$ rpki-client -vvf rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/A0kndy5R4IVbEP1QK4FvJDRhm_I.mft File: A0kndy5R4IVbEP1QK4FvJDRhm_I.mft (raw, json) Hash identifier: QkWaT0j4OdRJ8k4g1uYqd7DiwaIKJDVhea/1EpcJGKA= Subject key identifier: 64:FA:CC:55:2D:E4:C7:36:53:EA:80:5E:3C:7A:8B:20:FE:79:47:A6 Authority key identifier: 03:49:27:77:2E:51:E0:85:5B:10:FD:50:2B:81:6F:24:34:61:9B:F2 Certificate issuer: /CN=A91676C8/serialNumber=034927772E51E0855B10FD502B816F2434619BF2 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0kndy5R4IVbEP1QK4FvJDRhm_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/A0kndy5R4IVbEP1QK4FvJDRhm_I.mft Manifest number: 08 Signing time: Mon 11 May 2026 09:22:52 +0000 Manifest this update: Mon 11 May 2026 09:22:51 +0000 Manifest next update: Mon 18 May 2026 09:22:51 +0000 Files and hashes: 1: A0kndy5R4IVbEP1QK4FvJDRhm_I.crl (hash: F7jbyj78jgWPRu9mHrTHcZrwurrBTg3mSkQjOW1DDJw=) 2: 133F28C2453511F18432EE9F9F833773.roa (hash: taFbbALsE4VldUj6KQuMU4XM/YRitztLWOBpIue59dI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/A0kndy5R4IVbEP1QK4FvJDRhm_I.crl rsync://rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/A0kndy5R4IVbEP1QK4FvJDRhm_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0kndy5R4IVbEP1QK4FvJDRhm_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 09:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91676C8, serialNumber=034927772E51E0855B10FD502B816F2434619BF2 Validity Not Before: May 11 09:22:51 2026 GMT Not After : May 18 09:22:51 2026 GMT Subject: CN=6a019fec-15ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0c:8b:0d:f3:a9:e8:19:ef:b6:3e:ab:ef:4e: 21:29:96:d6:0d:e8:18:8e:92:70:3f:f9:f7:97:9b: 73:c1:ae:6c:92:93:fa:ba:f7:a4:dc:bb:99:f1:83: b4:5f:39:9a:32:28:f9:93:25:09:a5:8a:25:ed:bf: 16:73:d9:9b:d0:20:bd:34:12:eb:31:a0:06:b5:05: 0f:9f:a7:41:e4:7a:e2:6f:76:0a:45:ec:be:13:76: f8:8a:6d:0d:7f:8e:4a:9e:b8:c2:30:08:5e:f5:6c: fc:69:1f:55:fd:e9:3f:a1:8a:b4:4c:7b:8c:3b:69: 49:50:46:e6:59:51:ac:88:c5:c4:c4:b5:d5:34:f6: 97:0a:14:10:0b:f5:ef:24:f8:90:b9:2f:81:28:e6: 3c:72:59:21:7e:53:9e:d1:76:45:fe:f2:17:52:b2: 4f:55:74:a6:2a:f4:28:45:69:00:7c:2c:4f:8b:b7: cc:f0:2a:a4:67:e4:ad:0f:0b:c4:39:56:0f:7c:4d: 85:1a:6a:5e:45:30:c7:e4:fb:8d:83:50:f8:3a:66: cf:e5:0a:17:77:7f:68:c1:05:36:4b:6f:d5:89:dd: 58:cc:c8:f5:eb:3d:62:c1:d6:bf:e8:6f:39:6b:03: e1:87:78:5f:eb:79:fe:fc:fd:88:1c:51:9f:77:f5: 5b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FA:CC:55:2D:E4:C7:36:53:EA:80:5E:3C:7A:8B:20:FE:79:47:A6 X509v3 Authority Key Identifier: keyid:03:49:27:77:2E:51:E0:85:5B:10:FD:50:2B:81:6F:24:34:61:9B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/A0kndy5R4IVbEP1QK4FvJDRhm_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0kndy5R4IVbEP1QK4FvJDRhm_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/A0kndy5R4IVbEP1QK4FvJDRhm_I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:f2:3b:30:c3:b2:98:23:3f:c5:db:1f:13:bf:03:c6:c3:84: 4d:0c:f5:05:c8:27:2d:9c:57:e8:42:7e:02:ba:27:a5:ab:93: 88:14:48:33:9a:6a:9d:40:d9:a0:90:81:a8:04:35:56:87:a0: e1:5c:ba:56:0e:e6:35:16:b3:93:9c:e8:27:9d:75:e2:0f:71: 2c:42:19:6f:a5:fe:87:30:77:68:c3:97:43:60:4d:fb:c2:95: d0:d6:13:79:6a:44:0b:cb:00:98:64:d5:f0:28:c2:c5:65:a3: f1:72:05:fa:17:b8:e9:46:7e:7d:c3:fa:2b:58:5f:18:0d:21: 40:cc:e2:89:4a:85:86:72:b0:f2:bd:3a:91:75:3f:d3:e1:2b: 30:bb:30:e5:4a:9f:e0:41:68:f5:5b:0c:d4:44:48:a4:51:48: 8c:dc:a5:7e:02:f8:60:69:6a:2b:b7:cd:2f:e3:d8:7f:56:0f: d1:1d:a1:62:ad:ba:11:11:8a:d6:49:7e:3d:92:04:49:b4:1c: 43:f9:26:97:b1:8d:64:05:4b:0f:3b:28:09:12:85:eb:34:b6: 29:8a:56:3c:77:42:05:00:05:4f:c8:24:41:ce:86:44:eb:65: 94:c9:ea:0a:65:07:01:6f:eb:33:49:ce:59:6e:be:54:e9:01: b8:76:90:f2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NzZDODExMC8GA1UEBRMoMDM0OTI3NzcyRTUxRTA4NTVCMTBGRDUwMkI4MTZGMjQz NDYxOUJGMjAeFw0yNjA1MTEwOTIyNTFaFw0yNjA1MTgwOTIyNTFaMBgxFjAUBgNV BAMTDTZhMDE5ZmVjLTE1ZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcDIsN86noGe+2PqvvTiEpltYN6BiOknA/+feXm3PBrmySk/q696Tcu5nxg7Rf OZoyKPmTJQmliiXtvxZz2ZvQIL00EusxoAa1BQ+fp0HkeuJvdgpF7L4TdviKbQ1/ jkqeuMIwCF71bPxpH1X96T+hirRMe4w7aUlQRuZZUayIxcTEtdU09pcKFBAL9e8k +JC5L4Eo5jxyWSF+U57RdkX+8hdSsk9VdKYq9ChFaQB8LE+Lt8zwKqRn5K0PC8Q5 Vg98TYUaal5FMMfk+42DUPg6Zs/lChd3f2jBBTZLb9WJ3VjMyPXrPWLB1r/obzlr A+GHeF/ref78/YgcUZ939VsJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZPrMVS3k xzZT6oBePHqLIP55R6YwHwYDVR0jBBgwFoAUA0kndy5R4IVbEP1QK4FvJDRhm/Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3NkM4LzNBNjY1MDIwNDRB MzExRjFCREU5MEEzRkIxODMzNzczL0Ewa25keTVSNElWYkVQMVFLNEZ2SkRSaG1f SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQTBrbmR5NVI0SVZiRVAxUUs0RnZKRFJobV9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3 NkM4LzNBNjY1MDIwNDRBMzExRjFCREU5MEEzRkIxODMzNzczL0Ewa25keTVSNElW YkVQMVFLNEZ2SkRSaG1fSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCO8jsww7KYIz/F2x8TvwPGw4RNDPUFyCctnFfoQn4Cuielq5OIFEgzmmqdQNmg kIGoBDVWh6DhXLpWDuY1FrOTnOgnnXXiD3EsQhlvpf6HMHdow5dDYE37wpXQ1hN5 akQLywCYZNXwKMLFZaPxcgX6F7jpRn59w/orWF8YDSFAzOKJSoWGcrDyvTqRdT/T 4SswuzDlSp/gQWj1WwzUREikUUiM3KV+AvhgaWort80v49h/Vg/RHaFirboREYrW SX49kgRJtBxD+SaXsY1kBUsPOygJEoXrNLYpilY8d0IFAAVPyCRBzoZE62WUyeoK ZQcBb+szSc5Zbr5U6QG4dpDy -----END CERTIFICATE-----Generated at Wed May 13 10:36:46 2026 by rpki-client