$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft File: kbKJkWte97NoabO6gQwkWzZOQ8A.mft (raw, json) Hash identifier: UzjbTiy3KJa/eUhZafCcZFbGYHd2uaezF6RqitPNhlY= Subject key identifier: 74:A4:68:7D:3B:04:D9:4B:18:EB:FF:75:17:C7:E2:05:F2:E5:29:9F Authority key identifier: 91:B2:89:91:6B:5E:F7:B3:68:69:B3:BA:81:0C:24:5B:36:4E:43:C0 Certificate issuer: /CN=A91B2D56/serialNumber=91B289916B5EF7B36869B3BA810C245B364E43C0 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft Manifest number: 5D Signing time: Wed 13 May 2026 08:11:41 +0000 Manifest this update: Wed 13 May 2026 08:11:40 +0000 Manifest next update: Wed 20 May 2026 08:11:40 +0000 Files and hashes: 1: kbKJkWte97NoabO6gQwkWzZOQ8A.crl (hash: CCSr5ZLB+IoN+oap9AYL8x3uVna8gZfmQP+5XFHHFKw=) 2: 436251B0C52311F0A1118818C4F9AE02.roa (hash: HfEZG4t3DF1Mxy+ybb6Jvu5Sd5lj1h6Aq1UoSU2rExQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.crl rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 06:14:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D56, serialNumber=91B289916B5EF7B36869B3BA810C245B364E43C0 Validity Not Before: May 13 08:11:40 2026 GMT Not After : May 20 08:11:40 2026 GMT Subject: CN=6a04323d-a1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f7:f4:82:a4:68:fe:dc:2e:8b:c7:d6:d5:6f: 8e:85:c8:7e:fa:6a:d6:7f:b0:2a:55:03:14:0d:da: ce:f2:0e:f3:2c:1c:63:f2:a6:01:99:c0:8d:8c:e6: 9c:9d:7c:70:bb:09:f1:9d:85:1b:00:d1:08:91:aa: 31:a5:b3:0e:9b:1f:a0:97:ed:15:db:d1:d2:5c:d4: 1b:23:be:19:b2:ed:bb:47:13:d9:d2:3f:de:04:56: 42:d5:3a:ce:e3:da:a4:0d:12:a3:86:f4:53:c1:68: 90:7b:b1:ef:7c:18:0d:f6:b9:9a:93:a6:ba:2d:1d: 63:02:4d:4b:c5:a1:c2:8a:2f:5d:6c:ef:92:ba:74: b2:6c:85:d4:56:b6:3e:4b:06:32:38:29:4d:f5:f8: fa:6b:40:6d:26:3a:f8:a9:e8:f9:82:be:f5:6f:88: ac:b2:bb:e8:88:f2:93:90:f4:20:89:7c:5d:45:5f: 09:da:f3:af:f7:ab:f8:3b:12:20:8b:38:bc:88:95: 07:1b:e2:c7:c1:dd:df:7e:b4:89:20:81:07:ef:8f: 3f:e3:22:2e:1e:b3:b7:26:86:86:e9:b5:d3:e8:d4: 82:17:c5:b5:86:fe:f4:4a:b7:14:da:76:6d:c0:c0: 08:65:95:38:ea:ef:69:b3:54:96:f4:29:80:3d:41: e3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A4:68:7D:3B:04:D9:4B:18:EB:FF:75:17:C7:E2:05:F2:E5:29:9F X509v3 Authority Key Identifier: keyid:91:B2:89:91:6B:5E:F7:B3:68:69:B3:BA:81:0C:24:5B:36:4E:43:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kbKJkWte97NoabO6gQwkWzZOQ8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D56/EDBBDFD8C52211F087C7B217C4F9AE02/kbKJkWte97NoabO6gQwkWzZOQ8A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:bc:de:66:fb:16:37:38:3b:8d:e3:46:e2:bd:34:96:f8:78: ae:d4:0d:e3:5a:dd:fa:27:0f:39:d2:b4:17:2e:6f:49:a0:17: 0d:e6:5d:7e:17:c1:a7:aa:ba:87:4c:b3:b6:12:9b:cd:0a:2b: ee:32:9e:00:a1:d1:0d:75:b6:79:69:fc:56:8a:0a:8b:54:ae: 67:06:93:c3:3a:90:e8:23:c3:57:f7:b7:ab:a8:e6:f9:a1:0c: 38:89:ba:0e:e1:46:ea:ee:48:eb:f4:1d:a7:d2:38:0e:ef:69: 87:05:f8:ee:75:62:75:ea:b2:df:82:29:f8:e2:03:36:f8:87: d6:7b:10:88:dc:bb:10:75:d2:52:d9:71:48:ae:ab:4a:7b:1a: e7:c7:fc:6d:9d:63:55:69:03:ed:d3:cb:41:68:5b:ab:39:ab: 2d:e6:72:c8:04:7b:27:cb:f5:c7:cb:b2:52:ea:85:b3:5a:8a: f1:ba:2f:6f:15:34:94:9c:2e:5f:ed:74:83:41:72:1a:6d:60: 84:3e:88:c2:e8:2a:74:96:57:bd:a0:88:b3:02:9a:e9:95:02: 99:fb:5b:71:60:0e:34:f2:bf:c8:69:a1:bc:40:2a:70:40:55: 84:fc:ef:4e:ad:f4:27:8b:c7:e5:68:96:d5:66:bf:2d:c4:a1: 52:56:1f:47 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MkQ1NjExMC8GA1UEBRMoOTFCMjg5OTE2QjVFRjdCMzY4NjlCM0JBODEwQzI0NUIz NjRFNDNDMDAeFw0yNjA1MTMwODExNDBaFw0yNjA1MjAwODExNDBaMBgxFjAUBgNV BAMTDTZhMDQzMjNkLWExZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC39/SCpGj+3C6Lx9bVb46FyH76atZ/sCpVAxQN2s7yDvMsHGPypgGZwI2M5pyd fHC7CfGdhRsA0QiRqjGlsw6bH6CX7RXb0dJc1Bsjvhmy7btHE9nSP94EVkLVOs7j 2qQNEqOG9FPBaJB7se98GA32uZqTprotHWMCTUvFocKKL11s75K6dLJshdRWtj5L BjI4KU31+PprQG0mOvip6PmCvvVviKyyu+iI8pOQ9CCJfF1FXwna86/3q/g7EiCL OLyIlQcb4sfB3d9+tIkggQfvjz/jIi4es7cmhobptdPo1IIXxbWG/vRKtxTadm3A wAhllTjq72mzVJb0KYA9QeNfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUdKRofTsE 2UsY6/91F8fiBfLlKZ8wHwYDVR0jBBgwFoAUkbKJkWte97NoabO6gQwkWzZOQ8Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyRDU2L0VEQkJERkQ4QzUy MjExRjA4N0M3QjIxN0M0RjlBRTAyL2tiS0prV3RlOTdOb2FiTzZnUXdrV3paT1E4 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva2JLSmtXdGU5N05vYWJPNmdRd2tXelpPUThBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy RDU2L0VEQkJERkQ4QzUyMjExRjA4N0M3QjIxN0M0RjlBRTAyL2tiS0prV3RlOTdO b2FiTzZnUXdrV3paT1E4QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAZvN5m+xY3ODuN40bivTSW+Hiu1A3jWt36Jw850rQXLm9JoBcN5l1+F8GnqrqH TLO2EpvNCivuMp4AodENdbZ5afxWigqLVK5nBpPDOpDoI8NX97erqOb5oQw4iboO 4Ubq7kjr9B2n0jgO72mHBfjudWJ16rLfgin44gM2+IfWexCI3LsQddJS2XFIrqtK exrnx/xtnWNVaQPt08tBaFurOast5nLIBHsny/XHy7JS6oWzWorxui9vFTSUnC5f 7XSDQXIabWCEPojC6Cp0lle9oIizAprplQKZ+1txYA408r/IaaG8QCpwQFWE/O9O rfQni8flaJbVZr8txKFSVh9H -----END CERTIFICATE-----Generated at Wed May 13 11:51:13 2026 by rpki-client