$ rpki-client -vvf rpki.apnic.net/member_repository/A9188D0F/F359CF9224CF11F1B02C88C1A9833773/kaNAPNs-fi5T9OZhBZESgyz5-M4.mft File: kaNAPNs-fi5T9OZhBZESgyz5-M4.mft (raw, json) Hash identifier: VYRztjc/BqZ5lUA0twuWjZ6pd0WXiOJWYCpL0KkCiWk= Subject key identifier: 6B:2C:6E:56:46:01:00:7E:BC:16:E6:AC:CF:C9:E3:4C:C1:F6:41:A6 Authority key identifier: 91:A3:40:3C:DB:3E:7E:2E:53:F4:E6:61:05:91:12:83:2C:F9:F8:CE Certificate issuer: /CN=A9188D0F/serialNumber=91A3403CDB3E7E2E53F4E661059112832CF9F8CE Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaNAPNs-fi5T9OZhBZESgyz5-M4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188D0F/F359CF9224CF11F1B02C88C1A9833773/kaNAPNs-fi5T9OZhBZESgyz5-M4.mft Manifest number: 20 Signing time: Tue 19 May 2026 08:45:14 +0000 Manifest this update: Tue 19 May 2026 08:45:14 +0000 Manifest next update: Tue 26 May 2026 08:45:14 +0000 Files and hashes: 1: kaNAPNs-fi5T9OZhBZESgyz5-M4.crl (hash: 9lo/Wk0CiJll4XIdP5KXX8UZSVmgJUC5uof8raFrre4=) 2: 40244FE624D011F1874701DAA9833773.roa (hash: BvmoKK2bVrC8ISg+I54hyLICIuNcMLRT4N3gcv8pi4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188D0F/F359CF9224CF11F1B02C88C1A9833773/kaNAPNs-fi5T9OZhBZESgyz5-M4.crl rsync://rpki.apnic.net/member_repository/A9188D0F/F359CF9224CF11F1B02C88C1A9833773/kaNAPNs-fi5T9OZhBZESgyz5-M4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaNAPNs-fi5T9OZhBZESgyz5-M4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188D0F, serialNumber=91A3403CDB3E7E2E53F4E661059112832CF9F8CE Validity Not Before: May 19 08:45:14 2026 GMT Not After : May 26 08:45:14 2026 GMT Subject: CN=6a0c231a-401c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2d:bd:b6:c7:9c:d7:9a:c8:1e:f1:f1:98:fb: a7:12:d4:73:96:c8:75:3e:6e:c6:3e:cc:e2:e2:a3: 8b:fb:b9:b4:ac:c7:ea:20:7a:b3:01:d5:0d:f4:92: d5:5c:db:30:7c:5a:0e:11:fc:d9:72:94:f2:29:dc: 06:fd:1c:3e:52:3c:1b:7a:d6:8e:fb:c8:08:bd:ba: 25:10:2d:bd:70:7e:c4:d0:a5:9e:b2:0b:03:cc:c1: f1:4e:62:6d:5d:1b:71:3c:da:f3:6f:5b:6e:88:ff: bd:fb:fc:41:a7:a8:ea:01:40:81:e1:1a:aa:6c:6e: 59:92:30:6b:f8:a2:85:88:61:31:93:2f:98:0a:f7: 9d:3a:c4:3d:f8:f6:66:51:fc:24:94:84:14:42:fd: b0:a2:e1:ed:5a:b8:b5:d3:9a:7d:6e:92:11:fa:9a: b7:8c:01:9c:26:f8:80:fc:51:48:45:57:27:c2:de: 2d:8e:be:d0:72:f3:c1:12:f4:33:7a:c1:57:48:4e: 01:3c:76:1a:cb:89:b8:4e:30:2b:e2:21:b9:61:69: 59:78:57:bb:32:f2:25:84:90:e9:b1:39:c0:9c:ee: 03:91:d4:5f:59:1e:24:bc:bd:ad:c2:d2:37:27:8b: 78:60:f3:27:1b:1c:cc:80:46:a5:0c:b4:f4:2d:27: a6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:2C:6E:56:46:01:00:7E:BC:16:E6:AC:CF:C9:E3:4C:C1:F6:41:A6 X509v3 Authority Key Identifier: keyid:91:A3:40:3C:DB:3E:7E:2E:53:F4:E6:61:05:91:12:83:2C:F9:F8:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188D0F/F359CF9224CF11F1B02C88C1A9833773/kaNAPNs-fi5T9OZhBZESgyz5-M4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaNAPNs-fi5T9OZhBZESgyz5-M4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D0F/F359CF9224CF11F1B02C88C1A9833773/kaNAPNs-fi5T9OZhBZESgyz5-M4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:5f:28:cf:a7:fa:92:72:be:81:58:31:bc:78:ac:e5:6d:7c: e5:e3:ff:7b:f4:65:b8:b1:c9:8f:f6:d0:35:73:be:84:0e:57: 74:69:f6:74:16:db:86:3e:88:a4:4b:05:4e:4b:12:13:74:fd: 0f:3e:47:1a:e9:40:b2:e0:a7:c1:91:a5:8f:86:ca:0f:df:ff: 5e:aa:23:5e:82:e3:c7:09:fc:1d:ee:b6:c7:9f:6c:3d:92:3b: 41:67:78:44:9e:cd:c3:32:54:08:03:e2:80:a2:ba:2d:d2:e1: 3c:ed:7d:9c:11:c8:16:df:24:47:21:fa:46:a8:a4:9f:79:a8: b5:da:e5:50:0c:ed:d9:95:ee:ee:91:82:10:7e:23:19:c5:5d: 6e:5b:b7:b0:21:03:51:f9:bb:d5:85:bf:83:80:92:e3:17:ca: f0:04:34:68:61:60:20:92:bd:b8:25:2e:34:05:49:bc:21:3a: 7d:6e:6e:89:67:b3:fc:22:0b:0e:61:4c:55:27:e5:a6:8f:af: c6:64:d9:dd:2c:c5:f5:16:cc:7b:ca:8d:0b:be:19:2a:da:3f: 30:bd:84:0f:a4:13:61:9b:5a:ab:e4:a4:57:82:2f:21:b9:5d: 37:0e:cd:26:80:15:6d:55:6f:2f:a1:fd:ed:5a:f7:53:54:98: c3:32:a8:cb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OEQwRjExMC8GA1UEBRMoOTFBMzQwM0NEQjNFN0UyRTUzRjRFNjYxMDU5MTEyODMy Q0Y5RjhDRTAeFw0yNjA1MTkwODQ1MTRaFw0yNjA1MjYwODQ1MTRaMBgxFjAUBgNV BAMTDTZhMGMyMzFhLTQwMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJLb22x5zXmsge8fGY+6cS1HOWyHU+bsY+zOLio4v7ubSsx+ogerMB1Q30ktVc 2zB8Wg4R/NlylPIp3Ab9HD5SPBt61o77yAi9uiUQLb1wfsTQpZ6yCwPMwfFOYm1d G3E82vNvW26I/737/EGnqOoBQIHhGqpsblmSMGv4ooWIYTGTL5gK9506xD349mZR /CSUhBRC/bCi4e1auLXTmn1ukhH6mreMAZwm+ID8UUhFVyfC3i2OvtBy88ES9DN6 wVdITgE8dhrLibhOMCviIblhaVl4V7sy8iWEkOmxOcCc7gOR1F9ZHiS8va3C0jcn i3hg8ycbHMyARqUMtPQtJ6ZhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUayxuVkYB AH68Fuasz8njTMH2QaYwHwYDVR0jBBgwFoAUkaNAPNs+fi5T9OZhBZESgyz5+M4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4RDBGL0YzNTlDRjkyMjRD RjExRjFCMDJDODhDMUE5ODMzNzczL2thTkFQTnMtZmk1VDlPWmhCWkVTZ3l6NS1N NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva2FOQVBOcy1maTVUOU9aaEJaRVNneXo1LU00LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4 RDBGL0YzNTlDRjkyMjRDRjExRjFCMDJDODhDMUE5ODMzNzczL2thTkFQTnMtZmk1 VDlPWmhCWkVTZ3l6NS1NNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAVXyjPp/qScr6BWDG8eKzlbXzl4/979GW4scmP9tA1c76EDld0afZ0FtuGPoik SwVOSxITdP0PPkca6UCy4KfBkaWPhsoP3/9eqiNeguPHCfwd7rbHn2w9kjtBZ3hE ns3DMlQIA+KAorot0uE87X2cEcgW3yRHIfpGqKSfeai12uVQDO3Zle7ukYIQfiMZ xV1uW7ewIQNR+bvVhb+DgJLjF8rwBDRoYWAgkr24JS40BUm8ITp9bm6JZ7P8IgsO YUxVJ+Wmj6/GZNndLMX1Fsx7yo0Lvhkq2j8wvYQPpBNhm1qr5KRXgi8huV03Ds0m gBVtVW8vof3tWvdTVJjDMqjL -----END CERTIFICATE-----Generated at Thu May 21 10:39:30 2026 by rpki-client