$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft File: kcSXberT3od45cDc_yYDlxrC1Ns.mft (raw, json) Hash identifier: +1yXfyChE/EuCIB0HH7kytDZ39cv0NdEoKSeZIx2FGM= Subject key identifier: BB:81:01:35:1A:F5:BC:B6:34:D3:E1:B3:B3:BF:F6:7F:D7:A5:9A:9C Authority key identifier: 91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB Certificate issuer: /CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Certificate serial: 02A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft Manifest number: 028D Signing time: Thu 21 May 2026 01:48:24 +0000 Manifest this update: Thu 21 May 2026 01:48:24 +0000 Manifest next update: Thu 28 May 2026 01:48:24 +0000 Files and hashes: 1: kcSXberT3od45cDc_yYDlxrC1Ns.crl (hash: RoHnnCCzcvctXMLO61jyUSogKpjk7AOw2klbJCRQago=) 2: D29F544CFCD711EEB654B271C4F9AE02.roa (hash: 3uTrRG1V9dC0o0IOwmSmMEJhHbML0nSq3yiQY+3J84k=) 3: 24FDC2446F3211EDA3DCF033C4F9AE02.roa (hash: yctNWWiZhPVXhgLMblmsUERi9o24TYY6zYqQrUfyMsc=) 4: 24783DA46F3211EDA3DCF033C4F9AE02.roa (hash: sa00jH8bw4HUITlYrffZw+f88KkU69vSq0M65+ZIMYI=) 5: 25DD10F26F3211EDA3DCF033C4F9AE02.roa (hash: lyLkwnvPiADGaBvpMXNqGtu0ktHuqEPAoUGEfoeoW7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 01:48:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 676 (0x2a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F84, serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB Validity Not Before: May 21 01:48:24 2026 GMT Not After : May 28 01:48:24 2026 GMT Subject: CN=6a0e6468-ea0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e8:c8:09:86:4d:e4:7e:6d:06:53:dd:72:75: 27:50:0c:25:1a:a3:a3:b8:08:e4:b4:5f:95:63:78: e3:f5:ab:71:8f:f9:10:72:d6:54:6b:61:b7:73:9c: da:19:c9:1f:33:d4:0c:7c:ab:5f:d5:f5:19:29:60: 1d:92:4e:bf:ba:aa:b9:86:5d:bd:12:2c:7d:92:42: 82:9f:7b:4f:59:2d:17:80:4e:1c:a6:5e:60:d2:17: fd:42:5a:61:51:53:34:24:26:e7:12:42:ed:34:89: dd:13:ad:dc:dc:52:21:2d:62:29:61:0f:63:6a:2e: 56:16:1d:1c:04:d4:1a:d2:ca:d3:97:3d:b0:4d:91: df:49:9a:52:ff:ad:d3:b8:f5:fc:0f:e5:4f:2f:15: e7:74:08:34:32:48:42:09:f5:13:d9:e5:12:13:1a: 1a:c5:c4:ea:b0:ca:3e:de:71:dc:b3:4c:be:75:7f: e8:48:55:8b:00:90:bb:16:4a:e4:13:69:54:10:32: 66:ea:96:ca:d9:1a:21:3d:1a:60:7e:e3:3f:30:2a: 5f:f8:67:78:ba:46:75:ae:c2:88:72:2f:1b:f5:ed: b4:e1:d2:06:f8:4a:f7:14:63:68:97:c7:7f:90:71: bc:d1:6d:dd:14:b2:b5:67:ce:e4:bb:d6:1e:68:3a: 2f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:81:01:35:1A:F5:BC:B6:34:D3:E1:B3:B3:BF:F6:7F:D7:A5:9A:9C X509v3 Authority Key Identifier: keyid:91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:6c:03:f9:cf:a8:fc:0c:9c:46:b2:89:d9:84:53:1b:df:6f: f8:6d:1c:e5:66:99:d3:6f:2a:54:36:43:29:30:a3:c1:ff:4a: 0c:9d:43:a7:c9:4d:45:23:95:d4:4c:14:63:47:d0:26:57:55: 5a:d4:54:3a:a8:e5:9e:3a:e4:52:b4:58:61:9c:e3:dd:6d:ac: 57:e8:25:8b:d3:bd:c5:2f:a0:c2:2f:6e:84:c0:b4:b4:83:22: 2d:e0:5d:0a:c1:f1:e4:c3:ee:38:a2:66:47:ee:24:56:69:d8: bd:a7:c3:58:84:03:e8:6d:ef:87:88:df:17:18:48:ef:91:fd: 7c:a0:eb:72:f5:c3:da:61:4d:a3:b9:e2:45:ba:8e:41:5a:0e: e7:03:cd:47:f8:69:fa:4d:9a:5d:c1:e2:60:41:a1:e5:d4:8b: fc:7d:8d:3d:37:24:d8:fa:c5:16:49:f7:a5:61:d7:c1:88:a1: e6:7e:94:b6:8f:f6:29:55:38:f6:c5:a5:5f:44:22:6f:cb:87: 8c:10:a4:1e:30:8d:6a:97:1a:c2:c8:42:90:48:12:40:60:86: 08:04:45:9b:05:7b:2f:fc:02:e3:db:65:54:78:c3:aa:99:f3: c5:6f:ae:7c:ac:59:e4:8c:a8:77:e3:47:97:b7:fa:f5:58:b3: 8a:cf:8e:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGODQxMTAvBgNVBAUTKDkxQzQ5NzZERUFEM0RFODc3OEU1QzBEQ0ZGMjYwMzk3 MUFDMkQ0REIwHhcNMjYwNTIxMDE0ODI0WhcNMjYwNTI4MDE0ODI0WjAYMRYwFAYD VQQDEw02YTBlNjQ2OC1lYTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwujICYZN5H5tBlPdcnUnUAwlGqOjuAjktF+VY3jj9atxj/kQctZUa2G3c5za GckfM9QMfKtf1fUZKWAdkk6/uqq5hl29Eix9kkKCn3tPWS0XgE4cpl5g0hf9Qlph UVM0JCbnEkLtNIndE63c3FIhLWIpYQ9jai5WFh0cBNQa0srTlz2wTZHfSZpS/63T uPX8D+VPLxXndAg0MkhCCfUT2eUSExoaxcTqsMo+3nHcs0y+dX/oSFWLAJC7Fkrk E2lUEDJm6pbK2RohPRpgfuM/MCpf+Gd4ukZ1rsKIci8b9e204dIG+Er3FGNol8d/ kHG80W3dFLK1Z87ku9YeaDoveQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLuBATUa 9by2NNPhs7O/9n/XpZqcMB8GA1UdIwQYMBaAFJHEl23q096HeOXA3P8mA5cawtTb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y4NC9GNDNBM0YwNDZG MkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNvZDQ1Y0RjX3lZRGx4ckMx TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tjU1hiZXJUM29kNDVjRGNfeVlEbHhyQzFOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y4NC9GNDNBM0YwNDZGMkYxMUVEQTg0QTY5MzNDNEY5QUUwMi9rY1NYYmVyVDNv ZDQ1Y0RjX3lZRGx4ckMxTnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAemwD+c+o/AycRrKJ2YRTG99v+G0c5WaZ028qVDZDKTCjwf9KDJ1Dp8lNRSOV 1EwUY0fQJldVWtRUOqjlnjrkUrRYYZzj3W2sV+gli9O9xS+gwi9uhMC0tIMiLeBd CsHx5MPuOKJmR+4kVmnYvafDWIQD6G3vh4jfFxhI75H9fKDrcvXD2mFNo7niRbqO QVoO5wPNR/hp+k2aXcHiYEGh5dSL/H2NPTck2PrFFkn3pWHXwYih5n6Uto/2KVU4 9sWlX0Qib8uHjBCkHjCNapcawshCkEgSQGCGCARFmwV7L/wC49tlVHjDqpnzxW+u fKxZ5Iyod+NHl7f69Vizis+OBw== -----END CERTIFICATE-----Generated at Thu May 21 10:15:09 2026 by rpki-client