$ rpki-client -vvf rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft File: 2TXs95kTG-wkONqd6CtoWJY8cFw.mft (raw, json) Hash identifier: ZeQ7NGvoGdczL7oSTxZnt8e1ApYNQYdB8ifT7BGwf6I= Subject key identifier: CD:0E:11:A4:F9:3E:D9:FB:6D:46:06:9D:8E:16:59:1C:E5:D2:1C:CD Authority key identifier: D9:35:EC:F7:99:13:1B:EC:24:38:DA:9D:E8:2B:68:58:96:3C:70:5C Certificate issuer: /CN=A91547E4/serialNumber=D935ECF799131BEC2438DA9DE82B6858963C705C Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft Manifest number: 61 Signing time: Thu 21 May 2026 08:13:21 +0000 Manifest this update: Thu 21 May 2026 08:13:20 +0000 Manifest next update: Thu 28 May 2026 08:13:20 +0000 Files and hashes: 1: 2TXs95kTG-wkONqd6CtoWJY8cFw.crl (hash: eNMiG06v4Jt/1+z2eFZuGhrIJ5dIF+x4oaci7kJMWEY=) 2: 534E797A4F7811F1AC63D401CC833773.roa (hash: 5mHy/Dg6sIvxshHVU1sbOr5uORhw5btfT4zUILkd6BM=) 3: 46BCC40E4F7E11F190CC27DCCD833773.roa (hash: NrcbhAN9vhspenj+63KwCURkbfgQlmMQRjoTCvF/mlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.crl rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 08:12:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91547E4, serialNumber=D935ECF799131BEC2438DA9DE82B6858963C705C Validity Not Before: May 21 08:13:20 2026 GMT Not After : May 28 08:13:20 2026 GMT Subject: CN=6a0ebea0-0d94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:89:35:55:21:d3:6c:11:37:dd:eb:c7:0b:0e: 60:b9:f3:75:0d:75:69:40:e4:35:31:fe:13:d6:0d: c6:d0:2b:ff:b8:4e:28:3b:ae:61:a1:4a:5b:26:86: 0e:44:c9:ea:92:ca:f6:13:8e:66:a4:69:06:59:36: 4f:b8:7a:52:1e:88:82:6b:f7:f8:6f:5e:3b:ea:1c: 4c:b9:51:f3:f8:ae:d9:9c:55:61:1a:aa:88:95:6f: 7b:95:30:b6:77:b7:f7:0c:3a:89:49:df:c1:ec:82: d3:1b:71:6c:a8:1b:4a:39:57:70:54:7a:e2:36:70: 7e:d1:5d:ae:c4:65:fa:66:8d:27:60:ba:31:a3:15: 8e:ad:eb:27:91:41:3a:99:1f:77:9e:e6:a3:c5:e5: 85:86:5f:46:b0:c6:70:df:84:22:b6:90:5f:c2:31: 5d:0f:ea:3e:66:14:26:3e:20:b5:be:37:de:a5:96: d7:55:8b:4a:ca:d4:ba:32:19:97:97:2e:ec:1e:b3: 10:17:13:38:06:2c:91:94:97:1b:09:58:33:9a:61: 5b:d5:72:95:82:f1:27:63:18:d6:5d:2f:96:78:f9: 9b:b2:6e:1b:64:92:ee:92:77:4c:e4:50:57:1d:60: 17:e5:ec:08:e3:d9:95:06:ce:60:1d:46:9e:be:59: b8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:0E:11:A4:F9:3E:D9:FB:6D:46:06:9D:8E:16:59:1C:E5:D2:1C:CD X509v3 Authority Key Identifier: keyid:D9:35:EC:F7:99:13:1B:EC:24:38:DA:9D:E8:2B:68:58:96:3C:70:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TXs95kTG-wkONqd6CtoWJY8cFw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547E4/0232E548CB7111F0A5ADED22C4F9AE02/2TXs95kTG-wkONqd6CtoWJY8cFw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:d6:a3:c6:ce:6f:ba:15:bb:d4:ee:31:f4:4c:1e:18:4c:aa: d8:18:88:03:2a:68:29:62:58:4a:08:57:94:9b:df:be:d3:d2: 4a:f1:97:b3:1b:44:d6:33:a8:d4:c8:8c:20:33:29:0b:b9:58: 72:f0:7a:a4:85:83:55:a4:a9:2b:f0:83:a2:4b:73:b0:f5:16: ba:08:01:3e:3b:f3:76:65:50:3b:7e:4a:6b:81:dd:3f:8b:dd: a9:fd:b1:f9:d6:01:a1:96:c5:d5:ae:3b:fd:6d:14:8c:f2:6c: 58:8e:42:da:a8:cb:e4:37:4a:64:6a:5e:63:9b:4e:78:95:47: a2:93:8d:f8:a0:cc:74:df:52:73:3d:16:07:92:68:39:01:e2: 3e:0d:c5:02:7a:d7:22:ec:17:cc:9a:4a:29:e5:bc:57:a3:7e: f4:95:fd:25:dd:32:65:35:48:40:90:df:28:5f:18:55:1e:ac: 39:56:a8:d8:25:0c:76:c4:1d:cb:5d:35:bd:0f:4e:d9:37:02: 54:84:6d:4a:24:8a:b9:f9:f8:4d:c6:84:5e:44:78:ea:88:54: 01:c2:18:ae:c6:8b:f5:95:b3:3f:a7:2f:e3:7c:f5:1a:94:9b: 4c:1e:cc:0a:ca:95:43:2b:38:94:ae:75:20:b7:45:bf:1a:00: 93:09:af:11 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDdFNDExMC8GA1UEBRMoRDkzNUVDRjc5OTEzMUJFQzI0MzhEQTlERTgyQjY4NTg5 NjNDNzA1QzAeFw0yNjA1MjEwODEzMjBaFw0yNjA1MjgwODEzMjBaMBgxFjAUBgNV BAMTDTZhMGViZWEwLTBkOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKiTVVIdNsETfd68cLDmC583UNdWlA5DUx/hPWDcbQK/+4Tig7rmGhSlsmhg5E yeqSyvYTjmakaQZZNk+4elIeiIJr9/hvXjvqHEy5UfP4rtmcVWEaqoiVb3uVMLZ3 t/cMOolJ38HsgtMbcWyoG0o5V3BUeuI2cH7RXa7EZfpmjSdgujGjFY6t6yeRQTqZ H3ee5qPF5YWGX0awxnDfhCK2kF/CMV0P6j5mFCY+ILW+N96lltdVi0rK1LoyGZeX LuwesxAXEzgGLJGUlxsJWDOaYVvVcpWC8SdjGNZdL5Z4+Zuybhtkku6Sd0zkUFcd YBfl7Ajj2ZUGzmAdRp6+WbjrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUzQ4RpPk+ 2fttRgadjhZZHOXSHM0wHwYDVR0jBBgwFoAU2TXs95kTG+wkONqd6CtoWJY8cFww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0N0U0LzAyMzJFNTQ4Q0I3 MTExRjBBNUFERUQyMkM0RjlBRTAyLzJUWHM5NWtURy13a09OcWQ2Q3RvV0pZOGNG dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMlRYczk1a1RHLXdrT05xZDZDdG9XSlk4Y0Z3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 N0U0LzAyMzJFNTQ4Q0I3MTExRjBBNUFERUQyMkM0RjlBRTAyLzJUWHM5NWtURy13 a09OcWQ2Q3RvV0pZOGNGdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAR1qPGzm+6FbvU7jH0TB4YTKrYGIgDKmgpYlhKCFeUm9++09JK8ZezG0TWM6jU yIwgMykLuVhy8HqkhYNVpKkr8IOiS3Ow9Ra6CAE+O/N2ZVA7fkprgd0/i92p/bH5 1gGhlsXVrjv9bRSM8mxYjkLaqMvkN0pkal5jm054lUeik434oMx031JzPRYHkmg5 AeI+DcUCetci7BfMmkop5bxXo370lf0l3TJlNUhAkN8oXxhVHqw5VqjYJQx2xB3L XTW9D07ZNwJUhG1KJIq5+fhNxoReRHjqiFQBwhiuxov1lbM/py/jfPUalJtMHswK ypVDKziUrnUgt0W/GgCTCa8R -----END CERTIFICATE-----Generated at Thu May 21 10:28:05 2026 by rpki-client