$ rpki-client -vvf rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft File: u5dqWY5eywXjf6wApbeIjlf1HFI.mft (raw, json) Hash identifier: X6FW78XEz4uGGvYffZ9xn0A2yPPAQ507mAPKLfShlXo= Subject key identifier: 29:85:4B:9B:47:4E:5C:B6:76:B6:00:05:41:75:3A:25:F3:ED:20:6D Authority key identifier: BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52 Certificate issuer: /CN=A91590E3/serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52 Certificate serial: 19BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft Manifest number: 1980 Signing time: Wed 20 May 2026 16:25:52 +0000 Manifest this update: Wed 20 May 2026 16:25:52 +0000 Manifest next update: Wed 27 May 2026 16:25:52 +0000 Files and hashes: 1: u5dqWY5eywXjf6wApbeIjlf1HFI.crl (hash: eY3cX48PnceLttr6M6bCMvb3gO+QHTxoOsC1cwfq/Ow=) 2: 1295ACC8511811F0BC16C641C4F9AE02.roa (hash: sxrPqnbF6T43GAzl7GDJj3PzJSHlDC7K4T4ROo3CtKo=) 3: 4D12993446CC11F08EB9471AC4F9AE02.roa (hash: kZ0uphZPyCd+wbYNkHA1SsHf26EQjAMAFcs0tjZEC/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 16:25:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6589 (0x19bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91590E3, serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52 Validity Not Before: May 20 16:25:52 2026 GMT Not After : May 27 16:25:52 2026 GMT Subject: CN=6a0de090-8325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:0e:54:3a:61:81:74:db:1b:f8:3d:5a:85:13: 28:27:a3:80:13:63:a5:14:f6:6b:9f:aa:d0:0f:4a: 88:aa:be:66:22:cb:de:b2:db:1a:43:af:c5:90:e4: 40:6e:5a:2d:1d:44:ad:ba:e5:37:08:02:9c:b9:7c: 5a:cc:90:be:a0:23:d8:f0:11:82:24:1b:87:2c:b4: 7b:e8:10:83:85:12:a1:a4:00:f5:a8:b7:78:7f:7d: ef:b4:94:fe:a8:96:bd:7a:aa:0d:47:f8:6b:75:b2: 80:5a:de:67:9e:30:e4:5a:49:b2:77:ce:ed:a4:59: 2e:92:7a:33:12:cd:99:43:6c:9d:03:88:24:1d:cf: 38:0a:78:bd:e4:09:57:2d:48:4e:66:ea:7e:0f:c9: 32:db:96:c2:36:52:d8:72:c3:d4:c2:a8:e4:36:42: c4:9c:20:42:30:50:90:82:e4:ff:e0:5c:f6:85:e0: 0b:74:a5:d0:07:15:cb:e4:44:a2:6c:25:9a:fa:9b: 7e:dc:60:e0:e5:45:7c:b0:de:5f:e9:5b:3a:d3:a5: e8:10:99:e3:fa:0e:1d:d4:82:63:00:ab:5a:b6:cb: b0:23:cf:14:db:05:ee:5d:6a:92:21:7a:d2:59:54: 18:c7:b1:00:6e:13:b9:d2:61:94:08:23:c8:5b:11: e3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:85:4B:9B:47:4E:5C:B6:76:B6:00:05:41:75:3A:25:F3:ED:20:6D X509v3 Authority Key Identifier: keyid:BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:67:96:82:d7:59:68:b8:61:e0:cb:d8:be:ce:7a:7d:b4:aa: 97:87:d2:a7:a7:80:6a:73:8a:ad:e2:d9:41:04:7f:fd:a7:d2: 96:bc:1c:1c:4a:6f:e5:9a:f0:b0:dd:a9:cb:56:d5:c2:af:80: 8e:02:1d:b6:a9:b6:1b:68:7d:18:60:16:76:f1:dd:f9:a1:8a: 33:c4:2b:f9:d4:5a:02:1d:2f:78:77:ac:4e:da:61:93:72:36: d7:0b:8c:dc:ca:9e:c9:15:c9:68:93:6b:3a:df:cc:0a:0a:cc: 49:60:ce:72:11:ab:b2:39:d5:c4:a5:b9:85:44:40:a2:cb:3c: 61:18:55:63:e0:38:2e:e2:63:d9:80:ae:cf:bf:f9:6a:7a:bd: 14:9b:8c:25:f5:37:9a:18:cb:69:8b:d8:4e:c2:c1:db:79:bc: ee:2e:20:f8:95:e8:1d:41:16:1a:e2:85:21:24:1a:5b:27:7b: f6:9b:74:16:ef:5a:78:02:14:5d:f6:59:e0:b7:29:2b:d0:70: b6:48:c7:4e:42:7f:f7:ba:6f:39:86:f3:bb:41:59:1a:59:d3: 55:6b:6b:b0:10:9b:7c:28:03:02:fa:7f:7c:4a:98:0a:24:1c: 77:cd:c2:27:86:c8:f6:b9:61:3d:54:25:0c:af:c1:3b:d8:0f: 18:43:ef:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkwRTMxMTAvBgNVBAUTKEJCOTc2QTU5OEU1RUNCMDVFMzdGQUMwMEE1Qjc4ODhF NTdGNTFDNTIwHhcNMjYwNTIwMTYyNTUyWhcNMjYwNTI3MTYyNTUyWjAYMRYwFAYD VQQDEw02YTBkZTA5MC04MzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6A5UOmGBdNsb+D1ahRMoJ6OAE2OlFPZrn6rQD0qIqr5mIsvestsaQ6/FkORA blotHUStuuU3CAKcuXxazJC+oCPY8BGCJBuHLLR76BCDhRKhpAD1qLd4f33vtJT+ qJa9eqoNR/hrdbKAWt5nnjDkWkmyd87tpFkuknozEs2ZQ2ydA4gkHc84Cni95AlX LUhOZup+D8ky25bCNlLYcsPUwqjkNkLEnCBCMFCQguT/4Fz2heALdKXQBxXL5ESi bCWa+pt+3GDg5UV8sN5f6Vs606XoEJnj+g4d1IJjAKtatsuwI88U2wXuXWqSIXrS WVQYx7EAbhO50mGUCCPIWxHjyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCmFS5tH Tly2drYABUF1OiXz7SBtMB8GA1UdIwQYMBaAFLuXalmOXssF43+sAKW3iI5X9RxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTBFMy9EQTE4QjE4NDlB NDkxMUU3OUE5RjMwMzBDNEY5QUUwMi91NWRxV1k1ZXl3WGpmNndBcGJlSWpsZjFI RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U1ZHFXWTVleXdYamY2d0FwYmVJamxmMUhGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTBFMy9EQTE4QjE4NDlBNDkxMUU3OUE5RjMwMzBDNEY5QUUwMi91NWRxV1k1ZXl3 WGpmNndBcGJlSWpsZjFIRkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhGeWgtdZaLhh4MvYvs56fbSql4fSp6eAanOKreLZQQR//afSlrwcHEpv5Zrw sN2py1bVwq+AjgIdtqm2G2h9GGAWdvHd+aGKM8Qr+dRaAh0veHesTtphk3I21wuM 3MqeyRXJaJNrOt/MCgrMSWDOchGrsjnVxKW5hURAoss8YRhVY+A4LuJj2YCuz7/5 anq9FJuMJfU3mhjLaYvYTsLB23m87i4g+JXoHUEWGuKFISQaWyd79pt0Fu9aeAIU XfZZ4LcpK9BwtkjHTkJ/97pvOYbzu0FZGlnTVWtrsBCbfCgDAvp/fEqYCiQcd83C J4bI9rlhPVQlDK/BO9gPGEPvYQ== -----END CERTIFICATE-----Generated at Thu May 21 10:28:38 2026 by rpki-client