$ rpki-client -vvf rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft File: kakyPLNEJvPZyJDjl4Ag1BezWfU.mft (raw, json) Hash identifier: 0BQgBSl6rdXLSDM25IM4HDmWEibrUMZKa2y8zMpxUnQ= Subject key identifier: A0:34:5C:A7:C3:AD:3E:62:2E:7C:DD:6F:4B:2A:29:06:29:AD:C0:D6 Authority key identifier: 91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5 Certificate issuer: /CN=A9151265/serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5 Certificate serial: 0519 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft Manifest number: 0511 Signing time: Wed 20 May 2026 23:41:21 +0000 Manifest this update: Wed 20 May 2026 23:41:21 +0000 Manifest next update: Wed 27 May 2026 23:41:21 +0000 Files and hashes: 1: kakyPLNEJvPZyJDjl4Ag1BezWfU.crl (hash: ALAaomT7DxL52TBp6I6z8r9A80oF/8UeySJJVQqrsK8=) 2: B1334FD4522011ECB0594C2BC4F9AE02.roa (hash: wtcSk6Y7w0YC/tgX92PUFuNkS6TBVa+Kp56LZMlD0kQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 23:41:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1305 (0x519) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151265, serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5 Validity Not Before: May 20 23:41:21 2026 GMT Not After : May 27 23:41:21 2026 GMT Subject: CN=6a0e46a1-617d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4e:51:50:8c:d6:ea:6f:16:ca:d4:dc:5d:62: f3:c4:05:f8:c2:9f:fa:c8:8b:44:15:8b:db:aa:a6: be:03:78:bc:04:03:92:fc:9b:8f:cf:ea:d0:c0:22: 53:a2:7b:7a:e0:5e:8c:2f:35:5f:63:3b:be:3e:45: 78:85:64:ab:aa:4e:8b:db:74:1f:14:67:7c:3b:22: 5d:58:67:22:ab:1c:ff:18:81:f7:fe:42:8a:8e:a6: b4:b3:8f:96:ee:f4:66:02:31:35:2b:be:b1:50:36: 8d:78:a3:0e:2a:04:df:25:1f:32:e2:cc:5a:b8:c4: 0f:15:47:66:2f:72:60:60:66:d2:31:f7:35:59:5d: 4f:8b:6c:35:44:1f:5d:1f:5d:b0:7b:9a:3f:f4:59: 5a:3a:0e:d7:3c:45:4e:49:51:3e:95:e9:20:ce:cf: c4:6b:45:d6:6d:bf:59:db:b4:ec:07:50:00:db:0a: 1a:52:6d:c8:c2:0e:f2:10:cc:96:e0:01:d0:10:39: b0:73:ca:24:58:93:92:fe:21:94:40:bb:37:1c:b1: 67:04:f5:6e:b2:61:b5:60:3d:db:2c:1c:2c:8c:93: e9:dd:26:94:c2:a4:9e:0c:d7:8f:24:60:90:08:6f: 44:91:e9:04:37:8a:7c:52:ed:27:f0:24:aa:c7:fd: 0a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:34:5C:A7:C3:AD:3E:62:2E:7C:DD:6F:4B:2A:29:06:29:AD:C0:D6 X509v3 Authority Key Identifier: keyid:91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:ef:04:b7:31:28:90:ad:9a:ce:65:93:e3:de:a9:79:1a:6e: dd:b3:ab:f6:54:3f:7c:d0:a5:f7:e7:95:d1:88:74:28:cb:2d: 5b:87:d9:6b:8a:4a:1c:76:41:7f:a5:20:c0:9a:c2:38:83:08: 07:7e:c6:51:00:00:fc:50:27:aa:be:04:4f:08:24:ff:32:32: 8d:69:b6:b2:aa:b7:60:62:b8:4c:02:a6:fc:59:52:d4:d6:56: 38:fa:0f:24:18:d2:a1:f0:ec:30:f6:df:c6:1b:e5:d7:89:df: 27:08:0d:38:13:9e:cf:8a:de:10:95:db:b9:52:51:3f:13:3b: 18:b4:1e:a8:2b:3c:f0:d6:2e:8e:92:a7:72:38:9f:75:83:5b: 0d:01:de:6b:76:ac:d3:57:38:e9:e3:4a:99:b6:4c:05:7c:a1: cb:7e:f1:4b:e4:a7:af:19:73:b5:17:9c:f2:6d:48:b7:1f:07: 61:82:12:32:93:35:75:ba:7e:2c:d6:37:e2:74:d2:b3:ce:85: b2:63:f5:d1:ba:57:63:20:db:57:74:84:39:85:e6:c3:37:7d: 7c:60:ae:54:49:96:6a:b2:5d:a0:d4:c4:5b:45:a7:7c:dc:45: 78:28:4c:8a:1f:23:d9:dc:ff:12:d1:45:f9:00:9f:86:22:3d: 96:1e:4e:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNjUxMTAvBgNVBAUTKDkxQTkzMjNDQjM0NDI2RjNEOUM4OTBFMzk3ODAyMEQ0 MTdCMzU5RjUwHhcNMjYwNTIwMjM0MTIxWhcNMjYwNTI3MjM0MTIxWjAYMRYwFAYD VQQDEw02YTBlNDZhMS02MTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy05RUIzW6m8WytTcXWLzxAX4wp/6yItEFYvbqqa+A3i8BAOS/JuPz+rQwCJT ont64F6MLzVfYzu+PkV4hWSrqk6L23QfFGd8OyJdWGciqxz/GIH3/kKKjqa0s4+W 7vRmAjE1K76xUDaNeKMOKgTfJR8y4sxauMQPFUdmL3JgYGbSMfc1WV1Pi2w1RB9d H12we5o/9FlaOg7XPEVOSVE+lekgzs/Ea0XWbb9Z27TsB1AA2woaUm3Iwg7yEMyW 4AHQEDmwc8okWJOS/iGUQLs3HLFnBPVusmG1YD3bLBwsjJPp3SaUwqSeDNePJGCQ CG9EkekEN4p8Uu0n8CSqx/0KiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKA0XKfD rT5iLnzdb0sqKQYprcDWMB8GA1UdIwQYMBaAFJGpMjyzRCbz2ciQ45eAINQXs1n1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI2NS8wNTcwOUFFQTUy MUYxMUVDQjNEMDE5MkJDNEY5QUUwMi9rYWt5UExORUp2UFp5SkRqbDRBZzFCZXpX ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tha3lQTE5FSnZQWnlKRGpsNEFnMUJleldmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI2NS8wNTcwOUFFQTUyMUYxMUVDQjNEMDE5MkJDNEY5QUUwMi9rYWt5UExORUp2 UFp5SkRqbDRBZzFCZXpXZlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtu8EtzEokK2azmWT496peRpu3bOr9lQ/fNCl9+eV0Yh0KMstW4fZa4pKHHZB f6UgwJrCOIMIB37GUQAA/FAnqr4ETwgk/zIyjWm2sqq3YGK4TAKm/FlS1NZWOPoP JBjSofDsMPbfxhvl14nfJwgNOBOez4reEJXbuVJRPxM7GLQeqCs88NYujpKncjif dYNbDQHea3as01c46eNKmbZMBXyhy37xS+SnrxlztRec8m1Itx8HYYISMpM1dbp+ LNY34nTSs86FsmP10bpXYyDbV3SEOYXmwzd9fGCuVEmWarJdoNTEW0WnfNxFeChM ih8j2dz/EtFF+QCfhiI9lh5Ogg== -----END CERTIFICATE-----Generated at Thu May 21 10:16:02 2026 by rpki-client