$ rpki-client -vvf rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft File: CBKglmLws-NPK1pRwz6OknA-Q2k.mft (raw, json) Hash identifier: 3J+Y2UidCtJC/V7jotwbVEyv4ckG6bbh5dbbmn34Ifs= Subject key identifier: 3C:56:4E:6C:C8:B6:10:C7:C7:17:E4:8A:3D:26:DC:B3:F3:8D:93:BF Authority key identifier: 08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69 Certificate issuer: /CN=A91547EC/serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369 Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft Manifest number: 8E Signing time: Mon 01 Jun 2026 08:16:35 +0000 Manifest this update: Mon 01 Jun 2026 08:16:34 +0000 Manifest next update: Mon 08 Jun 2026 08:16:34 +0000 Files and hashes: 1: CBKglmLws-NPK1pRwz6OknA-Q2k.crl (hash: jH5Fb8VVgnO2abd/PM/8ZVXKlmxUcAMvo8cvBxtxWPU=) 2: 7CB1102487DD11F0A89FB377C4F9AE02.roa (hash: LJuHTr9dIvZYkAmMksiQJJP2qElg6VwwLMqlMwzQK3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 08:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91547EC, serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369 Validity Not Before: Jun 1 08:16:34 2026 GMT Not After : Jun 8 08:16:34 2026 GMT Subject: CN=6a1d3fe3-73db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b8:dc:64:a1:23:39:3d:99:70:1f:4f:ad:9d: 3c:93:d7:ab:6a:b0:d1:01:2a:07:40:16:58:20:74: cb:d5:d4:23:3d:b8:cb:0f:05:a2:b9:f1:ce:88:d9: b6:98:42:6d:16:03:db:73:d5:aa:3c:89:df:e7:d2: c4:5b:b1:89:4a:25:4d:49:72:f3:44:3e:d7:f7:2a: 04:5f:b9:80:0e:38:19:da:1a:d6:5d:37:28:88:61: 68:01:66:7b:6f:20:27:fe:1e:2b:d4:d7:44:d8:93: 3a:2b:e1:8a:68:05:5e:74:7a:40:a0:a2:6f:d1:83: 79:ba:9a:48:50:e3:c5:87:12:cc:80:89:a8:68:32: d0:be:ce:ca:e0:a1:4b:1f:1a:e1:63:cd:98:8c:06: 5c:44:26:56:30:5b:02:24:6a:0f:5c:0d:b1:0e:cf: 24:20:f8:68:f3:78:f9:90:da:a7:6b:63:c9:28:02: a9:f5:2e:2f:da:01:4f:c7:b9:7e:a8:98:a5:f0:3d: 7a:3f:b9:c7:16:35:0d:2e:94:b4:45:31:0e:d5:99: 36:10:15:29:49:d8:93:99:95:70:2c:47:cb:7a:2d: d7:e0:bc:9c:cd:0f:bc:fd:4d:06:98:73:92:5e:81: e9:61:af:f5:c8:38:40:5d:43:8e:5f:72:23:aa:e0: 7e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:56:4E:6C:C8:B6:10:C7:C7:17:E4:8A:3D:26:DC:B3:F3:8D:93:BF X509v3 Authority Key Identifier: keyid:08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:31:ad:5a:c3:41:ae:b7:0a:fa:c0:8e:f4:d1:0a:0f:8a:a8: 5a:33:9f:34:74:9b:a4:6c:a0:6b:ab:86:f5:12:39:67:5d:21: 01:77:80:b1:8d:1b:75:60:e9:17:0f:37:46:78:36:35:a3:90: b4:c0:7d:65:bf:63:7b:7a:f4:55:d1:20:5d:5e:5b:54:98:a2: 5a:5a:51:5c:33:36:dc:af:f6:ec:ae:95:f0:b2:f7:56:4c:4c: c0:90:37:17:74:6c:65:5c:b2:35:cd:80:6f:2b:84:87:ee:15: c4:9a:48:c8:8a:62:42:01:2f:3a:d1:0e:91:1b:36:aa:00:51: 8c:27:e4:0c:e7:4e:e5:85:de:65:28:6f:43:ec:30:bd:db:84: e2:62:17:eb:60:73:d7:03:24:0f:73:fd:00:7a:fa:bd:a3:94: b1:5d:2d:d1:1c:2c:53:a9:ff:1f:39:4f:ae:e8:88:c2:3b:a2: 7f:97:9e:9c:83:05:b6:90:87:e8:4c:56:eb:ea:1f:41:55:6e: e4:aa:4a:5f:5e:e0:c8:21:92:83:c1:a0:1f:48:1e:6d:ec:74: 2e:ae:83:0a:b1:92:70:af:51:b6:52:f4:aa:1c:d6:b1:9d:57: b4:58:e2:1b:97:41:74:87:6a:d7:13:ea:c8:14:7b:37:6a:87: 8a:65:7d:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ3RUMxMTAvBgNVBAUTKDA4MTJBMDk2NjJGMEIzRTM0RjJCNUE1MUMzM0U4RTky NzAzRTQzNjkwHhcNMjYwNjAxMDgxNjM0WhcNMjYwNjA4MDgxNjM0WjAYMRYwFAYD VQQDEw02YTFkM2ZlMy03M2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrjcZKEjOT2ZcB9PrZ08k9erarDRASoHQBZYIHTL1dQjPbjLDwWiufHOiNm2 mEJtFgPbc9WqPInf59LEW7GJSiVNSXLzRD7X9yoEX7mADjgZ2hrWXTcoiGFoAWZ7 byAn/h4r1NdE2JM6K+GKaAVedHpAoKJv0YN5uppIUOPFhxLMgImoaDLQvs7K4KFL HxrhY82YjAZcRCZWMFsCJGoPXA2xDs8kIPho83j5kNqna2PJKAKp9S4v2gFPx7l+ qJil8D16P7nHFjUNLpS0RTEO1Zk2EBUpSdiTmZVwLEfLei3X4LyczQ+8/U0GmHOS XoHpYa/1yDhAXUOOX3IjquB++wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDxWTmzI thDHxxfkij0m3LPzjZO/MB8GA1UdIwQYMBaAFAgSoJZi8LPjTytaUcM+jpJwPkNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDdFQy8yNTYzNTdDODg3 REQxMUYwQjc0Q0ZFNzZDNEY5QUUwMi9DQktnbG1Md3MtTlBLMXBSd3o2T2tuQS1R MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NCS2dsbUx3cy1OUEsxcFJ3ejZPa25BLVEyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDdFQy8yNTYzNTdDODg3REQxMUYwQjc0Q0ZFNzZDNEY5QUUwMi9DQktnbG1Md3Mt TlBLMXBSd3o2T2tuQS1RMmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkzGtWsNBrrcK+sCO9NEKD4qoWjOfNHSbpGyga6uG9RI5Z10hAXeAsY0bdWDp Fw83Rng2NaOQtMB9Zb9je3r0VdEgXV5bVJiiWlpRXDM23K/27K6V8LL3VkxMwJA3 F3RsZVyyNc2AbyuEh+4VxJpIyIpiQgEvOtEOkRs2qgBRjCfkDOdO5YXeZShvQ+ww vduE4mIX62Bz1wMkD3P9AHr6vaOUsV0t0RwsU6n/HzlPruiIwjuif5eenIMFtpCH 6ExW6+ofQVVu5KpKX17gyCGSg8GgH0gebex0Lq6DCrGScK9RtlL0qhzWsZ1XtFji G5dBdIdq1xPqyBR7N2qHimV9ow== -----END CERTIFICATE-----Generated at Tue Jun 2 21:19:21 2026 by rpki-client