$ rpki-client -vvf rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft File: kDfAsp43CSqDhSzkuIW3dqfB47Y.mft (raw, json) Hash identifier: GCLIn/Bgm2vl5ucQ5OFFJTwdUmB0Ts6fXcPo6zgfY6w= Subject key identifier: 8A:5F:66:7E:75:59:FD:02:D1:CA:6C:48:AD:7B:82:D3:54:4B:1B:4E Authority key identifier: 90:37:C0:B2:9E:37:09:2A:83:85:2C:E4:B8:85:B7:76:A7:C1:E3:B6 Certificate issuer: /CN=A91957D1/serialNumber=9037C0B29E37092A83852CE4B885B776A7C1E3B6 Certificate serial: 01D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft Manifest number: 01CB Signing time: Wed 13 May 2026 03:49:05 +0000 Manifest this update: Wed 13 May 2026 03:49:04 +0000 Manifest next update: Wed 20 May 2026 03:49:04 +0000 Files and hashes: 1: kDfAsp43CSqDhSzkuIW3dqfB47Y.crl (hash: Fu6FLutX4TvqjtO9SNVRqrX/RFNbBR/q8J5JEZULqqE=) 2: 72CE4D80958411EEB3748B58C4F9AE02.roa (hash: Y7CBsuQt9HIpYcN19tybRAYJs+zswt16vqxj5J0HE2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.crl rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 03:49:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 464 (0x1d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91957D1, serialNumber=9037C0B29E37092A83852CE4B885B776A7C1E3B6 Validity Not Before: May 13 03:49:04 2026 GMT Not After : May 20 03:49:04 2026 GMT Subject: CN=6a03f4b1-88b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:45:41:37:72:2d:42:a8:05:3f:68:b8:92:78: c4:a3:00:11:c4:ac:88:b1:40:8c:91:32:62:b8:d6: 18:4b:3a:2f:b4:11:f5:9d:c9:f8:c5:be:73:35:ce: 22:b0:4e:28:b2:e0:71:85:66:b8:1f:20:77:fe:13: d3:56:f0:06:79:e2:14:e0:b3:0d:05:11:c3:ab:3a: 0b:2c:9b:e8:cb:81:1e:ec:5b:c4:af:41:73:16:bb: db:3c:72:08:52:75:3c:78:12:9c:7a:88:0c:d2:61: 0f:c5:2a:8b:37:66:a5:6e:7f:19:55:fd:83:68:33: f1:3b:47:cc:26:2f:23:3b:70:2c:b1:eb:d4:a9:f5: b5:19:c5:22:af:64:75:aa:39:79:ef:30:2f:1b:fe: e8:e1:8a:a3:25:1f:fe:91:01:58:66:78:c9:81:59: 17:df:ab:c1:0f:27:00:b7:90:e8:8f:41:5d:04:ef: 53:29:ff:7c:25:fc:9e:c3:1d:70:fa:b1:8b:59:d7: 05:a3:c1:da:3c:0d:e7:e8:90:0f:37:5c:fc:89:ae: a1:0c:59:c6:db:b6:a1:2b:3a:43:ba:ea:96:fc:51: 55:c6:78:e4:85:bc:a6:e4:cc:fc:c4:f7:60:e7:80: 88:a9:7a:7f:03:b4:73:28:e6:4a:c5:73:74:e8:11: 56:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:5F:66:7E:75:59:FD:02:D1:CA:6C:48:AD:7B:82:D3:54:4B:1B:4E X509v3 Authority Key Identifier: keyid:90:37:C0:B2:9E:37:09:2A:83:85:2C:E4:B8:85:B7:76:A7:C1:E3:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:94:d4:88:5a:64:ac:68:3b:3c:08:56:b3:5a:1d:f3:95:74: 2d:ca:af:21:d0:f6:fa:2b:24:1e:b6:1f:52:df:69:c9:c4:25: a6:99:a2:05:b8:89:72:aa:01:f0:94:82:bc:cd:ab:26:07:1b: 19:4b:d6:55:f5:c2:15:6d:5d:8d:d0:fd:ef:24:bc:a8:ac:e2: 6d:1f:e4:19:9b:02:be:08:d6:5e:2d:bf:3f:5f:45:fd:27:96: 77:83:e8:1e:ab:e7:dd:73:39:95:54:b4:94:46:98:9b:60:69: f2:3d:cc:23:e6:ed:8e:00:e9:c9:f1:3d:b3:8c:90:c6:dc:5f: 1c:d2:8a:d9:b1:86:c9:70:c3:d1:c4:40:19:ae:2c:69:a9:50: 86:87:b2:b0:8d:63:1d:33:98:ca:74:d3:de:54:17:76:67:ad: d6:80:75:9a:f5:5e:e0:3f:41:9c:a6:b7:cc:65:62:e2:91:02: 6d:2d:03:88:2b:57:24:56:bc:9c:5f:be:db:d1:07:08:9a:ae: df:23:f7:d8:86:12:ec:15:b6:3a:eb:d9:1f:ea:74:14:cd:f7: ef:66:2f:bf:d3:85:b5:ec:52:2e:0a:0d:4e:7c:01:a7:2c:d4: be:0f:c2:de:99:c3:c6:f9:66:9b:f0:24:82:86:bb:8d:b4:aa: 90:31:87:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU3RDExMTAvBgNVBAUTKDkwMzdDMEIyOUUzNzA5MkE4Mzg1MkNFNEI4ODVCNzc2 QTdDMUUzQjYwHhcNMjYwNTEzMDM0OTA0WhcNMjYwNTIwMDM0OTA0WjAYMRYwFAYD VQQDEw02YTAzZjRiMS04OGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkVBN3ItQqgFP2i4knjEowARxKyIsUCMkTJiuNYYSzovtBH1ncn4xb5zNc4i sE4osuBxhWa4HyB3/hPTVvAGeeIU4LMNBRHDqzoLLJvoy4Ee7FvEr0FzFrvbPHII UnU8eBKceogM0mEPxSqLN2albn8ZVf2DaDPxO0fMJi8jO3AssevUqfW1GcUir2R1 qjl57zAvG/7o4YqjJR/+kQFYZnjJgVkX36vBDycAt5Doj0FdBO9TKf98Jfyewx1w +rGLWdcFo8HaPA3n6JAPN1z8ia6hDFnG27ahKzpDuuqW/FFVxnjkhbym5Mz8xPdg 54CIqXp/A7RzKOZKxXN06BFWqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIpfZn51 Wf0C0cpsSK17gtNUSxtOMB8GA1UdIwQYMBaAFJA3wLKeNwkqg4Us5LiFt3anweO2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTdEMS9GMDUzNzc5NDkz QkQxMUVFODFGODBBNTJDNEY5QUUwMi9rRGZBc3A0M0NTcURoU3prdUlXM2RxZkI0 N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tEZkFzcDQzQ1NxRGhTemt1SVczZHFmQjQ3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTdEMS9GMDUzNzc5NDkzQkQxMUVFODFGODBBNTJDNEY5QUUwMi9rRGZBc3A0M0NT cURoU3prdUlXM2RxZkI0N1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa5TUiFpkrGg7PAhWs1od85V0LcqvIdD2+iskHrYfUt9pycQlppmiBbiJcqoB 8JSCvM2rJgcbGUvWVfXCFW1djdD97yS8qKzibR/kGZsCvgjWXi2/P19F/SeWd4Po Hqvn3XM5lVS0lEaYm2Bp8j3MI+btjgDpyfE9s4yQxtxfHNKK2bGGyXDD0cRAGa4s aalQhoeysI1jHTOYynTT3lQXdmet1oB1mvVe4D9BnKa3zGVi4pECbS0DiCtXJFa8 nF++29EHCJqu3yP32IYS7BW2OuvZH+p0FM3372Yvv9OFtexSLgoNTnwBpyzUvg/C 3pnDxvlmm/Akgoa7jbSqkDGHLA== -----END CERTIFICATE-----Generated at Wed May 13 11:37:30 2026 by rpki-client