$ rpki-client -vvf rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft File: khLuorkaMmYPdScf7IWJswnDifA.mft (raw, json) Hash identifier: vbD2+sJEI3GovOokeDkJ/2X/LR1ykYYsd4CcxDqoBzk= Subject key identifier: FA:7F:6B:BF:49:8C:CD:13:CE:55:4E:90:C2:C6:AD:38:BB:57:65:2E Authority key identifier: 92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0 Certificate issuer: /CN=A91999F5/serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0 Certificate serial: 0459 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft Manifest number: 044D Signing time: Mon 11 May 2026 00:19:34 +0000 Manifest this update: Mon 11 May 2026 00:19:34 +0000 Manifest next update: Mon 18 May 2026 00:19:34 +0000 Files and hashes: 1: khLuorkaMmYPdScf7IWJswnDifA.crl (hash: vEy5dFpAjyVUAkAQjH4+Pi41UQmacu3Ng305ptpIFgc=) 2: F84777FCD9DC11EDA4083A71C4F9AE02.roa (hash: 2dklAfTnHhtRgzsOUzlnr7mFdnQGrY5LhPyI2dkyTlU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 00:19:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1113 (0x459) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91999F5, serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0 Validity Not Before: May 11 00:19:34 2026 GMT Not After : May 18 00:19:34 2026 GMT Subject: CN=6a012096-2cf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:be:86:d7:f7:63:aa:34:e7:cd:72:f7:f4:53: 2c:d4:67:d7:2e:bb:c4:34:9e:af:1f:a6:2d:bf:bd: 02:35:ac:7a:65:41:0a:20:75:aa:b8:5a:a0:6c:52: aa:da:36:19:aa:14:34:39:81:57:78:1f:16:f2:c2: 3d:65:a6:49:2d:69:b3:67:85:e3:a2:cc:77:58:ef: b3:0e:99:91:8e:97:48:0c:ae:2e:a2:1c:9e:d0:96: 26:16:14:86:31:ea:07:ec:e9:a8:47:53:3f:77:71: c9:4d:90:9a:65:3d:78:9f:7b:6b:79:4e:21:db:ac: a6:46:c1:5c:b4:f7:4d:45:65:4c:6d:ab:1e:79:5f: 15:65:33:e2:47:56:85:ac:c8:a6:2f:2e:9f:b5:76: d8:d2:53:e9:5f:12:07:4d:74:93:35:55:66:1a:aa: 90:91:1e:93:94:cd:86:c7:74:94:a7:a5:3c:c8:fc: 04:2c:c4:fb:2f:52:77:e9:01:d7:eb:5b:f2:4f:4f: b7:5b:54:ab:bb:80:b6:f3:37:d8:12:99:a3:f6:50: 17:2e:ab:31:73:ab:e3:d0:31:0a:a0:94:31:7a:2e: 2d:9e:ff:a1:de:47:a6:cb:31:da:69:b4:dd:3d:67: 74:78:37:d0:67:7a:f0:ea:d0:16:32:c0:59:06:ff: 34:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:7F:6B:BF:49:8C:CD:13:CE:55:4E:90:C2:C6:AD:38:BB:57:65:2E X509v3 Authority Key Identifier: keyid:92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:55:5b:92:30:50:9e:77:d8:af:08:6d:74:b8:dd:4f:f6:c7: 80:1b:3e:e4:96:58:9b:0e:43:59:5c:b2:d2:cf:37:e8:18:87: fa:d8:c8:f4:e2:d5:ad:8a:9a:00:cb:f4:f9:e8:41:8a:5c:12: 9a:6e:1f:16:d0:d7:3b:7a:6c:fe:5c:2e:23:78:da:05:ce:39: f5:27:b6:f9:9b:2f:4b:04:c1:3f:08:15:e2:5e:38:fc:e1:63: fe:b8:3b:f9:85:9e:5d:d7:f0:f3:d9:dd:77:13:d0:dc:08:df: b9:d7:ce:6c:f1:58:a1:08:2a:79:db:f1:fc:79:c0:d5:7f:e8: 4d:dd:20:8b:fb:cb:11:b6:cf:f4:42:e2:e5:5a:c7:1e:07:f9: 28:e0:15:77:1a:10:4b:f4:47:1e:a7:5c:12:23:dc:22:1b:6a: 55:b4:1c:8e:52:a4:45:f3:bc:bd:03:59:0d:d9:2a:a5:c8:0f: 2b:b7:59:94:20:b8:97:6d:e3:a8:21:07:c9:c8:a7:2a:07:2a: 56:1b:6f:87:b9:b1:76:b9:d5:94:5e:20:65:62:d8:12:1c:48: 74:a7:b4:fc:91:be:9f:de:04:34:f8:20:37:55:13:ff:4e:15: 57:5e:56:f2:10:98:f9:33:2e:d2:d6:f8:ad:68:4f:76:c6:ce: c9:66:be:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk5RjUxMTAvBgNVBAUTKDkyMTJFRUEyQjkxQTMyNjYwRjc1MjcxRkVDODU4OUIz MDlDMzg5RjAwHhcNMjYwNTExMDAxOTM0WhcNMjYwNTE4MDAxOTM0WjAYMRYwFAYD VQQDEw02YTAxMjA5Ni0yY2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp76G1/djqjTnzXL39FMs1GfXLrvENJ6vH6Ytv70CNax6ZUEKIHWquFqgbFKq 2jYZqhQ0OYFXeB8W8sI9ZaZJLWmzZ4Xjosx3WO+zDpmRjpdIDK4uohye0JYmFhSG MeoH7OmoR1M/d3HJTZCaZT14n3treU4h26ymRsFctPdNRWVMbaseeV8VZTPiR1aF rMimLy6ftXbY0lPpXxIHTXSTNVVmGqqQkR6TlM2Gx3SUp6U8yPwELMT7L1J36QHX 61vyT0+3W1Sru4C28zfYEpmj9lAXLqsxc6vj0DEKoJQxei4tnv+h3kemyzHaabTd PWd0eDfQZ3rw6tAWMsBZBv803QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPp/a79J jM0TzlVOkMLGrTi7V2UuMB8GA1UdIwQYMBaAFJIS7qK5GjJmD3UnH+yFibMJw4nw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTlGNS82QTNEQjU3ODlG NzkxMUVDOUNCNDdBMEFDNEY5QUUwMi9raEx1b3JrYU1tWVBkU2NmN0lXSnN3bkRp ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2toTHVvcmthTW1ZUGRTY2Y3SVdKc3duRGlmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTlGNS82QTNEQjU3ODlGNzkxMUVDOUNCNDdBMEFDNEY5QUUwMi9raEx1b3JrYU1t WVBkU2NmN0lXSnN3bkRpZkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAw1VbkjBQnnfYrwhtdLjdT/bHgBs+5JZYmw5DWVyy0s836BiH+tjI9OLVrYqa AMv0+ehBilwSmm4fFtDXO3ps/lwuI3jaBc459Se2+ZsvSwTBPwgV4l44/OFj/rg7 +YWeXdfw89nddxPQ3AjfudfObPFYoQgqedvx/HnA1X/oTd0gi/vLEbbP9ELi5VrH Hgf5KOAVdxoQS/RHHqdcEiPcIhtqVbQcjlKkRfO8vQNZDdkqpcgPK7dZlCC4l23j qCEHycinKgcqVhtvh7mxdrnVlF4gZWLYEhxIdKe0/JG+n94ENPggN1UT/04VV15W 8hCY+TMu0tb4rWhPdsbOyWa+TQ== -----END CERTIFICATE-----Generated at Tue May 12 22:15:08 2026 by rpki-client