$ rpki-client -vvf rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft File: M2YXmy18l7gmb5tDGASoxtLQkOs.mft (raw, json) Hash identifier: 6izYj1SluyFWLtzTVJnrNkLIXSjVDr+DE9sy7x+q2ts= Subject key identifier: 5C:70:6F:C3:EF:02:BD:9A:5D:B3:13:19:80:70:CA:2D:C0:53:60:92 Authority key identifier: 33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB Certificate issuer: /CN=A91852AB/serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB Certificate serial: 026C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft Manifest number: 0260 Signing time: Thu 21 May 2026 02:14:00 +0000 Manifest this update: Thu 21 May 2026 02:14:00 +0000 Manifest next update: Thu 28 May 2026 02:14:00 +0000 Files and hashes: 1: M2YXmy18l7gmb5tDGASoxtLQkOs.crl (hash: YlGAVWU/PhRMCZMOYSH9fZZZEWBPeebHE96Zp6Te190=) 2: B6522520CA6311F09583DE23C4F9AE02.roa (hash: BLKJYKfre7LAbOlIyN9gi1hwCec2KGQoAxw2GSxc1Lk=) 3: E90A311AB8BE11ED83994B4AC4F9AE02.roa (hash: zE41WQieGtPZ6uprujzngfIRBwGKIWd50MUZOTimbRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 620 (0x26c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91852AB, serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB Validity Not Before: May 21 02:14:00 2026 GMT Not After : May 28 02:14:00 2026 GMT Subject: CN=6a0e6a68-07d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:df:e2:bc:a7:b2:e7:be:19:91:c0:8b:38:f3: 06:29:39:b3:6d:29:6a:e7:2a:39:1b:dd:0e:b3:75: 3c:e0:7b:07:34:67:5a:94:b3:fe:70:e7:a7:35:87: ce:fd:d1:13:9d:e5:16:d5:2b:9f:51:a5:ad:fa:b6: 39:24:de:80:0e:33:1b:d5:cb:13:fd:02:74:39:31: 53:d9:1f:d8:b0:6d:6c:9b:ad:82:3b:1d:0a:cf:97: a2:f8:57:c0:28:d4:e0:bc:78:79:61:7d:0c:39:0d: d6:95:bc:86:b6:61:dc:2b:4a:c5:e1:20:0c:1f:dc: 50:03:18:78:e4:32:1b:82:d2:48:17:36:46:9a:31: 8a:b7:2a:99:d5:ef:25:1d:0c:1c:c7:ea:96:bb:30: 12:4a:24:78:62:05:04:86:b9:f3:a5:78:a3:56:01: 77:35:0f:d8:2f:fd:62:33:e8:5a:f6:6d:97:15:4b: 3b:87:c8:76:59:76:2e:85:dc:b3:bd:bf:8c:5c:1a: 9b:9c:37:b7:ad:74:48:03:2d:61:15:ef:c6:de:60: a9:9f:b5:71:6a:f1:bc:fb:7e:b9:6a:b3:e4:f3:2d: af:ce:2c:aa:6c:15:7c:3b:d0:44:f2:6e:f3:12:1c: b2:3a:2f:cf:2a:4c:8f:f5:1c:b2:dc:01:d6:0e:66: d5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:70:6F:C3:EF:02:BD:9A:5D:B3:13:19:80:70:CA:2D:C0:53:60:92 X509v3 Authority Key Identifier: keyid:33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:5e:86:0d:da:6c:81:e1:8f:ab:df:f9:1f:0c:b6:3d:1c:99: a7:7b:2a:16:6b:af:a5:57:b0:73:25:b5:ca:cb:6d:ed:12:20: aa:c9:85:10:cb:ad:b9:d0:56:03:87:8e:b0:2d:f1:b5:1a:99: 56:9b:68:e8:fd:23:e5:ba:70:a9:02:cc:63:df:3e:99:83:73: 4c:9c:4d:ba:45:cc:a8:b1:32:62:8d:b2:77:c2:fe:e5:55:49: 4c:03:89:c7:9b:be:9f:33:01:c4:1a:88:61:ee:23:59:4e:2c: ae:a2:02:8d:9e:f0:f8:f2:40:6e:7a:1e:c2:69:de:46:f5:43: ff:95:07:6e:88:ef:65:b7:60:6a:31:63:ba:71:3c:80:31:a4: 77:1e:d4:09:fd:7d:09:f7:0d:1e:c9:7e:7a:6e:a3:23:d1:6d: 1b:4a:1f:d0:a4:5a:cf:bc:d9:c0:fe:b1:43:fb:60:0d:0b:26: 19:85:5c:47:02:91:ab:38:85:73:0c:8e:56:c6:4e:93:60:15: b7:57:25:02:55:5e:f8:96:c7:6c:e5:c9:87:7c:d1:63:14:08: 9b:4b:ec:af:5e:04:c0:b3:e6:29:bc:01:0a:d2:48:4b:99:85: ef:d3:fd:fa:6c:51:87:af:53:e6:f1:b7:01:7a:03:80:aa:24: 01:80:11:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUyQUIxMTAvBgNVBAUTKDMzNjYxNzlCMkQ3Qzk3QjgyNjZGOUI0MzE4MDRBOEM2 RDJEMDkwRUIwHhcNMjYwNTIxMDIxNDAwWhcNMjYwNTI4MDIxNDAwWjAYMRYwFAYD VQQDEw02YTBlNmE2OC0wN2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiN/ivKey574ZkcCLOPMGKTmzbSlq5yo5G90Os3U84HsHNGdalLP+cOenNYfO /dETneUW1SufUaWt+rY5JN6ADjMb1csT/QJ0OTFT2R/YsG1sm62COx0Kz5ei+FfA KNTgvHh5YX0MOQ3WlbyGtmHcK0rF4SAMH9xQAxh45DIbgtJIFzZGmjGKtyqZ1e8l HQwcx+qWuzASSiR4YgUEhrnzpXijVgF3NQ/YL/1iM+ha9m2XFUs7h8h2WXYuhdyz vb+MXBqbnDe3rXRIAy1hFe/G3mCpn7VxavG8+365arPk8y2vziyqbBV8O9BE8m7z EhyyOi/PKkyP9Ryy3AHWDmbVWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFxwb8Pv Ar2aXbMTGYBwyi3AU2CSMB8GA1UdIwQYMBaAFDNmF5stfJe4Jm+bQxgEqMbS0JDr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTJBQi8yQjk5ODU0RUI4 QjAxMUVEQjRBRkQzNUVDNEY5QUUwMi9NMllYbXkxOGw3Z21iNXRER0FTb3h0TFFr T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00yWVhteTE4bDdnbWI1dERHQVNveHRMUWtPcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTJBQi8yQjk5ODU0RUI4QjAxMUVEQjRBRkQzNUVDNEY5QUUwMi9NMllYbXkxOGw3 Z21iNXRER0FTb3h0TFFrT3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUl6GDdpsgeGPq9/5Hwy2PRyZp3sqFmuvpVewcyW1ystt7RIgqsmFEMutudBW A4eOsC3xtRqZVpto6P0j5bpwqQLMY98+mYNzTJxNukXMqLEyYo2yd8L+5VVJTAOJ x5u+nzMBxBqIYe4jWU4srqICjZ7w+PJAbnoewmneRvVD/5UHbojvZbdgajFjunE8 gDGkdx7UCf19CfcNHsl+em6jI9FtG0of0KRaz7zZwP6xQ/tgDQsmGYVcRwKRqziF cwyOVsZOk2AVt1clAlVe+JbHbOXJh3zRYxQIm0vsr14EwLPmKbwBCtJIS5mF79P9 +mxRh69T5vG3AXoDgKokAYARtA== -----END CERTIFICATE-----Generated at Thu May 21 10:17:46 2026 by rpki-client