$ rpki-client -vvf rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.mft File: Ka_QrBIi6e_viwKNMY-OZPUTYCY.mft (raw, json) Hash identifier: n3G37pCavvT5Z0Da8SPeihZw16G+cYSgZHxoWJk8ZTk= Subject key identifier: 43:34:33:67:4C:BC:D6:67:02:67:96:8C:71:3D:E4:44:7F:D5:63:A6 Authority key identifier: 29:AF:D0:AC:12:22:E9:EF:EF:8B:02:8D:31:8F:8E:64:F5:13:60:26 Certificate issuer: /CN=A9153944/serialNumber=29AFD0AC1222E9EFEF8B028D318F8E64F5136026 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ka_QrBIi6e_viwKNMY-OZPUTYCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.mft Manifest number: 12 Signing time: Wed 13 May 2026 05:49:08 +0000 Manifest this update: Wed 13 May 2026 05:49:08 +0000 Manifest next update: Wed 20 May 2026 05:49:08 +0000 Files and hashes: 1: Ka_QrBIi6e_viwKNMY-OZPUTYCY.crl (hash: Md3xA9TBdBP/fk4TujcyULkF5Z9oOk5FzxziMnvz+TQ=) 2: D80B89B8474011F1AEFA8515C4833773.roa (hash: CHdGOS+C2q+FN7TdzDpOKxOU5Grq3Z9f28F2xS7RBXk=) 3: D8ACA550474011F1AEFA8515C4833773.roa (hash: EM1YmIssei4t0rsxlgcKEqeR/eLo5sUVOqXzmRHZDG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.crl rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ka_QrBIi6e_viwKNMY-OZPUTYCY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153944, serialNumber=29AFD0AC1222E9EFEF8B028D318F8E64F5136026 Validity Not Before: May 13 05:49:08 2026 GMT Not After : May 20 05:49:08 2026 GMT Subject: CN=6a0410d4-2ecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:70:0b:a7:09:d0:18:cb:ff:e6:68:39:bb:09: 17:83:6c:3c:bd:b0:c0:76:2c:94:04:81:55:cf:9e: d8:2b:c7:19:3a:0f:1f:89:46:e7:e7:fc:42:63:d1: 4a:43:06:1a:6b:8a:fd:69:35:a5:99:ae:e1:65:1e: be:40:de:c6:aa:e8:f7:4f:ca:8f:d3:2b:14:4a:e9: e4:f0:11:06:01:0a:1e:c0:e2:ca:d7:1c:31:85:e3: 04:5f:79:1b:af:08:de:79:69:f0:07:db:d5:bf:62: 0b:63:61:cd:d0:42:80:d9:f1:2d:b2:1f:ab:41:85: 70:8a:9f:a5:17:85:95:c2:c9:32:16:dc:cd:bb:94: d9:38:99:50:d2:7c:b7:05:f5:4f:80:41:72:cc:49: 9d:72:14:5c:5d:91:f0:7e:20:04:c3:70:78:53:92: f1:a2:ff:76:fc:50:d8:77:39:9d:b1:9c:94:58:c9: 5e:11:be:e4:1d:6a:1c:60:dc:dd:e7:4e:3e:c7:ff: 63:16:76:56:a8:e9:37:75:d4:ed:2b:25:ff:1b:49: 78:71:a2:8b:d2:fa:26:4a:15:99:1f:c7:4f:f4:d5: 37:61:16:8e:78:31:1c:c8:91:c6:af:84:18:f6:85: 37:16:aa:98:f5:b8:8c:2f:1f:7e:56:10:07:17:a6: 06:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:34:33:67:4C:BC:D6:67:02:67:96:8C:71:3D:E4:44:7F:D5:63:A6 X509v3 Authority Key Identifier: keyid:29:AF:D0:AC:12:22:E9:EF:EF:8B:02:8D:31:8F:8E:64:F5:13:60:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ka_QrBIi6e_viwKNMY-OZPUTYCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:c6:b9:ca:ee:e3:fd:ef:dd:05:ea:38:56:e0:c7:f6:b0:d4: 1a:33:6a:ba:27:97:0e:5a:31:aa:bb:79:85:ba:09:15:e1:7c: 6c:84:3c:2b:54:44:aa:54:05:3e:f9:9f:69:2c:18:bb:3d:79: 0b:97:12:30:6a:93:22:02:72:b4:7b:ae:42:eb:85:dc:77:b3: e7:57:c1:f3:04:62:ca:2e:c6:0f:dc:9c:d3:64:7f:6d:68:fd: 39:5f:24:74:cf:d4:ba:9e:9f:d3:22:f1:b1:9c:8b:9f:96:38: ae:3e:c5:d0:4c:de:7b:0a:1b:91:6e:c6:4d:44:ab:5a:05:60: 73:2c:16:dc:dc:9a:b1:d1:cb:01:2e:08:a8:af:06:f9:80:98: a1:47:60:94:53:35:1e:45:a2:ac:e2:0c:14:fb:92:58:83:0f: 51:7c:cb:23:fc:7f:22:b8:02:a7:ae:c6:09:b0:fb:b0:41:35: c5:cc:a9:48:6a:7d:de:fe:32:58:41:40:c6:3c:83:74:26:69: 4a:3d:e5:70:2e:eb:db:93:7d:f9:22:6e:1e:40:2c:94:b5:a3: c0:e2:90:dd:42:d5:75:54:11:19:cb:93:d1:ed:b6:f7:cb:c0: 3f:8a:a9:6e:9f:23:0f:85:34:06:bf:d8:eb:79:4f:61:78:bf: 34:c5:60:a8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Mzk0NDExMC8GA1UEBRMoMjlBRkQwQUMxMjIyRTlFRkVGOEIwMjhEMzE4RjhFNjRG NTEzNjAyNjAeFw0yNjA1MTMwNTQ5MDhaFw0yNjA1MjAwNTQ5MDhaMBgxFjAUBgNV BAMTDTZhMDQxMGQ0LTJlY2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCocAunCdAYy//maDm7CReDbDy9sMB2LJQEgVXPntgrxxk6Dx+JRufn/EJj0UpD Bhpriv1pNaWZruFlHr5A3saq6PdPyo/TKxRK6eTwEQYBCh7A4srXHDGF4wRfeRuv CN55afAH29W/YgtjYc3QQoDZ8S2yH6tBhXCKn6UXhZXCyTIW3M27lNk4mVDSfLcF 9U+AQXLMSZ1yFFxdkfB+IATDcHhTkvGi/3b8UNh3OZ2xnJRYyV4RvuQdahxg3N3n Tj7H/2MWdlao6Td11O0rJf8bSXhxoovS+iZKFZkfx0/01TdhFo54MRzIkcavhBj2 hTcWqpj1uIwvH35WEAcXpgYvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQzQzZ0y8 1mcCZ5aMcT3kRH/VY6YwHwYDVR0jBBgwFoAUKa/QrBIi6e/viwKNMY+OZPUTYCYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzOTQ0L0RDNzcwMTBBMzU2 OTExRjFCRjdENkNBNzdDRUU1MjhFL0thX1FyQklpNmVfdml3S05NWS1PWlBVVFlD WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvS2FfUXJCSWk2ZV92aXdLTk1ZLU9aUFVUWUNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz OTQ0L0RDNzcwMTBBMzU2OTExRjFCRjdENkNBNzdDRUU1MjhFL0thX1FyQklpNmVf dml3S05NWS1PWlBVVFlDWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAHxrnK7uP9790F6jhW4Mf2sNQaM2q6J5cOWjGqu3mFugkV4XxshDwrVESqVAU+ +Z9pLBi7PXkLlxIwapMiAnK0e65C64Xcd7PnV8HzBGLKLsYP3JzTZH9taP05XyR0 z9S6np/TIvGxnIufljiuPsXQTN57ChuRbsZNRKtaBWBzLBbc3Jqx0csBLgiorwb5 gJihR2CUUzUeRaKs4gwU+5JYgw9RfMsj/H8iuAKnrsYJsPuwQTXFzKlIan3e/jJY QUDGPIN0JmlKPeVwLuvbk335Im4eQCyUtaPA4pDdQtV1VBEZy5PR7bb3y8A/iqlu nyMPhTQGv9jreU9heL80xWCo -----END CERTIFICATE-----Generated at Wed May 13 12:18:07 2026 by rpki-client