$ rpki-client -vvf rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft File: bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft (raw, json) Hash identifier: 53AB+IEcd46kLzLsYiNZ/SYHAyUib2kCzeYpot6UHSM= Subject key identifier: 8A:EC:EA:16:28:A2:05:7D:8C:C5:F5:A6:F7:40:70:A2:A0:42:E2:A6 Authority key identifier: 6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54 Certificate issuer: /CN=A91626D2/serialNumber=6C3B7F1C133DA9C51D444DA85E602A968451FE54 Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft Manifest number: 0181 Signing time: Thu 21 May 2026 04:40:53 +0000 Manifest this update: Thu 21 May 2026 04:40:53 +0000 Manifest next update: Thu 28 May 2026 04:40:53 +0000 Files and hashes: 1: bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl (hash: MR5JV9zGa2VofQIrC1FcNv0NdKhPHrZ9LNYjsS4aREg=) 2: B88A958007B611F1BF9DF7EA143D8C67.roa (hash: EzgQAPl/vUlyh5AjsIyBAeaJMqrmt2E1TV7jxVlr6ZU=) 3: 8093CCBA13F611EF8ED7D71EC4F9AE02.roa (hash: xPyb9jdVPxFNqu7DjwvZN/gxmMuIyOp+jROsuWdv+So=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 04:40:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91626D2, serialNumber=6C3B7F1C133DA9C51D444DA85E602A968451FE54 Validity Not Before: May 21 04:40:53 2026 GMT Not After : May 28 04:40:53 2026 GMT Subject: CN=6a0e8cd5-7ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:99:db:6c:c3:9c:a1:d4:59:b4:8f:a2:10:04: d5:4d:da:02:cd:a3:c2:0b:d5:85:87:18:df:d5:8a: 7e:83:55:ab:da:91:40:b0:96:63:91:72:a9:73:21: b3:a7:5b:b1:51:6e:3a:cc:82:78:9c:6f:f0:9f:6d: dc:1e:7c:61:92:b6:af:cb:5e:d9:4e:26:f7:ec:ce: dd:bf:1e:e4:1b:e2:df:70:e9:26:ed:b8:f7:55:33: 31:a1:38:fb:e8:0b:1b:c3:29:bf:53:8b:3f:71:d3: fc:02:99:92:38:1b:84:8f:dc:d2:a9:b2:a1:94:f3: 34:25:63:da:bb:fa:a6:d8:da:c9:9c:cf:8a:1e:16: 16:18:e6:b1:be:c3:08:f8:66:cf:72:f4:c3:74:c5: 9b:d8:a0:b3:e3:ed:f8:52:51:08:41:94:41:55:f3: 64:94:e7:2a:a6:f8:97:cd:03:61:84:fa:82:12:f7: 1a:8d:b0:af:0d:94:13:93:bf:3c:a9:81:40:54:49: b3:3b:e9:87:ab:60:05:bd:b8:0f:55:69:2f:e4:4a: 50:a5:2f:ef:89:32:09:b7:5f:09:f1:d6:08:44:d3: 00:af:eb:ee:f3:0b:d8:d3:28:58:38:b1:1f:1a:f7: bf:35:67:6b:2d:53:06:ce:1a:76:3c:e2:ba:8e:43: 05:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:EC:EA:16:28:A2:05:7D:8C:C5:F5:A6:F7:40:70:A2:A0:42:E2:A6 X509v3 Authority Key Identifier: keyid:6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:7b:09:57:8e:d3:42:69:da:42:f8:c8:6d:a6:b6:4c:35:c9: 6e:7e:8f:5c:c5:a7:3b:40:4a:6e:0d:cb:40:b7:53:8d:f3:f0: fa:1c:2e:29:99:47:ef:21:91:a6:13:59:f7:d6:68:a3:88:0b: 7e:6d:29:3f:99:c4:99:d0:be:b5:5c:14:d6:67:85:b7:df:b2: 82:5e:f5:dd:f1:ea:60:3c:7c:9e:99:63:f8:6d:c3:48:65:3c: b8:2a:52:12:30:b3:b1:bd:3f:91:6f:e9:fa:3b:b0:10:95:fc: c0:20:26:bc:66:30:fc:dd:cb:3c:40:50:cc:82:40:a8:08:ee: a2:5b:6b:f1:54:45:ca:ca:a4:9b:6c:f9:7b:83:72:53:17:80: 7c:5e:aa:ac:98:cb:17:3c:5f:c8:63:4a:11:3f:94:52:23:52: 2d:43:69:60:d5:fe:57:c8:dd:c3:92:4d:46:d5:c5:51:fd:40: b7:7f:f7:a8:9d:fc:9a:c4:76:b4:a9:9e:8f:45:82:c0:54:6a: e5:b7:45:29:29:5e:30:69:58:60:54:b2:59:72:b4:ec:f3:04: fc:22:c9:79:5e:4d:9d:f7:9f:45:c9:1f:e5:3c:01:a2:55:b0: 68:ea:ff:b4:71:85:43:28:06:5e:c2:d9:ba:72:d6:70:04:a2: 9a:18:f3:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI2RDIxMTAvBgNVBAUTKDZDM0I3RjFDMTMzREE5QzUxRDQ0NERBODVFNjAyQTk2 ODQ1MUZFNTQwHhcNMjYwNTIxMDQ0MDUzWhcNMjYwNTI4MDQ0MDUzWjAYMRYwFAYD VQQDEw02YTBlOGNkNS03YWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZnbbMOcodRZtI+iEATVTdoCzaPCC9WFhxjf1Yp+g1Wr2pFAsJZjkXKpcyGz p1uxUW46zIJ4nG/wn23cHnxhkravy17ZTib37M7dvx7kG+LfcOkm7bj3VTMxoTj7 6Asbwym/U4s/cdP8ApmSOBuEj9zSqbKhlPM0JWPau/qm2NrJnM+KHhYWGOaxvsMI +GbPcvTDdMWb2KCz4+34UlEIQZRBVfNklOcqpviXzQNhhPqCEvcajbCvDZQTk788 qYFAVEmzO+mHq2AFvbgPVWkv5EpQpS/viTIJt18J8dYIRNMAr+vu8wvY0yhYOLEf Gve/NWdrLVMGzhp2POK6jkMFbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIrs6hYo ogV9jMX1pvdAcKKgQuKmMB8GA1UdIwQYMBaAFGw7fxwTPanFHURNqF5gKpaEUf5U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjZEMi9BRjIwODM0RTEz RjUxMUVGQTA5RDMyMUJDNEY5QUUwMi9iRHRfSEJNOXFjVWRSRTJvWG1BcWxvUlJf bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JEdF9IQk05cWNVZFJFMm9YbUFxbG9SUl9sUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjZEMi9BRjIwODM0RTEzRjUxMUVGQTA5RDMyMUJDNEY5QUUwMi9iRHRfSEJNOXFj VWRSRTJvWG1BcWxvUlJfbFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKHsJV47TQmnaQvjIbaa2TDXJbn6PXMWnO0BKbg3LQLdTjfPw+hwuKZlH7yGR phNZ99Zoo4gLfm0pP5nEmdC+tVwU1meFt9+ygl713fHqYDx8nplj+G3DSGU8uCpS EjCzsb0/kW/p+juwEJX8wCAmvGYw/N3LPEBQzIJAqAjuoltr8VRFysqkm2z5e4Ny UxeAfF6qrJjLFzxfyGNKET+UUiNSLUNpYNX+V8jdw5JNRtXFUf1At3/3qJ38msR2 tKmej0WCwFRq5bdFKSleMGlYYFSyWXK07PME/CLJeV5NnfefRckf5TwBolWwaOr/ tHGFQygGXsLZunLWcASimhjzew== -----END CERTIFICATE-----Generated at Thu May 21 09:38:00 2026 by rpki-client