$ rpki-client -vvf rpki.apnic.net/member_repository/A9142706/5C1F7588335611F19DE3316DC8833773/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.mft File: kAQ8QPoof1qqpCX0ZUSFoxEcPVM.mft (raw, json) Hash identifier: t9/+z+2Hvbq0NCozjPg7luJC/c60ASfp5G/UoeidV2w= Subject key identifier: D8:E8:62:2E:D4:24:A5:E6:FE:D6:6E:4C:A0:CC:5D:05:10:3E:31:58 Authority key identifier: 90:04:3C:40:FA:28:7F:5A:AA:A4:25:F4:65:44:85:A3:11:1C:3D:53 Certificate issuer: /CN=A9142706/serialNumber=90043C40FA287F5AAAA425F4654485A3111C3D53 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142706/5C1F7588335611F19DE3316DC8833773/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.mft Manifest number: 16 Signing time: Tue 19 May 2026 08:52:09 +0000 Manifest this update: Tue 19 May 2026 08:52:08 +0000 Manifest next update: Tue 26 May 2026 08:52:08 +0000 Files and hashes: 1: kAQ8QPoof1qqpCX0ZUSFoxEcPVM.crl (hash: W6Le+tUX38ZIGQlfQs72Y2JKlYw4qV2WIfYk8oa9x8Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142706/5C1F7588335611F19DE3316DC8833773/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.crl rsync://rpki.apnic.net/member_repository/A9142706/5C1F7588335611F19DE3316DC8833773/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:52:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142706, serialNumber=90043C40FA287F5AAAA425F4654485A3111C3D53 Validity Not Before: May 19 08:52:08 2026 GMT Not After : May 26 08:52:08 2026 GMT Subject: CN=6a0c24b9-4f6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5e:3c:0b:a0:87:eb:a9:c3:b8:f1:91:68:e1: 49:50:50:3e:50:db:13:07:f4:4e:ec:1d:59:6e:1f: aa:42:f3:32:cd:b4:1b:55:8c:e6:8e:88:9a:fb:84: 26:c4:e6:d3:54:68:57:f7:58:ac:c8:d6:7e:a4:fb: 08:8e:0b:0f:b9:ca:d9:99:5c:89:af:8c:19:94:5f: 3f:b0:64:a7:70:d6:10:6a:b7:ca:08:b2:50:5c:7d: 3d:ee:b1:32:b4:c8:39:15:a4:e5:36:ff:96:d5:b5: 5f:09:ca:e6:58:47:c0:ae:97:f8:5f:f1:fa:33:31: 06:87:f9:b7:08:5c:f8:3c:1a:73:d6:85:d6:f2:4e: 5c:1b:98:8d:8f:ef:08:61:58:33:d0:7b:99:1e:fe: ff:6e:05:2f:d5:a8:ff:1c:86:47:3b:4b:f6:0c:fe: b6:64:92:bd:13:7d:b8:d2:89:4b:e0:52:85:e5:a3: af:11:7f:d4:3f:c0:da:4c:56:b2:ac:be:24:86:fe: 26:7c:01:08:90:10:13:6a:59:29:be:df:f3:35:01: ac:f7:e3:27:9e:3f:de:fb:07:d0:4d:0e:23:08:16: f9:20:3b:cd:fb:30:20:2c:eb:d9:f3:52:bd:64:f4: 7c:a4:81:63:fd:6b:e7:a8:c7:3a:76:b7:8e:d1:a0: 83:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E8:62:2E:D4:24:A5:E6:FE:D6:6E:4C:A0:CC:5D:05:10:3E:31:58 X509v3 Authority Key Identifier: keyid:90:04:3C:40:FA:28:7F:5A:AA:A4:25:F4:65:44:85:A3:11:1C:3D:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142706/5C1F7588335611F19DE3316DC8833773/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142706/5C1F7588335611F19DE3316DC8833773/kAQ8QPoof1qqpCX0ZUSFoxEcPVM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:cd:26:c0:95:69:da:9d:c7:d7:68:4c:25:38:b7:cd:a6:c8: 0e:bf:fc:04:be:57:34:72:75:7c:32:46:71:9c:91:d4:c3:2d: 6f:ed:c1:e9:f7:c1:79:28:2b:8a:3f:e3:53:b9:6b:a4:7c:b3: c5:df:3c:05:f0:77:2d:d0:aa:68:a1:ac:24:66:03:64:0c:68: ff:06:01:fe:a6:07:27:32:26:87:c2:b8:e2:db:31:42:a0:5b: 2d:88:4e:1c:71:4e:79:2d:6a:e9:fc:05:85:cd:59:f9:84:6d: 80:3a:19:c4:fd:20:bf:81:1e:c8:0f:50:3c:5d:26:c6:1e:5a: 75:99:54:0d:c9:21:89:12:0a:82:c9:7c:9a:66:b6:cf:b4:c2: d2:50:43:6d:b5:d2:bf:7a:46:b3:f6:04:4b:35:90:65:50:5b: 76:42:2e:03:1a:51:fa:ac:87:55:63:20:0e:30:ae:2f:6c:e0: a5:3b:fa:cc:7c:d9:e4:b6:3a:f8:ca:e2:11:12:3b:94:1d:39: 12:fb:eb:f4:71:69:97:ec:6e:24:5d:62:a2:4a:a8:8e:1e:94: 9f:ba:dc:b6:8b:96:70:7d:b7:4f:d4:3b:51:45:e9:cc:6c:0b: ce:e2:18:94:58:36:6e:7c:b3:d8:c2:0c:dd:75:a8:91:66:0b: a9:bd:80:55 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjcwNjExMC8GA1UEBRMoOTAwNDNDNDBGQTI4N0Y1QUFBQTQyNUY0NjU0NDg1QTMx MTFDM0Q1MzAeFw0yNjA1MTkwODUyMDhaFw0yNjA1MjYwODUyMDhaMBgxFjAUBgNV BAMTDTZhMGMyNGI5LTRmNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuXjwLoIfrqcO48ZFo4UlQUD5Q2xMH9E7sHVluH6pC8zLNtBtVjOaOiJr7hCbE 5tNUaFf3WKzI1n6k+wiOCw+5ytmZXImvjBmUXz+wZKdw1hBqt8oIslBcfT3usTK0 yDkVpOU2/5bVtV8JyuZYR8Cul/hf8fozMQaH+bcIXPg8GnPWhdbyTlwbmI2P7whh WDPQe5ke/v9uBS/VqP8chkc7S/YM/rZkkr0TfbjSiUvgUoXlo68Rf9Q/wNpMVrKs viSG/iZ8AQiQEBNqWSm+3/M1Aaz34yeeP977B9BNDiMIFvkgO837MCAs69nzUr1k 9HykgWP9a+eoxzp2t47RoIPtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2OhiLtQk peb+1m5MoMxdBRA+MVgwHwYDVR0jBBgwFoAUkAQ8QPoof1qqpCX0ZUSFoxEcPVMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNzA2LzVDMUY3NTg4MzM1 NjExRjE5REUzMzE2REM4ODMzNzczL2tBUThRUG9vZjFxcXBDWDBaVVNGb3hFY1BW TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva0FROFFQb29mMXFxcENYMFpVU0ZveEVjUFZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy NzA2LzVDMUY3NTg4MzM1NjExRjE5REUzMzE2REM4ODMzNzczL2tBUThRUG9vZjFx cXBDWDBaVVNGb3hFY1BWTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB7zSbAlWnancfXaEwlOLfNpsgOv/wEvlc0cnV8MkZxnJHUwy1v7cHp98F5KCuK P+NTuWukfLPF3zwF8Hct0KpooawkZgNkDGj/BgH+pgcnMiaHwrji2zFCoFstiE4c cU55LWrp/AWFzVn5hG2AOhnE/SC/gR7ID1A8XSbGHlp1mVQNySGJEgqCyXyaZrbP tMLSUENttdK/ekaz9gRLNZBlUFt2Qi4DGlH6rIdVYyAOMK4vbOClO/rMfNnktjr4 yuIREjuUHTkS++v0cWmX7G4kXWKiSqiOHpSfuty2i5ZwfbdP1DtRRenMbAvO4hiU WDZufLPYwgzddaiRZgupvYBV -----END CERTIFICATE-----Generated at Thu May 21 09:34:24 2026 by rpki-client