$ rpki-client -vvf rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft File: f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft (raw, json) Hash identifier: yVT7fGG7A9EVWBAG3qCm4Jz5mVz52F3SmJqvw6vJ/gg= Subject key identifier: 72:E1:C8:78:53:DF:75:07:09:8B:89:FE:61:B6:C0:84:DB:F6:27:69 Authority key identifier: 7F:49:35:89:5C:2D:6C:B6:2C:41:75:C4:8E:6E:D9:5D:C1:68:19:7E Certificate issuer: /CN=A9153F90/serialNumber=7F4935895C2D6CB62C4175C48E6ED95DC168197E Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft Manifest number: 28 Signing time: Thu 21 May 2026 08:55:04 +0000 Manifest this update: Thu 21 May 2026 08:55:04 +0000 Manifest next update: Thu 28 May 2026 08:55:04 +0000 Files and hashes: 1: f0k1iVwtbLYsQXXEjm7ZXcFoGX4.crl (hash: OYb5tEA2FtwHDk2dlGiARJ/KX64Yqpo4UYrQiqdYgDE=) 2: A1369C781C3B11F1A9F167973A3D8C67.roa (hash: SY4VqkxyGoejCFuLzZISWSny3WC42+Mi6EDjqr/Szpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.crl rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 08:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153F90, serialNumber=7F4935895C2D6CB62C4175C48E6ED95DC168197E Validity Not Before: May 21 08:55:04 2026 GMT Not After : May 28 08:55:04 2026 GMT Subject: CN=6a0ec868-4bb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c6:ed:05:50:82:5e:72:11:59:b5:3f:08:7f: 0f:f0:85:9c:91:ba:85:d6:c8:2a:ac:4a:cd:8c:59: 42:6c:41:46:4e:64:07:22:fe:cc:8c:95:87:05:df: c6:62:43:09:d3:e8:b6:d6:6c:5f:ec:72:ad:e6:fa: 29:b1:59:2f:2a:ae:69:f3:46:7d:b3:27:ec:dc:72: 41:79:34:ed:2a:de:3d:65:c9:8f:61:31:2c:73:f6: 28:83:19:d5:e8:d8:5a:62:76:e1:31:d6:f9:f4:f8: 07:8b:67:b8:6a:c0:5b:c9:c8:f2:9a:f3:87:8d:3b: f4:31:12:25:aa:6d:9d:5f:32:38:24:96:98:a8:47: b5:35:9f:43:25:a7:db:be:8c:c9:89:d5:b1:66:d5: 71:64:fc:47:1d:17:1b:24:87:7e:e1:45:09:22:ec: 44:d2:ef:61:98:ff:bc:aa:06:cb:ec:c5:d0:ce:84: 5f:a2:94:d0:b5:6e:c9:6b:12:83:5a:2d:92:58:ed: 8e:c0:7a:ca:d7:f1:82:97:27:84:f2:37:e5:f2:9b: 4d:81:71:47:cf:67:60:f3:65:22:f8:df:a5:63:a6: fc:22:c9:d4:d1:88:87:e2:d6:a8:ff:d6:28:e2:ba: 94:ea:e2:7e:ff:e1:2e:73:52:dd:f2:3d:a6:68:4c: 30:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E1:C8:78:53:DF:75:07:09:8B:89:FE:61:B6:C0:84:DB:F6:27:69 X509v3 Authority Key Identifier: keyid:7F:49:35:89:5C:2D:6C:B6:2C:41:75:C4:8E:6E:D9:5D:C1:68:19:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:83:ee:d5:2d:e7:b7:e6:c1:fa:97:40:b0:f4:fc:6e:5b:f3: ed:70:4e:ca:69:c9:b0:05:c3:b7:1f:64:15:ee:94:b1:2f:c5: f8:5d:ed:82:c1:c4:9d:37:a4:c5:d9:57:cc:d7:29:03:1a:4b: f5:84:6a:9e:66:06:8b:af:b1:d9:6b:98:12:fa:89:9f:5d:fd: 31:ac:84:a1:18:d5:cc:a6:4a:1a:16:c2:01:42:41:dc:10:ae: 8e:ca:e0:a9:59:a7:25:74:65:0e:a1:e1:6f:ff:4a:83:9b:23: 99:f4:2f:90:25:a2:15:9d:59:e3:a3:d9:02:a6:55:f3:4d:28: de:0e:f0:0f:94:1f:4a:97:c4:c0:2f:3a:1a:9f:36:8e:9e:44: e0:e1:88:11:8b:a7:3c:74:36:de:0c:7e:0d:b7:af:f2:7d:35: ce:56:3b:52:3c:4d:cc:62:de:aa:6d:bf:bd:7b:e1:29:40:13: 5f:81:57:63:68:79:74:d9:0d:b0:5a:39:8a:3d:1b:40:75:04: f7:f6:fa:1b:88:99:c4:26:b1:02:31:51:46:e0:c2:c0:18:68: 0f:ff:42:c5:de:89:8d:89:cf:a4:50:3c:0f:59:51:7c:bc:01: 6a:6c:d0:79:a2:50:e5:e4:e5:40:c5:d7:d5:43:25:01:b6:0b: 08:3d:be:88 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 M0Y5MDExMC8GA1UEBRMoN0Y0OTM1ODk1QzJENkNCNjJDNDE3NUM0OEU2RUQ5NURD MTY4MTk3RTAeFw0yNjA1MjEwODU1MDRaFw0yNjA1MjgwODU1MDRaMBgxFjAUBgNV BAMTDTZhMGVjODY4LTRiYjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLxu0FUIJechFZtT8Ifw/whZyRuoXWyCqsSs2MWUJsQUZOZAci/syMlYcF38Zi QwnT6LbWbF/scq3m+imxWS8qrmnzRn2zJ+zcckF5NO0q3j1lyY9hMSxz9iiDGdXo 2FpiduEx1vn0+AeLZ7hqwFvJyPKa84eNO/QxEiWqbZ1fMjgklpioR7U1n0Mlp9u+ jMmJ1bFm1XFk/EcdFxskh37hRQki7ETS72GY/7yqBsvsxdDOhF+ilNC1bslrEoNa LZJY7Y7AesrX8YKXJ4TyN+Xym02BcUfPZ2DzZSL436VjpvwiydTRiIfi1qj/1iji upTq4n7/4S5zUt3yPaZoTDC9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUcuHIeFPf dQcJi4n+YbbAhNv2J2kwHwYDVR0jBBgwFoAUf0k1iVwtbLYsQXXEjm7ZXcFoGX4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzRjkwL0Y5MTNENTE0MUMz NjExRjE4ODQ3QUIyQjM4M0Q4QzY3L2YwazFpVnd0YkxZc1FYWEVqbTdaWGNGb0dY NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZjBrMWlWd3RiTFlzUVhYRWptN1pYY0ZvR1g0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz RjkwL0Y5MTNENTE0MUMzNjExRjE4ODQ3QUIyQjM4M0Q4QzY3L2YwazFpVnd0YkxZ c1FYWEVqbTdaWGNGb0dYNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB2g+7VLee35sH6l0Cw9PxuW/PtcE7KacmwBcO3H2QV7pSxL8X4Xe2CwcSdN6TF 2VfM1ykDGkv1hGqeZgaLr7HZa5gS+omfXf0xrIShGNXMpkoaFsIBQkHcEK6OyuCp WacldGUOoeFv/0qDmyOZ9C+QJaIVnVnjo9kCplXzTSjeDvAPlB9Kl8TALzoanzaO nkTg4YgRi6c8dDbeDH4Nt6/yfTXOVjtSPE3MYt6qbb+9e+EpQBNfgVdjaHl02Q2w WjmKPRtAdQT39vobiJnEJrECMVFG4MLAGGgP/0LF3omNic+kUDwPWVF8vAFqbNB5 olDl5OVAxdfVQyUBtgsIPb6I -----END CERTIFICATE-----Generated at Thu May 21 12:58:31 2026 by rpki-client