$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft File: ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft (raw, json) Hash identifier: TRFBDdzf0BIHy89t0IOlYh3II8kX3I4DymhS4GBv8Ys= Subject key identifier: 1B:39:78:A4:5A:2D:FF:1C:D0:CA:0A:D7:E6:6D:3D:95:73:59:C1:0B Authority key identifier: 92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30 Certificate issuer: /CN=A91ED9F9/serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530 Certificate serial: 01B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft Manifest number: 01A8 Signing time: Tue 05 May 2026 04:07:49 +0000 Manifest this update: Tue 05 May 2026 04:07:49 +0000 Manifest next update: Tue 12 May 2026 04:07:49 +0000 Files and hashes: 1: ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl (hash: CM8dm1JDEn0t08aaS9Kp9+Q9LkCvb+uYhGcMn8+plk4=) 2: BAE1F274190511F0826DA721C4F9AE02.roa (hash: wp5Bbdm9q2bQP+NH3qhWvc9NbTFLA+VfDHmL/JL9bns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 May 2026 04:07:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED9F9, serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530 Validity Not Before: May 5 04:07:49 2026 GMT Not After : May 12 04:07:49 2026 GMT Subject: CN=69f96d15-c096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f3:51:39:96:d3:37:56:93:15:fe:c0:43:b9: 32:6b:02:ec:9a:28:e7:4d:ff:a4:06:5f:a2:28:42: 03:df:26:9c:ce:80:4e:ee:5a:8a:8e:5b:de:7b:89: 19:11:23:52:ba:25:3e:b9:f5:d6:55:23:1b:ab:99: 74:35:c2:14:3f:0d:47:fa:09:53:31:c6:d1:eb:23: a5:af:06:0e:20:44:bc:ed:47:f7:1a:c6:7f:89:b1: ed:4c:c1:c5:91:e5:85:6d:01:20:a8:3d:b7:00:26: 51:bc:f7:94:48:f3:46:22:8f:45:3a:54:a6:8c:79: 03:37:60:b3:ea:02:26:ab:85:c6:e6:4c:4f:40:16: 75:05:0e:1f:21:a3:fe:c3:1d:91:15:09:ce:a5:69: 10:86:83:46:19:45:bf:12:d1:7f:f6:98:21:4e:ef: 1b:15:da:54:e6:b6:c2:ac:0e:ec:4c:ce:2f:ff:bd: 28:ed:86:4e:ce:e1:98:d7:19:5c:90:20:46:42:cc: bb:50:68:70:c6:d4:7b:42:be:c8:ff:90:cf:f2:9c: 52:8f:0a:40:f9:0f:3b:45:ec:89:10:82:da:3a:37: 05:e0:26:e5:7c:40:9f:fa:16:8f:aa:9a:48:08:07: fc:03:96:20:cb:60:66:18:19:7d:a3:8e:49:cb:d8: 8d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:39:78:A4:5A:2D:FF:1C:D0:CA:0A:D7:E6:6D:3D:95:73:59:C1:0B X509v3 Authority Key Identifier: keyid:92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:91:fa:96:79:1c:ea:b1:6e:1e:f9:cc:94:40:ea:e2:fb:27: 1d:68:44:71:b7:72:33:32:2e:a7:2e:f8:79:98:83:e8:7f:76: 1e:2f:e0:20:ab:ae:db:e8:b9:33:94:1e:fe:8a:43:dc:2e:da: 17:54:39:8f:8b:0b:dd:23:ce:19:40:5b:e4:0c:6d:95:2a:b6: a8:c8:59:53:8d:5b:f0:4d:64:48:4a:25:bb:0f:84:53:79:53: e4:3e:30:76:a5:f3:2c:16:0a:56:a6:79:d2:dd:ac:55:81:f6: 9c:d2:91:d8:71:77:4f:55:c3:27:a7:10:86:40:1a:0b:08:47: 55:f8:3c:ad:d4:16:94:e1:35:70:22:6d:be:30:af:8a:be:d4: 4a:53:85:a3:fa:f1:2c:b9:5b:ea:bc:ab:d7:ea:14:ba:fe:b8: b0:9b:45:28:ca:4f:0f:7a:fd:60:59:2a:5c:bb:2a:d7:08:a0: 8d:8e:19:99:17:db:01:22:0a:dc:5c:0e:05:25:62:32:6d:8d: 27:dc:81:37:e9:c8:69:e7:2c:bd:e2:44:ae:f1:c7:d7:31:d3: 67:61:46:fa:ea:25:5a:cd:8f:d3:54:a7:6e:16:70:1a:d3:9f: 25:cc:79:29:08:92:09:3c:38:0a:17:52:d7:1a:67:b3:32:8b: 0e:41:ed:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ5RjkxMTAvBgNVBAUTKDkyRUZENUMwQjkyMDFBN0VEMzk2NUYyRDk4QjZEOUVC NjYyOTA1MzAwHhcNMjYwNTA1MDQwNzQ5WhcNMjYwNTEyMDQwNzQ5WjAYMRYwFAYD VQQDEw02OWY5NmQxNS1jMDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPNROZbTN1aTFf7AQ7kyawLsmijnTf+kBl+iKEID3yaczoBO7lqKjlvee4kZ ESNSuiU+ufXWVSMbq5l0NcIUPw1H+glTMcbR6yOlrwYOIES87Uf3GsZ/ibHtTMHF keWFbQEgqD23ACZRvPeUSPNGIo9FOlSmjHkDN2Cz6gImq4XG5kxPQBZ1BQ4fIaP+ wx2RFQnOpWkQhoNGGUW/EtF/9pghTu8bFdpU5rbCrA7sTM4v/70o7YZOzuGY1xlc kCBGQsy7UGhwxtR7Qr7I/5DP8pxSjwpA+Q87ReyJEILaOjcF4CblfECf+haPqppI CAf8A5Ygy2BmGBl9o45Jy9iNZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBs5eKRa Lf8c0MoK1+ZtPZVzWcELMB8GA1UdIwQYMBaAFJLv1cC5IBp+05ZfLZi22etmKQUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDlGOS82ODYwRDVBMEM5 NTIxMUVFQjdBRERENEVDNEY5QUUwMi9rdV9Wd0xrZ0duN1RsbDh0bUxiWjYyWXBC VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t1X1Z3TGtnR243VGxsOHRtTGJaNjJZcEJUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDlGOS82ODYwRDVBMEM5NTIxMUVFQjdBRERENEVDNEY5QUUwMi9rdV9Wd0xrZ0du N1RsbDh0bUxiWjYyWXBCVEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALpH6lnkc6rFuHvnMlEDq4vsnHWhEcbdyMzIupy74eZiD6H92Hi/gIKuu2+i5 M5Qe/opD3C7aF1Q5j4sL3SPOGUBb5AxtlSq2qMhZU41b8E1kSEoluw+EU3lT5D4w dqXzLBYKVqZ50t2sVYH2nNKR2HF3T1XDJ6cQhkAaCwhHVfg8rdQWlOE1cCJtvjCv ir7USlOFo/rxLLlb6ryr1+oUuv64sJtFKMpPD3r9YFkqXLsq1wigjY4ZmRfbASIK 3FwOBSViMm2NJ9yBN+nIaecsveJErvHH1zHTZ2FG+uolWs2P01SnbhZwGtOfJcx5 KQiSCTw4ChdS1xpnszKLDkHtMw== -----END CERTIFICATE-----Generated at Thu May 7 03:35:15 2026 by rpki-client