$ rpki-client -vvf rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft File: I90ea4NEljsEULkpM3adRKcyUWs.mft (raw, json) Hash identifier: pCxrrAa5aMbpVZIirddJvIG2iBEYYOXw/dLutth6K9s= Subject key identifier: 45:6F:4F:87:90:1D:86:A9:B0:00:4E:02:18:DC:54:62:35:F4:E8:DF Authority key identifier: 23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B Certificate issuer: /CN=A91437AC/serialNumber=23DD1E6B8344963B0450B92933769D44A732516B Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft Manifest number: 01FE Signing time: Thu 21 May 2026 03:11:15 +0000 Manifest this update: Thu 21 May 2026 03:11:14 +0000 Manifest next update: Thu 28 May 2026 03:11:14 +0000 Files and hashes: 1: I90ea4NEljsEULkpM3adRKcyUWs.crl (hash: aiDuhdJqm6Tr+KWZwl/MghgXtTHDlWDg8pqq7UD2FKQ=) 2: 413CAD964D6011EE80905941C4F9AE02.roa (hash: 58pWdHGWJ/ggfr/u1qdz2+yvUUIbs/1dEuDaPVOcwn0=) 3: 229EA4AC57D811EEAB6EE280C4F9AE02.roa (hash: hnFKBBY108dazlRhnbTksklhF3iwtTcT7etyMAPxnIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 03:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91437AC, serialNumber=23DD1E6B8344963B0450B92933769D44A732516B Validity Not Before: May 21 03:11:14 2026 GMT Not After : May 28 03:11:14 2026 GMT Subject: CN=6a0e77d3-a0ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9b:5b:07:73:dd:c0:8d:1a:2b:12:72:db:fd: 24:ad:18:28:0c:9a:65:f6:94:21:dd:6c:0b:fc:0b: d2:0a:1e:4e:6e:b1:cb:61:54:9c:df:31:e5:1c:b6: b0:52:1a:aa:2a:44:55:32:25:f6:6d:a2:30:af:d3: 84:c6:ed:87:61:0d:09:88:65:dd:a7:e7:e7:5f:1f: 1a:c2:98:f0:a4:d2:7b:c8:c6:d2:ec:5d:94:df:83: bc:c5:bf:3b:dc:a7:88:8d:64:87:b1:bc:69:e4:88: be:3d:17:3f:d4:bd:b5:8b:52:9f:d4:ef:09:53:91: 7c:ad:d2:22:1a:61:19:2e:c8:e1:c5:d4:e0:fb:42: 25:18:96:3e:63:8e:ec:02:51:77:4f:ef:2b:b6:69: d7:98:ef:64:13:08:14:ce:2e:11:41:5b:53:10:8f: 74:5f:7e:ab:32:87:76:16:89:f4:68:ab:dd:e2:34: eb:e0:72:e6:c3:a9:e7:71:71:ce:bf:58:8c:95:e7: af:22:42:23:71:3b:2c:fb:6e:14:5c:f7:83:32:44: d7:cd:9c:b7:57:1c:99:9e:74:dc:ef:62:50:53:30: c5:65:41:68:0f:5f:cf:3d:54:25:6d:ee:fa:b5:13: b8:95:66:de:12:4a:6b:5d:dc:9a:42:10:49:98:9f: bf:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:6F:4F:87:90:1D:86:A9:B0:00:4E:02:18:DC:54:62:35:F4:E8:DF X509v3 Authority Key Identifier: keyid:23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:35:78:03:a4:dd:87:78:40:e5:4a:5f:38:e1:9a:7c:01:35: d2:c7:aa:55:3f:b6:e4:18:f4:93:d1:bb:4f:e8:95:9a:90:f5: a4:13:59:2a:f4:01:32:73:50:74:eb:da:a6:d1:5f:94:f0:dc: 58:df:72:fb:fd:0b:f6:46:dc:bb:dd:31:30:28:70:0a:ed:eb: 4e:5e:c5:a0:84:b8:08:fa:80:6a:32:a7:b1:bc:fe:bf:4f:c3: 8f:a6:4c:3b:3f:18:ef:86:ac:75:0b:55:cb:85:a6:d6:1d:9e: 5a:5b:95:98:3e:0d:f4:c5:25:b8:01:da:af:46:ae:7d:4e:ca: 41:3b:40:25:5b:57:37:8b:65:4d:44:8e:07:06:48:08:f9:f7: 43:6e:b0:4d:c7:98:a2:e5:8e:e0:af:2b:99:d3:a5:78:f3:7b: 7a:a3:56:12:69:5b:81:84:2f:ba:06:2d:46:20:61:9d:c5:9f: 59:31:bb:46:d6:c4:3a:e0:5d:0d:42:06:83:9c:d7:1f:98:05: ae:6d:99:dd:f1:ad:bb:a6:3e:5d:74:a0:1d:25:2c:70:15:89: 8c:ab:46:e7:0e:b6:72:94:7a:ad:4c:06:14:d2:cb:bc:40:f4: 15:e9:73:45:22:4e:ba:0c:46:27:ff:e9:73:f0:46:ce:56:00: 14:1f:66:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM3QUMxMTAvBgNVBAUTKDIzREQxRTZCODM0NDk2M0IwNDUwQjkyOTMzNzY5RDQ0 QTczMjUxNkIwHhcNMjYwNTIxMDMxMTE0WhcNMjYwNTI4MDMxMTE0WjAYMRYwFAYD VQQDEw02YTBlNzdkMy1hMGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmZtbB3PdwI0aKxJy2/0krRgoDJpl9pQh3WwL/AvSCh5ObrHLYVSc3zHlHLaw UhqqKkRVMiX2baIwr9OExu2HYQ0JiGXdp+fnXx8awpjwpNJ7yMbS7F2U34O8xb87 3KeIjWSHsbxp5Ii+PRc/1L21i1Kf1O8JU5F8rdIiGmEZLsjhxdTg+0IlGJY+Y47s AlF3T+8rtmnXmO9kEwgUzi4RQVtTEI90X36rMod2Fon0aKvd4jTr4HLmw6nncXHO v1iMleevIkIjcTss+24UXPeDMkTXzZy3VxyZnnTc72JQUzDFZUFoD1/PPVQlbe76 tRO4lWbeEkprXdyaQhBJmJ+/HwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEVvT4eQ HYapsABOAhjcVGI19OjfMB8GA1UdIwQYMBaAFCPdHmuDRJY7BFC5KTN2nUSnMlFr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzdBQy8wMjU2RUI5NjRE NjAxMUVFODM4NUYwNDBDNEY5QUUwMi9JOTBlYTRORWxqc0VVTGtwTTNhZFJLY3lV V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k5MGVhNE5FbGpzRVVMa3BNM2FkUktjeVVXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzdBQy8wMjU2RUI5NjRENjAxMUVFODM4NUYwNDBDNEY5QUUwMi9JOTBlYTRORWxq c0VVTGtwTTNhZFJLY3lVV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFjV4A6Tdh3hA5UpfOOGafAE10seqVT+25Bj0k9G7T+iVmpD1pBNZKvQBMnNQ dOvaptFflPDcWN9y+/0L9kbcu90xMChwCu3rTl7FoIS4CPqAajKnsbz+v0/Dj6ZM Oz8Y74asdQtVy4Wm1h2eWluVmD4N9MUluAHar0aufU7KQTtAJVtXN4tlTUSOBwZI CPn3Q26wTceYouWO4K8rmdOlePN7eqNWEmlbgYQvugYtRiBhncWfWTG7RtbEOuBd DUIGg5zXH5gFrm2Z3fGtu6Y+XXSgHSUscBWJjKtG5w62cpR6rUwGFNLLvED0Felz RSJOugxGJ//pc/BGzlYAFB9mcA== -----END CERTIFICATE-----Generated at Thu May 21 10:14:41 2026 by rpki-client