$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft File: ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft (raw, json) Hash identifier: 5pLa4khhy+b36RoqYyJrwHNgxHBAc0cMs80G30vkx2I= Subject key identifier: CA:C1:07:78:F6:80:9C:76:D8:C9:E3:73:47:1D:FB:EB:AC:5E:5E:8E Authority key identifier: 92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4 Certificate issuer: /CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4 Certificate serial: 0253 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft Manifest number: 0238 Signing time: Thu 21 May 2026 02:43:50 +0000 Manifest this update: Thu 21 May 2026 02:43:49 +0000 Manifest next update: Thu 28 May 2026 02:43:49 +0000 Files and hashes: 1: ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl (hash: dHsoTukXK+zb4qjrQk4ocvuV5aXVEcthCCWoiCLo4QI=) 2: 9EE8F55206E911EE88450147C4F9AE02.roa (hash: Mz2axKz0cOaA7k7YNeejdSe53HW1Qw2U0ROhNzZhy8k=) 3: E5925096093911EEABCFA170C4F9AE02.roa (hash: ucyrKnTlK2iDm4DuHOeL+U4zeBMeJNSh02G8/fv5S2s=) 4: 9F79846406E911EE88450147C4F9AE02.roa (hash: W6M6q3YZzfwNDproFxfiAx2KAQGrtoWb8gbJ72DA1Xs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:43:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 595 (0x253) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1818, serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4 Validity Not Before: May 21 02:43:49 2026 GMT Not After : May 28 02:43:49 2026 GMT Subject: CN=6a0e7165-c9fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:af:cc:51:a6:2a:8d:fb:55:71:57:f9:76:16: 34:a3:be:34:ae:99:c3:7d:0a:14:e0:61:9b:fa:e9: 6d:da:b2:f8:68:77:29:fd:03:3d:99:ff:6e:33:a9: 2d:12:a5:dd:47:40:21:4e:ac:cd:04:8d:08:62:e8: 45:b0:20:fa:c9:3d:f3:59:cb:09:88:a5:0d:09:0f: a8:60:c7:d1:65:6c:e4:f0:48:09:ef:5d:69:36:da: fd:c8:5c:9b:ad:6c:a1:61:8f:7a:75:8c:fe:03:af: 37:94:ac:57:7f:a4:d2:15:17:d3:1d:85:4f:47:6c: a0:ec:22:24:e2:1b:13:6a:64:7e:c0:89:88:0e:31: f4:b2:83:33:02:0d:d3:77:04:a9:60:0e:70:e8:1a: 13:47:02:31:29:b0:eb:95:f9:ec:73:d5:59:04:a9: 94:35:fc:61:87:7d:db:a9:9c:11:10:08:87:e3:92: f5:ef:f0:80:c0:46:1a:bc:dd:19:8d:18:b4:3f:f0: f6:a3:7a:96:0f:2a:c1:4d:b6:ae:5c:82:db:af:c9: 62:6c:f7:d5:ff:11:f5:0f:0b:8e:5f:49:83:67:a6: 4b:1a:90:26:1c:4d:af:a8:2d:bc:34:16:cb:64:29: c1:1d:76:0a:60:df:cf:f0:70:32:44:5f:f5:fa:79: 22:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C1:07:78:F6:80:9C:76:D8:C9:E3:73:47:1D:FB:EB:AC:5E:5E:8E X509v3 Authority Key Identifier: keyid:92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:dc:38:fb:08:5d:30:ce:8c:95:04:d1:63:0a:ca:89:31:16: 84:55:39:eb:17:3b:8b:38:28:cd:a4:70:19:e2:fe:77:d1:5d: be:58:53:60:52:68:c1:0b:0d:b8:90:b7:52:dd:4a:98:72:87: c3:1b:20:e7:3b:0f:07:68:21:4f:f0:2f:29:96:df:25:e3:33: 23:e9:7a:de:ac:d0:81:9f:3a:32:dc:1f:25:94:7b:96:af:4e: 2b:56:da:b3:c4:21:fe:79:21:c7:e0:8b:b3:ad:ff:4a:4d:16: df:43:a6:fb:36:61:e1:5b:6d:d4:9f:a7:dd:91:1c:f9:34:04: 43:55:e9:49:8f:ec:38:46:a1:19:3a:47:c3:93:eb:d6:88:a4: 0c:07:17:04:bc:4a:cc:a2:64:ec:e4:fe:04:a8:55:22:73:17: 65:8c:2a:b6:cf:91:8e:f5:05:db:1d:ff:9a:cd:8f:eb:b1:39: 65:ba:9b:4a:3c:59:0d:ef:29:df:7c:75:2b:6a:ab:33:27:47: 29:e2:bc:df:2e:66:7d:9b:32:57:69:c8:e9:36:d9:b1:c1:3b: 1e:f6:1b:37:45:b1:17:c6:8d:ee:a8:d6:11:94:80:13:7e:d5: 93:49:c1:ae:c0:31:be:3c:1e:9c:d1:2f:7b:ac:b2:08:7f:05: 4f:7f:eb:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE4MTgxMTAvBgNVBAUTKDkyRDQ1NkU5OUI2MERDRUQxNDhDOTNENTk0QjZGNDMx MjcwQTI0QzQwHhcNMjYwNTIxMDI0MzQ5WhcNMjYwNTI4MDI0MzQ5WjAYMRYwFAYD VQQDEw02YTBlNzE2NS1jOWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6/MUaYqjftVcVf5dhY0o740rpnDfQoU4GGb+ult2rL4aHcp/QM9mf9uM6kt EqXdR0AhTqzNBI0IYuhFsCD6yT3zWcsJiKUNCQ+oYMfRZWzk8EgJ711pNtr9yFyb rWyhYY96dYz+A683lKxXf6TSFRfTHYVPR2yg7CIk4hsTamR+wImIDjH0soMzAg3T dwSpYA5w6BoTRwIxKbDrlfnsc9VZBKmUNfxhh33bqZwREAiH45L17/CAwEYavN0Z jRi0P/D2o3qWDyrBTbauXILbr8libPfV/xH1DwuOX0mDZ6ZLGpAmHE2vqC28NBbL ZCnBHXYKYN/P8HAyRF/1+nkiwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMrBB3j2 gJx22Mnjc0cd++usXl6OMB8GA1UdIwQYMBaAFJLUVumbYNztFIyT1ZS29DEnCiTE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTgxOC82OEVBNzNFQzA2 OUMxMUVFOEM2Njc4MTJDNEY5QUUwMi9rdFJXNlp0ZzNPMFVqSlBWbExiME1TY0tK TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t0Ulc2WnRnM08wVWpKUFZsTGIwTVNjS0pNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTgxOC82OEVBNzNFQzA2OUMxMUVFOEM2Njc4MTJDNEY5QUUwMi9rdFJXNlp0ZzNP MFVqSlBWbExiME1TY0tKTVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC9w4+whdMM6MlQTRYwrKiTEWhFU56xc7izgozaRwGeL+d9FdvlhTYFJowQsN uJC3Ut1KmHKHwxsg5zsPB2ghT/AvKZbfJeMzI+l63qzQgZ86MtwfJZR7lq9OK1ba s8Qh/nkhx+CLs63/Sk0W30Om+zZh4Vtt1J+n3ZEc+TQEQ1XpSY/sOEahGTpHw5Pr 1oikDAcXBLxKzKJk7OT+BKhVInMXZYwqts+RjvUF2x3/ms2P67E5ZbqbSjxZDe8p 33x1K2qrMydHKeK83y5mfZsyV2nI6TbZscE7HvYbN0WxF8aN7qjWEZSAE37Vk0nB rsAxvjwenNEve6yyCH8FT3/rmA== -----END CERTIFICATE-----Generated at Thu May 21 10:54:04 2026 by rpki-client