$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft File: KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft (raw, json) Hash identifier: ggSI2KBmKL0aTUfmo22dDNoa6JRUm3repai7njQBTew= Subject key identifier: 0E:8C:41:A8:E3:99:22:6C:07:6A:C3:2F:35:7B:EC:33:DC:BD:9D:E8 Authority key identifier: 28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33 Certificate issuer: /CN=A915FE9F/serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933 Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft Manifest number: BB Signing time: Thu 21 May 2026 07:16:08 +0000 Manifest this update: Thu 21 May 2026 07:16:07 +0000 Manifest next update: Thu 28 May 2026 07:16:07 +0000 Files and hashes: 1: KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl (hash: CgHKu4JCALW5aFIElL1TTvH0MfTlPOjOPOCsye2M2TA=) 2: BB593434FF3611F08F27381B8BEE528E.roa (hash: Qapce3etNilI3Pu8k6Dr7+sFyVw5LEh0sJqZNNrb7as=) 3: BA44C5C2FF3611F08F27381B8BEE528E.roa (hash: xTRiGomUlvw36ULHa1gsy9cQNKWIJENbJoJ/xOZCR7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 07:16:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FE9F, serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933 Validity Not Before: May 21 07:16:07 2026 GMT Not After : May 28 07:16:07 2026 GMT Subject: CN=6a0eb138-0195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9b:83:a2:47:cf:a8:2e:36:bb:b9:c0:3c:2d: 1d:d0:8f:05:5b:04:87:10:7a:89:cf:fa:10:09:f0: 5f:22:04:f4:17:d1:3a:05:74:39:93:19:75:f9:34: b0:c8:1f:8b:10:56:7e:50:14:56:7d:c2:d1:58:66: a4:42:46:74:8d:05:46:bd:de:44:5b:31:37:7d:4a: 33:4f:fd:be:56:49:70:5b:fb:b7:b5:c6:58:5b:08: d5:63:26:87:3e:a5:2f:90:27:dc:e5:3d:34:14:93: 89:3d:89:e1:93:b2:61:f4:fe:70:d7:96:6d:9d:74: 18:88:bb:ae:6e:af:f0:41:2f:e5:55:12:5a:4b:55: 45:5e:cd:a4:ba:0b:7d:a2:59:5e:28:89:44:d9:29: e5:9a:ca:5f:09:d2:47:d3:23:9e:6b:ba:79:d5:c9: 8c:f1:4d:2e:b0:bf:09:82:cb:b8:d3:94:00:20:15: dc:70:db:c8:fa:f1:f5:9b:79:42:64:ee:79:96:18: b1:27:4b:84:3f:2a:f8:7a:3b:71:43:4f:c8:f5:66: 08:ed:a0:3f:79:f5:ff:0f:f4:70:78:6d:7d:24:02: 2d:9d:08:09:bf:f6:f2:63:b9:a0:dd:e2:49:98:be: f1:28:98:19:3a:47:e6:6d:24:9f:9e:bd:05:e5:60: 35:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8C:41:A8:E3:99:22:6C:07:6A:C3:2F:35:7B:EC:33:DC:BD:9D:E8 X509v3 Authority Key Identifier: keyid:28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:db:1f:98:3b:2d:cd:9e:44:7f:64:82:80:31:f8:07:08:20: 36:a4:ea:7b:3c:55:6d:3f:e6:1b:f8:e0:72:40:bf:7e:75:bd: 7a:8b:93:58:aa:cb:b4:d3:cb:25:1a:11:db:b0:92:81:2c:ea: db:db:d8:57:ee:47:13:14:29:1e:3a:68:ff:1a:59:78:c9:74: 92:c2:43:b2:19:52:9a:b0:e9:de:36:d8:9e:50:11:5f:e1:e1: db:30:6a:49:cd:e8:54:ca:54:d8:93:90:f5:6d:7d:4b:99:25: 27:56:db:15:8f:88:7a:1f:e1:1d:67:48:90:06:a3:7f:dd:52: 90:13:d2:c9:dc:a6:59:2a:4d:5b:17:a2:b1:cb:21:2a:cc:d2: e3:f8:f0:10:75:aa:3b:a7:85:6e:19:51:85:9b:db:fe:25:90: 67:d3:f8:a0:ca:66:c4:1b:84:4a:c9:e9:7c:03:29:3b:7f:f2: 46:04:e2:67:86:b8:b0:f8:a7:7d:bb:f1:94:9c:e6:34:aa:0a: 85:1a:b6:ff:3d:d6:18:d6:65:f0:5e:54:ce:c2:53:f2:b5:8b: 55:6e:3e:1a:b3:4a:98:15:4c:98:ed:f8:5a:59:04:a5:59:59: d8:bb:77:87:f9:f0:dc:cd:b1:14:80:f0:8b:9b:1d:1f:a0:12: 39:37:ec:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZFOUYxMTAvBgNVBAUTKDI4REFEOEQ0Q0M2Rjc0MEZBMDAwRDQzNjg2OUFFMEYx NzZFQUU5MzMwHhcNMjYwNTIxMDcxNjA3WhcNMjYwNTI4MDcxNjA3WjAYMRYwFAYD VQQDEw02YTBlYjEzOC0wMTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA35uDokfPqC42u7nAPC0d0I8FWwSHEHqJz/oQCfBfIgT0F9E6BXQ5kxl1+TSw yB+LEFZ+UBRWfcLRWGakQkZ0jQVGvd5EWzE3fUozT/2+VklwW/u3tcZYWwjVYyaH PqUvkCfc5T00FJOJPYnhk7Jh9P5w15ZtnXQYiLuubq/wQS/lVRJaS1VFXs2kugt9 olleKIlE2SnlmspfCdJH0yOea7p51cmM8U0usL8Jgsu405QAIBXccNvI+vH1m3lC ZO55lhixJ0uEPyr4ejtxQ0/I9WYI7aA/efX/D/RweG19JAItnQgJv/byY7mg3eJJ mL7xKJgZOkfmbSSfnr0F5WA1SwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA6MQajj mSJsB2rDLzV77DPcvZ3oMB8GA1UdIwQYMBaAFCja2NTMb3QPoADUNoaa4PF26ukz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkU5Ri8yMzAyNzEyNDUx NzAxMUYwQjlEQkNCODdDNEY5QUUwMi9LTnJZMU14dmRBLWdBTlEyaHByZzhYYnE2 VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tOclkxTXh2ZEEtZ0FOUTJocHJnOFhicTZUTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkU5Ri8yMzAyNzEyNDUxNzAxMUYwQjlEQkNCODdDNEY5QUUwMi9LTnJZMU14dmRB LWdBTlEyaHByZzhYYnE2VE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMtsfmDstzZ5Ef2SCgDH4BwggNqTqezxVbT/mG/jgckC/fnW9eouTWKrLtNPL JRoR27CSgSzq29vYV+5HExQpHjpo/xpZeMl0ksJDshlSmrDp3jbYnlARX+Hh2zBq Sc3oVMpU2JOQ9W19S5klJ1bbFY+Ieh/hHWdIkAajf91SkBPSydymWSpNWxeiscsh KszS4/jwEHWqO6eFbhlRhZvb/iWQZ9P4oMpmxBuESsnpfAMpO3/yRgTiZ4a4sPin fbvxlJzmNKoKhRq2/z3WGNZl8F5UzsJT8rWLVW4+GrNKmBVMmO34WlkEpVlZ2Lt3 h/nw3M2xFIDwi5sdH6ASOTfsEg== -----END CERTIFICATE-----Generated at Thu May 21 13:24:33 2026 by rpki-client