$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft File: KMruhJZWnFc8PlsYkMWhs0z8jjA.mft (raw, json) Hash identifier: truJbhCuTo+71/ARR3DGXwR9DgqmkGGgZLt/S4bZvvw= Subject key identifier: FF:48:27:01:07:2F:12:86:F5:90:00:C9:63:B6:31:15:FF:26:FE:EF Authority key identifier: 28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30 Certificate issuer: /CN=A91E4EF6/serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30 Certificate serial: 07A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft Manifest number: 12B7 Signing time: Wed 20 May 2026 19:18:14 +0000 Manifest this update: Wed 20 May 2026 19:18:13 +0000 Manifest next update: Wed 27 May 2026 19:18:13 +0000 Files and hashes: 1: KMruhJZWnFc8PlsYkMWhs0z8jjA.crl (hash: F6iqPLmJ3BO63f62HMkHX5BM0dzItln5EO3z5dZXZ7g=) 2: 377B6620506B11EBAD849641C4F9AE02.roa (hash: 7lVvPvKm0jDrCtO8FOe2rLzoGXgVOgfwoKgNAbdQ/CA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 19:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1960 (0x7a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF6, serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30 Validity Not Before: May 20 19:18:13 2026 GMT Not After : May 27 19:18:13 2026 GMT Subject: CN=6a0e08f6-5e16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c5:a0:f8:12:15:7e:fb:f3:d8:d0:3d:92:7c: ee:c6:5f:9d:d4:51:e4:25:62:f2:b1:8d:86:8d:9f: 51:91:e2:30:3b:5c:4f:81:82:82:48:3b:11:9c:9f: ef:d1:c8:44:fa:03:98:c1:ad:9e:d1:a7:e9:fd:64: 68:db:2d:55:45:1d:9d:64:20:6d:ba:f5:4e:f6:83: e4:59:ef:e5:5b:73:87:9d:85:75:73:56:25:a3:d4: fa:f0:33:5a:2b:61:d6:16:c6:bd:d5:aa:bb:ab:af: 36:c4:19:b0:f4:87:cf:df:c8:81:2e:fd:cd:ae:38: 7c:ed:20:67:fe:06:e3:db:17:c8:e4:6a:6d:a8:1c: e8:76:a8:7e:d7:9e:2c:56:7b:2a:d3:82:15:e0:18: 09:e4:eb:b2:05:4d:fa:95:33:61:5d:06:3c:cb:d8: 6b:d2:8f:a8:25:cf:0c:78:44:98:c5:8a:f0:58:55: ec:d4:58:39:1a:27:5f:72:09:6d:6d:54:5b:99:b3: 29:ed:69:40:5b:c0:b5:85:fa:18:e8:2f:23:32:cf: b8:4d:42:98:48:8b:5c:50:d0:09:10:57:42:f1:00: 7e:4f:2f:25:a7:b7:87:bb:1a:27:9d:91:01:dc:4d: 1c:2a:f5:56:61:23:16:37:a9:3c:45:5b:16:3e:a2: cc:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:48:27:01:07:2F:12:86:F5:90:00:C9:63:B6:31:15:FF:26:FE:EF X509v3 Authority Key Identifier: keyid:28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:6a:19:64:06:e6:1a:f9:69:83:d0:7c:d8:ee:f8:27:43:b5: 1d:ac:71:e0:73:87:69:c9:4c:c4:5f:b3:64:c7:23:b4:12:0e: 57:4b:d1:20:83:9f:d6:0a:e0:78:0e:92:84:53:0d:6a:91:43: bd:09:de:54:98:f5:3a:00:89:8a:c0:5d:a5:1b:22:e9:06:cc: ec:73:c3:48:fe:e9:8f:e4:82:6f:d7:0f:b1:4d:57:fb:f4:f1: f3:93:5a:c6:09:87:3e:4d:e7:41:38:44:ee:d3:95:a4:e7:84: c1:eb:d6:4a:11:77:09:8b:8a:ee:48:95:dd:77:7a:00:9a:9a: a2:51:03:6d:c7:fa:00:df:5a:f6:04:68:67:05:ab:89:50:62: fd:12:90:36:79:fc:e0:04:a7:76:54:69:b2:ab:85:41:19:71: 7e:9a:bf:9f:27:9b:b0:e9:6c:5c:21:16:b1:e6:4d:37:89:6d: 54:75:8c:7b:c2:a6:80:65:b3:fe:10:51:c7:1e:9b:30:1a:df: e4:da:90:c9:d9:d0:81:76:0a:95:7c:22:54:cf:5f:46:f7:f6: 95:67:e1:84:1f:19:8f:d2:0e:6f:ed:86:2e:1a:d8:56:8a:3e: a5:1a:fa:1d:92:53:b7:b1:fd:07:74:91:fe:23:85:de:62:80: fc:81:c3:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjYxMTAvBgNVBAUTKDI4Q0FFRTg0OTY1NjlDNTczQzNFNUIxODkwQzVBMUIz NENGQzhFMzAwHhcNMjYwNTIwMTkxODEzWhcNMjYwNTI3MTkxODEzWjAYMRYwFAYD VQQDEw02YTBlMDhmNi01ZTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8Wg+BIVfvvz2NA9knzuxl+d1FHkJWLysY2GjZ9RkeIwO1xPgYKCSDsRnJ/v 0chE+gOYwa2e0afp/WRo2y1VRR2dZCBtuvVO9oPkWe/lW3OHnYV1c1Ylo9T68DNa K2HWFsa91aq7q682xBmw9IfP38iBLv3Nrjh87SBn/gbj2xfI5GptqBzodqh+154s Vnsq04IV4BgJ5OuyBU36lTNhXQY8y9hr0o+oJc8MeESYxYrwWFXs1Fg5Gidfcglt bVRbmbMp7WlAW8C1hfoY6C8jMs+4TUKYSItcUNAJEFdC8QB+Ty8lp7eHuxonnZEB 3E0cKvVWYSMWN6k8RVsWPqLMDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP9IJwEH LxKG9ZAAyWO2MRX/Jv7vMB8GA1UdIwQYMBaAFCjK7oSWVpxXPD5bGJDFobNM/I4w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNi85MzgwMDc4RTYx RDYxMUVBQjhEMDE1NUJDNEY5QUUwMi9LTXJ1aEpaV25GYzhQbHNZa01XaHMwejhq akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tNcnVoSlpXbkZjOFBsc1lrTVdoczB6OGpqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNi85MzgwMDc4RTYxRDYxMUVBQjhEMDE1NUJDNEY5QUUwMi9LTXJ1aEpaV25G YzhQbHNZa01XaHMwejhqakEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG2oZZAbmGvlpg9B82O74J0O1Haxx4HOHaclMxF+zZMcjtBIOV0vRIIOf1grg eA6ShFMNapFDvQneVJj1OgCJisBdpRsi6QbM7HPDSP7pj+SCb9cPsU1X+/Tx85Na xgmHPk3nQThE7tOVpOeEwevWShF3CYuK7kiV3Xd6AJqaolEDbcf6AN9a9gRoZwWr iVBi/RKQNnn84ASndlRpsquFQRlxfpq/nyebsOlsXCEWseZNN4ltVHWMe8KmgGWz /hBRxx6bMBrf5NqQydnQgXYKlXwiVM9fRvf2lWfhhB8Zj9IOb+2GLhrYVoo+pRr6 HZJTt7H9B3SR/iOF3mKA/IHD9Q== -----END CERTIFICATE-----Generated at Thu May 21 10:29:03 2026 by rpki-client