$ rpki-client -vvf rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft File: klwudR4T9Usqn5-j2mUO2423zy0.mft (raw, json) Hash identifier: fIT6dVhVuJE9HjWUfC6BFAfQHfs/bRu4Tw2iamaS+FY= Subject key identifier: BB:8D:E1:85:6D:5F:92:99:93:E5:C3:D0:C8:A1:60:32:E2:67:A1:6A Authority key identifier: 92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D Certificate issuer: /CN=A918B9B8/serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D Certificate serial: 0A95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft Manifest number: 0A8D Signing time: Wed 20 May 2026 19:34:03 +0000 Manifest this update: Wed 20 May 2026 19:34:03 +0000 Manifest next update: Wed 27 May 2026 19:34:03 +0000 Files and hashes: 1: klwudR4T9Usqn5-j2mUO2423zy0.crl (hash: 3VuVZYd9t+PaAzYZ9DH4+miveosmFpRKf+x6Dy3rJfY=) 2: 275694947E2111EABA287C6DC4F9AE02.roa (hash: pLFtJM8YCayRSQjnW3sFmWo+oKdAsNVRNoN1xNfin+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 19:34:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2709 (0xa95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B9B8, serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D Validity Not Before: May 20 19:34:03 2026 GMT Not After : May 27 19:34:03 2026 GMT Subject: CN=6a0e0cab-e5a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:42:ee:67:ea:a9:14:b5:35:21:50:34:42:96: de:0a:2a:9e:55:61:c6:2d:2a:fd:d3:9a:72:15:ba: 7b:70:0d:8f:cf:30:1b:5e:5b:da:4b:35:af:19:da: 94:f6:53:53:76:21:db:ff:f8:7f:9c:7d:a2:f0:db: 57:9d:ac:8d:62:f1:b8:42:cc:24:44:2f:e3:d3:8e: 05:39:24:84:2e:ca:6b:88:b7:f8:86:22:16:5e:6a: da:21:6f:b1:99:a1:12:28:3b:c1:a7:97:ba:99:d5: 46:b6:59:e6:21:65:9c:55:24:ab:78:b5:99:f1:fe: 1c:c1:76:63:13:d6:af:ce:8e:98:5c:e1:12:55:51: c9:dd:ab:c2:3d:b6:25:f8:2a:96:a6:62:7d:bc:c5: b5:40:f2:bc:ec:5e:fc:88:61:0f:d8:f3:4f:39:ae: 42:8f:4d:9b:a1:d4:28:b1:41:57:10:09:37:a9:30: 7a:8b:96:55:90:40:fd:f7:e0:f7:54:fb:b2:22:d6: 80:fa:7f:96:88:26:82:6d:f6:05:87:85:51:c3:85: 9d:6a:82:49:ac:0e:d6:96:6a:d9:85:60:c7:69:27: 87:37:de:d2:7a:74:20:4d:70:5c:97:83:5d:c6:11: 3f:48:14:dc:69:78:d8:1c:07:b0:1a:e0:43:9f:89: f4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8D:E1:85:6D:5F:92:99:93:E5:C3:D0:C8:A1:60:32:E2:67:A1:6A X509v3 Authority Key Identifier: keyid:92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:79:58:7d:b4:cc:be:20:71:45:73:90:8f:25:3f:bc:6c:4f: af:42:c6:6d:8d:59:7b:46:fa:15:7c:e0:9f:17:ef:04:33:8a: ac:4a:c6:bb:aa:fb:e7:9c:c0:b6:d4:87:4b:5c:42:7e:1c:f3: 97:8a:75:c2:36:7a:78:de:91:42:a8:80:d3:d4:86:98:3a:0b: 23:7d:08:02:d6:52:57:a4:26:d7:9d:3c:50:f9:d0:19:29:2c: 2f:66:f4:92:bc:54:c1:04:cd:0a:c8:67:3a:7a:35:94:15:2c: 70:21:ef:99:52:51:e9:5a:c0:95:d1:fd:b0:bd:b3:9b:46:fa: ad:f7:2a:e4:d4:66:e9:1c:45:5b:b7:0c:c4:2f:68:90:4a:7f: 0d:fd:5b:a4:c5:4a:63:1f:c2:63:8d:e7:b8:6a:ba:ed:5f:7e: 60:fe:3b:45:c9:d5:d6:bb:23:73:28:32:c8:9c:06:9f:6f:92: 4b:62:fa:8a:fa:90:05:62:aa:80:da:33:67:05:8f:23:7c:0b: e4:e2:e6:15:fa:ff:86:4b:25:e8:5f:fd:dd:af:be:58:85:67: f9:ce:1b:b3:95:13:a4:2f:b6:c1:7e:95:2b:bb:b7:5a:22:b5: 1e:02:1e:82:6d:b9:43:ef:bb:33:c0:0a:6d:57:09:61:ce:8b: a5:14:20:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI5QjgxMTAvBgNVBAUTKDkyNUMyRTc1MUUxM0Y1NEIyQTlGOUZBM0RBNjUwRURC OERCN0NGMkQwHhcNMjYwNTIwMTkzNDAzWhcNMjYwNTI3MTkzNDAzWjAYMRYwFAYD VQQDEw02YTBlMGNhYi1lNWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArELuZ+qpFLU1IVA0QpbeCiqeVWHGLSr905pyFbp7cA2PzzAbXlvaSzWvGdqU 9lNTdiHb//h/nH2i8NtXnayNYvG4QswkRC/j044FOSSELspriLf4hiIWXmraIW+x maESKDvBp5e6mdVGtlnmIWWcVSSreLWZ8f4cwXZjE9avzo6YXOESVVHJ3avCPbYl +CqWpmJ9vMW1QPK87F78iGEP2PNPOa5Cj02bodQosUFXEAk3qTB6i5ZVkED99+D3 VPuyItaA+n+WiCaCbfYFh4VRw4WdaoJJrA7WlmrZhWDHaSeHN97SenQgTXBcl4Nd xhE/SBTcaXjYHAewGuBDn4n0uwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLuN4YVt X5KZk+XD0MihYDLiZ6FqMB8GA1UdIwQYMBaAFJJcLnUeE/VLKp+fo9plDtuNt88t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjlCOC8zREU5MDYwMjdF MjAxMUVBODQ2RjIzNkRDNEY5QUUwMi9rbHd1ZFI0VDlVc3FuNS1qMm1VTzI0MjN6 eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tsd3VkUjRUOVVzcW41LWoybVVPMjQyM3p5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjlCOC8zREU5MDYwMjdFMjAxMUVBODQ2RjIzNkRDNEY5QUUwMi9rbHd1ZFI0VDlV c3FuNS1qMm1VTzI0MjN6eTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT3lYfbTMviBxRXOQjyU/vGxPr0LGbY1Ze0b6FXzgnxfvBDOKrErGu6r755zA ttSHS1xCfhzzl4p1wjZ6eN6RQqiA09SGmDoLI30IAtZSV6Qm1508UPnQGSksL2b0 krxUwQTNCshnOno1lBUscCHvmVJR6VrAldH9sL2zm0b6rfcq5NRm6RxFW7cMxC9o kEp/Df1bpMVKYx/CY43nuGq67V9+YP47RcnV1rsjcygyyJwGn2+SS2L6ivqQBWKq gNozZwWPI3wL5OLmFfr/hksl6F/93a++WIVn+c4bs5UTpC+2wX6VK7u3WiK1HgIe gm25Q++7M8AKbVcJYc6LpRQg/g== -----END CERTIFICATE-----Generated at Thu May 21 10:29:10 2026 by rpki-client