$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft File: kfPcWc0PodJBy3h1fR2qksKsn2A.mft (raw, json) Hash identifier: jCevzhtNWNL2HuPn0QeFxy7IzAXxoIFKnSJPuoDtXNo= Subject key identifier: BD:9A:F3:E1:63:40:C9:89:C0:45:3E:29:66:6A:7F:D8:D4:91:D3:E5 Authority key identifier: 91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60 Certificate issuer: /CN=A91A0432/serialNumber=91F3DC59CD0FA1D241CB78757D1DAA92C2AC9F60 Certificate serial: 0455 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft Manifest number: 044C Signing time: Fri 05 Jun 2026 00:20:34 +0000 Manifest this update: Fri 05 Jun 2026 00:20:34 +0000 Manifest next update: Fri 12 Jun 2026 00:20:34 +0000 Files and hashes: 1: kfPcWc0PodJBy3h1fR2qksKsn2A.crl (hash: fJZ8/upVLXU56IwzNaf2weOo8eKbcRAgCG/4sMO5iKs=) 2: 4114509A597511EFA2B79A84C4F9AE02.roa (hash: xky0bkAGJZiPmJrh1utEauZh7Xc1VAPTEfxwrtpScXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.crl rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1109 (0x455) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0432, serialNumber=91F3DC59CD0FA1D241CB78757D1DAA92C2AC9F60 Validity Not Before: Jun 5 00:20:34 2026 GMT Not After : Jun 12 00:20:34 2026 GMT Subject: CN=6a221652-96a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:20:da:20:2e:e8:a6:03:de:9f:22:83:8c:72: c7:50:02:c5:d0:9d:93:21:5d:6e:ec:a1:00:70:10: c6:54:87:e6:99:d8:7b:45:14:1f:93:6b:4d:57:6e: 86:a8:ec:ca:ac:83:90:79:5b:12:00:7d:97:17:a6: 0a:67:00:e1:9b:7a:1b:13:e8:e8:79:10:a1:0e:83: bf:2b:b4:94:82:79:f7:13:db:be:ac:ba:71:c2:6b: be:47:19:8d:02:e5:d3:2f:22:0b:0c:a2:7e:d5:5e: 73:e5:e5:be:47:8c:67:86:42:6f:47:7a:31:82:d0: 06:c3:ce:c9:76:c9:1f:0d:24:74:00:a7:c8:e2:65: ee:ed:48:db:29:81:e0:cf:66:98:ef:33:7d:87:97: c6:d2:14:8e:36:c0:a8:6e:e7:f4:b7:9d:73:d7:19: 2a:ba:12:3e:e5:c0:ec:f2:12:84:08:da:dd:f3:8a: 89:18:99:cc:c2:b5:f0:72:01:fc:37:2d:1b:7a:b1: 93:74:8c:7e:74:99:06:8a:72:a7:68:92:86:f7:34: 6c:f1:0c:63:44:92:57:78:bf:0a:d5:4e:6a:0c:66: 22:a8:63:8f:54:27:f4:32:1e:cf:4c:25:b1:58:ef: f1:96:cc:77:12:dc:96:32:26:c2:ac:b9:86:80:b2: d7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:9A:F3:E1:63:40:C9:89:C0:45:3E:29:66:6A:7F:D8:D4:91:D3:E5 X509v3 Authority Key Identifier: keyid:91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:eb:3a:2f:ba:90:72:ea:1b:fc:00:2e:b4:eb:76:50:5b:7e: 3f:d1:2d:bb:0d:16:bf:f5:8a:28:62:b5:e0:91:58:2b:be:29: 2c:32:04:55:74:22:50:5a:b7:68:e8:e0:83:08:5a:fd:90:d6: 15:cd:42:5b:f8:87:77:40:5b:93:34:89:79:84:2a:6e:e7:88: 5a:31:87:0f:65:18:82:84:40:22:0c:b9:38:a4:80:4c:fd:56: 90:ae:31:d4:ce:68:5e:9c:a2:91:5b:f1:23:e7:bd:65:25:16: 58:6a:b6:30:8e:97:b5:ef:5b:23:85:8b:46:d0:0a:e9:81:27: 52:ab:22:20:be:9a:22:de:ad:03:07:0e:87:e3:a9:85:8d:7f: 88:84:b6:b6:88:29:c1:64:bd:6d:40:53:89:a6:ce:d4:1d:08: 88:9a:fa:b4:8e:ac:35:1d:4f:cf:d3:b6:5c:a4:93:0b:ec:0e: 71:0f:6c:cd:b0:ff:e9:b5:05:1b:48:e0:6e:f8:63:25:36:52: b0:5b:62:9f:e7:41:65:d2:4a:0f:02:81:3c:a7:0b:2d:9a:84: a3:7d:f0:d7:cb:41:2c:d3:e8:a7:b7:bc:fc:f5:2f:1a:5a:c4: 40:60:14:5b:e2:fd:78:1c:bf:1b:ab:a3:6b:e3:1d:6f:5b:bc: 2d:3d:ec:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA0MzIxMTAvBgNVBAUTKDkxRjNEQzU5Q0QwRkExRDI0MUNCNzg3NTdEMURBQTky QzJBQzlGNjAwHhcNMjYwNjA1MDAyMDM0WhcNMjYwNjEyMDAyMDM0WjAYMRYwFAYD VQQDEw02YTIyMTY1Mi05NmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqCDaIC7opgPenyKDjHLHUALF0J2TIV1u7KEAcBDGVIfmmdh7RRQfk2tNV26G qOzKrIOQeVsSAH2XF6YKZwDhm3obE+joeRChDoO/K7SUgnn3E9u+rLpxwmu+RxmN AuXTLyILDKJ+1V5z5eW+R4xnhkJvR3oxgtAGw87JdskfDSR0AKfI4mXu7UjbKYHg z2aY7zN9h5fG0hSONsCobuf0t51z1xkquhI+5cDs8hKECNrd84qJGJnMwrXwcgH8 Ny0berGTdIx+dJkGinKnaJKG9zRs8QxjRJJXeL8K1U5qDGYiqGOPVCf0Mh7PTCWx WO/xlsx3EtyWMibCrLmGgLLXkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL2a8+Fj QMmJwEU+KWZqf9jUkdPlMB8GA1UdIwQYMBaAFJHz3FnND6HSQct4dX0dqpLCrJ9g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDQzMi9GNUJGNjk5Q0E0 Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi9rZlBjV2MwUG9kSkJ5M2gxZlIycWtzS3Nu MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmUGNXYzBQb2RKQnkzaDFmUjJxa3NLc24yQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDQzMi9GNUJGNjk5Q0E0Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi9rZlBjV2MwUG9k SkJ5M2gxZlIycWtzS3NuMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUOs6L7qQcuob/AAutOt2UFt+P9Etuw0Wv/WKKGK14JFYK74pLDIEVXQiUFq3 aOjggwha/ZDWFc1CW/iHd0BbkzSJeYQqbueIWjGHD2UYgoRAIgy5OKSATP1WkK4x 1M5oXpyikVvxI+e9ZSUWWGq2MI6Xte9bI4WLRtAK6YEnUqsiIL6aIt6tAwcOh+Op hY1/iIS2togpwWS9bUBTiabO1B0IiJr6tI6sNR1Pz9O2XKSTC+wOcQ9szbD/6bUF G0jgbvhjJTZSsFtin+dBZdJKDwKBPKcLLZqEo33w18tBLNPop7e8/PUvGlrEQGAU W+L9eBy/G6uja+Mdb1u8LT3sLg== -----END CERTIFICATE-----Generated at Sat Jun 6 17:07:34 2026 by rpki-client