$ rpki-client -vvf rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft File: _UmlE0ai96yBGwCtYuvvDpSiobI.mft (raw, json) Hash identifier: 7NOSShv14ERhMgYhW42ds87QZL9xjIhD8gntqejAhBE= Subject key identifier: 32:E4:54:54:37:6E:56:93:09:8A:91:64:E6:D5:10:B4:48:F6:0B:79 Authority key identifier: FD:49:A5:13:46:A2:F7:AC:81:1B:00:AD:62:EB:EF:0E:94:A2:A1:B2 Certificate issuer: /CN=A91652B5/serialNumber=FD49A51346A2F7AC811B00AD62EBEF0E94A2A1B2 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft Manifest number: 65 Signing time: Thu 21 May 2026 08:08:51 +0000 Manifest this update: Thu 21 May 2026 08:08:50 +0000 Manifest next update: Thu 28 May 2026 08:08:50 +0000 Files and hashes: 1: _UmlE0ai96yBGwCtYuvvDpSiobI.crl (hash: ynzaM3dJqHX/PvYtjSsY6nBmKF7K4rzJcWmp+xO/H70=) 2: 535DB56CD1AF11F0A278C10CC4F9AE02.roa (hash: BXUEY5m+3lonf61CO2Aq4e6KwB/tUlOeMJ88DFpi710=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.crl rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 08:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91652B5, serialNumber=FD49A51346A2F7AC811B00AD62EBEF0E94A2A1B2 Validity Not Before: May 21 08:08:50 2026 GMT Not After : May 28 08:08:50 2026 GMT Subject: CN=6a0ebd92-9415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:33:2e:07:5a:5b:73:29:da:31:4b:5a:52:eb: db:91:34:e7:d6:ed:4c:40:b2:69:64:30:ed:02:6f: 9b:de:01:d7:0b:fd:cd:32:90:b8:b2:5e:5b:70:ca: 73:25:7d:66:2d:15:ed:11:74:8b:42:a8:26:7f:4c: 7a:1a:31:7f:db:40:70:24:2d:b2:89:15:1e:fb:a8: 68:d6:2f:f3:a7:d1:e6:2d:89:c8:63:ed:82:5a:fa: 8a:64:20:fb:54:90:e9:f2:1e:be:ee:07:2f:a6:f1: 80:d1:a2:de:ee:58:8c:11:d7:a6:4a:c3:88:d8:d9: c8:90:76:af:00:9b:f3:3a:ea:3c:3e:a7:fb:2b:23: b2:a8:e9:8b:b5:81:15:7a:99:8f:5b:58:d0:75:d9: c1:83:89:73:82:d1:c8:75:33:2a:19:4a:15:65:df: be:8c:89:cb:0b:be:b4:98:89:b3:10:69:f3:d7:26: 31:f3:14:1a:71:34:cc:5a:99:58:6b:f7:00:c4:cf: a4:f6:40:20:5a:36:23:c9:50:4b:a0:78:bb:d0:6e: 0f:ed:9c:ad:b9:a8:a5:0a:ae:61:2f:ce:04:85:d9: 65:d9:29:a6:0b:f7:d6:b4:86:8e:1c:74:67:10:27: 6b:fa:82:38:69:82:d4:0f:2e:09:09:b8:33:c6:16: 82:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E4:54:54:37:6E:56:93:09:8A:91:64:E6:D5:10:B4:48:F6:0B:79 X509v3 Authority Key Identifier: keyid:FD:49:A5:13:46:A2:F7:AC:81:1B:00:AD:62:EB:EF:0E:94:A2:A1:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:3f:1f:41:ba:87:1b:ff:35:a5:d4:46:94:db:98:28:ff:84: 08:91:dd:94:c6:4b:bf:e7:cb:4e:07:6f:00:54:1b:e8:9a:d2: 8c:59:5c:30:bf:d2:74:0a:2d:ea:f1:70:ce:f6:0b:ef:58:6e: b2:c7:02:37:37:eb:21:c6:1a:ed:23:ba:47:0d:17:55:8f:fb: 94:5a:cf:7c:9b:c6:ae:de:65:1c:73:d9:04:45:c6:70:90:06: 99:32:cc:96:2e:c1:29:8b:fe:a6:63:50:99:83:0b:af:e6:27: 9d:8f:0f:64:3c:47:bb:1a:20:e4:ea:34:c4:b2:c3:f4:c0:ae: b4:db:e5:16:de:4a:1a:d6:69:0b:29:ea:ec:d3:ba:45:df:e9: c5:af:ba:a1:db:5b:21:bc:de:06:80:24:da:fd:fd:4f:09:bb: e6:ab:fd:4c:88:d6:81:b2:2d:11:2e:2e:5b:69:37:5e:65:f4: 11:9c:8b:96:3f:65:38:7a:11:1f:45:16:89:8b:9a:9b:e0:96: a1:db:48:6a:ba:51:f8:c0:07:35:e7:ba:79:f5:74:5a:24:29: c8:4c:2a:81:28:1b:64:8c:ce:e7:d2:12:2c:87:59:05:4a:2f: 3c:5a:97:fa:22:ec:44:ce:cf:ea:a6:5f:c7:7c:27:11:ea:cc: 71:84:d8:a2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NTJCNTExMC8GA1UEBRMoRkQ0OUE1MTM0NkEyRjdBQzgxMUIwMEFENjJFQkVGMEU5 NEEyQTFCMjAeFw0yNjA1MjEwODA4NTBaFw0yNjA1MjgwODA4NTBaMBgxFjAUBgNV BAMTDTZhMGViZDkyLTk0MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCVMy4HWltzKdoxS1pS69uRNOfW7UxAsmlkMO0Cb5veAdcL/c0ykLiyXltwynMl fWYtFe0RdItCqCZ/THoaMX/bQHAkLbKJFR77qGjWL/On0eYtichj7YJa+opkIPtU kOnyHr7uBy+m8YDRot7uWIwR16ZKw4jY2ciQdq8Am/M66jw+p/srI7Ko6Yu1gRV6 mY9bWNB12cGDiXOC0ch1MyoZShVl376MicsLvrSYibMQafPXJjHzFBpxNMxamVhr 9wDEz6T2QCBaNiPJUEugeLvQbg/tnK25qKUKrmEvzgSF2WXZKaYL99a0ho4cdGcQ J2v6gjhpgtQPLgkJuDPGFoKlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMuRUVDdu VpMJipFk5tUQtEj2C3kwHwYDVR0jBBgwFoAU/UmlE0ai96yBGwCtYuvvDpSiobIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1MkI1LzY2NzlEOEJFQzVC MjExRjA4NjIyNzkyQkM0RjlBRTAyL19VbWxFMGFpOTZ5Qkd3Q3RZdXZ2RHBTaW9i SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX1VtbEUwYWk5NnlCR3dDdFl1dnZEcFNpb2JJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 MkI1LzY2NzlEOEJFQzVCMjExRjA4NjIyNzkyQkM0RjlBRTAyL19VbWxFMGFpOTZ5 Qkd3Q3RZdXZ2RHBTaW9iSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBgPx9Buocb/zWl1EaU25go/4QIkd2Uxku/58tOB28AVBvomtKMWVwwv9J0Ci3q 8XDO9gvvWG6yxwI3N+shxhrtI7pHDRdVj/uUWs98m8au3mUcc9kERcZwkAaZMsyW LsEpi/6mY1CZgwuv5iedjw9kPEe7GiDk6jTEssP0wK602+UW3koa1mkLKers07pF 3+nFr7qh21shvN4GgCTa/f1PCbvmq/1MiNaBsi0RLi5baTdeZfQRnIuWP2U4ehEf RRaJi5qb4Jah20hqulH4wAc157p59XRaJCnITCqBKBtkjM7n0hIsh1kFSi88Wpf6 IuxEzs/qpl/HfCcR6sxxhNii -----END CERTIFICATE-----Generated at Thu May 21 13:24:01 2026 by rpki-client