvqX1ock7Fcer2ehiZaumX7P7Q7j+yvm/JhuTPEX9aR 8LaEbQA8n3nOmZ276JaYhrXdMCTPeXVNODzoHmMhVsD3tjx975MQKXGTylTdIQ+q ++soPTi8S76DUpUYtabaK5vuMdMst/Oem5YJa/tAaNfrvbapnXPzYDWv3q2snQ25 OkGsljfwddWqGg16e/VAVPzqimBqe5E4onyd85eMCWLUpaRy3vUlMbyj+o9+q38o C3bY7nuwj/bTxT208W20TD6HRSniCEsZn28tbnM9TqB9CH6phK2BUJojgTZ/Ol19 r7kuG/7Xobkt2EIFalD6uEiV5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJBoRjn9 VCF7jQvb9Ha7Tv/M1jH/MB8GA1UdIwQYMBaAFCjgF3xwpXJHB9uxSe1VfA+BVuDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjEwOS9DODIwNzIxMkM1 MEQxMUVCOUFBRUU4N0JDNEY5QUUwMi9LT0FYZkhDbGNrY0gyN0ZKN1ZWOEQ0Rlc0 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tPQVhmSENsY2tjSDI3Rko3VlY4RDRGVzRPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjEwOS9DODIwNzIxMkM1MEQxMUVCOUFBRUU4N0JDNEY5QUUwMi9LT0FYZkhDbGNr Y0gyN0ZKN1ZWOEQ0Rlc0T2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf5MplrJh/teXULbZDVOIZ5Zj+FSasOuBzD8OJ6T2/AKapc+GR+aHCLatnM4A VirfJEecZuqmbalpKzQHvlyMzyTsntm9mT2Yfl5tasWg/mJJTVuwyxyexCqJPwFO FglFFSKEde5LxPturh+shpdkUmhTJN57o60DAWulail9MV7X5WPFf6m7h7OaxewK z3Rrm8iscC6m1rZ60ydTLAP3IVeIIANBDsvOxJd5wOfdvyJKnWiSFoctG/VevOo2 IwpROOPIrkv35siE9xWnLTCqRK7W3UiZCUpx+8jwrPYkT5jUlmlmrUrHDNcX5ftw nboP7XYI8TF2nxS3HjMfAtWziQ== -----END CERTIFICATE-----Generated at Wed May 13 03:21:25 2026 by rpki-client