$ rpki-client -vvf rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft File: a4KWpYFUMCeOwxG16cvrf_CpDcY.mft (raw, json) Hash identifier: oZfuNVBWFiukAsukXUKQRNdxTxXt0lOjohcXJwsOG+4= Subject key identifier: 5F:70:69:E9:66:2E:A9:30:F3:6A:19:A8:63:54:CA:85:F8:52:91:AB Authority key identifier: 6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6 Certificate issuer: /CN=A91951DE/serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft Manifest number: A2 Signing time: Thu 21 May 2026 07:24:21 +0000 Manifest this update: Thu 21 May 2026 07:24:20 +0000 Manifest next update: Thu 28 May 2026 07:24:20 +0000 Files and hashes: 1: a4KWpYFUMCeOwxG16cvrf_CpDcY.crl (hash: W3J7eUuUl8iRy41vVaI8y6f1uH3VY6HnSvjX0BfewG8=) 2: 61FC1B6A60B511F0A2C58668C4F9AE02.roa (hash: oCr3aQd1HSJF91DdiESRPlphTmJf2c8Lshvn2EKkib4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 07:24:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91951DE, serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6 Validity Not Before: May 21 07:24:20 2026 GMT Not After : May 28 07:24:20 2026 GMT Subject: CN=6a0eb325-031f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:de:3d:20:42:11:3a:b9:3b:c4:bd:4f:bb:21: c7:e7:d1:48:40:0b:87:45:11:d3:60:51:a8:ee:5b: 00:10:45:97:cf:26:0c:50:16:a4:ae:0a:45:74:17: e4:f0:08:a3:63:c1:cf:74:29:3a:94:37:61:44:1e: e2:96:77:a1:ce:f8:9b:c4:74:89:1b:69:fe:0f:a6: d7:e1:eb:46:44:ac:39:3b:97:84:b2:cf:3e:a5:13: a9:28:a6:50:28:ab:d6:f2:9c:1a:7a:f3:9a:91:9b: 8e:78:cc:19:cb:53:01:3d:d4:84:42:c0:d1:8c:17: 4a:6b:62:34:10:c8:09:88:66:6a:fd:55:b2:91:c5: 21:4c:db:bb:23:82:70:4f:27:d7:6a:ad:ce:a4:1e: a1:28:c7:fb:f3:aa:22:c6:0f:bc:4d:00:0f:3a:db: 76:ce:a8:55:e1:7a:56:f7:23:e8:52:f8:aa:cf:fa: 3b:21:75:b2:07:ac:be:c7:24:15:bf:18:72:ae:ee: 5b:d3:02:bf:c6:7d:02:0b:b5:2c:b7:62:e0:75:c4: fa:e6:61:4d:10:3e:eb:0c:ab:1e:99:f5:71:d7:6b: 87:81:98:62:f1:ae:e9:42:88:f7:4a:12:ab:d3:24: 05:1c:9c:4a:4f:f3:dc:82:3a:93:88:0a:17:c9:00: d7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:70:69:E9:66:2E:A9:30:F3:6A:19:A8:63:54:CA:85:F8:52:91:AB X509v3 Authority Key Identifier: keyid:6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:e5:7d:b0:c2:da:8b:fb:c7:ed:99:a8:78:75:94:0c:e7:9a: 85:c9:c8:f4:ff:a8:0f:5e:68:47:0b:8a:58:9a:b8:27:26:79: ea:b6:91:35:b4:c4:ad:90:6a:89:a9:da:80:0c:c4:5d:e6:57: 38:a1:77:d1:f3:96:b8:2e:a6:bf:8e:4c:4f:e2:41:4e:c1:5b: c0:71:fb:87:4a:84:a1:3a:03:b8:a5:26:91:86:d8:b6:5f:7d: c5:cc:eb:47:92:3f:dd:74:e8:94:38:b7:6f:36:e5:93:30:ca: 2e:8b:43:6d:e0:12:33:8a:e6:a7:72:99:32:9b:01:07:38:61: 60:59:1a:60:75:3b:ba:f9:14:f7:01:c0:59:87:86:57:88:d9: 33:7a:e4:2b:2c:ff:28:7f:41:9d:9e:e0:92:5f:7c:2f:09:3f: a8:15:80:ae:16:77:7a:77:fb:eb:e3:01:8c:ce:da:d1:78:bc: 7d:0f:6a:ba:d6:c0:c4:a3:fa:87:d2:2b:00:e0:50:8a:db:2c: f4:73:61:e6:bd:4a:e6:41:6a:34:47:00:7d:dd:dd:0f:ec:36: 35:c8:18:4f:52:45:aa:fb:0f:09:47:c3:fa:56:e1:b2:ed:df: 90:b5:34:9c:ac:1f:97:27:ee:21:98:ab:dd:6d:a1:26:02:07: 4b:09:ed:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUxREUxMTAvBgNVBAUTKDZCODI5NkE1ODE1NDMwMjc4RUMzMTFCNUU5Q0JFQjdG RjBBOTBEQzYwHhcNMjYwNTIxMDcyNDIwWhcNMjYwNTI4MDcyNDIwWjAYMRYwFAYD VQQDEw02YTBlYjMyNS0wMzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv949IEIROrk7xL1PuyHH59FIQAuHRRHTYFGo7lsAEEWXzyYMUBakrgpFdBfk 8AijY8HPdCk6lDdhRB7ilnehzvibxHSJG2n+D6bX4etGRKw5O5eEss8+pROpKKZQ KKvW8pwaevOakZuOeMwZy1MBPdSEQsDRjBdKa2I0EMgJiGZq/VWykcUhTNu7I4Jw TyfXaq3OpB6hKMf786oixg+8TQAPOtt2zqhV4XpW9yPoUviqz/o7IXWyB6y+xyQV vxhyru5b0wK/xn0CC7Ust2LgdcT65mFNED7rDKsemfVx12uHgZhi8a7pQoj3ShKr 0yQFHJxKT/PcgjqTiAoXyQDXSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF9waelm Lqkw82oZqGNUyoX4UpGrMB8GA1UdIwQYMBaAFGuClqWBVDAnjsMRtenL63/wqQ3G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTFERS84NzFGREEzNjYw QjQxMUYwOEVEN0FFNjNDNEY5QUUwMi9hNEtXcFlGVU1DZU93eEcxNmN2cmZfQ3BE Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2E0S1dwWUZVTUNlT3d4RzE2Y3ZyZl9DcERjWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTFERS84NzFGREEzNjYwQjQxMUYwOEVEN0FFNjNDNEY5QUUwMi9hNEtXcFlGVU1D ZU93eEcxNmN2cmZfQ3BEY1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJOV9sMLai/vH7ZmoeHWUDOeahcnI9P+oD15oRwuKWJq4JyZ56raRNbTErZBq ianagAzEXeZXOKF30fOWuC6mv45MT+JBTsFbwHH7h0qEoToDuKUmkYbYtl99xczr R5I/3XTolDi3bzblkzDKLotDbeASM4rmp3KZMpsBBzhhYFkaYHU7uvkU9wHAWYeG V4jZM3rkKyz/KH9BnZ7gkl98Lwk/qBWArhZ3enf76+MBjM7a0Xi8fQ9qutbAxKP6 h9IrAOBQitss9HNh5r1K5kFqNEcAfd3dD+w2NcgYT1JFqvsPCUfD+lbhsu3fkLU0 nKwflyfuIZir3W2hJgIHSwntrg== -----END CERTIFICATE-----Generated at Thu May 21 14:14:51 2026 by rpki-client