$ rpki-client -vvf rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft File: rKBb-WKVthwuROndPExIxFm56Vw.mft (raw, json) Hash identifier: WMstJzesp4pf5Rh4Z9l1RVU3kXdDSvoQNBcDBi8RWu0= Subject key identifier: 74:C8:47:49:27:06:6A:BF:8A:40:E3:BE:80:EC:5B:DA:7E:33:26:83 Authority key identifier: AC:A0:5B:F9:62:95:B6:1C:2E:44:E9:DD:3C:4C:48:C4:59:B9:E9:5C Certificate issuer: /CN=A91547EC/serialNumber=ACA05BF96295B61C2E44E9DD3C4C48C459B9E95C Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft Manifest number: 86 Signing time: Tue 19 May 2026 07:25:37 +0000 Manifest this update: Tue 19 May 2026 07:25:36 +0000 Manifest next update: Tue 26 May 2026 07:25:36 +0000 Files and hashes: 1: rKBb-WKVthwuROndPExIxFm56Vw.crl (hash: Zt2PvmRigmVlp4gBCSf5OJ3uXfz/3eiznSGoeMq4nRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.crl rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 07:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91547EC, serialNumber=ACA05BF96295B61C2E44E9DD3C4C48C459B9E95C Validity Not Before: May 19 07:25:36 2026 GMT Not After : May 26 07:25:36 2026 GMT Subject: CN=6a0c1070-bddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a1:d2:c6:ac:66:bf:b3:ef:5a:20:f5:17:ac: d8:a3:07:76:dc:80:d3:79:c6:45:88:fc:3c:bb:71: 6f:bc:fa:c8:42:45:aa:0b:8c:6f:cf:fb:23:e8:c1: 9e:c5:e4:28:b8:3d:8c:9c:61:b0:28:1c:c7:a3:03: f9:3d:fa:83:0d:50:5e:08:d6:e3:8c:f0:88:67:55: bc:05:de:71:75:97:c9:6d:56:90:42:51:c6:2b:a6: 1e:32:d2:3d:0e:d4:42:0c:64:42:b4:bf:8c:16:40: 34:db:21:08:63:a6:08:b7:39:99:4f:61:16:a4:a5: 79:3d:a0:9d:b3:9b:9f:16:f0:98:a3:50:28:f4:b6: e5:c4:ad:dd:d9:d8:51:e1:1e:67:8e:81:e2:3c:4f: 21:8d:7d:66:5d:a2:b8:f4:20:85:ce:bb:7e:7d:f3: bf:11:e3:67:22:d6:33:1a:2b:96:a7:93:fc:48:c6: be:d5:77:65:88:34:42:79:44:25:82:c0:ac:14:22: 6e:f4:7a:f0:d8:65:52:c2:fe:22:2e:08:fb:cc:64: d7:76:21:6a:32:56:80:fe:c7:a4:f7:9f:d2:10:bc: 1d:ad:ef:7c:b7:e1:c4:d0:bf:0f:0e:69:0f:0b:51: 59:d2:c8:99:ef:f3:2e:0b:c3:39:bd:72:e0:d0:e1: b4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C8:47:49:27:06:6A:BF:8A:40:E3:BE:80:EC:5B:DA:7E:33:26:83 X509v3 Authority Key Identifier: keyid:AC:A0:5B:F9:62:95:B6:1C:2E:44:E9:DD:3C:4C:48:C4:59:B9:E9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:d7:5f:45:5b:83:3e:c9:18:f7:b4:eb:b7:02:57:d8:bc:9f: b4:5d:60:f5:a3:67:d3:50:da:15:30:cf:4a:c1:a5:dc:81:29: dd:4c:58:99:30:33:50:6d:fe:84:ec:7e:cc:74:19:7a:77:7f: 8a:8c:b9:cd:7e:c4:cc:3c:c7:52:3f:ef:27:0c:5f:63:38:1a: be:c7:07:27:35:d5:e8:09:a6:31:df:b0:0f:6c:ad:6a:68:ff: 73:fa:49:c1:b0:b6:38:9c:97:8a:fa:1f:20:19:8b:f7:98:58: c0:62:c7:2f:4b:5e:05:e1:3e:5d:2b:2c:d8:a9:68:5f:90:af: eb:b7:d8:35:3e:20:24:84:08:2a:86:4f:cd:08:c2:49:98:9d: 1e:ef:67:4a:de:0c:fe:a5:7d:dc:cd:3e:05:23:d5:a7:cc:41: f4:f9:58:40:ff:59:81:9d:d3:91:84:e8:f3:68:a9:83:8d:54: 86:b7:51:49:b0:17:90:61:8d:56:86:1c:96:93:ee:89:5a:a8: d8:14:a5:7e:78:eb:08:a6:d6:9c:3a:57:04:d8:f9:2c:78:91: 99:6f:e0:7d:44:a1:5a:9b:6d:f7:eb:97:4e:4a:a2:3c:96:54: 4b:b4:6b:bc:93:fb:f1:97:df:c0:b4:a5:ea:47:d0:54:be:78: 55:25:58:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ3RUMxMTAvBgNVBAUTKEFDQTA1QkY5NjI5NUI2MUMyRTQ0RTlERDNDNEM0OEM0 NTlCOUU5NUMwHhcNMjYwNTE5MDcyNTM2WhcNMjYwNTI2MDcyNTM2WjAYMRYwFAYD VQQDEw02YTBjMTA3MC1iZGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqHSxqxmv7PvWiD1F6zYowd23IDTecZFiPw8u3FvvPrIQkWqC4xvz/sj6MGe xeQouD2MnGGwKBzHowP5PfqDDVBeCNbjjPCIZ1W8Bd5xdZfJbVaQQlHGK6YeMtI9 DtRCDGRCtL+MFkA02yEIY6YItzmZT2EWpKV5PaCds5ufFvCYo1Ao9LblxK3d2dhR 4R5njoHiPE8hjX1mXaK49CCFzrt+ffO/EeNnItYzGiuWp5P8SMa+1XdliDRCeUQl gsCsFCJu9Hrw2GVSwv4iLgj7zGTXdiFqMlaA/sek95/SELwdre98t+HE0L8PDmkP C1FZ0siZ7/MuC8M5vXLg0OG0MwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHTIR0kn Bmq/ikDjvoDsW9p+MyaDMB8GA1UdIwQYMBaAFKygW/lilbYcLkTp3TxMSMRZuelc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDdFQy8yRTY1OTc5Njg3 REQxMUYwQjc0Q0ZFNzZDNEY5QUUwMi9yS0JiLVdLVnRod3VST25kUEV4SXhGbTU2 VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JLQmItV0tWdGh3dVJPbmRQRXhJeEZtNTZWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDdFQy8yRTY1OTc5Njg3REQxMUYwQjc0Q0ZFNzZDNEY5QUUwMi9yS0JiLVdLVnRo d3VST25kUEV4SXhGbTU2VncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATddfRVuDPskY97TrtwJX2LyftF1g9aNn01DaFTDPSsGl3IEp3UxYmTAzUG3+ hOx+zHQZend/ioy5zX7EzDzHUj/vJwxfYzgavscHJzXV6AmmMd+wD2ytamj/c/pJ wbC2OJyXivofIBmL95hYwGLHL0teBeE+XSss2KloX5Cv67fYNT4gJIQIKoZPzQjC SZidHu9nSt4M/qV93M0+BSPVp8xB9PlYQP9ZgZ3TkYTo82ipg41UhrdRSbAXkGGN VoYclpPuiVqo2BSlfnjrCKbWnDpXBNj5LHiRmW/gfUShWptt9+uXTkqiPJZUS7Rr vJP78ZffwLSl6kfQVL54VSVYtQ== -----END CERTIFICATE-----Generated at Thu May 21 09:35:56 2026 by rpki-client