$ rpki-client -vvf rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/U-LhNFJFffIe8ly6OyYQ0BKpBtI.mft File: U-LhNFJFffIe8ly6OyYQ0BKpBtI.mft (raw, json) Hash identifier: 5hafniDxQ4iZjEVlhKeLjj4drFuJ/VrYZBKEyerXPek= Subject key identifier: ED:55:57:79:F6:3D:0A:D8:15:3A:C0:67:C5:E7:64:35:FE:03:61:3E Authority key identifier: 53:E2:E1:34:52:45:7D:F2:1E:F2:5C:BA:3B:26:10:D0:12:A9:06:D2 Certificate issuer: /CN=A91736BD/serialNumber=53E2E13452457DF21EF25CBA3B2610D012A906D2 Certificate serial: 0295 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-LhNFJFffIe8ly6OyYQ0BKpBtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/U-LhNFJFffIe8ly6OyYQ0BKpBtI.mft Manifest number: 028E Signing time: Thu 21 May 2026 01:48:17 +0000 Manifest this update: Thu 21 May 2026 01:48:17 +0000 Manifest next update: Thu 28 May 2026 01:48:17 +0000 Files and hashes: 1: U-LhNFJFffIe8ly6OyYQ0BKpBtI.crl (hash: ZYoAE+11vbVDNmdsSIagiz1wg+nAMwiC8tSmaIQY1hQ=) 2: EB8C9B546EE911ED8F07B022C4F9AE02.roa (hash: g3eOenNLDa9Ly+07FwWBJj8yKQrhF0dtKDBoP9nh0/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/U-LhNFJFffIe8ly6OyYQ0BKpBtI.crl rsync://rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/U-LhNFJFffIe8ly6OyYQ0BKpBtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-LhNFJFffIe8ly6OyYQ0BKpBtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 01:48:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 661 (0x295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91736BD, serialNumber=53E2E13452457DF21EF25CBA3B2610D012A906D2 Validity Not Before: May 21 01:48:17 2026 GMT Not After : May 28 01:48:17 2026 GMT Subject: CN=6a0e6461-9717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:47:65:c4:6d:da:08:58:96:bc:41:bc:c0:8e: a8:0d:13:a4:aa:40:68:27:4d:ab:4b:81:49:a7:df: 6e:ca:47:f0:70:f2:06:cc:0b:48:d8:b2:73:a9:fd: f3:44:d2:3b:83:d4:d5:a5:6c:bc:0d:0c:f6:bf:6c: ed:98:c3:db:b1:6d:96:0a:1e:db:92:c5:e1:fe:ed: fd:05:83:37:c4:85:05:10:aa:b5:cd:7b:b9:8e:84: c8:9d:92:bf:6b:a2:aa:88:d5:b9:59:f6:b4:1b:43: f6:a6:18:b7:8a:4e:e6:a4:57:de:4b:03:ab:e4:b9: 64:d5:e6:42:11:e5:23:9a:18:98:a7:71:1a:b0:6c: 23:63:49:c0:7b:1f:40:5a:b6:29:ce:23:50:82:17: 7b:96:30:cc:91:ce:f6:f4:35:54:61:53:59:75:81: 61:74:66:92:1b:42:2f:06:3d:0e:c7:5a:8b:1c:3b: 55:9a:66:7a:a8:2e:4d:eb:05:10:8b:52:52:56:ce: b2:d4:d0:31:21:71:ed:ef:8f:5e:d3:2e:f0:d9:b4: 8b:f9:4b:01:04:50:67:23:8c:40:1d:01:16:5d:dc: f5:8a:ee:e0:4b:b1:00:fb:7b:49:3a:be:81:b2:8e: 16:8d:a0:11:cb:07:ad:53:fc:40:b7:31:80:d4:b1: a2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:55:57:79:F6:3D:0A:D8:15:3A:C0:67:C5:E7:64:35:FE:03:61:3E X509v3 Authority Key Identifier: keyid:53:E2:E1:34:52:45:7D:F2:1E:F2:5C:BA:3B:26:10:D0:12:A9:06:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/U-LhNFJFffIe8ly6OyYQ0BKpBtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-LhNFJFffIe8ly6OyYQ0BKpBtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91736BD/22C621A86EE511EDB9C45385C4F9AE02/U-LhNFJFffIe8ly6OyYQ0BKpBtI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:20:50:32:97:70:a7:0e:a8:d3:e4:85:1e:34:a6:e9:ff:d6: 2a:2a:c3:27:f1:79:f8:3e:a0:58:20:b0:79:14:a7:53:d8:e8: 74:e7:3e:62:84:2e:90:13:68:89:61:5a:2e:89:2a:44:71:4b: e9:ba:e4:36:f0:c4:3f:e5:d4:49:14:a5:6f:52:50:a8:1b:ea: dd:46:19:d1:04:87:11:cd:36:e4:21:08:e9:9c:a0:ef:4c:e5: 66:04:1c:9b:1b:cd:9a:6d:5f:20:6d:cb:9c:75:70:22:41:3a: 65:88:d7:d8:a7:e0:f0:6f:cb:5a:d2:e0:cd:dd:eb:90:13:39: d6:83:9a:e4:f2:9e:c7:4b:b7:40:d1:6e:2e:64:26:0c:be:6b: f1:8e:61:20:aa:1a:8d:5d:b8:7f:ee:34:a0:cc:bb:c8:fe:26: 11:8f:42:a2:09:f7:e4:25:91:60:52:88:8d:08:85:e6:ee:0c: aa:95:ab:f5:23:a6:ca:60:92:5e:81:0a:b8:97:02:77:de:b5: 30:6d:d6:e4:9d:50:76:65:86:ac:b6:69:ae:23:17:50:a8:e2: fc:68:04:47:d3:ba:21:d8:fe:c8:9a:f3:a6:1b:e5:c2:0c:d4: 7d:52:d8:58:04:b4:e9:8f:84:fe:11:6e:ce:cf:b7:c3:9c:ea: 61:5c:97:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM2QkQxMTAvBgNVBAUTKDUzRTJFMTM0NTI0NTdERjIxRUYyNUNCQTNCMjYxMEQw MTJBOTA2RDIwHhcNMjYwNTIxMDE0ODE3WhcNMjYwNTI4MDE0ODE3WjAYMRYwFAYD VQQDEw02YTBlNjQ2MS05NzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6EdlxG3aCFiWvEG8wI6oDROkqkBoJ02rS4FJp99uykfwcPIGzAtI2LJzqf3z RNI7g9TVpWy8DQz2v2ztmMPbsW2WCh7bksXh/u39BYM3xIUFEKq1zXu5joTInZK/ a6KqiNW5Wfa0G0P2phi3ik7mpFfeSwOr5Llk1eZCEeUjmhiYp3EasGwjY0nAex9A WrYpziNQghd7ljDMkc729DVUYVNZdYFhdGaSG0IvBj0Ox1qLHDtVmmZ6qC5N6wUQ i1JSVs6y1NAxIXHt749e0y7w2bSL+UsBBFBnI4xAHQEWXdz1iu7gS7EA+3tJOr6B so4WjaARywetU/xAtzGA1LGi+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO1VV3n2 PQrYFTrAZ8XnZDX+A2E+MB8GA1UdIwQYMBaAFFPi4TRSRX3yHvJcujsmENASqQbS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzZCRC8yMkM2MjFBODZF RTUxMUVEQjlDNDUzODVDNEY5QUUwMi9VLUxoTkZKRmZmSWU4bHk2T3lZUTBCS3BC dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UtTGhORkpGZmZJZThseTZPeVlRMEJLcEJ0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzZCRC8yMkM2MjFBODZFRTUxMUVEQjlDNDUzODVDNEY5QUUwMi9VLUxoTkZKRmZm SWU4bHk2T3lZUTBCS3BCdEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANyBQMpdwpw6o0+SFHjSm6f/WKirDJ/F5+D6gWCCweRSnU9jodOc+YoQukBNo iWFaLokqRHFL6brkNvDEP+XUSRSlb1JQqBvq3UYZ0QSHEc025CEI6Zyg70zlZgQc mxvNmm1fIG3LnHVwIkE6ZYjX2Kfg8G/LWtLgzd3rkBM51oOa5PKex0u3QNFuLmQm DL5r8Y5hIKoajV24f+40oMy7yP4mEY9Cogn35CWRYFKIjQiF5u4MqpWr9SOmymCS XoEKuJcCd961MG3W5J1QdmWGrLZpriMXUKji/GgER9O6Idj+yJrzphvlwgzUfVLY WAS06Y+E/hFuzs+3w5zqYVyXkg== -----END CERTIFICATE-----Generated at Thu May 21 09:38:10 2026 by rpki-client