$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft File: KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft (raw, json) Hash identifier: l/nim/+NScf1ruOaudr/a/X3kJ4OjDXkeSpAasn4uGY= Subject key identifier: 4A:89:8E:D7:5B:B0:C2:75:D0:76:6C:08:1C:D5:40:47:C0:47:72:F9 Authority key identifier: 2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 Certificate issuer: /CN=A91A4EF9/serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft Manifest number: 01A1 Signing time: Mon 11 May 2026 04:16:23 +0000 Manifest this update: Mon 11 May 2026 04:16:22 +0000 Manifest next update: Mon 18 May 2026 04:16:22 +0000 Files and hashes: 1: KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl (hash: ixkNZnlGJEVIvOZKhehvX09mePaqfzSZHQ+LMnPvmcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 04:16:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4EF9, serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9 Validity Not Before: May 11 04:16:22 2026 GMT Not After : May 18 04:16:22 2026 GMT Subject: CN=6a015816-4c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:71:a4:6f:2e:e2:4b:3a:90:8e:bd:b5:4c:46: 08:dc:22:f4:8b:20:91:aa:ac:0e:f2:5f:27:5e:98: bf:b6:ef:30:f3:3a:3e:ca:17:91:d2:9c:64:d8:91: 4e:54:ec:aa:e0:a7:de:71:c7:e7:c8:94:64:5f:e4: 35:96:70:dc:cc:1a:bb:80:f1:d4:eb:0b:20:72:5f: 37:08:85:7d:2f:2e:d2:78:fb:88:b7:70:78:c8:b9: e8:8a:25:0e:45:87:5a:7b:d2:ce:41:dc:17:26:28: 69:6d:d9:78:c7:61:89:87:c5:2f:41:f9:24:cb:e3: e9:8b:f3:36:74:26:4b:b8:c7:24:86:ea:58:33:0f: 71:55:ca:0c:21:28:30:d8:4e:d8:bd:2d:ef:38:03: 6a:c9:69:0c:a5:02:f1:97:ac:4b:ec:84:37:64:1f: 77:46:4a:a9:12:52:f2:5b:bb:33:73:97:b7:57:5a: a0:1d:38:ed:c5:d8:7f:cc:ac:93:79:61:d9:e8:11: 57:2c:10:88:e9:8d:d9:41:2e:6d:cd:75:ee:92:b1: 8e:b3:6c:85:bb:a0:3e:4a:af:a0:22:fc:d5:47:41: 7f:0b:60:80:a8:4c:2b:99:50:ed:5e:f8:60:01:bd: c0:d3:0e:b2:21:30:87:67:7b:57:3d:2f:04:f8:90: 57:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:89:8E:D7:5B:B0:C2:75:D0:76:6C:08:1C:D5:40:47:C0:47:72:F9 X509v3 Authority Key Identifier: keyid:2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:b3:21:38:c0:8c:1b:81:a7:f7:34:3b:4f:c9:0d:f5:9f:31: 6b:a2:9b:1a:d1:c9:bb:ee:cc:52:ab:64:46:4c:46:6c:c6:c7: 75:9b:1c:4a:85:5e:60:7a:5a:f1:b1:45:87:f0:0a:2e:06:f5: 94:99:ef:61:8e:69:12:49:ed:7b:a5:7e:3d:cf:76:8d:44:2d: 74:6c:7e:2e:2f:49:4f:15:b1:c0:a9:22:5b:8f:2c:08:6d:28: 80:8c:90:20:dd:fe:c2:f7:46:b9:7f:3d:2a:47:60:03:cc:e5: b4:16:99:cb:b7:20:3c:fe:74:07:56:2a:ed:25:3c:78:10:3f: 99:37:1a:cc:d1:4b:f5:5d:55:92:5c:29:63:d5:5c:7a:ba:37: 8e:04:e0:ae:78:d0:20:79:af:d8:5d:27:fa:f3:3c:39:9c:1f: ca:cc:0c:d8:05:11:a5:51:0b:f2:9f:96:8a:fc:f5:c4:99:19: 9f:d7:2a:10:92:d3:3d:8d:b3:c4:62:b4:bf:5d:33:99:8e:78: de:e6:17:cd:38:1a:f9:7b:4b:9b:c8:89:b3:3c:3f:cb:94:a3: f9:f2:dd:4d:d4:ad:61:6e:58:c4:85:32:44:2f:37:ff:02:06: c8:92:79:aa:89:db:e2:22:30:0e:63:b7:23:68:b3:5c:ff:ce: b9:7f:70:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRFRjkxMTAvBgNVBAUTKDJBQzUzRTI2MjAyRjRCQ0JDMTQ4MDZGMTNFOUU4NjBE MEFDNjc3RjkwHhcNMjYwNTExMDQxNjIyWhcNMjYwNTE4MDQxNjIyWjAYMRYwFAYD VQQDEw02YTAxNTgxNi00YzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn3Gkby7iSzqQjr21TEYI3CL0iyCRqqwO8l8nXpi/tu8w8zo+yheR0pxk2JFO VOyq4KfeccfnyJRkX+Q1lnDczBq7gPHU6wsgcl83CIV9Ly7SePuIt3B4yLnoiiUO RYdae9LOQdwXJihpbdl4x2GJh8UvQfkky+Ppi/M2dCZLuMckhupYMw9xVcoMISgw 2E7YvS3vOANqyWkMpQLxl6xL7IQ3ZB93RkqpElLyW7szc5e3V1qgHTjtxdh/zKyT eWHZ6BFXLBCI6Y3ZQS5tzXXukrGOs2yFu6A+Sq+gIvzVR0F/C2CAqEwrmVDtXvhg Ab3A0w6yITCHZ3tXPS8E+JBXCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEqJjtdb sMJ10HZsCBzVQEfAR3L5MB8GA1UdIwQYMBaAFCrFPiYgL0vLwUgG8T6ehg0Kxnf5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVGOS83RTlFMjNGOEQx MzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4dkJTQWJ4UHA2R0RRckdk X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tzVS1KaUF2Uzh2QlNBYnhQcDZHRFFyR2Rfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEVGOS83RTlFMjNGOEQxMzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9Lc1UtSmlBdlM4 dkJTQWJ4UHA2R0RRckdkX2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMbMhOMCMG4Gn9zQ7T8kN9Z8xa6KbGtHJu+7MUqtkRkxGbMbHdZscSoVeYHpa 8bFFh/AKLgb1lJnvYY5pEknte6V+Pc92jUQtdGx+Li9JTxWxwKkiW48sCG0ogIyQ IN3+wvdGuX89KkdgA8zltBaZy7cgPP50B1Yq7SU8eBA/mTcazNFL9V1VklwpY9Vc ero3jgTgrnjQIHmv2F0n+vM8OZwfyswM2AURpVEL8p+Wivz1xJkZn9cqEJLTPY2z xGK0v10zmY543uYXzTga+XtLm8iJszw/y5Sj+fLdTdStYW5YxIUyRC83/wIGyJJ5 qonb4iIwDmO3I2izXP/OuX9wRQ== -----END CERTIFICATE-----Generated at Wed May 13 05:08:21 2026 by rpki-client