$ rpki-client -vvf rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.mft File: kyv2OTHDR-dryQidQb4k9jcPJYI.mft (raw, json) Hash identifier: N3M5QpY/mCCOIdNcS3GczhR/z1RbP0J/qwwDQe/YCmw= Subject key identifier: D9:47:D3:E8:42:B5:53:29:77:54:18:C3:82:03:91:65:94:22:F9:61 Authority key identifier: 93:2B:F6:39:31:C3:47:E7:6B:C9:08:9D:41:BE:24:F6:37:0F:25:82 Certificate issuer: /CN=A919879C/serialNumber=932BF63931C347E76BC9089D41BE24F6370F2582 Certificate serial: 0348 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyv2OTHDR-dryQidQb4k9jcPJYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.mft Manifest number: 033D Signing time: Wed 13 May 2026 01:08:48 +0000 Manifest this update: Wed 13 May 2026 01:08:47 +0000 Manifest next update: Wed 20 May 2026 01:08:47 +0000 Files and hashes: 1: kyv2OTHDR-dryQidQb4k9jcPJYI.crl (hash: bfKJ+SfyLmaBhf7KSj7siYfoK0g2bAOnrnYOtNoNchg=) 2: E7C34456073711ED8BA93630C4F9AE02.roa (hash: 5pvog1WaQXSx08gAbCNPBFn3bbF20IQKZ1DUM6ITIJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.crl rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyv2OTHDR-dryQidQb4k9jcPJYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 01:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 840 (0x348) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919879C, serialNumber=932BF63931C347E76BC9089D41BE24F6370F2582 Validity Not Before: May 13 01:08:47 2026 GMT Not After : May 20 01:08:47 2026 GMT Subject: CN=6a03cf20-a6ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:df:30:2c:40:1a:b5:95:c6:cd:34:d4:e8:93: f9:ca:7a:4e:5f:c8:2a:46:69:4d:ae:f3:25:c9:bf: 1a:94:7c:c1:19:7c:44:cd:71:f0:d3:45:08:95:5e: 1b:d5:4d:ae:0c:39:ec:8b:03:df:7c:02:e6:2a:92: 96:89:89:53:c9:f0:32:35:27:44:eb:35:3b:66:91: 56:ce:6b:19:63:b2:bb:9c:36:5a:c9:cf:89:6a:0e: 61:26:28:63:15:a2:18:3b:d5:92:10:e9:af:2f:21: 7f:6a:00:5c:3a:a4:84:b3:4a:cf:c2:67:4b:a6:57: 6b:76:5e:4a:3d:5d:a6:f5:ca:31:87:ae:97:43:4c: 67:40:6b:43:a8:03:17:cf:69:21:0c:9f:af:29:b6: 31:f3:f1:75:5c:61:96:18:4a:91:ab:33:9a:a7:df: e1:e2:b4:8c:75:f7:4d:e5:4c:ff:4b:db:76:6d:4b: e9:81:d4:7c:6e:e5:48:23:cf:04:25:1d:5a:27:eb: f7:58:e8:ef:b6:ae:27:59:04:01:59:25:56:9a:35: 5b:21:40:11:83:41:d7:64:19:45:19:3d:ee:2b:b5: 1e:a4:53:56:82:b2:68:e4:3f:b3:cc:40:5e:2c:40: fb:19:d3:60:3c:92:39:83:78:9a:31:39:d5:a4:ed: 0f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:47:D3:E8:42:B5:53:29:77:54:18:C3:82:03:91:65:94:22:F9:61 X509v3 Authority Key Identifier: keyid:93:2B:F6:39:31:C3:47:E7:6B:C9:08:9D:41:BE:24:F6:37:0F:25:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyv2OTHDR-dryQidQb4k9jcPJYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:41:32:8c:07:8e:ba:17:31:48:7f:72:61:45:32:bb:1f:fc: 20:f8:d5:5e:aa:0d:87:c2:e9:40:6c:01:40:4d:11:5f:64:ff: f8:6d:d3:99:f6:84:6b:45:67:74:45:58:cb:c3:21:79:50:61: be:30:85:16:bb:86:64:4c:ee:98:42:77:c5:43:49:7f:71:02: fe:fe:31:31:63:25:47:9e:d8:26:cc:d3:6d:e2:de:42:86:f8: 33:1f:d7:9d:80:68:0e:2e:f0:24:e5:5f:e3:19:9e:47:85:87: 49:68:a9:c7:ae:f2:c7:83:90:56:39:e0:0b:57:2d:b7:86:db: 1b:0f:e4:6a:a7:55:98:60:42:da:a9:69:aa:3f:77:2b:5e:1c: b6:2f:bd:ba:90:d7:39:a0:90:d7:cd:5e:33:34:1a:98:51:f0: ea:e3:25:b7:f3:1e:31:74:d3:45:ca:42:5d:76:00:b9:70:45: 36:0c:47:c0:97:4d:ed:ce:1b:77:e4:0f:60:50:d4:a9:64:15: 7f:3b:c0:85:54:bc:ad:77:bc:2d:9e:00:50:fd:ba:43:9e:3a: 40:b5:21:7b:fa:b9:ca:66:5d:cf:76:c5:0a:71:47:80:0d:63: b5:f0:e9:14:87:8f:c3:9f:94:94:e1:45:d8:9c:f4:9b:80:66: 0c:9d:ae:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg3OUMxMTAvBgNVBAUTKDkzMkJGNjM5MzFDMzQ3RTc2QkM5MDg5RDQxQkUyNEY2 MzcwRjI1ODIwHhcNMjYwNTEzMDEwODQ3WhcNMjYwNTIwMDEwODQ3WjAYMRYwFAYD VQQDEw02YTAzY2YyMC1hNmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs98wLEAatZXGzTTU6JP5ynpOX8gqRmlNrvMlyb8alHzBGXxEzXHw00UIlV4b 1U2uDDnsiwPffALmKpKWiYlTyfAyNSdE6zU7ZpFWzmsZY7K7nDZayc+Jag5hJihj FaIYO9WSEOmvLyF/agBcOqSEs0rPwmdLpldrdl5KPV2m9coxh66XQ0xnQGtDqAMX z2khDJ+vKbYx8/F1XGGWGEqRqzOap9/h4rSMdfdN5Uz/S9t2bUvpgdR8buVII88E JR1aJ+v3WOjvtq4nWQQBWSVWmjVbIUARg0HXZBlFGT3uK7UepFNWgrJo5D+zzEBe LED7GdNgPJI5g3iaMTnVpO0PXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNlH0+hC tVMpd1QYw4IDkWWUIvlhMB8GA1UdIwQYMBaAFJMr9jkxw0fna8kInUG+JPY3DyWC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODc5Qy9FMUQyMDI5MjA3 MzQxMUVEQjA0RDM3MkRDNEY5QUUwMi9reXYyT1RIRFItZHJ5UWlkUWI0azlqY1BK WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t5djJPVEhEUi1kcnlRaWRRYjRrOWpjUEpZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODc5Qy9FMUQyMDI5MjA3MzQxMUVEQjA0RDM3MkRDNEY5QUUwMi9reXYyT1RIRFIt ZHJ5UWlkUWI0azlqY1BKWUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIEEyjAeOuhcxSH9yYUUyux/8IPjVXqoNh8LpQGwBQE0RX2T/+G3TmfaEa0Vn dEVYy8MheVBhvjCFFruGZEzumEJ3xUNJf3EC/v4xMWMlR57YJszTbeLeQob4Mx/X nYBoDi7wJOVf4xmeR4WHSWipx67yx4OQVjngC1ctt4bbGw/kaqdVmGBC2qlpqj93 K14cti+9upDXOaCQ181eMzQamFHw6uMlt/MeMXTTRcpCXXYAuXBFNgxHwJdN7c4b d+QPYFDUqWQVfzvAhVS8rXe8LZ4AUP26Q546QLUhe/q5ymZdz3bFCnFHgA1jtfDp FIePw5+UlOFF2Jz0m4BmDJ2uZw== -----END CERTIFICATE-----Generated at Wed May 13 03:54:38 2026 by rpki-client