$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft File: kBUoySF5F9lWch0caFZlNFvrVv0.mft (raw, json) Hash identifier: U66D5j4aA8fqCywMkcenINMFail3j6cud/udXXqS4ac= Subject key identifier: 88:99:1E:DE:0E:57:29:CB:BB:06:93:DA:B9:99:74:A0:24:DB:71:4B Authority key identifier: 90:15:28:C9:21:79:17:D9:56:72:1D:1C:68:56:65:34:5B:EB:56:FD Certificate issuer: /CN=A91CFAB9/serialNumber=901528C9217917D956721D1C685665345BEB56FD Certificate serial: 03E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft Manifest number: 03E1 Signing time: Wed 13 May 2026 00:21:40 +0000 Manifest this update: Wed 13 May 2026 00:21:39 +0000 Manifest next update: Wed 20 May 2026 00:21:39 +0000 Files and hashes: 1: kBUoySF5F9lWch0caFZlNFvrVv0.crl (hash: iOAZ8cRLczfDtSRn90PKu4+fsrHHQFwloTfAVgYs73s=) 2: 39A335D6CB3F11ECBEBC9A1DC4F9AE02.roa (hash: cp7bTb5LQaah3kkUkaBafNzpnRd6bBUnxxFCOx5DKVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.crl rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 999 (0x3e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFAB9, serialNumber=901528C9217917D956721D1C685665345BEB56FD Validity Not Before: May 13 00:21:39 2026 GMT Not After : May 20 00:21:39 2026 GMT Subject: CN=6a03c414-5b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:46:23:97:41:ba:e5:b0:dd:47:0f:18:cc:d6: 1b:2f:f0:d1:bf:9f:a4:55:12:b2:7a:b8:6a:d5:c0: 45:89:d6:62:c2:e2:e8:6c:a1:d4:41:a6:4f:50:1c: 75:f1:93:cc:07:44:34:97:b0:21:4d:a0:71:23:c3: 36:28:35:e5:df:eb:a3:2a:cf:ee:05:18:c8:07:a1: 35:07:f8:e1:7a:7b:1c:d3:0c:dd:77:e4:3d:b2:73: b8:f5:a5:d9:ba:ba:a1:67:88:ef:d2:0d:52:ff:45: a8:88:31:e4:41:a8:14:0d:07:bf:e7:6e:aa:d2:89: 95:25:9b:b3:7a:50:03:45:24:ac:9f:ba:f6:d0:d4: c9:e2:c2:f9:c0:75:c7:0e:b0:83:9d:40:f9:14:2d: 93:58:21:e1:af:df:fb:21:ef:24:80:a6:6a:9a:ff: c9:0b:7c:e3:f8:a8:22:9d:7f:6b:93:d9:04:03:fc: 4d:63:70:16:de:36:f3:c0:aa:1e:5d:8e:02:fe:42: aa:fc:bd:fe:f4:4f:74:fb:b5:9b:3d:1f:f1:08:60: 4f:f2:bf:43:18:30:7b:b9:5a:8f:11:4f:ac:29:ed: 85:ed:f6:0d:ee:94:6a:0a:e1:ce:0a:08:6b:b3:0b: f2:3c:e5:1e:74:c4:be:94:fc:db:06:6c:6c:9a:0d: cc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:99:1E:DE:0E:57:29:CB:BB:06:93:DA:B9:99:74:A0:24:DB:71:4B X509v3 Authority Key Identifier: keyid:90:15:28:C9:21:79:17:D9:56:72:1D:1C:68:56:65:34:5B:EB:56:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:5e:49:97:bd:dc:d9:a5:67:3c:01:93:10:f7:a9:5f:20:89: 1c:b4:a4:4a:90:8f:3e:57:80:5b:28:2f:12:36:a9:22:79:bd: df:4f:c6:2f:cc:17:04:9e:84:f9:3f:8d:25:34:b7:2b:26:a5: e3:23:3d:e1:c8:65:51:80:35:f5:8b:56:92:43:9d:94:37:a0: 77:1f:a2:83:c7:4c:47:83:b3:f9:2b:85:08:7a:99:7c:c0:66: fb:20:5e:9e:bc:06:b6:8a:63:18:18:1a:8f:88:05:81:62:73: 76:e5:da:e0:03:eb:fc:e2:37:57:83:df:4e:4c:46:fc:53:93: 03:7d:8d:cd:08:36:db:5d:7b:52:68:ff:b2:b2:dc:d9:af:d2: 48:59:33:96:b6:e8:45:0a:64:e2:9f:5f:a9:74:6e:99:cb:90: 23:4d:57:1b:6e:aa:36:af:a4:2d:d1:9b:9d:95:08:2b:a0:e3: 2c:9f:6d:f4:c9:b5:7e:7e:47:58:59:cb:d1:19:03:fb:67:ba: 1f:74:30:ae:2f:5a:28:b4:9a:fb:26:8b:ff:7c:52:e0:53:07: 9e:57:ec:63:c1:96:aa:2d:eb:7c:b4:14:67:9e:84:b2:29:25: 6a:91:98:74:dc:bb:ef:49:9d:58:6b:c6:a5:6b:b6:22:1f:65: 23:87:6f:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBQjkxMTAvBgNVBAUTKDkwMTUyOEM5MjE3OTE3RDk1NjcyMUQxQzY4NTY2NTM0 NUJFQjU2RkQwHhcNMjYwNTEzMDAyMTM5WhcNMjYwNTIwMDAyMTM5WjAYMRYwFAYD VQQDEw02YTAzYzQxNC01YjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk0Yjl0G65bDdRw8YzNYbL/DRv5+kVRKyerhq1cBFidZiwuLobKHUQaZPUBx1 8ZPMB0Q0l7AhTaBxI8M2KDXl3+ujKs/uBRjIB6E1B/jhensc0wzdd+Q9snO49aXZ urqhZ4jv0g1S/0WoiDHkQagUDQe/526q0omVJZuzelADRSSsn7r20NTJ4sL5wHXH DrCDnUD5FC2TWCHhr9/7Ie8kgKZqmv/JC3zj+KginX9rk9kEA/xNY3AW3jbzwKoe XY4C/kKq/L3+9E90+7WbPR/xCGBP8r9DGDB7uVqPEU+sKe2F7fYN7pRqCuHOCghr swvyPOUedMS+lPzbBmxsmg3MlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIiZHt4O VynLuwaT2rmZdKAk23FLMB8GA1UdIwQYMBaAFJAVKMkheRfZVnIdHGhWZTRb61b9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkFCOS8xQ0Q0NEY5RUM3 N0ExMUVDQjk0MzRDMkNDNEY5QUUwMi9rQlVveVNGNUY5bFdjaDBjYUZabE5GdnJW djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tCVW95U0Y1RjlsV2NoMGNhRlpsTkZ2clZ2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkFCOS8xQ0Q0NEY5RUM3N0ExMUVDQjk0MzRDMkNDNEY5QUUwMi9rQlVveVNGNUY5 bFdjaDBjYUZabE5GdnJWdjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS15Jl73c2aVnPAGTEPepXyCJHLSkSpCPPleAWygvEjapInm930/GL8wXBJ6E +T+NJTS3Kyal4yM94chlUYA19YtWkkOdlDegdx+ig8dMR4Oz+SuFCHqZfMBm+yBe nrwGtopjGBgaj4gFgWJzduXa4APr/OI3V4PfTkxG/FOTA32NzQg22117Umj/srLc 2a/SSFkzlrboRQpk4p9fqXRumcuQI01XG26qNq+kLdGbnZUIK6DjLJ9t9Mm1fn5H WFnL0RkD+2e6H3Qwri9aKLSa+yaL/3xS4FMHnlfsY8GWqi3rfLQUZ56EsiklapGY dNy770mdWGvGpWu2Ih9lI4dvCg== -----END CERTIFICATE-----Generated at Wed May 13 04:41:44 2026 by rpki-client