$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft File: kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft (raw, json) Hash identifier: esDvydncpXb/0oSsamq7hvZVivRWOrbZLrC+GqXJJu4= Subject key identifier: 63:B5:A8:24:93:3A:7C:F7:37:A1:6C:14:A6:7C:D2:54:6A:E0:FC:59 Authority key identifier: 92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8 Certificate issuer: /CN=A91C6A35/serialNumber=924866B40C30442D696F2477015475C5F0702AC8 Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft Manifest number: FD Signing time: Wed 13 May 2026 06:23:32 +0000 Manifest this update: Wed 13 May 2026 06:23:31 +0000 Manifest next update: Wed 20 May 2026 06:23:31 +0000 Files and hashes: 1: kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl (hash: 2ERqFDZ2A1PZQjlz8+VeKrjE0P401lcNt643cEIwZLI=) 2: 06522672D49411EFA8DF5E69C4F9AE02.roa (hash: Tk6XuHe+UOcO0wAYL78ZhK/3o/y93kH+Qpt8b1oatZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 06:14:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6A35, serialNumber=924866B40C30442D696F2477015475C5F0702AC8 Validity Not Before: May 13 06:23:31 2026 GMT Not After : May 20 06:23:31 2026 GMT Subject: CN=6a0418e4-470a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9e:11:fe:24:41:0e:5f:6d:68:61:74:54:c0: e1:12:b0:e5:f7:95:72:19:04:19:62:f0:0d:3e:3a: 57:df:ce:8e:e0:91:6b:15:9a:c9:10:cb:8b:be:0e: 3e:3f:1c:67:a0:9e:35:b4:9a:3f:9f:b6:2d:5d:08: 44:5b:38:f6:3f:33:48:3e:a7:51:fd:7a:4a:ac:42: da:bb:8a:e5:54:6a:97:70:0c:27:77:f3:6e:e7:bc: 93:66:dd:63:c1:1e:3d:45:60:ba:9c:8c:7a:19:27: e7:ed:bf:1f:fe:b9:4e:a8:25:71:25:46:85:e4:fd: e8:8b:60:e1:4b:70:5c:27:26:a3:e4:5c:cf:52:b9: 5a:8b:c5:1b:d5:6a:e7:de:09:6f:ee:ec:46:fc:87: 43:02:3a:5e:c7:0e:1a:00:be:09:db:e1:87:41:ac: 8d:11:cc:d3:e5:53:a5:cd:f2:5c:01:89:e9:8b:61: a4:1e:b8:62:73:c6:43:21:b0:9a:cc:41:1c:ca:11: 78:a0:d9:34:8d:57:89:3a:b4:da:59:9c:4f:69:e1: b4:50:f9:c9:d3:cc:a3:2d:ab:aa:6a:98:89:06:a7: c9:c5:fd:41:eb:a6:7b:25:50:7c:73:7e:a2:50:b6: 74:b9:94:69:98:00:1e:d6:e4:73:63:ab:52:e7:55: 4d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B5:A8:24:93:3A:7C:F7:37:A1:6C:14:A6:7C:D2:54:6A:E0:FC:59 X509v3 Authority Key Identifier: keyid:92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a6:1c:b9:1f:1e:0d:92:58:98:e7:1d:ce:ea:27:bb:34:51: 66:64:3b:7c:d3:6c:cc:60:f6:5b:ad:e3:6c:d1:29:3f:37:2a: f9:a9:5c:aa:bc:f6:7e:a3:78:4a:70:57:e2:ef:24:3a:7f:51: d0:68:88:38:7b:43:ba:85:32:64:96:5e:2a:e6:03:c8:36:04: fa:c1:60:ad:87:9f:79:3e:45:9f:a8:e7:86:77:ec:4c:7d:06: 14:67:7c:c8:76:c2:2c:d3:fb:62:b2:a4:2f:b8:ff:d2:58:57: 80:37:9d:df:18:96:16:ee:9e:4f:f7:aa:1e:3e:61:36:2a:a3: 19:3f:ad:62:b5:1b:5c:1a:fb:02:56:96:8a:30:2d:d8:7a:3c: a7:91:5f:c8:d7:36:3b:cd:cb:d9:6d:ca:94:5d:66:12:74:89: 9b:de:17:04:e0:d0:7b:7f:75:d1:4f:38:3c:f5:7e:71:a3:18: bd:df:68:dc:d7:1c:03:a0:1d:1b:fe:fe:7b:ce:9f:bc:c8:0d: b2:32:d7:4c:6b:37:98:f3:38:c6:d4:9e:af:8e:06:42:04:84: 95:b8:b8:0c:1f:49:6e:ca:a1:44:01:43:47:47:aa:08:8b:62: 4d:bd:1a:41:e5:d5:1e:b4:9f:0e:18:7b:dc:61:9c:ff:32:5e: 80:d0:da:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZBMzUxMTAvBgNVBAUTKDkyNDg2NkI0MEMzMDQ0MkQ2OTZGMjQ3NzAxNTQ3NUM1 RjA3MDJBQzgwHhcNMjYwNTEzMDYyMzMxWhcNMjYwNTIwMDYyMzMxWjAYMRYwFAYD VQQDEw02YTA0MThlNC00NzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2J4R/iRBDl9taGF0VMDhErDl95VyGQQZYvANPjpX386O4JFrFZrJEMuLvg4+ PxxnoJ41tJo/n7YtXQhEWzj2PzNIPqdR/XpKrELau4rlVGqXcAwnd/Nu57yTZt1j wR49RWC6nIx6GSfn7b8f/rlOqCVxJUaF5P3oi2DhS3BcJyaj5FzPUrlai8Ub1Wrn 3glv7uxG/IdDAjpexw4aAL4J2+GHQayNEczT5VOlzfJcAYnpi2GkHrhic8ZDIbCa zEEcyhF4oNk0jVeJOrTaWZxPaeG0UPnJ08yjLauqapiJBqfJxf1B66Z7JVB8c36i ULZ0uZRpmAAe1uRzY6tS51VNzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGO1qCST Onz3N6FsFKZ80lRq4PxZMB8GA1UdIwQYMBaAFJJIZrQMMEQtaW8kdwFUdcXwcCrI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkEzNS85OTI3Nzg0NkQ0 OTIxMUVGQjU2NERFNjJDNEY5QUUwMi9ra2htdEF3d1JDMXBieVIzQVZSMXhmQndL c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2traG10QXd3UkMxcGJ5UjNBVlIxeGZCd0tzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkEzNS85OTI3Nzg0NkQ0OTIxMUVGQjU2NERFNjJDNEY5QUUwMi9ra2htdEF3d1JD MXBieVIzQVZSMXhmQndLc2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC6YcuR8eDZJYmOcdzuonuzRRZmQ7fNNszGD2W63jbNEpPzcq+alcqrz2fqN4 SnBX4u8kOn9R0GiIOHtDuoUyZJZeKuYDyDYE+sFgrYefeT5Fn6jnhnfsTH0GFGd8 yHbCLNP7YrKkL7j/0lhXgDed3xiWFu6eT/eqHj5hNiqjGT+tYrUbXBr7AlaWijAt 2Ho8p5FfyNc2O83L2W3KlF1mEnSJm94XBODQe3910U84PPV+caMYvd9o3NccA6Ad G/7+e86fvMgNsjLXTGs3mPM4xtSer44GQgSElbi4DB9JbsqhRAFDR0eqCItiTb0a QeXVHrSfDhh73GGc/zJegNDaCg== -----END CERTIFICATE-----Generated at Wed May 13 12:27:24 2026 by rpki-client