$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft File: KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft (raw, json) Hash identifier: pr+YWHAOPZaWpUOjcPddiREDLZ8BkoetUf7qak55AHk= Subject key identifier: 3B:1A:15:0A:BB:80:EE:BB:32:03:EA:56:6D:DA:0F:6F:FC:A7:2C:C2 Authority key identifier: 29:EA:9D:81:A2:AF:5F:82:85:AC:07:1B:1E:6E:79:A3:09:C9:F4:38 Certificate issuer: /CN=A91B72D6/serialNumber=29EA9D81A2AF5F8285AC071B1E6E79A309C9F438 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KeqdgaKvX4KFrAcbHm55ownJ9Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft Manifest number: 29 Signing time: Tue 19 May 2026 08:37:35 +0000 Manifest this update: Tue 19 May 2026 08:37:35 +0000 Manifest next update: Tue 26 May 2026 08:37:35 +0000 Files and hashes: 1: KeqdgaKvX4KFrAcbHm55ownJ9Dg.crl (hash: zofbZnAeahs+QAlzHBnavZhFGKrE3qVZJZqckjIVjFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.crl rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KeqdgaKvX4KFrAcbHm55ownJ9Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:37:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B72D6, serialNumber=29EA9D81A2AF5F8285AC071B1E6E79A309C9F438 Validity Not Before: May 19 08:37:35 2026 GMT Not After : May 26 08:37:35 2026 GMT Subject: CN=6a0c214f-6a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6e:b9:62:a3:4b:3a:05:2b:60:9e:7e:84:7a: b1:44:d0:f7:98:c0:9b:c6:07:16:b2:51:e8:17:9e: 52:d4:42:92:0c:14:70:29:7a:f7:1d:4f:8d:2f:3c: 84:91:64:94:86:bd:8b:4f:5d:d0:07:e8:17:33:c1: 55:b3:6b:49:df:65:25:bb:4f:89:32:3f:ae:bf:76: fa:83:ea:6f:f7:c6:a5:e3:d7:46:16:cf:cf:01:a5: a5:87:cf:25:20:fd:cd:25:54:70:2c:89:b9:6c:11: c9:69:56:a7:29:23:54:9c:c7:d9:18:56:df:7c:e2: 82:81:5c:f6:5c:12:c4:f7:30:f2:38:ad:c4:21:e9: 97:17:f8:fa:99:93:ca:2d:1d:74:95:96:bd:6f:4c: 50:4e:23:85:cd:2f:69:14:e5:8f:78:1e:43:8b:49: d6:07:ab:e6:c9:c7:86:f2:e4:38:03:54:58:24:7a: ed:3b:a6:06:ba:3f:02:f4:a6:92:8f:7a:e5:38:4d: 34:26:fd:c9:da:2f:41:a2:c5:d2:87:3d:b9:43:6b: 1e:10:70:3f:ac:33:58:ea:0b:b9:1b:e8:55:d2:61: 79:01:eb:60:3c:88:da:eb:45:6d:b5:7c:e8:fc:04: 05:4d:35:4c:9a:1b:af:86:ae:f3:3c:d6:af:26:91: 7d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1A:15:0A:BB:80:EE:BB:32:03:EA:56:6D:DA:0F:6F:FC:A7:2C:C2 X509v3 Authority Key Identifier: keyid:29:EA:9D:81:A2:AF:5F:82:85:AC:07:1B:1E:6E:79:A3:09:C9:F4:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KeqdgaKvX4KFrAcbHm55ownJ9Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:f9:80:87:5b:da:aa:c0:6e:8f:af:6d:86:03:0a:4c:9c:3f: 2d:ba:45:97:95:3b:82:7a:8c:a4:63:d8:9f:d8:94:08:b2:9e: a8:50:e5:f8:30:ea:10:06:bb:21:cf:81:4d:09:e8:f4:02:c9: db:e1:33:fb:2a:43:b1:0f:70:e2:ad:f8:e9:6f:ca:31:f2:00: 1a:d3:35:1b:24:3c:dc:b7:34:14:28:74:05:29:49:7b:1e:02: 3c:97:41:19:f0:f3:78:8d:22:a8:a4:aa:a8:aa:36:9b:2e:41: 39:5b:14:25:7e:96:26:b2:89:a7:f9:3a:b4:a6:40:c2:79:1e: cb:22:05:61:02:78:43:66:cc:bf:2c:a3:1b:6f:e1:bf:52:a6: 82:6f:07:07:36:eb:41:9a:89:cb:52:8d:56:4a:94:e0:cd:c2: 86:7b:2d:0c:74:a0:2e:08:1e:91:e3:f7:6f:37:f3:ec:06:7a: 39:da:ed:a6:23:25:a3:41:e4:47:9b:b7:30:d3:43:ac:1a:76: 8f:d8:a7:c6:f5:5f:ad:67:26:b5:74:9c:ea:99:55:12:ae:46: c0:30:48:d9:5b:63:d9:75:78:49:b1:42:c0:8a:bc:70:9a:27: ca:9e:4a:df:9f:94:c8:6e:c6:21:e9:a6:57:a2:ee:14:31:a2: 5d:c8:41:da -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NzJENjExMC8GA1UEBRMoMjlFQTlEODFBMkFGNUY4Mjg1QUMwNzFCMUU2RTc5QTMw OUM5RjQzODAeFw0yNjA1MTkwODM3MzVaFw0yNjA1MjYwODM3MzVaMBgxFjAUBgNV BAMTDTZhMGMyMTRmLTZhOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCWbrlio0s6BStgnn6EerFE0PeYwJvGBxayUegXnlLUQpIMFHApevcdT40vPISR ZJSGvYtPXdAH6BczwVWza0nfZSW7T4kyP66/dvqD6m/3xqXj10YWz88BpaWHzyUg /c0lVHAsiblsEclpVqcpI1Scx9kYVt984oKBXPZcEsT3MPI4rcQh6ZcX+PqZk8ot HXSVlr1vTFBOI4XNL2kU5Y94HkOLSdYHq+bJx4by5DgDVFgkeu07pga6PwL0ppKP euU4TTQm/cnaL0GixdKHPblDax4QcD+sM1jqC7kb6FXSYXkB62A8iNrrRW21fOj8 BAVNNUyaG6+GrvM81q8mkX1/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOxoVCruA 7rsyA+pWbdoPb/ynLMIwHwYDVR0jBBgwFoAUKeqdgaKvX4KFrAcbHm55ownJ9Dgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3MkQ2Lzk3NDhDMDIyMTcx RjExRjFBM0E4RjJGQjA5M0Q4QzY3L0tlcWRnYUt2WDRLRnJBY2JIbTU1b3duSjlE Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS2VxZGdhS3ZYNEtGckFjYkhtNTVvd25KOURnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 MkQ2Lzk3NDhDMDIyMTcxRjExRjFBM0E4RjJGQjA5M0Q4QzY3L0tlcWRnYUt2WDRL RnJBY2JIbTU1b3duSjlEZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC4+YCHW9qqwG6Pr22GAwpMnD8tukWXlTuCeoykY9if2JQIsp6oUOX4MOoQBrsh z4FNCej0Asnb4TP7KkOxD3Dirfjpb8ox8gAa0zUbJDzctzQUKHQFKUl7HgI8l0EZ 8PN4jSKopKqoqjabLkE5WxQlfpYmsomn+Tq0pkDCeR7LIgVhAnhDZsy/LKMbb+G/ UqaCbwcHNutBmonLUo1WSpTgzcKGey0MdKAuCB6R4/dvN/PsBno52u2mIyWjQeRH m7cw00OsGnaP2KfG9V+tZya1dJzqmVUSrkbAMEjZW2PZdXhJsULAirxwmifKnkrf n5TIbsYh6aZXou4UMaJdyEHa -----END CERTIFICATE-----Generated at Thu May 21 09:38:06 2026 by rpki-client