$ rpki-client -vvf rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft File: kOgVQgZDtd1jkSg9Z3RKOrowctM.mft (raw, json) Hash identifier: FOOr/Tby0Id+B1qsRPIckhH7/TDOuFlj8t5F7HINEPs= Subject key identifier: 3B:0B:15:44:55:2F:B2:CD:3D:91:B8:AB:13:B1:48:3A:CB:50:E6:EA Authority key identifier: 90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3 Certificate issuer: /CN=A914BB5D/serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3 Certificate serial: 0CBC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft Manifest number: 0CAA Signing time: Wed 20 May 2026 18:32:23 +0000 Manifest this update: Wed 20 May 2026 18:32:22 +0000 Manifest next update: Wed 27 May 2026 18:32:22 +0000 Files and hashes: 1: kOgVQgZDtd1jkSg9Z3RKOrowctM.crl (hash: 3o/WKEmP8jvelShA4kVBRqC+/yLoM/L54pYcN7+85z8=) 2: B52B819E14F411EA96EC5874C4F9AE02.roa (hash: 0ylwtp+Xde2oLtmDBX2li5EHhsIVUZ6el50n4zuRj9M=) 3: B49D829014F411EA96EC5874C4F9AE02.roa (hash: jzZbajVx8oCsyDMI49EOzkY4Rk+3PCwW3QcgbUirijU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3260 (0xcbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BB5D, serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3 Validity Not Before: May 20 18:32:22 2026 GMT Not After : May 27 18:32:22 2026 GMT Subject: CN=6a0dfe37-5e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2f:37:99:a8:d1:c2:1f:01:27:1d:14:e2:72: b3:51:32:c2:b8:e5:9a:9f:de:22:2d:ea:5f:ee:af: a9:81:4e:be:8d:9e:6f:b0:61:d3:80:6b:c8:03:83: f6:f3:b7:05:22:24:09:35:b0:f0:03:79:e0:25:f2: c9:fd:37:22:f7:93:83:63:02:5c:c3:07:44:fc:78: 38:df:b6:92:af:7f:53:c0:09:28:a3:d9:6c:70:8b: bd:d5:9a:82:e0:33:c3:fd:aa:71:59:82:ee:87:cb: 10:14:90:15:4c:58:11:53:87:b7:4d:da:3d:d7:09: ed:a2:6b:fb:62:36:0f:ed:e7:89:cd:0e:6c:85:62: ca:00:44:f3:e6:26:78:bf:d9:1a:0c:41:96:b5:44: 5f:03:a2:b8:ad:e7:2d:f1:3d:ee:d1:c2:da:48:d2: 2c:12:7c:b7:fd:d7:c0:61:5a:32:d8:df:a6:5f:f6: 29:8b:62:ba:9c:30:d0:fe:97:b9:fc:25:a3:14:ad: 78:53:9d:bc:f7:8a:33:82:5b:c7:c1:c7:56:83:66: 40:32:f8:92:47:fc:5d:4d:22:68:7f:40:47:65:e2: 59:76:eb:39:0a:b4:46:20:56:b7:8d:54:07:2d:a5: 02:0a:f6:1c:da:87:46:f5:9f:25:83:34:84:2c:90: a8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0B:15:44:55:2F:B2:CD:3D:91:B8:AB:13:B1:48:3A:CB:50:E6:EA X509v3 Authority Key Identifier: keyid:90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:3b:bd:d2:a2:69:42:2b:ac:bf:b0:07:9b:d8:df:86:9e:30: 56:26:2c:1b:1e:a4:8d:ac:a9:20:fd:ce:a0:df:f8:9d:e2:0d: fb:db:d2:22:49:d5:36:6a:67:e9:f2:42:2e:3a:ae:50:aa:3a: 01:a2:31:57:3d:3a:1d:45:7d:e9:ce:e9:a4:13:66:cd:98:54: 91:15:2d:55:f4:77:8a:be:47:ec:67:2e:8d:4f:70:fa:a1:27: f5:15:b2:6c:2e:07:4c:3b:98:63:d8:f4:2d:31:6a:2d:f2:1f: dd:f5:be:f5:90:a2:48:d8:ba:dc:1f:be:20:d5:37:e3:10:43: 86:2d:4a:23:5b:bf:74:7b:b3:12:ce:60:28:5f:15:96:9f:f9: 76:54:ee:fd:70:af:9d:b0:d7:90:0a:33:7f:78:63:3a:7f:5f: 98:c9:b6:14:7c:4f:ac:55:b7:7d:09:cb:4c:b4:8e:ce:a0:56: fa:00:8c:2f:21:55:98:82:8a:4c:43:fa:46:27:cb:d3:05:32: 67:60:96:70:43:2b:35:87:80:94:c4:8e:e3:78:46:0d:0e:ae: e0:ad:19:8b:a4:f3:35:7d:88:22:a9:02:eb:c2:ae:19:a3:66: b4:0a:e2:0d:64:35:05:b1:54:1f:6d:7a:3e:bc:32:57:5a:45: 0f:99:2f:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJCNUQxMTAvBgNVBAUTKDkwRTgxNTQyMDY0M0I1REQ2MzkxMjgzRDY3NzQ0QTNB QkEzMDcyRDMwHhcNMjYwNTIwMTgzMjIyWhcNMjYwNTI3MTgzMjIyWjAYMRYwFAYD VQQDEw02YTBkZmUzNy01ZTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoC83majRwh8BJx0U4nKzUTLCuOWan94iLepf7q+pgU6+jZ5vsGHTgGvIA4P2 87cFIiQJNbDwA3ngJfLJ/Tci95ODYwJcwwdE/Hg437aSr39TwAkoo9lscIu91ZqC 4DPD/apxWYLuh8sQFJAVTFgRU4e3Tdo91wntomv7YjYP7eeJzQ5shWLKAETz5iZ4 v9kaDEGWtURfA6K4rect8T3u0cLaSNIsEny3/dfAYVoy2N+mX/Ypi2K6nDDQ/pe5 /CWjFK14U52894ozglvHwcdWg2ZAMviSR/xdTSJof0BHZeJZdus5CrRGIFa3jVQH LaUCCvYc2odG9Z8lgzSELJCoKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDsLFURV L7LNPZG4qxOxSDrLUObqMB8GA1UdIwQYMBaAFJDoFUIGQ7XdY5EoPWd0Sjq6MHLT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkI1RC9GMDI3Q0RCNDE0 RjExMUVBOUEwNjg0NkJDNEY5QUUwMi9rT2dWUWdaRHRkMWprU2c5WjNSS09yb3dj dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tPZ1ZRZ1pEdGQxamtTZzlaM1JLT3Jvd2N0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkI1RC9GMDI3Q0RCNDE0RjExMUVBOUEwNjg0NkJDNEY5QUUwMi9rT2dWUWdaRHRk MWprU2c5WjNSS09yb3djdE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzTu90qJpQiusv7AHm9jfhp4wViYsGx6kjaypIP3OoN/4neIN+9vSIknVNmpn 6fJCLjquUKo6AaIxVz06HUV96c7ppBNmzZhUkRUtVfR3ir5H7GcujU9w+qEn9RWy bC4HTDuYY9j0LTFqLfIf3fW+9ZCiSNi63B++INU34xBDhi1KI1u/dHuzEs5gKF8V lp/5dlTu/XCvnbDXkAozf3hjOn9fmMm2FHxPrFW3fQnLTLSOzqBW+gCMLyFVmIKK TEP6RifL0wUyZ2CWcEMrNYeAlMSO43hGDQ6u4K0Zi6TzNX2IIqkC68KuGaNmtAri DWQ1BbFUH216PrwyV1pFD5kv9g== -----END CERTIFICATE-----Generated at Thu May 21 09:38:42 2026 by rpki-client