$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft File: KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft (raw, json) Hash identifier: Haycu3Jq2j4Qb9Ay5WEIxoPA4Muxqb3hwhuTbUjvqZs= Subject key identifier: 41:12:82:0C:65:4C:CE:65:38:4C:B8:3C:E8:F5:84:3F:54:62:02:AE Authority key identifier: 2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B Certificate issuer: /CN=A91B7897/serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B Certificate serial: 031F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft Manifest number: 0310 Signing time: Thu 21 May 2026 01:19:19 +0000 Manifest this update: Thu 21 May 2026 01:19:18 +0000 Manifest next update: Thu 28 May 2026 01:19:18 +0000 Files and hashes: 1: KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl (hash: 8KGHQzVCuNjrc/qYVI/Y8RjCvWYXK1TqzBAx4f569zI=) 2: 6C83604E1E2711EDAA33DF76C4F9AE02.roa (hash: WyMfvYsLQHMgLVM8XPqCRpkFzoUhxbdKs79AF+461J0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 01:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 799 (0x31f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7897, serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B Validity Not Before: May 21 01:19:18 2026 GMT Not After : May 28 01:19:18 2026 GMT Subject: CN=6a0e5d96-9603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3e:d9:c8:a0:a6:1e:64:30:12:08:40:35:ff: b7:80:78:2d:0a:0b:ea:6c:65:3d:f1:37:ba:79:7f: ac:e9:92:a7:6f:c8:33:bd:44:d2:2d:30:03:09:47: a3:3a:18:25:5a:72:3e:0e:0a:a0:28:6f:fb:c5:16: c6:8b:8c:30:a3:da:43:17:2c:0a:f3:17:dd:cd:ca: 59:44:29:63:dd:15:c5:59:65:fe:6b:04:38:ea:42: 1f:c8:0c:3c:bb:a2:d9:5f:fa:ab:e6:8e:9a:23:c5: 33:b7:5f:9d:fe:f3:c6:78:97:24:c0:ca:94:71:65: 79:f0:51:32:ef:4d:47:0a:37:e0:29:b5:5a:a2:00: e6:14:9d:93:52:3b:73:ab:b8:bd:0f:70:b6:c7:62: 25:9e:88:bf:ba:03:2a:40:63:b1:e0:7f:1c:a7:94: d3:49:a1:cd:a3:da:a2:7c:1a:6c:f0:7a:43:4e:b4: 16:df:0e:53:ed:82:24:9b:2d:c0:74:ee:bb:25:aa: 4d:66:54:db:be:5e:5d:6c:e7:ed:c4:3b:b8:c4:d0: 2f:60:ba:13:82:92:3a:a1:0a:41:ea:9b:f9:8f:bf: 68:e3:d8:96:c7:7e:32:a3:8f:da:ac:42:ae:6f:e7: b9:28:d8:ea:e6:a5:ad:20:48:d6:75:9f:61:11:c6: 72:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:12:82:0C:65:4C:CE:65:38:4C:B8:3C:E8:F5:84:3F:54:62:02:AE X509v3 Authority Key Identifier: keyid:2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:27:17:de:b0:e1:61:2f:ba:db:ae:5b:6d:91:2f:2e:86:f3: fb:e3:27:5f:53:6d:7f:f0:55:3a:8c:7f:47:18:38:f0:54:62: ad:f7:7d:32:03:f7:e0:3a:bf:da:e9:2e:6a:e5:21:78:a9:42: 2a:5f:9c:42:df:61:a2:53:7f:55:33:01:d4:24:1e:63:41:0e: 44:9c:91:f9:a7:58:30:97:db:3b:79:ce:2e:1e:13:5c:a7:fc: 7c:58:53:9c:8b:c6:82:c7:dc:9d:35:52:77:ce:48:a5:64:ab: 6a:9a:6a:47:19:e7:d0:05:a1:8a:81:0f:e4:28:88:28:ff:28: 54:c4:26:47:87:47:5b:9e:fc:a2:70:16:61:b8:bf:85:8c:79: 10:98:54:91:f8:35:11:ce:cd:36:9d:ba:7d:6b:cb:cb:28:2c: bd:85:17:46:a8:fc:b0:3a:1c:a6:2e:ce:0b:b2:07:bf:99:96: 12:9b:b2:d2:a4:83:17:b0:1b:00:0c:3e:c3:fa:10:56:20:5b: 48:98:16:70:dc:c1:f1:94:ec:ba:0e:31:a9:ce:13:66:93:55: a8:81:ca:df:c4:e6:39:71:21:ad:45:9a:24:38:1d:fa:9b:c6: 6c:93:57:22:dd:6c:df:1b:09:f1:da:7e:65:45:02:de:00:28: b3:5b:e5:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc4OTcxMTAvBgNVBAUTKDJBQTI3ODk0NEI0MTBGQTJDODNCN0MyQUYzMkM2NkFG QTIwQzEyN0IwHhcNMjYwNTIxMDExOTE4WhcNMjYwNTI4MDExOTE4WjAYMRYwFAYD VQQDEw02YTBlNWQ5Ni05NjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoT7ZyKCmHmQwEghANf+3gHgtCgvqbGU98Te6eX+s6ZKnb8gzvUTSLTADCUej OhglWnI+DgqgKG/7xRbGi4wwo9pDFywK8xfdzcpZRClj3RXFWWX+awQ46kIfyAw8 u6LZX/qr5o6aI8Uzt1+d/vPGeJckwMqUcWV58FEy701HCjfgKbVaogDmFJ2TUjtz q7i9D3C2x2Ilnoi/ugMqQGOx4H8cp5TTSaHNo9qifBps8HpDTrQW3w5T7YIkmy3A dO67JapNZlTbvl5dbOftxDu4xNAvYLoTgpI6oQpB6pv5j79o49iWx34yo4/arEKu b+e5KNjq5qWtIEjWdZ9hEcZyxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEESggxl TM5lOEy4POj1hD9UYgKuMB8GA1UdIwQYMBaAFCqieJRLQQ+iyDt8KvMsZq+iDBJ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzg5Ny9CNkM1OTQxQzFE MzUxMUVEQTVFNjMwN0RDNEY5QUUwMi9LcUo0bEV0QkQ2TElPM3dxOHl4bXI2SU1F bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0txSjRsRXRCRDZMSU8zd3E4eXhtcjZJTUVucy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzg5Ny9CNkM1OTQxQzFEMzUxMUVEQTVFNjMwN0RDNEY5QUUwMi9LcUo0bEV0QkQ2 TElPM3dxOHl4bXI2SU1FbnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmycX3rDhYS+6265bbZEvLobz++MnX1Ntf/BVOox/Rxg48FRirfd9MgP34Dq/ 2ukuauUheKlCKl+cQt9holN/VTMB1CQeY0EORJyR+adYMJfbO3nOLh4TXKf8fFhT nIvGgsfcnTVSd85IpWSrappqRxnn0AWhioEP5CiIKP8oVMQmR4dHW578onAWYbi/ hYx5EJhUkfg1Ec7NNp26fWvLyygsvYUXRqj8sDocpi7OC7IHv5mWEpuy0qSDF7Ab AAw+w/oQViBbSJgWcNzB8ZTsug4xqc4TZpNVqIHK38TmOXEhrUWaJDgd+pvGbJNX It1s3xsJ8dp+ZUUC3gAos1vluQ== -----END CERTIFICATE-----Generated at Thu May 21 10:23:56 2026 by rpki-client