$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft File: KMruhJZWnFc8PlsYkMWhs0z8jjA.mft (raw, json) Hash identifier: j3zTsr6NhutxHh7sAVdRL3fVTyvRyH+X8kK9oxAEmeY= Subject key identifier: C2:DD:82:DC:F7:09:99:00:FC:C0:BA:D2:B1:17:DF:50:44:9E:60:92 Authority key identifier: 28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30 Certificate issuer: /CN=A91E4EF6/serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30 Certificate serial: 07A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft Manifest number: 12AF Signing time: Tue 12 May 2026 19:20:43 +0000 Manifest this update: Tue 12 May 2026 19:20:42 +0000 Manifest next update: Tue 19 May 2026 19:20:42 +0000 Files and hashes: 1: KMruhJZWnFc8PlsYkMWhs0z8jjA.crl (hash: iNCBui6DsJAS2DofKWW9HC9cGOcE+n5QiWfIu+0tfiw=) 2: 377B6620506B11EBAD849641C4F9AE02.roa (hash: 7lVvPvKm0jDrCtO8FOe2rLzoGXgVOgfwoKgNAbdQ/CA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1956 (0x7a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF6, serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30 Validity Not Before: May 12 19:20:42 2026 GMT Not After : May 19 19:20:42 2026 GMT Subject: CN=6a037d8b-7e5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a2:fd:8f:d9:47:0a:fc:15:3e:19:4d:ac:a3: 95:75:4a:b3:02:88:88:c1:1a:ad:c8:23:b6:e5:ab: b6:9b:d1:36:05:99:38:8c:b7:4f:61:f8:3b:60:4d: 6a:e2:d0:5c:e4:4a:dd:99:fa:62:a1:13:ec:37:25: 90:30:7e:78:d8:2b:c3:50:29:8a:ee:16:9b:36:68: dd:56:38:ea:b1:5f:00:a6:40:87:a1:ff:67:4e:f9: 83:35:28:b8:21:f9:fb:cb:b4:92:92:08:94:38:ec: dd:6d:cb:b5:23:2a:88:93:db:4a:e3:7e:64:d2:6f: 9f:cb:f4:26:02:60:1e:1c:f1:31:b3:6c:54:ad:30: b3:07:47:bb:f9:85:4c:32:86:b5:ff:d6:20:8e:f8: 5b:4c:30:de:1f:56:93:32:f9:d5:4f:22:3d:d5:c1: 87:90:c7:2a:63:bc:b8:7f:d1:af:41:e0:5d:27:ba: 5d:3e:7f:e3:5d:4e:ba:02:ec:5e:8b:0d:28:33:97: e7:2c:6e:bc:9e:46:7d:6a:ef:a4:69:b0:6a:55:b9: c7:01:fb:e5:b0:11:09:9a:db:d5:98:7b:58:d1:b2: 8a:df:f2:82:4a:81:0e:16:5f:9d:d3:19:55:ab:22: 41:73:09:78:01:de:7d:e4:e3:a3:f2:8d:9d:74:2d: 55:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DD:82:DC:F7:09:99:00:FC:C0:BA:D2:B1:17:DF:50:44:9E:60:92 X509v3 Authority Key Identifier: keyid:28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:cc:a7:1f:c6:65:6b:48:8b:dd:ca:a9:fd:b9:12:6e:70:79: 9b:17:e5:80:06:c3:11:07:02:83:75:cf:cc:e0:6e:71:16:4f: 66:51:26:82:1e:ee:88:f8:e8:87:a6:a3:b1:19:75:28:96:95: 34:59:97:51:a3:2c:8c:90:41:07:57:d0:4b:bf:34:60:3c:09: 88:67:63:22:12:23:f1:23:3e:fb:3e:37:65:f8:56:d0:87:6e: d9:ff:a5:0e:a7:49:53:47:5c:4e:85:8a:88:6e:b5:71:db:db: aa:9a:f7:9b:6c:ca:5f:94:91:f5:b8:9a:36:df:3c:51:cb:13: 60:e7:82:3d:51:8d:59:b9:af:8a:2e:2c:1b:ec:f7:4f:6e:18: ea:02:84:67:53:d2:a2:ac:6e:d3:33:70:50:cd:70:6a:8b:36: a3:3a:3b:9a:f1:e3:39:e6:7a:ee:7f:ac:ac:4b:e0:84:3a:27: cb:4b:aa:53:d0:11:c4:0d:de:97:c3:63:6e:7f:cc:1b:6a:c2: 21:88:fe:1a:3b:70:dd:f8:e8:23:31:b5:c8:e2:54:b3:72:24: 16:42:21:5e:e5:a1:a0:a8:6d:a7:8d:c9:23:66:a4:02:26:87: 3d:d0:32:c7:e2:b6:de:7c:75:17:1e:c0:f5:60:dc:1d:3a:dd: 83:04:25:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjYxMTAvBgNVBAUTKDI4Q0FFRTg0OTY1NjlDNTczQzNFNUIxODkwQzVBMUIz NENGQzhFMzAwHhcNMjYwNTEyMTkyMDQyWhcNMjYwNTE5MTkyMDQyWjAYMRYwFAYD VQQDEw02YTAzN2Q4Yi03ZTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6L9j9lHCvwVPhlNrKOVdUqzAoiIwRqtyCO25au2m9E2BZk4jLdPYfg7YE1q 4tBc5ErdmfpioRPsNyWQMH542CvDUCmK7habNmjdVjjqsV8ApkCHof9nTvmDNSi4 Ifn7y7SSkgiUOOzdbcu1IyqIk9tK435k0m+fy/QmAmAeHPExs2xUrTCzB0e7+YVM Moa1/9YgjvhbTDDeH1aTMvnVTyI91cGHkMcqY7y4f9GvQeBdJ7pdPn/jXU66Auxe iw0oM5fnLG68nkZ9au+kabBqVbnHAfvlsBEJmtvVmHtY0bKK3/KCSoEOFl+d0xlV qyJBcwl4Ad595OOj8o2ddC1VZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMLdgtz3 CZkA/MC60rEX31BEnmCSMB8GA1UdIwQYMBaAFCjK7oSWVpxXPD5bGJDFobNM/I4w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNi85MzgwMDc4RTYx RDYxMUVBQjhEMDE1NUJDNEY5QUUwMi9LTXJ1aEpaV25GYzhQbHNZa01XaHMwejhq akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tNcnVoSlpXbkZjOFBsc1lrTVdoczB6OGpqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNi85MzgwMDc4RTYxRDYxMUVBQjhEMDE1NUJDNEY5QUUwMi9LTXJ1aEpaV25G YzhQbHNZa01XaHMwejhqakEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd8ynH8Zla0iL3cqp/bkSbnB5mxflgAbDEQcCg3XPzOBucRZPZlEmgh7uiPjo h6ajsRl1KJaVNFmXUaMsjJBBB1fQS780YDwJiGdjIhIj8SM++z43ZfhW0Idu2f+l DqdJU0dcToWKiG61cdvbqpr3m2zKX5SR9biaNt88UcsTYOeCPVGNWbmvii4sG+z3 T24Y6gKEZ1PSoqxu0zNwUM1waos2ozo7mvHjOeZ67n+srEvghDony0uqU9ARxA3e l8Njbn/MG2rCIYj+Gjtw3fjoIzG1yOJUs3IkFkIhXuWhoKhtp43JI2akAiaHPdAy x+K23nx1Fx7A9WDcHTrdgwQlAw== -----END CERTIFICATE-----Generated at Wed May 13 14:29:17 2026 by rpki-client