$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft File: KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft (raw, json) Hash identifier: 6wEwg9yjK3Kb/FY5UMZO7Oq3JtHKx9g0D90tRERUEKE= Subject key identifier: 9C:51:D5:69:09:A3:27:1F:4E:48:9F:1E:FD:DC:CA:57:F1:A9:42:08 Authority key identifier: 28:F0:71:10:E4:35:84:A3:BA:6A:3A:4A:87:D6:8E:9E:B7:D3:E9:02 Certificate issuer: /CN=A91C5021/serialNumber=28F07110E43584A3BA6A3A4A87D68E9EB7D3E902 Certificate serial: 07F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft Manifest number: 07DA Signing time: Tue 12 May 2026 21:27:56 +0000 Manifest this update: Tue 12 May 2026 21:27:55 +0000 Manifest next update: Tue 19 May 2026 21:27:55 +0000 Files and hashes: 1: KPBxEOQ1hKO6ajpKh9aOnrfT6QI.crl (hash: eJ4xHI6S5gN76HIZo+h4ZXFq+vJSLYE6pwc+yd19Ux4=) 2: C42CEC7ECC3611EF9C79665CC4F9AE02.roa (hash: 2CcUX8OCn1/fmWn37MNKtyhofnamXBuWgD+4aT2Pu3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.crl rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 21:27:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2036 (0x7f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5021, serialNumber=28F07110E43584A3BA6A3A4A87D68E9EB7D3E902 Validity Not Before: May 12 21:27:55 2026 GMT Not After : May 19 21:27:55 2026 GMT Subject: CN=6a039b5c-7f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:53:d6:13:5f:f7:6b:77:55:f1:32:9f:7c:44: 78:7b:08:ae:e4:07:d3:38:61:f9:ed:ab:7c:f8:8d: c2:19:22:ff:5f:8d:cc:b1:77:ee:7e:81:3e:74:83: 73:8f:d2:45:e4:f5:09:44:98:b5:ae:de:92:e2:41: 43:75:65:2a:b6:55:42:ff:5d:c6:6b:d8:af:8a:aa: 4b:bd:b1:2d:8b:e0:5e:94:ed:a3:c1:36:c3:22:06: 31:90:cd:32:33:ab:07:3f:56:50:39:97:63:19:b3: 7c:75:ef:e4:64:0b:1a:b6:ca:4f:0e:b0:9f:0c:3d: 95:cd:1a:48:27:8d:e7:66:88:39:45:e8:ca:74:ba: f0:76:e1:0f:3e:47:02:07:20:01:f0:19:9b:cb:73: 00:5c:17:67:c8:48:be:f0:d1:50:ce:d3:00:65:64: 8e:9c:b5:50:cf:a4:9e:e9:df:90:8c:02:b4:89:af: c9:c0:05:44:52:ca:c2:e0:a4:88:32:77:85:56:29: 9d:45:32:d4:93:dc:32:e1:c4:a8:6b:3f:d5:22:b7: fc:54:99:b2:ec:36:f8:22:1d:9f:40:5b:fa:33:00: fa:11:00:47:77:8c:3a:9d:8c:c6:6d:39:a6:2e:ae: 69:47:1d:1f:48:74:51:b5:4c:e4:88:2d:f3:e1:be: fb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:51:D5:69:09:A3:27:1F:4E:48:9F:1E:FD:DC:CA:57:F1:A9:42:08 X509v3 Authority Key Identifier: keyid:28:F0:71:10:E4:35:84:A3:BA:6A:3A:4A:87:D6:8E:9E:B7:D3:E9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:33:58:09:14:43:d5:b9:6c:d3:00:a5:ed:f9:8b:ff:34:6c: f2:bc:26:9f:3d:ae:33:80:38:28:5c:9d:16:91:45:c9:48:f6: 6a:13:51:04:fb:a2:12:07:c1:61:de:4a:56:06:ba:47:a0:a8: 97:57:4d:f5:fe:44:66:19:2a:70:c7:97:c7:33:3a:48:de:9f: 6c:b9:4a:02:95:31:db:a5:d0:ae:28:3e:be:7a:87:6e:6b:42: 67:bc:8b:3f:9f:96:23:8b:f4:65:4e:25:30:dc:7a:2d:a0:de: 5f:f9:9a:0c:cb:9b:3d:41:95:e0:55:e9:75:14:2d:61:ae:b5: 86:b4:a3:16:27:69:06:73:c1:43:6f:76:50:be:4d:78:17:9e: 2f:aa:00:64:db:34:d1:f1:93:6c:fe:ec:f1:3f:9b:c1:b5:05: b4:c9:48:46:b2:fd:49:23:6a:64:71:f6:d5:fd:e4:c5:7f:6c: 92:fe:c1:8e:37:94:23:d9:40:8e:4c:fe:8f:7b:6e:61:67:56: 9e:88:95:7c:37:e2:b2:50:45:2a:70:c0:e4:e9:8d:1d:aa:f5: b5:46:87:e7:48:4c:52:53:48:f9:6e:07:34:ee:cc:fc:8d:b3: 13:c7:f6:83:04:52:0f:f2:47:f0:6b:46:a7:c7:34:5f:ea:f9: e7:cb:84:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUwMjExMTAvBgNVBAUTKDI4RjA3MTEwRTQzNTg0QTNCQTZBM0E0QTg3RDY4RTlF QjdEM0U5MDIwHhcNMjYwNTEyMjEyNzU1WhcNMjYwNTE5MjEyNzU1WjAYMRYwFAYD VQQDEw02YTAzOWI1Yy03ZjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVPWE1/3a3dV8TKffER4ewiu5AfTOGH57at8+I3CGSL/X43MsXfufoE+dINz j9JF5PUJRJi1rt6S4kFDdWUqtlVC/13Ga9iviqpLvbEti+BelO2jwTbDIgYxkM0y M6sHP1ZQOZdjGbN8de/kZAsatspPDrCfDD2VzRpIJ43nZog5RejKdLrwduEPPkcC ByAB8Bmby3MAXBdnyEi+8NFQztMAZWSOnLVQz6Se6d+QjAK0ia/JwAVEUsrC4KSI MneFVimdRTLUk9wy4cSoaz/VIrf8VJmy7Db4Ih2fQFv6MwD6EQBHd4w6nYzGbTmm Lq5pRx0fSHRRtUzkiC3z4b77TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJxR1WkJ oycfTkifHv3cylfxqUIIMB8GA1UdIwQYMBaAFCjwcRDkNYSjumo6SofWjp630+kC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTAyMS85QUZENDg2QzNC QkMxMUVCQTc3NkYxNjFDNEY5QUUwMi9LUEJ4RU9RMWhLTzZhanBLaDlhT25yZlQ2 UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tQQnhFT1ExaEtPNmFqcEtoOWFPbnJmVDZRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTAyMS85QUZENDg2QzNCQkMxMUVCQTc3NkYxNjFDNEY5QUUwMi9LUEJ4RU9RMWhL TzZhanBLaDlhT25yZlQ2UUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFzNYCRRD1bls0wCl7fmL/zRs8rwmnz2uM4A4KFydFpFFyUj2ahNRBPuiEgfB Yd5KVga6R6Col1dN9f5EZhkqcMeXxzM6SN6fbLlKApUx26XQrig+vnqHbmtCZ7yL P5+WI4v0ZU4lMNx6LaDeX/maDMubPUGV4FXpdRQtYa61hrSjFidpBnPBQ292UL5N eBeeL6oAZNs00fGTbP7s8T+bwbUFtMlIRrL9SSNqZHH21f3kxX9skv7BjjeUI9lA jkz+j3tuYWdWnoiVfDfislBFKnDA5OmNHar1tUaH50hMUlNI+W4HNO7M/I2zE8f2 gwRSD/JH8GtGp8c0X+r558uECw== -----END CERTIFICATE-----Generated at Wed May 13 03:14:28 2026 by rpki-client