$ rpki-client -vvf rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft File: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft (raw, json) Hash identifier: pu37jNrEwWUayCh6yATz1C911DxTIYCcN0OaGhEMz+k= Subject key identifier: 41:0F:25:43:45:DF:C5:36:90:AB:06:AF:57:3E:09:17:33:6C:51:A9 Authority key identifier: DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 Certificate issuer: /CN=A9133A27/serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955 Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft Manifest number: 018D Signing time: Thu 21 May 2026 04:28:19 +0000 Manifest this update: Thu 21 May 2026 04:28:19 +0000 Manifest next update: Thu 28 May 2026 04:28:19 +0000 Files and hashes: 1: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl (hash: IUA8J0cL1s4KVAOJh1o3mAE9ljMX+rHksYMM6daNrFI=) 2: 90195128FAC411EEB1CDF882C4F9AE02.roa (hash: 6f62DrCIqXQzH0Me6UWUB3Obo/TfW+7iKkRiIr7raYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 04:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133A27, serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955 Validity Not Before: May 21 04:28:19 2026 GMT Not After : May 28 04:28:19 2026 GMT Subject: CN=6a0e89e3-296d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7e:a0:f0:70:5a:20:ee:2e:f3:cf:82:51:ce: fd:e4:8b:47:0f:8c:47:8b:25:1a:a8:80:ad:ab:b1: b1:6f:34:9d:09:f6:72:2c:c7:53:7e:bd:9e:6b:9c: 4e:41:6b:53:59:b7:7f:15:35:06:2d:63:6a:cf:ea: 80:b0:e1:f7:8f:59:67:a7:47:92:5d:ec:9a:c8:61: 12:30:d9:5c:93:3f:aa:6e:51:42:a2:c1:ab:9f:9b: de:39:2a:31:87:b3:2d:19:0f:38:36:e2:41:e0:b6: c9:ac:ed:93:77:b6:34:3f:7b:ef:bb:27:64:00:c4: a1:b7:10:e0:16:a2:ba:39:a9:da:a7:a7:b9:cc:27: fb:e8:17:3d:0a:a1:7b:85:85:18:4e:4b:cb:cf:34: d8:dd:a9:12:2a:fd:5c:08:a4:e9:c6:7c:00:b7:59: 0c:41:d3:5e:85:09:0b:e3:4c:45:8c:cf:fc:b0:c8: 96:8b:69:0c:67:00:ba:24:7f:6b:f1:8e:d4:e1:36: 68:66:c0:33:51:da:a8:bb:f4:38:c9:a8:61:ef:01: 7d:2e:ee:d6:ab:98:af:6e:28:fb:95:7c:14:53:6f: a2:2b:6e:f0:0f:92:89:65:d3:b7:c5:cc:69:6f:18: b9:f3:d0:d9:b7:30:66:9a:7b:9a:25:4c:ec:57:09: 43:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:0F:25:43:45:DF:C5:36:90:AB:06:AF:57:3E:09:17:33:6C:51:A9 X509v3 Authority Key Identifier: keyid:DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:dc:6e:fd:cd:35:e7:41:24:a4:b8:6d:5a:03:06:5d:15:3a: 30:dd:cb:b6:6a:8c:ad:a6:3d:f8:e1:69:82:0d:d0:e1:08:1d: b4:7c:ce:be:7a:fb:94:66:ca:56:dc:5c:dc:ac:8d:d3:a1:fa: b8:8a:e0:a2:5a:58:40:13:18:76:1e:e5:d2:2d:fb:48:81:2c: d6:b8:4b:ff:54:3d:29:37:03:9e:d3:c3:8f:85:82:a9:6f:82: 5a:69:87:42:20:8a:5a:84:60:61:9f:29:9f:d8:1d:6e:3e:09: 96:22:b5:bc:ed:e6:d0:69:03:7e:ee:b5:45:03:83:48:3b:11: 43:e3:3e:34:3f:5a:bc:5a:02:6c:33:21:01:b5:43:3f:fb:de: ba:22:9e:e3:20:d3:4c:37:78:11:4a:b9:3c:cd:d3:00:91:66: 14:37:27:e6:2e:e7:b2:aa:a4:39:c6:3f:bf:3f:9c:28:3f:de: 80:fd:40:65:4d:d0:4b:ad:93:f4:d2:f5:04:f1:ff:5d:e6:7f: b6:6c:72:91:eb:50:58:61:bb:bd:99:73:f4:f8:ae:3d:12:9c: 12:cc:92:e4:e9:b4:50:ee:04:13:78:21:1b:d6:04:e2:0c:e3: 16:fb:93:f3:8e:87:3f:fe:13:04:82:3f:b2:29:c0:76:28:61: fd:d1:38:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNBMjcxMTAvBgNVBAUTKERDQUQ2NDQ3MDVDRjE4QzI3RDdGQzIwMTczODVEMjNF RTcyMDM5NTUwHhcNMjYwNTIxMDQyODE5WhcNMjYwNTI4MDQyODE5WjAYMRYwFAYD VQQDEw02YTBlODllMy0yOTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzX6g8HBaIO4u88+CUc795ItHD4xHiyUaqICtq7GxbzSdCfZyLMdTfr2ea5xO QWtTWbd/FTUGLWNqz+qAsOH3j1lnp0eSXeyayGESMNlckz+qblFCosGrn5veOSox h7MtGQ84NuJB4LbJrO2Td7Y0P3vvuydkAMShtxDgFqK6Oanap6e5zCf76Bc9CqF7 hYUYTkvLzzTY3akSKv1cCKTpxnwAt1kMQdNehQkL40xFjM/8sMiWi2kMZwC6JH9r 8Y7U4TZoZsAzUdqou/Q4yahh7wF9Lu7Wq5ivbij7lXwUU2+iK27wD5KJZdO3xcxp bxi589DZtzBmmnuaJUzsVwlDYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEEPJUNF 38U2kKsGr1c+CRczbFGpMB8GA1UdIwQYMBaAFNytZEcFzxjCfX/CAXOF0j7nIDlV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0EyNy9FMjY2NDZFNEY3 MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndYUEdNSjlmOElCYzRYU1B1Y2dP VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNLMWtSd1hQR01KOWY4SUJjNFhTUHVjZ09WVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0EyNy9FMjY2NDZFNEY3MDMxMUVFQTMxRjVEN0FDNEY5QUUwMi8zSzFrUndYUEdN SjlmOElCYzRYU1B1Y2dPVlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh9xu/c0150EkpLhtWgMGXRU6MN3LtmqMraY9+OFpgg3Q4QgdtHzOvnr7lGbK Vtxc3KyN06H6uIrgolpYQBMYdh7l0i37SIEs1rhL/1Q9KTcDntPDj4WCqW+CWmmH QiCKWoRgYZ8pn9gdbj4JliK1vO3m0GkDfu61RQODSDsRQ+M+ND9avFoCbDMhAbVD P/veuiKe4yDTTDd4EUq5PM3TAJFmFDcn5i7nsqqkOcY/vz+cKD/egP1AZU3QS62T 9NL1BPH/XeZ/tmxyketQWGG7vZlz9PiuPRKcEsyS5Om0UO4EE3ghG9YE4gzjFvuT 846HP/4TBII/sinAdihh/dE4AQ== -----END CERTIFICATE-----Generated at Thu May 21 10:16:04 2026 by rpki-client