$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft File: kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft (raw, json) Hash identifier: oK+HDRO6CUiKw3rfCaeRpypMoLnOdsIWaf8L4wGu6bw= Subject key identifier: 5D:6A:B7:77:2E:F3:D9:C7:DC:9A:69:36:87:3C:71:C9:84:17:89:0B Authority key identifier: 91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09 Certificate issuer: /CN=A91FF5B9/serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09 Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft Manifest number: E3 Signing time: Thu 21 May 2026 06:46:21 +0000 Manifest this update: Thu 21 May 2026 06:46:21 +0000 Manifest next update: Thu 28 May 2026 06:46:21 +0000 Files and hashes: 1: kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl (hash: ookpu7SU972CTFa9ASgLQagxcLqAQunug0C7f/KRkU8=) 2: B754B304107A11F19C5931212E3D8C67.roa (hash: huCm1mBmBIglhSBRl6UnmkwQvjS11VKDaF0YxEP0qiI=) 3: E658E72CB4A611F08CEAB576C4F9AE02.roa (hash: LB1cMpp6lgRAraUuswM5qd18Dx/7M0dNMmnPvZo4tAw=) 4: 48FC67FA3F0311F19638C692C8833773.roa (hash: q/F4IX1jrr64j6ZLgDWTXya8iVRGveIbkohShgwB5Hc=) 5: DA700744185511F09304D972C4F9AE02.roa (hash: xEV8fhHLEIKGrI5YTOsWxn19pEc9YJdRhWQdUmLp4HI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 06:46:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF5B9, serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09 Validity Not Before: May 21 06:46:21 2026 GMT Not After : May 28 06:46:21 2026 GMT Subject: CN=6a0eaa3d-60b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5c:94:64:7d:3c:5c:ca:7f:b2:a9:df:47:82: 87:22:62:01:55:e6:30:81:9d:29:a2:19:fd:3b:31: 08:e7:3b:bd:5a:1f:cb:dc:b9:9b:6c:f3:b7:6e:a6: c2:5b:9e:f5:b9:f8:7d:45:4f:ed:92:37:9d:a5:b2: 1d:99:d2:c1:46:ff:a6:41:21:d8:fc:eb:80:69:bc: 04:35:3c:5f:e5:af:21:fc:ef:ed:63:c5:0d:b5:85: 2f:cc:59:84:a7:55:8c:c6:29:ae:0e:9a:77:ad:de: 80:7b:82:5e:f9:1e:a7:93:9e:bd:c4:1f:99:f3:e7: e0:52:00:a9:a5:ba:08:d3:c5:83:e0:32:c9:e7:71: 60:61:d7:5f:1e:df:c6:fe:a8:d3:e8:ab:bf:40:ad: 1c:59:bc:58:33:43:9b:ef:37:8e:f4:b2:a8:27:16: c8:bc:e9:92:ae:39:f1:f3:e9:b5:d0:a0:3e:c7:f2: 86:c5:03:df:3d:be:36:58:a6:f9:ef:53:0c:f4:18: 6b:01:3d:5e:ca:3d:66:31:35:78:12:b3:9f:43:5d: 74:ce:cd:ec:8f:30:e5:a7:e0:6d:51:e5:ba:a9:31: 5c:1f:d9:82:cc:c4:e4:75:df:b0:f7:f9:79:ef:72: 1e:90:9a:75:fa:2f:b4:12:ad:af:ed:53:fd:a0:dd: cd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:6A:B7:77:2E:F3:D9:C7:DC:9A:69:36:87:3C:71:C9:84:17:89:0B X509v3 Authority Key Identifier: keyid:91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:85:4d:4e:bb:13:87:ad:19:8a:28:5b:d4:44:a5:72:11:50: f3:40:6b:95:e9:69:2c:c7:39:06:ca:4d:6a:ec:82:92:2b:37: 88:68:70:55:8f:2a:8c:e5:cf:96:e6:31:51:75:86:5b:05:59: 6c:fb:6b:e9:b8:3e:97:0d:be:db:dc:00:1d:c5:aa:6b:0b:74: 3d:74:00:48:d7:7b:65:71:2d:dd:65:3e:25:e9:61:06:41:ce: c9:a9:2e:01:49:8b:92:02:12:86:3a:86:8a:8d:31:1e:85:98: 87:a1:dc:23:40:63:97:90:5b:9d:19:48:94:d5:80:d3:54:ee: 3a:db:45:7d:c6:6f:73:ab:b8:3b:e2:d4:cc:e5:b7:85:18:41: 6d:61:43:c8:39:2b:2e:53:3f:f3:06:37:1c:60:16:41:fa:1e: 0d:64:26:73:e3:c5:e6:de:a0:92:bb:5c:b8:ac:60:49:82:96: c1:6c:2b:dd:4e:66:a1:a0:eb:f7:21:13:da:1d:82:65:78:99: 53:9a:e7:25:dc:a0:e2:e7:6f:a7:fb:0f:3b:e1:88:9b:ae:11: 31:26:67:f0:cd:3c:60:a9:83:7a:6f:97:65:39:e6:b1:65:d7: 7d:13:bc:67:9b:00:cc:ae:93:34:86:5a:28:83:da:8d:f2:a8: 50:44:69:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY1QjkxMTAvBgNVBAUTKDkxMTc2RDE2OUM0MkYwM0Q5NTI4MkJCQkEyMDRDNEU0 NEQzMUVEMDkwHhcNMjYwNTIxMDY0NjIxWhcNMjYwNTI4MDY0NjIxWjAYMRYwFAYD VQQDEw02YTBlYWEzZC02MGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1lyUZH08XMp/sqnfR4KHImIBVeYwgZ0pohn9OzEI5zu9Wh/L3LmbbPO3bqbC W571ufh9RU/tkjedpbIdmdLBRv+mQSHY/OuAabwENTxf5a8h/O/tY8UNtYUvzFmE p1WMximuDpp3rd6Ae4Je+R6nk569xB+Z8+fgUgCppboI08WD4DLJ53FgYddfHt/G /qjT6Ku/QK0cWbxYM0Ob7zeO9LKoJxbIvOmSrjnx8+m10KA+x/KGxQPfPb42WKb5 71MM9BhrAT1eyj1mMTV4ErOfQ110zs3sjzDlp+BtUeW6qTFcH9mCzMTkdd+w9/l5 73IekJp1+i+0Eq2v7VP9oN3NvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF1qt3cu 89nH3JppNoc8ccmEF4kLMB8GA1UdIwQYMBaAFJEXbRacQvA9lSgru6IExORNMe0J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVCOS81MjAyRDAyODBE RjkxMUYwOEU2RTc2MkFDNEY5QUUwMi9rUmR0RnB4QzhEMlZLQ3U3b2dURTVFMHg3 UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tSZHRGcHhDOEQyVktDdTdvZ1RFNUUweDdRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjVCOS81MjAyRDAyODBERjkxMUYwOEU2RTc2MkFDNEY5QUUwMi9rUmR0RnB4QzhE MlZLQ3U3b2dURTVFMHg3UWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOoVNTrsTh60Ziihb1ESlchFQ80BrlelpLMc5BspNauyCkis3iGhwVY8qjOXP luYxUXWGWwVZbPtr6bg+lw2+29wAHcWqawt0PXQASNd7ZXEt3WU+JelhBkHOyaku AUmLkgIShjqGio0xHoWYh6HcI0Bjl5BbnRlIlNWA01TuOttFfcZvc6u4O+LUzOW3 hRhBbWFDyDkrLlM/8wY3HGAWQfoeDWQmc+PF5t6gkrtcuKxgSYKWwWwr3U5moaDr 9yET2h2CZXiZU5rnJdyg4udvp/sPO+GIm64RMSZn8M08YKmDem+XZTnmsWXXfRO8 Z5sAzK6TNIZaKIPajfKoUERpAQ== -----END CERTIFICATE-----Generated at Thu May 21 13:23:18 2026 by rpki-client