$ rpki-client -vvf rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft File: R4tJDpOd3d8hrKx4y5MZinuBRIU.mft (raw, json) Hash identifier: N57nKaeunq4k1sC/I4ztlDSDqssfONPkU1quIAw4T18= Subject key identifier: 14:5E:67:9B:94:B8:60:B4:B0:E4:A1:A4:44:47:90:62:64:07:05:E7 Authority key identifier: 47:8B:49:0E:93:9D:DD:DF:21:AC:AC:78:CB:93:19:8A:7B:81:44:85 Certificate issuer: /CN=A91427E2/serialNumber=478B490E939DDDDF21ACAC78CB93198A7B814485 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft Manifest number: 0129 Signing time: Thu 21 May 2026 05:45:50 +0000 Manifest this update: Thu 21 May 2026 05:45:49 +0000 Manifest next update: Thu 28 May 2026 05:45:49 +0000 Files and hashes: 1: R4tJDpOd3d8hrKx4y5MZinuBRIU.crl (hash: 13wvIUo2J05TSSzEwNry1rWzRTnyh1tElz0C3kdgkeM=) 2: 534DAEB2935111EF98AA8C86C4F9AE02.roa (hash: 5eXsqyDi4zXv3lkd2PQOUbJIFyY5qvfFcyW7Q/IiG9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.crl rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 05:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91427E2, serialNumber=478B490E939DDDDF21ACAC78CB93198A7B814485 Validity Not Before: May 21 05:45:49 2026 GMT Not After : May 28 05:45:49 2026 GMT Subject: CN=6a0e9c0e-3f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3f:70:4b:6e:ce:86:82:c4:fb:3e:0b:e3:07: f1:79:47:7b:af:11:a2:21:c4:44:b8:d4:86:3d:12: 8d:9c:88:bb:68:41:8a:2d:dd:2f:61:01:ab:57:9c: 35:ae:17:a2:47:64:70:a7:60:e4:d9:cf:02:8c:10: ee:f4:d5:41:63:d6:0c:1a:15:76:00:f6:0c:41:9b: 72:6f:ec:0a:c2:1b:3c:08:13:40:d9:4c:b0:1c:c2: 9c:6f:f0:77:b7:de:86:08:01:35:67:5d:6d:a4:04: dc:4a:8f:69:8b:0a:5c:9b:0e:f4:f4:85:0e:92:48: 0c:3f:ad:f7:1d:46:59:d4:cb:2a:2d:3d:5c:d5:30: a2:10:c8:e1:3e:f1:ff:58:c1:6f:0b:2f:5c:c2:c0: 43:cc:2a:e4:49:00:c2:6f:ea:8b:03:fd:8a:de:34: f6:a2:63:86:26:89:3a:d9:c7:97:d3:43:af:70:df: 05:9b:06:88:d3:20:25:7f:aa:ce:0e:fc:c6:33:b1: e3:5a:fc:77:71:08:93:fa:d1:3d:51:ef:7c:00:dd: fd:28:01:8e:92:c6:cc:15:41:11:94:46:40:e8:6f: f1:01:6b:52:b8:15:17:b6:37:27:17:dc:88:93:fb: 5c:38:3f:58:e5:10:ef:a6:22:b7:9a:ec:29:ae:b6: 1f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:5E:67:9B:94:B8:60:B4:B0:E4:A1:A4:44:47:90:62:64:07:05:E7 X509v3 Authority Key Identifier: keyid:47:8B:49:0E:93:9D:DD:DF:21:AC:AC:78:CB:93:19:8A:7B:81:44:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:93:0c:bc:7e:90:5c:20:57:b3:04:8e:ca:89:97:4c:86:35: e9:fa:dd:3b:d7:df:ba:f8:e7:a5:e5:b5:78:6d:de:f7:ad:a3: c4:0d:f4:73:2b:ec:8e:67:1d:13:12:cc:5d:e9:0f:86:d0:13: c9:fd:45:21:d7:ca:c0:b6:d2:81:b1:9f:5d:27:b4:14:e3:1a: cf:be:64:9d:4a:1e:05:79:94:a9:bf:4e:81:a9:a5:97:7e:45: c5:37:32:e5:c6:4f:a9:df:a5:76:f1:bd:c0:a6:7a:e2:33:05: 6e:c5:a1:4e:18:03:79:e9:e6:42:ac:a3:9d:55:a7:57:21:8a: 4a:a0:0a:16:67:b3:54:b3:37:c6:0c:98:41:07:89:1d:97:87: 65:60:fa:3b:73:a0:3b:06:a4:70:bd:9e:4f:68:82:c5:07:86: 84:e8:49:51:c1:44:bc:8f:f2:80:1a:48:f4:1d:0e:ac:d5:f3: 48:0a:1d:ce:9d:06:c4:ef:17:ec:68:65:38:4f:33:83:f5:43: 48:e5:e5:5e:20:1e:a5:57:3f:bb:0c:d3:d8:d7:1d:cf:6c:24: e9:de:ee:9c:06:c3:1f:2d:0f:39:88:ac:b9:7d:10:0a:71:cb: ba:a9:5e:a8:59:84:c0:15:37:52:8f:41:d3:85:38:3f:bc:ef: 47:ad:dd:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3RTIxMTAvBgNVBAUTKDQ3OEI0OTBFOTM5REREREYyMUFDQUM3OENCOTMxOThB N0I4MTQ0ODUwHhcNMjYwNTIxMDU0NTQ5WhcNMjYwNTI4MDU0NTQ5WjAYMRYwFAYD VQQDEw02YTBlOWMwZS0zZjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1j9wS27OhoLE+z4L4wfxeUd7rxGiIcREuNSGPRKNnIi7aEGKLd0vYQGrV5w1 rheiR2Rwp2Dk2c8CjBDu9NVBY9YMGhV2APYMQZtyb+wKwhs8CBNA2UywHMKcb/B3 t96GCAE1Z11tpATcSo9piwpcmw709IUOkkgMP633HUZZ1MsqLT1c1TCiEMjhPvH/ WMFvCy9cwsBDzCrkSQDCb+qLA/2K3jT2omOGJok62ceX00OvcN8FmwaI0yAlf6rO DvzGM7HjWvx3cQiT+tE9Ue98AN39KAGOksbMFUERlEZA6G/xAWtSuBUXtjcnF9yI k/tcOD9Y5RDvpiK3muwprrYfdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBReZ5uU uGC0sOShpERHkGJkBwXnMB8GA1UdIwQYMBaAFEeLSQ6Tnd3fIayseMuTGYp7gUSF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjdFMi83ODNERkJDNDkz NTAxMUVGQkFDRTAwNENDNEY5QUUwMi9SNHRKRHBPZDNkOGhyS3g0eTVNWmludUJS SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I0dEpEcE9kM2Q4aHJLeDR5NU1aaW51QlJJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjdFMi83ODNERkJDNDkzNTAxMUVGQkFDRTAwNENDNEY5QUUwMi9SNHRKRHBPZDNk OGhyS3g0eTVNWmludUJSSVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArpMMvH6QXCBXswSOyomXTIY16frdO9ffuvjnpeW1eG3e962jxA30cyvsjmcd ExLMXekPhtATyf1FIdfKwLbSgbGfXSe0FOMaz75knUoeBXmUqb9Ogamll35FxTcy 5cZPqd+ldvG9wKZ64jMFbsWhThgDeenmQqyjnVWnVyGKSqAKFmezVLM3xgyYQQeJ HZeHZWD6O3OgOwakcL2eT2iCxQeGhOhJUcFEvI/ygBpI9B0OrNXzSAodzp0GxO8X 7GhlOE8zg/VDSOXlXiAepVc/uwzT2Ncdz2wk6d7unAbDHy0POYisuX0QCnHLuqle qFmEwBU3Uo9B04U4P7zvR63d+g== -----END CERTIFICATE-----Generated at Thu May 21 10:54:38 2026 by rpki-client