$ rpki-client -vvf rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft File: aK5b6xu35ELO4KfgFAKf9y49tB8.mft (raw, json) Hash identifier: RzQNrZf7xbAcTFEW8wV0qKlHaqXhEIo6CjaEsANlDrM= Subject key identifier: A4:0E:03:18:31:AE:AB:F7:9A:41:BF:0C:0E:4E:84:07:BE:DF:E8:FB Authority key identifier: 68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F Certificate issuer: /CN=A91104C9/serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F Certificate serial: 0CBD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft Manifest number: 0CAF Signing time: Wed 20 May 2026 18:31:54 +0000 Manifest this update: Wed 20 May 2026 18:31:53 +0000 Manifest next update: Wed 27 May 2026 18:31:53 +0000 Files and hashes: 1: aK5b6xu35ELO4KfgFAKf9y49tB8.crl (hash: zNi+HWNu+UBa9S+LU+kV2wMjiPLFo9i3EpG8yNZzh00=) 2: 4C1F013E5AF511EFBAB1F86CC4F9AE02.roa (hash: S7vABV4LANs4s/qDbVNaE7a/E/6cf6qzp42fekgpXlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.crl rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3261 (0xcbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91104C9, serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F Validity Not Before: May 20 18:31:53 2026 GMT Not After : May 27 18:31:53 2026 GMT Subject: CN=6a0dfe1a-173f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:16:32:9b:e9:46:49:bc:79:17:ea:34:19:cd: 19:b6:29:b1:b7:5c:0f:5f:05:0c:42:fd:78:1c:ed: 0f:0e:4c:e1:f7:7f:3b:12:91:4a:26:c2:5f:b7:b1: 00:63:c0:fa:76:88:90:a3:f2:e5:23:24:21:b8:e7: bc:a9:39:50:6e:86:fb:8e:2d:31:c9:da:18:1a:9d: a2:73:cd:83:88:b3:a4:18:42:49:73:e7:b0:a5:cf: c4:9e:f5:c2:b8:b9:f4:6a:28:e0:1e:39:20:c0:b1: 6a:0d:69:d1:3b:13:06:0d:49:ac:01:43:d6:3e:ac: 9f:bf:f4:cf:fb:19:ee:13:9a:07:09:c7:b1:74:79: f7:d6:c1:d7:d3:8d:de:12:95:81:c8:b1:77:8b:b3: 7a:21:0c:ec:96:16:29:4c:87:8d:fd:af:72:d9:f3: ba:d9:76:fd:d4:62:c3:2c:46:1e:82:4c:52:59:7f: 72:4d:26:05:64:e1:8d:c2:25:f2:d3:b8:ae:0e:a6: 5f:62:8b:7d:16:f3:9c:56:3b:91:5d:1e:ab:f4:53: 72:88:dd:14:02:90:ab:7c:2a:c1:61:93:b8:e4:8a: 97:d7:ce:cf:8f:cb:03:2f:ca:b0:a6:ad:b9:fa:9b: f8:c6:c9:b5:b4:09:a8:03:ee:21:66:f2:cc:3b:71: 78:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:0E:03:18:31:AE:AB:F7:9A:41:BF:0C:0E:4E:84:07:BE:DF:E8:FB X509v3 Authority Key Identifier: keyid:68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:54:9a:cb:a9:72:b1:15:3c:8c:1a:a4:39:f0:02:1f:4e:92: 51:c2:a7:12:be:9f:7f:06:d1:21:a9:5d:fe:45:7e:52:10:54: 1f:d4:44:50:0f:52:d9:7d:de:7d:95:cd:4b:ff:f7:e9:19:a0: b1:9e:08:8f:ef:7c:ee:15:24:ff:92:4c:82:1e:c5:b7:a6:76: 5b:15:24:0e:4e:6c:03:25:68:e6:48:48:32:ce:14:ec:bd:7c: 59:46:4e:3f:25:76:d1:04:06:ae:a3:13:1b:4b:1e:a9:5f:69: 79:a9:b9:9f:4f:a1:04:e4:a4:07:7a:de:89:88:97:17:f9:30: a0:8a:55:c1:8d:51:60:11:8f:fd:ce:08:57:76:18:4a:69:a1: 7d:c8:76:c4:ef:a0:03:fc:42:be:50:47:cd:2f:c0:9c:5a:36: c3:05:4d:d4:fd:62:1b:4b:ce:1d:c8:75:ba:9e:1a:3d:e8:30: 1e:18:84:86:b0:59:79:b5:54:78:81:73:d3:01:50:8f:73:51: 0b:27:47:70:f1:88:62:c0:6d:99:29:46:68:c5:6b:ca:e2:60: bd:f6:35:1a:d8:c5:3f:54:a2:04:a4:14:76:c2:3f:29:89:e4: 7a:cd:66:eb:a4:d6:b4:2e:6f:db:4c:01:6f:23:8c:76:96:e2: 3a:43:b2:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA0QzkxMTAvBgNVBAUTKDY4QUU1QkVCMUJCN0U0NDJDRUUwQTdFMDE0MDI5RkY3 MkUzREI0MUYwHhcNMjYwNTIwMTgzMTUzWhcNMjYwNTI3MTgzMTUzWjAYMRYwFAYD VQQDEw02YTBkZmUxYS0xNzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBYym+lGSbx5F+o0Gc0Ztimxt1wPXwUMQv14HO0PDkzh9387EpFKJsJft7EA Y8D6doiQo/LlIyQhuOe8qTlQbob7ji0xydoYGp2ic82DiLOkGEJJc+ewpc/EnvXC uLn0aijgHjkgwLFqDWnROxMGDUmsAUPWPqyfv/TP+xnuE5oHCcexdHn31sHX043e EpWByLF3i7N6IQzslhYpTIeN/a9y2fO62Xb91GLDLEYegkxSWX9yTSYFZOGNwiXy 07iuDqZfYot9FvOcVjuRXR6r9FNyiN0UApCrfCrBYZO45IqX187Pj8sDL8qwpq25 +pv4xsm1tAmoA+4hZvLMO3F4HQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKQOAxgx rqv3mkG/DA5OhAe+3+j7MB8GA1UdIwQYMBaAFGiuW+sbt+RCzuCn4BQCn/cuPbQf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDRDOS8yQUE4QjM4ODE0 QzgxMUVBODdEMTUxNkNDNEY5QUUwMi9hSzViNnh1MzVFTE80S2ZnRkFLZjl5NDl0 QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FLNWI2eHUzNUVMTzRLZmdGQUtmOXk0OXRCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDRDOS8yQUE4QjM4ODE0QzgxMUVBODdEMTUxNkNDNEY5QUUwMi9hSzViNnh1MzVF TE80S2ZnRkFLZjl5NDl0QjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWVSay6lysRU8jBqkOfACH06SUcKnEr6ffwbRIald/kV+UhBUH9REUA9S2X3e fZXNS//36RmgsZ4Ij+987hUk/5JMgh7Ft6Z2WxUkDk5sAyVo5khIMs4U7L18WUZO PyV20QQGrqMTG0seqV9peam5n0+hBOSkB3reiYiXF/kwoIpVwY1RYBGP/c4IV3YY Smmhfch2xO+gA/xCvlBHzS/AnFo2wwVN1P1iG0vOHch1up4aPegwHhiEhrBZebVU eIFz0wFQj3NRCydHcPGIYsBtmSlGaMVryuJgvfY1GtjFP1SiBKQUdsI/KYnkes1m 66TWtC5v20wBbyOMdpbiOkOyQQ== -----END CERTIFICATE-----Generated at Thu May 21 11:16:39 2026 by rpki-client