$ rpki-client -vvf rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft File: kNWYT8dsavN1n-qq7ix1ilRoIxE.mft (raw, json) Hash identifier: G2pSGfGDB/jooYQucXLyWJbbs8afFDE9y4yCZfITrpY= Subject key identifier: 0B:66:4A:65:A2:14:03:DB:5E:01:03:9C:17:81:57:9D:22:11:88:F3 Authority key identifier: 90:D5:98:4F:C7:6C:6A:F3:75:9F:EA:AA:EE:2C:75:8A:54:68:23:11 Certificate issuer: /CN=A9121E02/serialNumber=90D5984FC76C6AF3759FEAAAEE2C758A54682311 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNWYT8dsavN1n-qq7ix1ilRoIxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft Manifest number: 28 Signing time: Thu 11 Jun 2026 11:07:52 +0000 Manifest this update: Thu 11 Jun 2026 11:07:52 +0000 Manifest next update: Thu 18 Jun 2026 11:07:52 +0000 Files and hashes: 1: kNWYT8dsavN1n-qq7ix1ilRoIxE.crl (hash: m7NODZ+EigHpb17ERFwLztORD361Bi8fkWien3r2hyE=) 2: E667E45629D211F19DF1399897833773.roa (hash: In+uAzwGHzP5ECvS0wGnb/464h9DxbhINKbE8cQ+KEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.crl rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNWYT8dsavN1n-qq7ix1ilRoIxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 11:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121E02, serialNumber=90D5984FC76C6AF3759FEAAAEE2C758A54682311 Validity Not Before: Jun 11 11:07:52 2026 GMT Not After : Jun 18 11:07:52 2026 GMT Subject: CN=6a2a9708-31ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:31:ec:89:19:f0:ad:16:86:db:5a:09:22:ae: 78:30:c9:75:7a:77:8a:81:e3:e0:41:11:4a:41:92: ef:42:6d:bc:45:9c:5c:7c:c7:d3:6e:0d:4e:b4:62: 6a:37:3c:53:58:4c:9b:45:39:4b:36:55:21:2a:fe: fd:24:ae:86:33:1b:53:2c:44:1a:c9:8a:98:5b:97: 22:6e:9e:6f:d3:e1:5b:6c:74:7d:68:4b:45:67:ef: 11:e7:b6:a1:81:48:de:94:89:89:5d:c3:6e:c8:ef: 62:fb:34:ad:df:42:71:cb:e1:d5:02:25:ce:7a:29: 70:3d:70:b8:74:ff:29:c1:54:0c:92:03:15:c6:b7: 0a:96:e7:bc:5e:0f:aa:c8:a5:e9:37:45:60:71:7a: 91:5c:88:da:c1:51:ba:c2:8e:e3:e8:bb:37:fd:78: 1e:7f:e2:25:2b:a9:00:74:95:03:00:77:44:76:cd: 65:d5:4b:1c:11:7e:9b:cb:c7:6b:80:bb:74:ba:2c: fc:bd:80:8d:69:34:03:df:96:40:2e:5a:15:83:8f: 00:ce:f3:3b:66:3d:bb:4c:2d:21:c9:14:dc:dd:92: 69:fb:33:3d:05:74:f3:da:90:d2:07:38:c6:40:6e: 72:25:2e:49:fe:d6:cd:0d:4a:6b:4f:d1:44:84:b4: a1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:66:4A:65:A2:14:03:DB:5E:01:03:9C:17:81:57:9D:22:11:88:F3 X509v3 Authority Key Identifier: keyid:90:D5:98:4F:C7:6C:6A:F3:75:9F:EA:AA:EE:2C:75:8A:54:68:23:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNWYT8dsavN1n-qq7ix1ilRoIxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:9d:d8:21:d4:7e:45:2d:97:76:c0:c1:32:25:e8:d3:a4:39: 52:de:40:25:3e:ef:79:47:73:0d:f4:1e:1b:42:68:dc:d7:1e: 3a:59:ce:4f:c9:e8:58:52:5c:9d:eb:53:51:af:ce:58:f3:6d: 75:37:a1:e3:c0:e4:f9:35:66:54:3d:69:1b:58:a2:7e:d2:14: c7:9e:c4:ef:ce:a0:36:6b:62:37:d9:5f:da:5b:ef:a8:1d:88: 9f:61:7b:17:75:09:fa:a8:ef:3d:bd:9b:db:41:67:fb:30:32: 05:77:ba:34:90:d4:eb:d7:2b:11:b5:41:4d:ce:80:23:3b:7d: b5:60:f1:d0:be:76:58:c1:f3:90:e0:75:ad:88:3b:7c:37:c8: b6:0d:10:94:4d:07:70:f1:c7:b9:b9:bb:77:96:16:3d:ef:c2: 6e:c1:82:62:97:7f:2f:a2:a8:74:c8:3f:53:22:92:9f:e8:63: 30:02:61:22:d4:27:71:3f:fb:75:59:70:6e:97:da:18:35:3b: 58:9d:5f:04:b6:5d:94:14:bd:78:c8:6e:c3:68:0c:06:1f:90: 1d:1d:f8:22:12:c8:00:7b:b8:81:6f:a4:95:c1:ee:8b:29:70: c1:ca:21:12:63:37:f3:62:c9:a1:e5:4f:a5:bc:f9:81:b4:02: f4:85:ff:8c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MUUwMjExMC8GA1UEBRMoOTBENTk4NEZDNzZDNkFGMzc1OUZFQUFBRUUyQzc1OEE1 NDY4MjMxMTAeFw0yNjA2MTExMTA3NTJaFw0yNjA2MTgxMTA3NTJaMBgxFjAUBgNV BAMTDTZhMmE5NzA4LTMxYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4MeyJGfCtFobbWgkirngwyXV6d4qB4+BBEUpBku9CbbxFnFx8x9NuDU60Ymo3 PFNYTJtFOUs2VSEq/v0kroYzG1MsRBrJiphblyJunm/T4VtsdH1oS0Vn7xHntqGB SN6UiYldw27I72L7NK3fQnHL4dUCJc56KXA9cLh0/ynBVAySAxXGtwqW57xeD6rI pek3RWBxepFciNrBUbrCjuPouzf9eB5/4iUrqQB0lQMAd0R2zWXVSxwRfpvLx2uA u3S6LPy9gI1pNAPflkAuWhWDjwDO8ztmPbtMLSHJFNzdkmn7Mz0FdPPakNIHOMZA bnIlLkn+1s0NSmtP0USEtKH1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUC2ZKZaIU A9teAQOcF4FXnSIRiPMwHwYDVR0jBBgwFoAUkNWYT8dsavN1n+qq7ix1ilRoIxEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIxRTAyL0ExN0Y0QjRBMjlE MjExRjFBMjYxNTg5Mzk3ODMzNzczL2tOV1lUOGRzYXZOMW4tcXE3aXgxaWxSb0l4 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva05XWVQ4ZHNhdk4xbi1xcTdpeDFpbFJvSXhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIx RTAyL0ExN0Y0QjRBMjlEMjExRjFBMjYxNTg5Mzk3ODMzNzczL2tOV1lUOGRzYXZO MW4tcXE3aXgxaWxSb0l4RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC5ndgh1H5FLZd2wMEyJejTpDlS3kAlPu95R3MN9B4bQmjc1x46Wc5PyehYUlyd 61NRr85Y8211N6HjwOT5NWZUPWkbWKJ+0hTHnsTvzqA2a2I32V/aW++oHYifYXsX dQn6qO89vZvbQWf7MDIFd7o0kNTr1ysRtUFNzoAjO321YPHQvnZYwfOQ4HWtiDt8 N8i2DRCUTQdw8ce5ubt3lhY978JuwYJil38voqh0yD9TIpKf6GMwAmEi1CdxP/t1 WXBul9oYNTtYnV8Etl2UFL14yG7DaAwGH5AdHfgiEsgAe7iBb6SVwe6LKXDByiES YzfzYsmh5U+lvPmBtAL0hf+M -----END CERTIFICATE-----Generated at Sat Jun 13 02:22:13 2026 by rpki-client