$ rpki-client -vvf rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft File: K1MJHcnLOER3WOYdne4VNUFBPtA.mft (raw, json) Hash identifier: T0oBKboQQ/LfBrvdG2urhC3RnEz6dzj+erB02zGETic= Subject key identifier: 85:37:27:76:C5:63:39:79:1D:9D:79:21:1A:4A:BF:E0:BB:CC:73:32 Authority key identifier: 2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 Certificate issuer: /CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Certificate serial: 096C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft Manifest number: 0931 Signing time: Wed 20 May 2026 20:17:01 +0000 Manifest this update: Wed 20 May 2026 20:17:00 +0000 Manifest next update: Wed 27 May 2026 20:17:00 +0000 Files and hashes: 1: K1MJHcnLOER3WOYdne4VNUFBPtA.crl (hash: zFAwYEuV+wb5sUNXPnjLVb4Grb3wo4gxnJehYN2ZXMs=) 2: 0649562CC63A11EAB59CC262C4F9AE02.roa (hash: FXMw4gU7m6cMDVIFR2ioRmioqgFmxJcgor2Nog9jRxk=) 3: 5FE97B5A1DB911EF9C94EB7AC4F9AE02.roa (hash: pwTpLqoix1ml/iDyvZtQl2PM0Bjf1ih1Kt+rjQ1/6gY=) 4: 0009F0B0EB4011F0804B8821426F56BC.roa (hash: pHl2UlpqvRYqNzqgzVyVtJS995yGr9GKW6dkHakGY/A=) 5: C6E6A146171011F1BE8A5674053D8C67.roa (hash: giIRr2ar8YF7Sh/tonFBshlOwMtWsPmV9SJJhoV2jPo=) 6: 057EA0EEC63A11EAB59CC262C4F9AE02.roa (hash: KT7zEvJNVvs97oYvIe5jqgLfgSdT+s+2AedPsqQHGgo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 20:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2412 (0x96c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142241, serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Validity Not Before: May 20 20:17:00 2026 GMT Not After : May 27 20:17:00 2026 GMT Subject: CN=6a0e16bd-ac52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9a:cf:77:b4:8a:9c:a6:ea:0e:2a:21:ec:cb: 07:f6:f4:ca:be:cb:01:72:f5:54:10:f2:c4:eb:a2: d6:75:a7:f5:66:5d:b4:19:64:2f:5a:86:20:7c:75: 2a:22:97:78:d4:3c:6a:27:0e:54:c4:ec:85:e4:77: 15:a2:f4:6f:08:da:f3:f1:57:f9:37:38:53:fc:bc: 4b:ec:fe:f4:c6:06:9a:5a:67:14:53:1f:8a:51:84: 11:ab:15:53:76:3a:dd:d4:27:27:98:2d:34:56:66: 17:e7:ff:07:1d:86:5f:6d:c2:26:c1:36:d7:53:a9: be:fa:81:2c:ba:b6:15:32:0b:62:e1:4c:46:9c:ad: 0a:de:66:50:9d:a9:01:6c:06:20:8f:b2:17:da:ea: c7:a5:be:1b:3a:ff:d5:05:45:99:87:0f:61:76:56: 9b:a6:06:a0:81:f9:f2:3a:b4:1b:f5:85:9e:d5:11: 05:dc:0c:3e:76:0c:c9:ab:dd:6e:fa:b2:0d:69:60: 16:c2:c7:93:21:7b:85:0c:0d:c2:9e:85:97:a9:8c: 40:25:48:a1:b7:88:6c:72:2f:5e:de:86:c0:42:48: 30:90:11:68:71:9d:68:da:22:e0:c0:91:c2:bb:35: bd:41:df:b6:12:3c:0a:43:b4:16:3f:9d:6f:61:a9: 28:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:37:27:76:C5:63:39:79:1D:9D:79:21:1A:4A:BF:E0:BB:CC:73:32 X509v3 Authority Key Identifier: keyid:2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:7e:5f:32:11:cf:df:c7:52:f7:73:1c:dd:ca:6d:22:9a:aa: 6c:aa:82:ef:69:a5:bc:bc:c4:4a:3b:cf:8c:96:b4:ec:53:c9: c1:bd:4b:bd:e5:73:66:60:9f:60:4b:60:63:54:41:0a:1b:09: 25:6c:e6:d2:bd:0b:0c:6f:62:6a:2a:5a:5f:3b:1f:fa:87:a3: 44:61:7d:d9:0f:ce:5f:2a:34:d0:9c:2c:64:5b:a4:b9:e3:a4: 58:30:53:c7:5c:e4:d2:eb:35:bc:af:e6:85:c3:fd:c9:c2:26: d9:4d:0f:5c:4b:e5:3d:29:cb:66:c8:6b:fa:7c:a3:46:0b:d8: 1e:dc:1d:55:d9:f4:3d:07:d7:73:6a:8e:96:93:55:ef:09:44: 15:fb:d4:cf:10:6a:be:8a:18:9e:91:e8:70:e1:63:0c:d4:a1: 1c:86:6c:6f:45:93:58:ad:08:9c:9c:11:56:19:c3:ac:e7:71: 51:19:72:3d:db:1b:cb:f2:81:fe:de:bd:18:06:d0:59:ca:be: a3:5e:82:25:ec:2b:05:ea:42:86:27:49:bb:c7:64:4e:4a:45: dc:b2:30:34:fb:20:fd:b7:77:b7:32:90:01:2f:33:d5:0f:8b: f4:f6:55:10:59:32:19:5b:f7:37:b8:fb:56:eb:d9:3d:a4:4d: ff:b6:b2:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyNDExMTAvBgNVBAUTKDJCNTMwOTFEQzlDQjM4NDQ3NzU4RTYxRDlERUUxNTM1 NDE0MTNFRDAwHhcNMjYwNTIwMjAxNzAwWhcNMjYwNTI3MjAxNzAwWjAYMRYwFAYD VQQDEw02YTBlMTZiZC1hYzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoprPd7SKnKbqDioh7MsH9vTKvssBcvVUEPLE66LWdaf1Zl20GWQvWoYgfHUq Ipd41DxqJw5UxOyF5HcVovRvCNrz8Vf5NzhT/LxL7P70xgaaWmcUUx+KUYQRqxVT djrd1CcnmC00VmYX5/8HHYZfbcImwTbXU6m++oEsurYVMgti4UxGnK0K3mZQnakB bAYgj7IX2urHpb4bOv/VBUWZhw9hdlabpgaggfnyOrQb9YWe1REF3Aw+dgzJq91u +rINaWAWwseTIXuFDA3CnoWXqYxAJUiht4hsci9e3obAQkgwkBFocZ1o2iLgwJHC uzW9Qd+2EjwKQ7QWP51vYakoGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIU3J3bF Yzl5HZ15IRpKv+C7zHMyMB8GA1UdIwQYMBaAFCtTCR3JyzhEd1jmHZ3uFTVBQT7Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjI0MS80RjdCOTg2NkM1 RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9FUjNXT1lkbmU0Vk5VRkJQ dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxTUpIY25MT0VSM1dPWWRuZTRWTlVGQlB0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjI0MS80RjdCOTg2NkM1RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9F UjNXT1lkbmU0Vk5VRkJQdEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2X5fMhHP38dS93Mc3cptIpqqbKqC72mlvLzESjvPjJa07FPJwb1LveVzZmCf YEtgY1RBChsJJWzm0r0LDG9iaipaXzsf+oejRGF92Q/OXyo00JwsZFukueOkWDBT x1zk0us1vK/mhcP9ycIm2U0PXEvlPSnLZshr+nyjRgvYHtwdVdn0PQfXc2qOlpNV 7wlEFfvUzxBqvooYnpHocOFjDNShHIZsb0WTWK0InJwRVhnDrOdxURlyPdsby/KB /t69GAbQWcq+o16CJewrBepChidJu8dkTkpF3LIwNPsg/bd3tzKQAS8z1Q+L9PZV EFkyGVv3N7j7VuvZPaRN/7ayJA== -----END CERTIFICATE-----Generated at Thu May 21 09:39:05 2026 by rpki-client