$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft File: K90xURFt6dvFXPw9LNrKWOdLGeY.mft (raw, json) Hash identifier: oGkLXyi+9E9nm1blCRZ+f8oFncbW5RY8n6TfL8JaH4o= Subject key identifier: 81:77:F2:C9:3E:1B:76:DC:7E:52:5B:B7:0B:45:6D:80:2A:B6:2B:0E Authority key identifier: 2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6 Certificate issuer: /CN=A91CA815/serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6 Certificate serial: 3559 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft Manifest number: 354B Signing time: Tue 12 May 2026 14:57:31 +0000 Manifest this update: Tue 12 May 2026 14:57:31 +0000 Manifest next update: Tue 19 May 2026 14:57:31 +0000 Files and hashes: 1: K90xURFt6dvFXPw9LNrKWOdLGeY.crl (hash: Xph2M1tfZyLi2fAUIZId5GeGCZzMIxK74eFF61U0mRQ=) 2: E9E555FA506211EAA2BC3E2EC4F9AE02.roa (hash: 07LE9X8LH2BaI/dz0O3mbMsKmiKgclhDrz2z98RF0c0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13657 (0x3559) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA815, serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6 Validity Not Before: May 12 14:57:31 2026 GMT Not After : May 19 14:57:31 2026 GMT Subject: CN=6a033fdb-0cea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:43:a3:94:b1:ab:97:b3:09:27:49:10:29:54: 9a:9f:58:f9:b3:1f:e0:37:5e:c8:f8:5b:c6:cc:59: 53:58:cd:08:79:24:49:da:2d:54:9c:a3:66:7f:b7: 13:97:bf:f1:87:48:e3:83:0d:72:a7:3c:b0:79:de: 6b:ab:c7:e0:b8:0e:a3:e4:83:f2:8d:68:09:86:c2: 6a:af:6a:78:bd:63:fd:69:0d:51:b1:21:b3:37:86: 3b:85:ab:e0:ef:d5:33:cb:e6:dc:75:d3:11:69:04: be:1a:1a:8e:d1:3e:d3:ff:5b:86:11:01:31:8e:1a: 8f:f4:05:df:72:47:f1:bc:61:60:23:ba:aa:f3:02: 59:df:75:3b:24:db:26:7e:b4:7f:90:90:37:29:02: fe:d0:cb:30:68:d7:b3:3c:a3:a7:6d:c6:42:10:3c: 00:75:72:79:74:e5:40:43:81:1f:06:9d:47:e8:90: 0f:ee:99:b1:fd:9b:24:02:cb:b0:b2:ba:23:03:2f: dd:f1:a6:dc:26:a3:2a:69:b1:19:17:89:71:c2:0e: a0:bf:ca:c6:1b:f1:c9:ed:03:d1:df:0b:d0:a4:c2: e6:8c:c1:72:f0:ed:46:cb:4f:b1:2a:c7:d8:9d:f3: d8:17:27:b0:b7:89:9e:50:70:af:bd:c4:41:d4:84: cd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:77:F2:C9:3E:1B:76:DC:7E:52:5B:B7:0B:45:6D:80:2A:B6:2B:0E X509v3 Authority Key Identifier: keyid:2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:ed:e7:bf:25:73:09:35:c9:c8:1c:d1:85:fa:f2:c2:7d:2b: 93:5f:1d:17:fb:fb:2a:96:cd:36:82:ef:da:3d:11:7c:22:de: 27:c3:d9:57:fe:22:09:ef:9b:4f:24:65:09:f6:23:50:72:a0: a0:02:f8:59:46:4f:e4:bf:1a:da:07:3f:bf:38:ca:e2:eb:e3: cf:9e:0d:3d:42:50:f5:62:4f:63:85:5a:18:f0:d7:aa:c4:8b: 49:bd:d9:76:7a:20:99:84:86:ec:fb:3c:62:2e:a8:9b:d3:8e: bf:98:08:91:21:45:57:4f:ec:35:c1:fa:76:4b:e8:53:23:5b: ff:41:a8:e0:ae:d5:c5:52:f8:a8:08:44:35:f0:b1:79:3c:5c: d5:8c:cf:a8:29:26:db:9f:94:5a:a3:2a:5d:87:f0:8a:76:dd: 34:15:96:3d:0d:03:59:07:5d:c4:e3:15:ad:7e:61:9e:a5:f3: 58:5f:0d:ed:f9:f1:8d:c2:fa:12:37:df:47:8c:78:c2:05:92: 29:6e:27:4a:12:cf:84:35:8c:f8:d3:80:2e:2e:30:79:91:64: d8:51:de:8d:4b:bf:56:e7:97:27:c4:57:0c:39:1c:73:7f:62: 63:d1:60:91:09:ac:8f:e7:76:85:8d:87:50:30:e1:6f:10:bc: 84:a4:03:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E4MTUxMTAvBgNVBAUTKDJCREQzMTUxMTE2REU5REJDNTVDRkMzRDJDREFDQTU4 RTc0QjE5RTYwHhcNMjYwNTEyMTQ1NzMxWhcNMjYwNTE5MTQ1NzMxWjAYMRYwFAYD VQQDEw02YTAzM2ZkYi0wY2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUOjlLGrl7MJJ0kQKVSan1j5sx/gN17I+FvGzFlTWM0IeSRJ2i1UnKNmf7cT l7/xh0jjgw1ypzywed5rq8fguA6j5IPyjWgJhsJqr2p4vWP9aQ1RsSGzN4Y7havg 79Uzy+bcddMRaQS+GhqO0T7T/1uGEQExjhqP9AXfckfxvGFgI7qq8wJZ33U7JNsm frR/kJA3KQL+0MswaNezPKOnbcZCEDwAdXJ5dOVAQ4EfBp1H6JAP7pmx/ZskAsuw srojAy/d8abcJqMqabEZF4lxwg6gv8rGG/HJ7QPR3wvQpMLmjMFy8O1Gy0+xKsfY nfPYFyewt4meUHCvvcRB1ITNrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIF38sk+ G3bcflJbtwtFbYAqtisOMB8GA1UdIwQYMBaAFCvdMVERbenbxVz8PSzayljnSxnm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTgxNS84RENEMUVBODFE OUIxMUUyOTFEMjg0ODkwOEIwMkNEMi9LOTB4VVJGdDZkdkZYUHc5TE5yS1dPZExH ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s5MHhVUkZ0NmR2RlhQdzlMTnJLV09kTEdlWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTgxNS84RENEMUVBODFEOUIxMUUyOTFEMjg0ODkwOEIwMkNEMi9LOTB4VVJGdDZk dkZYUHc5TE5yS1dPZExHZVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAu+3nvyVzCTXJyBzRhfrywn0rk18dF/v7KpbNNoLv2j0RfCLeJ8PZV/4iCe+b TyRlCfYjUHKgoAL4WUZP5L8a2gc/vzjK4uvjz54NPUJQ9WJPY4VaGPDXqsSLSb3Z dnogmYSG7Ps8Yi6om9OOv5gIkSFFV0/sNcH6dkvoUyNb/0Go4K7VxVL4qAhENfCx eTxc1YzPqCkm25+UWqMqXYfwinbdNBWWPQ0DWQddxOMVrX5hnqXzWF8N7fnxjcL6 EjffR4x4wgWSKW4nShLPhDWM+NOALi4weZFk2FHejUu/VueXJ8RXDDkcc39iY9Fg kQmsj+d2hY2HUDDhbxC8hKQDdw== -----END CERTIFICATE-----Generated at Wed May 13 09:05:48 2026 by rpki-client