$ rpki-client -vvf rpki.apnic.net/member_repository/A9142706/5C1F7588335611F19DE3316DC8833773/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.mft File: kAQ8QPoof1qqpCX0ZUSFoxEcPVM.mft (raw, json) Hash identifier: /DFM0mjlF7/2rLnDqfxygvMVgcS32NQjBx19g7cHq8w= Subject key identifier: 1D:9E:DD:9B:A9:E3:31:9A:88:B2:4E:29:88:C0:8E:3E:E8:78:1E:77 Authority key identifier: 90:04:3C:40:FA:28:7F:5A:AA:A4:25:F4:65:44:85:A3:11:1C:3D:53 Certificate issuer: /CN=A9142706/serialNumber=90043C40FA287F5AAAA425F4654485A3111C3D53 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142706/5C1F7588335611F19DE3316DC8833773/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.mft Manifest number: 12 Signing time: Mon 11 May 2026 09:13:42 +0000 Manifest this update: Mon 11 May 2026 09:13:41 +0000 Manifest next update: Mon 18 May 2026 09:13:41 +0000 Files and hashes: 1: kAQ8QPoof1qqpCX0ZUSFoxEcPVM.crl (hash: Z23tfzqle5/jwDa3co6kOCZ4mYUK7H2KZqbwtf+/zPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142706/5C1F7588335611F19DE3316DC8833773/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.crl rsync://rpki.apnic.net/member_repository/A9142706/5C1F7588335611F19DE3316DC8833773/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 09:13:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142706, serialNumber=90043C40FA287F5AAAA425F4654485A3111C3D53 Validity Not Before: May 11 09:13:41 2026 GMT Not After : May 18 09:13:41 2026 GMT Subject: CN=6a019dc6-a8fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1b:56:d5:c1:b8:2d:a0:2e:92:b6:50:fc:18: 8e:86:35:8e:9a:02:63:7d:de:08:97:c3:40:58:8c: 83:25:00:05:e9:2a:c2:f5:fe:03:2c:26:7e:b0:45: a7:92:42:7a:7c:96:d9:7d:89:5b:2f:f3:86:b7:44: 38:da:5b:32:2a:22:e7:17:de:2b:e2:2b:31:1d:c8: 45:bc:51:33:9d:27:50:50:33:dc:ef:99:8c:c3:bc: cf:df:2f:97:c5:c2:2d:b7:b2:04:d7:3b:df:18:e7: 5c:f2:52:73:4f:b4:f8:bc:c1:cc:33:1e:11:8c:db: 2a:65:68:77:9c:d4:1b:96:0c:97:09:81:6c:b7:ad: 29:65:43:a2:c3:1a:e3:ae:46:66:61:a8:59:7c:0b: 64:ad:78:f9:70:01:87:7a:cf:fc:13:fd:5b:0e:8b: 01:f1:da:50:38:8a:70:f8:a1:9d:41:1e:07:20:67: cc:3c:70:c6:36:b7:b7:07:93:3c:4d:c7:07:fd:63: 76:71:0c:08:cf:ce:eb:19:25:3c:95:83:c7:dd:0b: 62:6e:5a:e6:83:bd:fd:8c:ec:40:26:85:72:3f:64: 37:79:8b:7d:04:ce:08:bc:ef:4d:ee:90:d9:9e:cf: 42:da:d4:02:1c:b8:d5:9a:e6:2b:ed:67:c2:79:b1: 4c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9E:DD:9B:A9:E3:31:9A:88:B2:4E:29:88:C0:8E:3E:E8:78:1E:77 X509v3 Authority Key Identifier: keyid:90:04:3C:40:FA:28:7F:5A:AA:A4:25:F4:65:44:85:A3:11:1C:3D:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142706/5C1F7588335611F19DE3316DC8833773/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142706/5C1F7588335611F19DE3316DC8833773/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:47:b6:67:88:b2:7a:2b:c7:dd:92:64:fe:4a:37:e7:97:a2: 55:b1:34:98:e8:ce:d9:0a:98:84:4b:0d:c4:a7:91:4e:7b:8f: 98:14:2b:56:2a:2c:d4:18:e5:30:1f:0a:b2:96:9f:9c:ed:02: c6:cf:db:89:94:ff:44:03:9a:a9:45:47:f5:cc:ea:25:a8:97: 39:82:cb:6e:de:6d:79:d9:72:ee:a8:c7:6b:77:c8:4b:b3:a9: e6:b1:94:0f:fb:fe:e6:03:2e:e1:89:84:c7:e3:b0:b4:26:a6: 8d:68:53:df:65:4e:99:3d:ad:f6:27:02:87:1f:0f:1d:bc:bc: aa:b5:f0:c1:60:e3:98:4d:80:c3:a3:c8:11:6d:45:27:45:81: 78:3d:56:e2:b9:fb:92:fa:a1:77:48:5a:13:60:2a:96:2b:41: 96:f4:d2:36:61:36:a2:a0:91:c6:ba:6b:0f:e3:c8:36:6d:9f: 21:91:ec:52:cb:db:97:b2:cd:c8:89:a9:cd:e0:6f:69:4e:7e: bd:c3:a7:ec:11:a0:ea:7a:68:a8:95:c7:71:34:70:9c:79:39: cf:41:71:35:61:93:d6:b2:8c:b2:3c:e7:54:8c:ac:50:92:e9: a9:d2:79:a7:bb:59:91:f1:c1:fd:9e:9d:a6:76:42:30:af:0f: 44:6a:f6:55 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjcwNjExMC8GA1UEBRMoOTAwNDNDNDBGQTI4N0Y1QUFBQTQyNUY0NjU0NDg1QTMx MTFDM0Q1MzAeFw0yNjA1MTEwOTEzNDFaFw0yNjA1MTgwOTEzNDFaMBgxFjAUBgNV BAMTDTZhMDE5ZGM2LWE4ZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7G1bVwbgtoC6StlD8GI6GNY6aAmN93giXw0BYjIMlAAXpKsL1/gMsJn6wRaeS Qnp8ltl9iVsv84a3RDjaWzIqIucX3iviKzEdyEW8UTOdJ1BQM9zvmYzDvM/fL5fF wi23sgTXO98Y51zyUnNPtPi8wcwzHhGM2yplaHec1BuWDJcJgWy3rSllQ6LDGuOu RmZhqFl8C2StePlwAYd6z/wT/VsOiwHx2lA4inD4oZ1BHgcgZ8w8cMY2t7cHkzxN xwf9Y3ZxDAjPzusZJTyVg8fdC2JuWuaDvf2M7EAmhXI/ZDd5i30Ezgi8703ukNme z0La1AIcuNWa5ivtZ8J5sUxhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHZ7dm6nj MZqIsk4piMCOPuh4HncwHwYDVR0jBBgwFoAUkAQ8QPoof1qqpCX0ZUSFoxEcPVMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNzA2LzVDMUY3NTg4MzM1 NjExRjE5REUzMzE2REM4ODMzNzczL2tBUThRUG9vZjFxcXBDWDBaVVNGb3hFY1BW TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva0FROFFQb29mMXFxcENYMFpVU0ZveEVjUFZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy NzA2LzVDMUY3NTg4MzM1NjExRjE5REUzMzE2REM4ODMzNzczL2tBUThRUG9vZjFx cXBDWDBaVVNGb3hFY1BWTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCTR7ZniLJ6K8fdkmT+Sjfnl6JVsTSY6M7ZCpiESw3Ep5FOe4+YFCtWKizUGOUw Hwqylp+c7QLGz9uJlP9EA5qpRUf1zOolqJc5gstu3m152XLuqMdrd8hLs6nmsZQP +/7mAy7hiYTH47C0JqaNaFPfZU6ZPa32JwKHHw8dvLyqtfDBYOOYTYDDo8gRbUUn RYF4PVbiufuS+qF3SFoTYCqWK0GW9NI2YTaioJHGumsP48g2bZ8hkexSy9uXss3I ianN4G9pTn69w6fsEaDqemiolcdxNHCceTnPQXE1YZPWsoyyPOdUjKxQkump0nmn u1mR8cH9np2mdkIwrw9EavZV -----END CERTIFICATE-----Generated at Wed May 13 03:55:56 2026 by rpki-client