$ rpki-client -vvf rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.mft File: KrJDLDrVEo7XPpnEYNBhH69NIg4.mft (raw, json) Hash identifier: PfYTaZPgFPHdjdUjvrwXWHlGjZeDEXW2XQTDaeWi2XQ= Subject key identifier: 41:16:BF:E8:27:73:73:BF:FD:E7:94:25:F5:DF:DE:D8:61:B6:C7:12 Authority key identifier: 2A:B2:43:2C:3A:D5:12:8E:D7:3E:99:C4:60:D0:61:1F:AF:4D:22:0E Certificate issuer: /CN=A9153850/serialNumber=2AB2432C3AD5128ED73E99C460D0611FAF4D220E Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KrJDLDrVEo7XPpnEYNBhH69NIg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.mft Manifest number: ED Signing time: Thu 21 May 2026 06:40:32 +0000 Manifest this update: Thu 21 May 2026 06:40:31 +0000 Manifest next update: Thu 28 May 2026 06:40:31 +0000 Files and hashes: 1: KrJDLDrVEo7XPpnEYNBhH69NIg4.crl (hash: 8Xr/6ceyLtaKx9b3weiz2higWyc58PoJAKhfwuzFGM4=) 2: FC7F121AAA6F11F0BCFEBD63C4F9AE02.roa (hash: MV4I569w9zPiHP/yIqubx9xyWgXjsBIdhw/uq6cgQpU=) 3: D6246110AA6F11F0AD515C63C4F9AE02.roa (hash: kgI9j69ZuRKnS83zYB2SCGnkfw+45wKRpdDjx0NhraU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.crl rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KrJDLDrVEo7XPpnEYNBhH69NIg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 04:46:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153850, serialNumber=2AB2432C3AD5128ED73E99C460D0611FAF4D220E Validity Not Before: May 21 06:40:31 2026 GMT Not After : May 28 06:40:31 2026 GMT Subject: CN=6a0ea8e0-eb5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0c:8c:6e:28:11:b5:55:82:1d:cc:7e:57:8b: 40:a4:16:dd:a3:6b:73:d8:90:f6:36:ad:49:af:2c: c9:f1:23:cf:b2:7a:83:cd:e2:9d:41:96:3f:f6:70: 3a:55:cd:fb:8b:46:9c:10:aa:70:15:31:77:44:1a: a7:84:d6:11:74:bf:63:f9:2c:b8:ec:0d:7a:8d:7f: 9f:06:a2:f0:4f:c4:47:b5:1f:48:42:56:a4:6e:f8: f0:15:4d:a7:bf:d2:df:0c:0f:11:df:d5:30:40:27: 5a:9b:93:e4:d7:d7:28:40:89:bf:22:9a:21:31:36: dc:f2:eb:c9:1d:c6:ab:bb:b7:31:1b:9a:5e:a8:0d: f0:d0:d6:09:09:27:cc:86:d3:00:d9:64:f7:45:e0: 35:f8:58:94:33:c1:9c:92:3e:ea:9a:7f:2e:86:33: a7:a5:77:1e:5f:00:eb:97:a5:76:13:b9:95:5d:f6: a3:1a:d5:60:cf:c8:be:de:a4:74:c5:dd:a4:ad:8c: 77:35:33:c5:7c:da:28:4d:be:e0:b7:59:1d:4b:40: 04:f6:e0:a8:46:3b:7d:a2:4c:ce:8a:71:ef:b2:93: dc:d6:42:d5:17:60:b8:60:1d:18:45:a1:60:23:31: 26:1d:c0:5b:a6:c1:a3:a8:67:68:1b:7b:68:48:ce: cd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:16:BF:E8:27:73:73:BF:FD:E7:94:25:F5:DF:DE:D8:61:B6:C7:12 X509v3 Authority Key Identifier: keyid:2A:B2:43:2C:3A:D5:12:8E:D7:3E:99:C4:60:D0:61:1F:AF:4D:22:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KrJDLDrVEo7XPpnEYNBhH69NIg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:53:30:56:66:a7:0d:f9:2d:24:c7:f9:4d:3b:41:5e:af:e3: 5b:ad:7b:9b:e4:9e:6c:04:40:2b:81:2d:dd:b1:3a:f4:9a:cc: 4c:36:68:79:78:c0:d2:45:a2:05:44:54:3a:dd:a1:be:7b:f5: 02:a3:97:2e:d1:8f:bd:cd:55:c0:30:f2:5c:f3:e6:9b:a0:4e: 08:6b:d8:38:6a:11:7a:24:ed:2a:c0:32:be:b9:55:ff:50:04: e4:83:0f:11:ab:fc:65:bd:57:38:ee:b1:7a:74:64:f2:20:4a: 9f:01:af:4e:73:ab:45:c8:9c:12:50:d8:9c:d0:e4:46:47:6b: 9a:4d:a4:6e:09:36:47:d4:0b:e3:f7:78:c5:a7:b6:2d:02:cc: d2:1d:5e:39:6b:c8:9a:eb:d7:d5:05:69:7e:f1:4a:60:a8:fb: cd:ce:cf:07:15:76:0b:1f:73:2e:75:a4:fe:15:c4:1e:fc:a1: 67:95:e0:d5:71:15:94:0f:7b:c9:d1:00:e8:a0:61:a8:c9:75: f0:6c:0f:40:b8:87:85:64:8d:23:ca:51:92:2a:cf:16:4b:a4: 8a:b9:56:59:77:f7:47:39:60:a0:7f:86:2e:a6:c8:53:54:f8: 40:78:ab:5d:18:f9:ce:40:93:e6:6b:9b:ad:4e:6e:85:d4:72: b3:26:79:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM4NTAxMTAvBgNVBAUTKDJBQjI0MzJDM0FENTEyOEVENzNFOTlDNDYwRDA2MTFG QUY0RDIyMEUwHhcNMjYwNTIxMDY0MDMxWhcNMjYwNTI4MDY0MDMxWjAYMRYwFAYD VQQDEw02YTBlYThlMC1lYjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQyMbigRtVWCHcx+V4tApBbdo2tz2JD2Nq1JryzJ8SPPsnqDzeKdQZY/9nA6 Vc37i0acEKpwFTF3RBqnhNYRdL9j+Sy47A16jX+fBqLwT8RHtR9IQlakbvjwFU2n v9LfDA8R39UwQCdam5Pk19coQIm/IpohMTbc8uvJHcaru7cxG5peqA3w0NYJCSfM htMA2WT3ReA1+FiUM8Gckj7qmn8uhjOnpXceXwDrl6V2E7mVXfajGtVgz8i+3qR0 xd2krYx3NTPFfNooTb7gt1kdS0AE9uCoRjt9okzOinHvspPc1kLVF2C4YB0YRaFg IzEmHcBbpsGjqGdoG3toSM7NlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEEWv+gn c3O//eeUJfXf3thhtscSMB8GA1UdIwQYMBaAFCqyQyw61RKO1z6ZxGDQYR+vTSIO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Mzg1MC83QjNCMzdENDAx ODYxMUYwQjA1QjRDNTlDNEY5QUUwMi9LckpETERyVkVvN1hQcG5FWU5CaEg2OU5J ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tySkRMRHJWRW83WFBwbkVZTkJoSDY5TklnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Mzg1MC83QjNCMzdENDAxODYxMUYwQjA1QjRDNTlDNEY5QUUwMi9LckpETERyVkVv N1hQcG5FWU5CaEg2OU5JZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsVMwVmanDfktJMf5TTtBXq/jW617m+SebARAK4Et3bE69JrMTDZoeXjA0kWi BURUOt2hvnv1AqOXLtGPvc1VwDDyXPPmm6BOCGvYOGoReiTtKsAyvrlV/1AE5IMP Eav8Zb1XOO6xenRk8iBKnwGvTnOrRcicElDYnNDkRkdrmk2kbgk2R9QL4/d4xae2 LQLM0h1eOWvImuvX1QVpfvFKYKj7zc7PBxV2Cx9zLnWk/hXEHvyhZ5Xg1XEVlA97 ydEA6KBhqMl18GwPQLiHhWSNI8pRkirPFkukirlWWXf3RzlgoH+GLqbIU1T4QHir XRj5zkCT5mubrU5uhdRysyZ5pA== -----END CERTIFICATE-----Generated at Thu May 21 09:31:09 2026 by rpki-client