$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft File: kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft (raw, json) Hash identifier: 5GEtxdiNXhktoZfudJUc6TuvgghZMott4mH1Qj44E54= Subject key identifier: 7D:BD:D4:2B:FB:97:B6:1D:77:82:B8:35:68:76:EC:03:B7:7A:51:EE Authority key identifier: 93:04:23:4E:73:90:49:14:3A:85:91:A3:74:5A:53:E4:B9:2A:D8:D8 Certificate issuer: /CN=A91DE323/serialNumber=9304234E739049143A8591A3745A53E4B92AD8D8 Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft Manifest number: 020B Signing time: Thu 21 May 2026 03:14:06 +0000 Manifest this update: Thu 21 May 2026 03:14:05 +0000 Manifest next update: Thu 28 May 2026 03:14:05 +0000 Files and hashes: 1: kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.crl (hash: Wzeh9wuAtXdaixfUv662UiImTYUNGe3zPeY4NkfakHo=) 2: 4AB01838FF1D11F0816C691B85EE528E.roa (hash: 73GQqCwii1vmNrsS7r1xrrm5FcLJovRSf9upFdGwKjE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.crl rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 03:14:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE323, serialNumber=9304234E739049143A8591A3745A53E4B92AD8D8 Validity Not Before: May 21 03:14:05 2026 GMT Not After : May 28 03:14:05 2026 GMT Subject: CN=6a0e787d-576d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ae:ed:b2:dc:7a:7b:0f:08:d6:6c:1d:52:aa: ab:db:72:1b:c7:65:ac:92:e4:f2:f8:63:71:27:ab: ae:fe:77:76:86:67:fd:ae:b9:e4:dc:11:6b:6d:cf: 62:8d:65:71:83:ea:68:cd:0b:ef:d9:54:60:f5:19: d7:ea:0a:e7:6b:08:e8:15:7d:fc:4a:be:92:0d:fb: 39:57:f2:eb:04:8c:34:f3:01:bb:a8:f7:25:f0:8c: eb:8c:c8:b5:7c:a2:e3:11:1a:21:8a:a8:ee:48:31: b8:56:42:8c:c7:71:bd:5f:4b:87:7d:15:b7:89:c5: 4e:f1:30:d0:a4:ff:a1:b4:99:4e:83:d9:54:37:0a: 3f:f3:1f:f6:23:82:b5:00:13:82:50:e9:70:9e:de: be:83:37:98:67:a7:97:9e:76:b0:93:cb:6c:c8:e3: ac:39:10:c8:e8:b4:d8:9b:24:8d:0f:4e:bf:1e:eb: 82:98:3c:43:86:f3:d2:ca:f2:58:80:6e:b8:08:40: b8:36:d6:b5:29:b1:ea:19:cd:8b:22:1b:46:7e:d3: 6a:81:22:ba:28:1c:4c:cc:35:0a:6f:3d:82:6c:68: 48:c6:f6:09:34:8f:7b:87:fc:01:d7:c1:ea:e7:ab: ca:6c:f2:a6:46:5b:72:67:b9:94:61:30:5c:e5:fc: f7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:BD:D4:2B:FB:97:B6:1D:77:82:B8:35:68:76:EC:03:B7:7A:51:EE X509v3 Authority Key Identifier: keyid:93:04:23:4E:73:90:49:14:3A:85:91:A3:74:5A:53:E4:B9:2A:D8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:b3:99:fd:3d:4b:10:83:13:14:c1:0d:46:ed:c7:09:55:5c: 23:e2:df:a7:62:a3:be:a2:cb:d3:86:3b:e3:2b:17:6c:61:86: 7f:34:9c:67:7b:a2:88:05:f7:7e:e3:6f:8f:d7:c8:80:14:4d: f2:3e:3a:50:10:b7:7c:74:32:03:d3:7f:b8:e3:79:61:ae:4f: 52:cf:4e:93:35:05:fb:09:09:da:f3:e1:b3:3a:7e:54:9a:5c: 10:4e:cd:1b:c9:23:af:f8:be:38:9e:a9:57:5c:c6:a6:2f:20: ab:09:5d:d8:8e:c8:4d:84:8a:46:5a:da:01:16:77:6f:b1:10: 96:17:70:3e:25:3a:ce:54:ef:36:c3:45:49:92:43:ec:aa:73: 16:cf:3d:e6:84:49:e8:a0:46:bd:7e:2f:92:c8:d0:d5:a1:54: 65:7c:26:78:11:ac:5a:3f:9f:3a:28:50:05:96:7e:a6:81:bf: 64:25:b0:07:ec:c2:a7:61:ac:4a:ee:fc:70:20:98:d8:38:c6: 71:35:55:2f:2b:70:e1:3c:1f:c6:3f:4b:30:e0:96:86:f3:0c: 84:79:f1:57:a7:d3:a7:b9:76:69:83:17:bb:bc:b2:e9:b3:78: 9c:f0:64:a9:cd:74:9c:13:50:01:f3:95:f9:15:b2:19:66:59: 40:47:03:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUzMjMxMTAvBgNVBAUTKDkzMDQyMzRFNzM5MDQ5MTQzQTg1OTFBMzc0NUE1M0U0 QjkyQUQ4RDgwHhcNMjYwNTIxMDMxNDA1WhcNMjYwNTI4MDMxNDA1WjAYMRYwFAYD VQQDEw02YTBlNzg3ZC01NzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp67tstx6ew8I1mwdUqqr23Ibx2WskuTy+GNxJ6uu/nd2hmf9rrnk3BFrbc9i jWVxg+pozQvv2VRg9RnX6grnawjoFX38Sr6SDfs5V/LrBIw08wG7qPcl8IzrjMi1 fKLjERohiqjuSDG4VkKMx3G9X0uHfRW3icVO8TDQpP+htJlOg9lUNwo/8x/2I4K1 ABOCUOlwnt6+gzeYZ6eXnnawk8tsyOOsORDI6LTYmySND06/HuuCmDxDhvPSyvJY gG64CEC4Nta1KbHqGc2LIhtGftNqgSK6KBxMzDUKbz2CbGhIxvYJNI97h/wB18Hq 56vKbPKmRltyZ7mUYTBc5fz3xwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH291Cv7 l7Ydd4K4NWh27AO3elHuMB8GA1UdIwQYMBaAFJMEI05zkEkUOoWRo3RaU+S5KtjY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTMyMy85RTYxRTQyNDUy NUYxMUVFODBCQTBENzRDNEY5QUUwMi9rd1FqVG5PUVNSUTZoWkdqZEZwVDVMa3Ey TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t3UWpUbk9RU1JRNmhaR2pkRnBUNUxrcTJOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTMyMy85RTYxRTQyNDUyNUYxMUVFODBCQTBENzRDNEY5QUUwMi9rd1FqVG5PUVNS UTZoWkdqZEZwVDVMa3EyTmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb7OZ/T1LEIMTFMENRu3HCVVcI+Lfp2KjvqLL04Y74ysXbGGGfzScZ3uiiAX3 fuNvj9fIgBRN8j46UBC3fHQyA9N/uON5Ya5PUs9OkzUF+wkJ2vPhszp+VJpcEE7N G8kjr/i+OJ6pV1zGpi8gqwld2I7ITYSKRlraARZ3b7EQlhdwPiU6zlTvNsNFSZJD 7KpzFs895oRJ6KBGvX4vksjQ1aFUZXwmeBGsWj+fOihQBZZ+poG/ZCWwB+zCp2Gs Su78cCCY2DjGcTVVLytw4Twfxj9LMOCWhvMMhHnxV6fTp7l2aYMXu7yy6bN4nPBk qc10nBNQAfOV+RWyGWZZQEcDUg== -----END CERTIFICATE-----Generated at Thu May 21 10:28:49 2026 by rpki-client