$ rpki-client -vvf rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft File: kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft (raw, json) Hash identifier: VIjSdzBkzaUjBf0CY7ICACfFJzBs1CEbp7IQ440uIKM= Subject key identifier: 69:78:A3:F7:5B:E7:53:C4:1B:5D:72:A6:E6:24:2A:E0:29:0D:60:2A Authority key identifier: 90:BD:1D:F1:3A:99:1C:31:F1:18:4D:51:1A:F3:03:16:FC:00:21:02 Certificate issuer: /CN=A91A014A/serialNumber=90BD1DF13A991C31F1184D511AF30316FC002102 Certificate serial: 0292 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft Manifest number: 028B Signing time: Thu 21 May 2026 01:51:10 +0000 Manifest this update: Thu 21 May 2026 01:51:09 +0000 Manifest next update: Thu 28 May 2026 01:51:09 +0000 Files and hashes: 1: kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl (hash: TL5keSP89VGibpgkX90Y4YAUcsFmxNfmLG6ep25P5lM=) 2: 203FA37E750611ED95126872C4F9AE02.roa (hash: 1UhMMEwrSvxSK5SenyWo1EuSLvOXjxy88H+VRidBB7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 01:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 658 (0x292) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A014A, serialNumber=90BD1DF13A991C31F1184D511AF30316FC002102 Validity Not Before: May 21 01:51:09 2026 GMT Not After : May 28 01:51:09 2026 GMT Subject: CN=6a0e650e-7a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:68:6e:2f:5c:c6:63:d9:5d:ff:83:ed:0a:ba: 65:30:25:89:7c:24:91:81:3b:20:eb:49:bd:f1:a1: 26:44:d6:da:e9:91:a5:9b:a2:9e:d5:a7:47:93:92: 1d:93:d8:a4:2c:e4:b2:1c:5b:61:4b:04:b3:f4:db: 1f:a3:42:f2:91:40:81:cd:7e:02:46:33:a0:30:19: e5:3d:fc:5a:7c:c6:a4:c2:5c:48:78:62:57:82:b9: 6c:ef:6e:20:8f:f4:b1:5e:1f:27:f6:8d:4b:e7:9c: ee:55:14:4d:23:4b:00:5a:fb:fa:6a:bc:b7:f9:35: 7a:9d:9c:27:c3:1d:2b:e0:ba:66:ee:40:d7:b2:64: 2f:a6:d4:07:ab:f8:f8:cc:5c:6b:75:51:02:10:0e: 8f:b9:22:3c:da:b8:4a:8f:dc:93:54:91:b8:ef:ce: 5f:62:3d:6b:a5:25:97:21:b1:e2:52:18:2e:d8:db: 8f:b6:e1:8b:85:77:9f:2e:81:f2:d2:8f:92:6c:d3: 24:1f:57:61:9c:9f:a7:a6:e4:52:6c:51:23:59:a2: ea:4a:f3:78:0a:ac:1f:69:ef:4a:ba:9e:05:84:98: b9:24:fe:6b:bd:7e:83:aa:80:f7:9b:8f:f6:e0:dc: 19:80:bf:83:68:6c:fe:cd:d8:18:69:13:53:5d:23: e0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:78:A3:F7:5B:E7:53:C4:1B:5D:72:A6:E6:24:2A:E0:29:0D:60:2A X509v3 Authority Key Identifier: keyid:90:BD:1D:F1:3A:99:1C:31:F1:18:4D:51:1A:F3:03:16:FC:00:21:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kL0d8TqZHDHxGE1RGvMDFvwAIQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A014A/CC07DAB674FF11EDAB9C9075C4F9AE02/kL0d8TqZHDHxGE1RGvMDFvwAIQI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:e2:e1:d0:dd:80:71:76:31:d6:b1:6f:54:fd:b3:61:74:8f: 6d:8b:b0:99:23:b4:3d:3a:fb:4a:81:f6:45:2c:0c:a3:00:c7: ec:3a:1b:3a:7b:a8:89:ca:a0:f8:b0:fc:3e:4d:fe:21:4e:32: 1f:03:d7:d3:91:1d:5f:1f:2b:e0:f1:d2:6c:3b:f1:3a:3b:6d: 49:61:bc:3a:2a:3d:0e:3e:ec:03:9b:50:25:6d:d2:ab:dd:61: be:cf:e6:46:0f:7d:49:23:7e:ae:bd:0e:be:98:fb:3c:a6:0e: 66:b4:49:e5:ae:98:9b:95:76:51:05:c7:a2:e2:db:15:89:ed: 0b:23:6f:46:49:8e:6f:24:0d:5c:51:33:83:d9:3a:0c:f0:45: 2a:67:fb:b8:56:5e:24:ad:f2:d9:b2:8d:41:9c:dc:e1:04:c0: 62:da:74:c7:f4:d2:61:08:78:c1:28:da:2e:53:57:a3:2a:d8: 89:d7:ee:38:20:aa:96:46:d9:36:d0:22:45:59:b2:a2:51:d3: 92:81:e0:17:02:96:ae:50:74:3b:88:6c:bc:c4:16:f5:46:fe: f7:65:c1:0e:a6:a9:5c:c5:3c:99:ac:f4:a7:a1:79:ca:ab:47: 63:b6:b2:7f:31:1e:e9:dd:7e:2c:ea:21:34:b0:ce:83:47:d3: 10:e7:5e:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAxNEExMTAvBgNVBAUTKDkwQkQxREYxM0E5OTFDMzFGMTE4NEQ1MTFBRjMwMzE2 RkMwMDIxMDIwHhcNMjYwNTIxMDE1MTA5WhcNMjYwNTI4MDE1MTA5WjAYMRYwFAYD VQQDEw02YTBlNjUwZS03YTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmhuL1zGY9ld/4PtCrplMCWJfCSRgTsg60m98aEmRNba6ZGlm6Ke1adHk5Id k9ikLOSyHFthSwSz9Nsfo0LykUCBzX4CRjOgMBnlPfxafMakwlxIeGJXgrls724g j/SxXh8n9o1L55zuVRRNI0sAWvv6ary3+TV6nZwnwx0r4Lpm7kDXsmQvptQHq/j4 zFxrdVECEA6PuSI82rhKj9yTVJG4785fYj1rpSWXIbHiUhgu2NuPtuGLhXefLoHy 0o+SbNMkH1dhnJ+npuRSbFEjWaLqSvN4Cqwfae9Kup4FhJi5JP5rvX6DqoD3m4/2 4NwZgL+DaGz+zdgYaRNTXSPgrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGl4o/db 51PEG11ypuYkKuApDWAqMB8GA1UdIwQYMBaAFJC9HfE6mRwx8RhNURrzAxb8ACEC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDE0QS9DQzA3REFCNjc0 RkYxMUVEQUI5QzkwNzVDNEY5QUUwMi9rTDBkOFRxWkhESHhHRTFSR3ZNREZ2d0FJ UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tMMGQ4VHFaSERIeEdFMVJHdk1ERnZ3QUlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDE0QS9DQzA3REFCNjc0RkYxMUVEQUI5QzkwNzVDNEY5QUUwMi9rTDBkOFRxWkhE SHhHRTFSR3ZNREZ2d0FJUUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn+Lh0N2AcXYx1rFvVP2zYXSPbYuwmSO0PTr7SoH2RSwMowDH7DobOnuoicqg +LD8Pk3+IU4yHwPX05EdXx8r4PHSbDvxOjttSWG8Oio9Dj7sA5tQJW3Sq91hvs/m Rg99SSN+rr0Ovpj7PKYOZrRJ5a6Ym5V2UQXHouLbFYntCyNvRkmObyQNXFEzg9k6 DPBFKmf7uFZeJK3y2bKNQZzc4QTAYtp0x/TSYQh4wSjaLlNXoyrYidfuOCCqlkbZ NtAiRVmyolHTkoHgFwKWrlB0O4hsvMQW9Ub+92XBDqapXMU8maz0p6F5yqtHY7ay fzEe6d1+LOohNLDOg0fTEOdesw== -----END CERTIFICATE-----Generated at Thu May 21 10:14:27 2026 by rpki-client