$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.mft File: kZ-oGbL_8UVSGvZkA1J45-eRSkk.mft (raw, json) Hash identifier: GZp8OP8nRBsvovvndxWZymTLMGcxuwmzPea6ALvhynE= Subject key identifier: B3:47:DA:69:1B:7B:94:84:9D:ED:7C:BC:CB:9B:CD:F4:22:32:08:4F Authority key identifier: 91:9F:A8:19:B2:FF:F1:45:52:1A:F6:64:03:52:78:E7:E7:91:4A:49 Certificate issuer: /CN=A91BB6E3/serialNumber=919FA819B2FFF145521AF664035278E7E7914A49 Certificate serial: 028A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kZ-oGbL_8UVSGvZkA1J45-eRSkk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.mft Manifest number: 026E Signing time: Thu 21 May 2026 02:19:04 +0000 Manifest this update: Thu 21 May 2026 02:19:03 +0000 Manifest next update: Thu 28 May 2026 02:19:03 +0000 Files and hashes: 1: kZ-oGbL_8UVSGvZkA1J45-eRSkk.crl (hash: LhjbR/eK7v8mQidE5HiNHleVx7T7gWm6nOk16ocwYbg=) 2: F96174ECC27D11EDB8226F2DC4F9AE02.roa (hash: G5wyunrhNPZHL5dnU3YCTVm9J7AtwfPqbQe5Aa4DplE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.crl rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kZ-oGbL_8UVSGvZkA1J45-eRSkk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:19:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 650 (0x28a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB6E3, serialNumber=919FA819B2FFF145521AF664035278E7E7914A49 Validity Not Before: May 21 02:19:03 2026 GMT Not After : May 28 02:19:03 2026 GMT Subject: CN=6a0e6b97-7c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:10:ad:da:c5:b5:b7:65:10:f2:4a:25:30:ff: 33:c2:2d:c6:d9:a9:c4:87:57:2b:bd:b6:4e:06:67: 08:3a:00:32:ff:74:ca:a7:f9:ed:2f:02:0e:b1:30: 09:69:14:36:78:f5:52:ba:3f:3f:da:37:cd:79:dc: 47:47:54:74:13:9c:6e:75:79:94:15:8a:76:c1:08: 17:97:56:f1:63:5c:e2:54:03:2c:2a:c6:14:4f:6c: 31:55:4c:4b:57:2e:76:01:f5:ca:04:12:29:f7:b7: f1:2c:c4:73:38:bf:80:09:78:34:86:d7:be:f4:fc: 1d:c0:a3:51:ab:2c:68:78:82:ce:66:0f:fc:36:2c: f3:de:e1:4b:14:1b:6e:97:56:0b:57:3e:40:f6:fc: e3:1e:84:76:3f:5b:ce:c7:c4:cd:80:4e:bc:8b:d6: 23:d8:aa:55:3d:81:a0:58:c1:04:62:a4:70:4f:0d: 04:c5:f5:4c:06:8d:4e:82:f6:b1:b0:5a:34:9b:2d: 2f:e8:73:41:4b:cf:49:b4:68:fd:a8:3e:60:0f:c7: b6:fd:4a:3d:23:1b:08:be:c9:2a:2a:ae:8e:01:69: 03:0d:95:5c:2e:a4:40:81:45:8d:f2:14:2a:00:00: 64:1c:1d:68:31:02:1d:7c:e9:10:24:28:04:87:bd: a2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:47:DA:69:1B:7B:94:84:9D:ED:7C:BC:CB:9B:CD:F4:22:32:08:4F X509v3 Authority Key Identifier: keyid:91:9F:A8:19:B2:FF:F1:45:52:1A:F6:64:03:52:78:E7:E7:91:4A:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kZ-oGbL_8UVSGvZkA1J45-eRSkk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:f0:46:ed:99:49:cb:76:e2:15:84:ce:2a:76:f3:8e:e2:ce: 98:70:59:2c:2b:c8:a5:c9:9c:07:c7:19:f8:73:96:02:64:dc: 90:a1:3d:9b:fb:b4:90:52:ed:2a:6c:d7:33:85:6b:a1:e8:e7: 3c:f6:43:04:8f:b8:ae:8f:cf:90:91:36:a1:c6:06:f7:de:44: d6:8c:b1:05:17:35:69:ec:ed:f2:7c:f4:99:65:05:fc:4c:7e: 34:4a:4d:4b:2b:36:f1:30:de:0b:86:6e:93:61:a3:02:67:1a: 70:3b:2f:a1:8b:1b:df:1c:65:2e:e1:f1:01:84:e6:91:37:c3: d2:50:b9:c0:c6:48:c1:43:b4:8f:de:3a:28:20:cf:be:9f:0c: 51:0b:2d:0e:67:1b:7a:7e:35:24:d8:d8:e4:fb:f9:db:7a:18: 7c:95:6b:f4:d2:7d:fd:d0:bf:88:87:ad:64:d7:95:ff:1c:d1: 19:b1:76:c2:8b:00:07:30:f4:4a:17:4c:2d:8a:db:e3:8e:44: 7c:29:6e:bf:dd:72:a0:66:48:7c:b4:a6:cc:4a:00:39:45:9f: 44:e3:8e:42:63:d9:08:1c:33:41:3d:07:95:53:45:bd:28:f1: f7:ca:47:d0:ab:86:aa:d4:4e:48:40:6f:e8:f3:61:91:45:51: 8a:04:79:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI2RTMxMTAvBgNVBAUTKDkxOUZBODE5QjJGRkYxNDU1MjFBRjY2NDAzNTI3OEU3 RTc5MTRBNDkwHhcNMjYwNTIxMDIxOTAzWhcNMjYwNTI4MDIxOTAzWjAYMRYwFAYD VQQDEw02YTBlNmI5Ny03YzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApBCt2sW1t2UQ8kolMP8zwi3G2anEh1crvbZOBmcIOgAy/3TKp/ntLwIOsTAJ aRQ2ePVSuj8/2jfNedxHR1R0E5xudXmUFYp2wQgXl1bxY1ziVAMsKsYUT2wxVUxL Vy52AfXKBBIp97fxLMRzOL+ACXg0hte+9PwdwKNRqyxoeILOZg/8Nizz3uFLFBtu l1YLVz5A9vzjHoR2P1vOx8TNgE68i9Yj2KpVPYGgWMEEYqRwTw0ExfVMBo1Ogvax sFo0my0v6HNBS89JtGj9qD5gD8e2/Uo9IxsIvskqKq6OAWkDDZVcLqRAgUWN8hQq AABkHB1oMQIdfOkQJCgEh72iSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLNH2mkb e5SEne18vMubzfQiMghPMB8GA1UdIwQYMBaAFJGfqBmy//FFUhr2ZANSeOfnkUpJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjZFMy9BMjJDODE0Q0My NzUxMUVEQjNCNEQ3MjhDNEY5QUUwMi9rWi1vR2JMXzhVVlNHdlprQTFKNDUtZVJT a2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2taLW9HYkxfOFVWU0d2WmtBMUo0NS1lUlNray5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjZFMy9BMjJDODE0Q0MyNzUxMUVEQjNCNEQ3MjhDNEY5QUUwMi9rWi1vR2JMXzhV VlNHdlprQTFKNDUtZVJTa2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVvBG7ZlJy3biFYTOKnbzjuLOmHBZLCvIpcmcB8cZ+HOWAmTckKE9m/u0kFLt KmzXM4VroejnPPZDBI+4ro/PkJE2ocYG995E1oyxBRc1aezt8nz0mWUF/Ex+NEpN Sys28TDeC4Zuk2GjAmcacDsvoYsb3xxlLuHxAYTmkTfD0lC5wMZIwUO0j946KCDP vp8MUQstDmcben41JNjY5Pv523oYfJVr9NJ9/dC/iIetZNeV/xzRGbF2wosABzD0 ShdMLYrb445EfCluv91yoGZIfLSmzEoAOUWfROOOQmPZCBwzQT0HlVNFvSjx98pH 0KuGqtROSEBv6PNhkUVRigR55Q== -----END CERTIFICATE-----Generated at Thu May 21 10:16:16 2026 by rpki-client