$ rpki-client -vvf rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft File: EMpiwqdJv5H1YirewPGWGEk8u6k.mft (raw, json) Hash identifier: XjOg1I+G8k0nzexszN3M+JXysKhKxJAqSCbjUObD4a4= Subject key identifier: 92:E1:11:B2:D1:51:0E:B1:9C:29:35:FE:C0:BC:1F:94:E5:54:83:BE Authority key identifier: 10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9 Certificate issuer: /CN=A91306B2/serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9 Certificate serial: 02AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft Manifest number: 02A2 Signing time: Thu 21 May 2026 01:35:20 +0000 Manifest this update: Thu 21 May 2026 01:35:20 +0000 Manifest next update: Thu 28 May 2026 01:35:20 +0000 Files and hashes: 1: EMpiwqdJv5H1YirewPGWGEk8u6k.crl (hash: knoypg7pExfpKxpYnbCRgolR2npoYHIG/FxokNZqnSM=) 2: 695CA6D414BF11EEB8B95B7FC4F9AE02.roa (hash: 7oAXnZAUBtQjX3ZHXMNMC7v8KvbechSNV9axONzAjso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 01:35:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 686 (0x2ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91306B2, serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9 Validity Not Before: May 21 01:35:20 2026 GMT Not After : May 28 01:35:20 2026 GMT Subject: CN=6a0e6158-91bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:aa:82:68:95:34:a8:ec:8b:9d:99:92:b2:ce: 2e:e1:77:ba:fc:67:2c:6a:13:dc:29:8f:cc:b6:5d: 1a:c0:9b:bb:ba:71:87:b8:6a:7c:bb:5e:c8:66:66: 3a:d7:6f:1c:30:fb:e9:7b:8d:e6:39:ba:1c:2d:b1: e9:e1:ff:f2:2c:84:0e:20:03:bf:7f:39:d5:97:33: 0f:08:ed:5e:18:a4:1f:ec:9f:21:22:70:cd:2f:0f: b4:19:72:0c:3e:ea:e0:14:53:e6:af:95:b6:55:38: 23:ba:f6:fe:8d:2f:c4:d7:d9:f8:0d:df:1b:b8:32: 2c:b9:f8:84:c2:25:de:9a:6b:ce:0d:67:db:2f:fd: 40:00:4e:25:71:5b:dc:8e:7f:9c:82:ec:0a:90:f3: 0d:29:f5:c8:ce:35:d0:e4:e1:7e:8a:54:95:e5:72: 9b:a3:54:2f:68:a8:d9:71:0b:c2:e5:c0:b0:74:0d: 45:30:1c:08:55:61:0e:c0:5f:c1:07:89:a3:2d:0c: 0d:aa:1c:e2:79:3c:74:36:9e:9b:0a:fd:93:e7:e3: d6:b8:27:06:ef:a3:49:a6:61:68:a3:9d:e0:dd:7b: ab:cc:33:81:cb:f1:f7:65:c7:74:b0:25:11:ee:7d: 17:54:72:d1:be:c4:2e:75:a4:47:cd:1b:b0:15:85: de:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E1:11:B2:D1:51:0E:B1:9C:29:35:FE:C0:BC:1F:94:E5:54:83:BE X509v3 Authority Key Identifier: keyid:10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:30:96:16:eb:89:6f:4d:df:d7:6f:b4:b2:d2:d1:bb:24:be: 54:e4:5f:32:7c:0a:a1:b4:77:e7:09:e3:93:a8:6a:fa:31:ef: 98:d7:9f:e3:39:4a:81:59:06:87:cd:51:99:ea:8f:80:e2:96: 16:7e:c2:bb:75:b6:2e:6f:55:c3:6c:7b:66:e1:65:7e:34:0b: 43:82:3b:06:95:30:d4:a6:21:9e:88:6d:30:61:9e:7b:e1:19: 60:8d:89:11:d5:7a:18:85:3e:46:a5:95:91:9f:01:ad:d4:93: ca:44:d2:a2:45:b8:04:49:17:dc:ed:e7:bb:2c:95:9d:6c:00: fb:f4:41:01:e3:68:e9:1c:0d:45:48:51:16:9c:9c:5e:ab:fd: 85:8b:ce:ef:d0:b8:47:54:08:f4:5b:fe:33:78:d7:1b:08:ea: 71:89:f1:0b:e2:71:aa:6d:66:e7:22:a1:ee:35:15:3a:f6:a5: 61:68:ca:bb:f5:15:53:39:d5:08:da:74:2e:2c:88:d5:4c:b7: cd:c7:dc:58:44:bb:e1:2c:f2:2d:df:2a:10:eb:5d:50:fd:c8: 2f:b4:a2:3f:72:10:9c:75:6c:59:79:6f:c9:26:ac:28:96:59: 64:dc:4a:01:76:c8:9a:5a:a0:18:6f:88:d8:c0:de:fa:fa:1b: ea:d8:0b:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA2QjIxMTAvBgNVBAUTKDEwQ0E2MkMyQTc0OUJGOTFGNTYyMkFERUMwRjE5NjE4 NDkzQ0JCQTkwHhcNMjYwNTIxMDEzNTIwWhcNMjYwNTI4MDEzNTIwWjAYMRYwFAYD VQQDEw02YTBlNjE1OC05MWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKqCaJU0qOyLnZmSss4u4Xe6/GcsahPcKY/Mtl0awJu7unGHuGp8u17IZmY6 128cMPvpe43mObocLbHp4f/yLIQOIAO/fznVlzMPCO1eGKQf7J8hInDNLw+0GXIM PurgFFPmr5W2VTgjuvb+jS/E19n4Dd8buDIsufiEwiXemmvODWfbL/1AAE4lcVvc jn+cguwKkPMNKfXIzjXQ5OF+ilSV5XKbo1QvaKjZcQvC5cCwdA1FMBwIVWEOwF/B B4mjLQwNqhzieTx0Np6bCv2T5+PWuCcG76NJpmFoo53g3XurzDOBy/H3Zcd0sCUR 7n0XVHLRvsQudaRHzRuwFYXe4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJLhEbLR UQ6xnCk1/sC8H5TlVIO+MB8GA1UdIwQYMBaAFBDKYsKnSb+R9WIq3sDxlhhJPLup MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDZCMi8zMjFGREQzRTRE ODMxMUVEODdGQjFFNkZDNEY5QUUwMi9FTXBpd3FkSnY1SDFZaXJld1BHV0dFazh1 NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VNcGl3cWRKdjVIMVlpcmV3UEdXR0VrOHU2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDZCMi8zMjFGREQzRTREODMxMUVEODdGQjFFNkZDNEY5QUUwMi9FTXBpd3FkSnY1 SDFZaXJld1BHV0dFazh1NmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmDCWFuuJb03f12+0stLRuyS+VORfMnwKobR35wnjk6hq+jHvmNef4zlKgVkG h81RmeqPgOKWFn7Cu3W2Lm9Vw2x7ZuFlfjQLQ4I7BpUw1KYhnohtMGGee+EZYI2J EdV6GIU+RqWVkZ8BrdSTykTSokW4BEkX3O3nuyyVnWwA+/RBAeNo6RwNRUhRFpyc Xqv9hYvO79C4R1QI9Fv+M3jXGwjqcYnxC+Jxqm1m5yKh7jUVOvalYWjKu/UVUznV CNp0LiyI1Uy3zcfcWES74SzyLd8qEOtdUP3IL7SiP3IQnHVsWXlvySasKJZZZNxK AXbImlqgGG+I2MDe+vob6tgLRg== -----END CERTIFICATE-----Generated at Thu May 21 09:38:06 2026 by rpki-client