$ rpki-client -vvf rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft File: gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft (raw, json) Hash identifier: CVP/v2JkkO1zSMvsphx5/rhnMMVKNsM+VeIBUwZGdOc= Subject key identifier: 0F:82:76:40:0E:7F:21:1E:B0:A9:1C:84:06:E0:BD:A8:A4:06:0C:CA Authority key identifier: 80:A4:B8:FC:AE:CD:01:1E:82:AA:4E:2D:72:17:3C:A6:3E:9C:4E:51 Certificate issuer: /CN=A9155D1E/serialNumber=80A4B8FCAECD011E82AA4E2D72173CA63E9C4E51 Certificate serial: 0328 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft Manifest number: 0322 Signing time: Wed 13 May 2026 01:32:32 +0000 Manifest this update: Wed 13 May 2026 01:32:31 +0000 Manifest next update: Wed 20 May 2026 01:32:31 +0000 Files and hashes: 1: gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl (hash: hzxEL7rSOXMnZDfHnXAx2+cgA952j8SVFIMGNfpnxlg=) 2: C003531C10EB11ED9C882A38C4F9AE02.roa (hash: 4mLtegRFgk9fbTWJTkH5s5qPTSUzFVGI3R7GNiZDMVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 01:32:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 808 (0x328) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155D1E, serialNumber=80A4B8FCAECD011E82AA4E2D72173CA63E9C4E51 Validity Not Before: May 13 01:32:31 2026 GMT Not After : May 20 01:32:31 2026 GMT Subject: CN=6a03d4af-59c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:11:a5:c4:14:5b:2d:bd:06:8b:f1:6a:40:f0: 5a:b8:18:b9:86:64:e1:34:e7:ce:62:7e:fb:7a:6b: 39:51:9c:b1:24:ad:ad:58:7f:61:80:7a:3b:93:63: 66:85:f0:aa:27:bb:78:9e:b0:8c:b4:95:85:b9:a6: d8:0a:a7:b5:b3:6a:bc:a1:37:17:ad:3b:0d:d3:2b: 91:58:22:0b:cb:60:de:9e:84:ed:85:38:64:aa:2b: 3f:36:52:13:9c:51:1c:e2:c5:3e:c9:f0:04:e1:b8: ca:8d:7f:ef:c0:71:6b:b4:da:2b:31:7a:5e:75:98: 74:7e:cd:27:a8:4b:2e:71:0c:61:7f:46:7e:8d:79: cc:8f:e5:87:03:9c:5b:7d:89:2b:4d:31:24:71:d5: 29:42:9e:9d:68:1d:60:fa:6f:c9:da:0a:2a:99:6b: ef:21:3f:af:6c:60:c7:02:c3:a5:6c:fe:63:d4:bd: 71:6b:c0:2d:d4:05:b6:91:30:6e:a6:c3:aa:6a:1d: bf:2a:47:85:5e:b2:84:f8:b0:66:5f:5b:53:78:04: c6:48:6b:86:89:49:93:4f:76:fc:b9:7c:87:c2:cc: 20:fe:d8:d1:40:e1:f6:f4:a7:76:aa:76:21:77:83: fa:c3:dd:e7:a1:28:f8:65:f0:00:33:00:20:b2:3a: 29:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:82:76:40:0E:7F:21:1E:B0:A9:1C:84:06:E0:BD:A8:A4:06:0C:CA X509v3 Authority Key Identifier: keyid:80:A4:B8:FC:AE:CD:01:1E:82:AA:4E:2D:72:17:3C:A6:3E:9C:4E:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:37:0b:ee:4d:41:40:ce:ad:b1:9e:80:27:4f:da:99:d5:8b: b3:8d:58:ff:8b:d7:81:89:ea:16:7b:4d:9b:56:42:3c:3c:be: 0f:98:a6:ee:10:14:83:1b:d6:29:88:7b:32:74:6f:3b:3f:04: 88:9c:49:5d:16:05:66:b3:34:49:df:10:93:31:47:db:6d:6d: 99:99:fc:a0:82:30:43:c7:0e:12:82:33:e2:5d:e6:42:4d:59: 7d:95:3e:c0:d5:05:ef:93:9e:73:80:4d:2a:88:99:68:2e:09: d9:c6:76:4f:ef:f3:e7:74:dc:0e:f0:8a:54:1f:bd:67:1e:47: 41:d0:c5:da:36:7b:43:fa:8d:27:aa:c7:d9:29:2b:7f:ca:d6: 6a:50:f4:61:a2:26:78:2c:66:7b:24:9b:f7:b5:51:9a:36:a7: 30:3c:67:a7:69:99:b8:f0:00:d8:61:25:e6:7a:17:27:50:9b: fa:c3:41:32:9b:fd:61:97:ac:f2:a8:d6:9b:cf:c5:03:84:38: d5:bf:95:a1:f0:57:65:9f:7c:48:23:8d:ff:dd:14:11:be:13: 0f:c5:0a:91:45:78:66:2b:68:21:03:aa:7b:7e:5b:ff:09:7e: fb:e9:e7:e7:55:e6:f3:86:4c:a9:36:61:16:48:b5:aa:12:52: 3d:32:38:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVEMUUxMTAvBgNVBAUTKDgwQTRCOEZDQUVDRDAxMUU4MkFBNEUyRDcyMTczQ0E2 M0U5QzRFNTEwHhcNMjYwNTEzMDEzMjMxWhcNMjYwNTIwMDEzMjMxWjAYMRYwFAYD VQQDEw02YTAzZDRhZi01OWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxGlxBRbLb0Gi/FqQPBauBi5hmThNOfOYn77ems5UZyxJK2tWH9hgHo7k2Nm hfCqJ7t4nrCMtJWFuabYCqe1s2q8oTcXrTsN0yuRWCILy2DenoTthThkqis/NlIT nFEc4sU+yfAE4bjKjX/vwHFrtNorMXpedZh0fs0nqEsucQxhf0Z+jXnMj+WHA5xb fYkrTTEkcdUpQp6daB1g+m/J2goqmWvvIT+vbGDHAsOlbP5j1L1xa8At1AW2kTBu psOqah2/KkeFXrKE+LBmX1tTeATGSGuGiUmTT3b8uXyHwswg/tjRQOH29Kd2qnYh d4P6w93noSj4ZfAAMwAgsjopawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA+CdkAO fyEesKkchAbgvaikBgzKMB8GA1UdIwQYMBaAFICkuPyuzQEegqpOLXIXPKY+nE5R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUQxRS9BOEQ4ODNFQTEw RTMxMUVEQURBRkQ5MDlDNEY5QUUwMi9nS1M0X0s3TkFSNkNxazR0Y2hjOHBqNmNU bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dLUzRfSzdOQVI2Q3FrNHRjaGM4cGo2Y1RsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUQxRS9BOEQ4ODNFQTEwRTMxMUVEQURBRkQ5MDlDNEY5QUUwMi9nS1M0X0s3TkFS NkNxazR0Y2hjOHBqNmNUbEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAljcL7k1BQM6tsZ6AJ0/amdWLs41Y/4vXgYnqFntNm1ZCPDy+D5im7hAUgxvW KYh7MnRvOz8EiJxJXRYFZrM0Sd8QkzFH221tmZn8oIIwQ8cOEoIz4l3mQk1ZfZU+ wNUF75Oec4BNKoiZaC4J2cZ2T+/z53TcDvCKVB+9Zx5HQdDF2jZ7Q/qNJ6rH2Skr f8rWalD0YaImeCxmeySb97VRmjanMDxnp2mZuPAA2GEl5noXJ1Cb+sNBMpv9YZes 8qjWm8/FA4Q41b+VofBXZZ98SCON/90UEb4TD8UKkUV4ZitoIQOqe35b/wl+++nn 51Xm84ZMqTZhFki1qhJSPTI49w== -----END CERTIFICATE-----Generated at Wed May 13 07:11:42 2026 by rpki-client