$ rpki-client -vvf rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft File: 8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft (raw, json) Hash identifier: rEdedckgmJGoZAEPAYBZ9ofg+hY4T9J8QKRmVD1WTaY= Subject key identifier: 2F:69:5A:58:45:F5:8C:63:BD:F9:88:70:3A:4B:59:7A:9B:3B:05:AC Authority key identifier: F2:4F:14:71:72:3A:64:E4:D5:70:DB:B0:D4:4C:82:43:05:42:62:66 Certificate issuer: /CN=A91958FF/serialNumber=F24F1471723A64E4D570DBB0D44C824305426266 Certificate serial: 5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft Manifest number: 58 Signing time: Fri 15 May 2026 08:22:34 +0000 Manifest this update: Fri 15 May 2026 08:22:34 +0000 Manifest next update: Fri 22 May 2026 08:22:34 +0000 Files and hashes: 1: 8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl (hash: 57pzeN+L4K174vhajSAcDSIdLaGmDfjjmqpXcKW8QSA=) 2: F23251501D1A11F1B3DF5E87103D8C67.roa (hash: hgGzaQ1cBrypk5ytpqpU7GEjdnOL4DAirIqjQZnghOs=) 3: F0BA037C1D1A11F1B3DF5E87103D8C67.roa (hash: 9RLAoZXHDep7ikUMuUeuOPjnOmGwHrIkt6BqprZz7KA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 May 2026 08:22:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91958FF, serialNumber=F24F1471723A64E4D570DBB0D44C824305426266 Validity Not Before: May 15 08:22:34 2026 GMT Not After : May 22 08:22:34 2026 GMT Subject: CN=6a06d7ca-15c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fb:5f:22:80:65:e2:9c:db:69:95:0e:ac:2d: 89:26:d0:24:20:84:f1:7f:dd:84:db:c0:ff:fc:58: ba:43:96:c6:1d:95:18:c8:98:16:42:87:2a:26:a4: 57:57:b0:bb:cd:4a:cb:4f:75:bb:c4:47:68:f2:c4: e0:e5:c4:51:9c:d2:54:ab:be:a3:68:d5:66:64:6b: ea:9a:79:aa:2a:7b:4c:98:0a:fe:82:4d:e1:a9:13: 50:e7:db:a9:3b:50:74:1e:10:4d:6c:8e:9e:c3:8d: 6a:f7:e8:59:7c:e7:04:9b:fc:ec:c7:96:52:97:e3: b3:ec:4b:18:aa:e0:80:fa:e5:16:cd:d0:c9:60:f2: 80:d7:76:97:24:47:5f:ac:70:44:67:2f:ed:f7:c1: 75:1c:2f:9b:c3:bd:f6:49:65:c9:a5:37:99:35:ec: 01:78:ce:9f:9e:ee:86:96:50:42:f5:23:99:66:b9: 19:dd:a1:25:7c:14:73:26:6d:77:32:92:29:28:e0: dd:b6:8e:e3:5e:fb:87:c1:29:a3:35:dc:e4:18:60: e7:8c:cf:1f:b1:e8:f4:f2:e5:53:4e:0d:f4:18:b1: 28:db:79:ed:e0:51:ae:de:b5:96:20:30:c1:58:87: f8:21:7b:ed:0e:e4:0b:a3:76:d6:31:fc:5f:6b:7d: 28:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:69:5A:58:45:F5:8C:63:BD:F9:88:70:3A:4B:59:7A:9B:3B:05:AC X509v3 Authority Key Identifier: keyid:F2:4F:14:71:72:3A:64:E4:D5:70:DB:B0:D4:4C:82:43:05:42:62:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:ba:a2:2b:6a:cb:72:e5:84:19:10:56:f5:ba:62:84:91:cb: b8:f4:b9:6a:6e:db:84:b7:b6:f4:59:a9:70:21:33:9e:32:2e: 7d:a6:26:42:ce:c6:c0:44:03:e0:83:c1:dc:38:39:1b:b6:15: e6:67:d2:29:56:4d:6e:ea:bf:21:c6:e8:f5:4f:21:b1:e8:b1: 42:b8:bd:7a:82:9c:40:0b:e8:e0:b5:57:f7:9b:69:ba:c5:70: c2:93:1a:67:cd:97:70:f4:27:31:f1:8c:cb:95:fc:5a:a3:bb: be:5a:79:15:c2:08:f0:fe:87:93:7b:18:b4:b6:21:01:01:cc: 69:61:7d:a9:4d:07:50:3d:d5:48:ca:4b:3b:d6:53:3d:8d:1e: b8:b9:56:43:b4:62:49:1e:b3:04:dd:fe:b1:e6:a0:b2:50:aa: 19:d0:55:0e:13:18:90:be:c6:3c:56:f3:cf:04:b4:c4:31:23: 51:c7:b9:04:c2:94:42:00:9b:72:a3:c3:14:2d:f8:0b:1a:71: d6:2a:19:d2:88:7f:c0:92:7b:44:f8:4f:4b:84:36:38:40:a2: 2a:59:92:45:bf:12:36:35:b4:89:23:70:05:71:27:e7:ac:c9: 66:9a:6d:05:55:ab:4c:6d:e8:a3:23:b6:55:d5:0c:c4:d4:6b: c3:77:ec:5e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NThGRjExMC8GA1UEBRMoRjI0RjE0NzE3MjNBNjRFNEQ1NzBEQkIwRDQ0QzgyNDMw NTQyNjI2NjAeFw0yNjA1MTUwODIyMzRaFw0yNjA1MjIwODIyMzRaMBgxFjAUBgNV BAMTDTZhMDZkN2NhLTE1YzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDV+18igGXinNtplQ6sLYkm0CQghPF/3YTbwP/8WLpDlsYdlRjImBZChyompFdX sLvNSstPdbvER2jyxODlxFGc0lSrvqNo1WZka+qaeaoqe0yYCv6CTeGpE1Dn26k7 UHQeEE1sjp7DjWr36Fl85wSb/OzHllKX47PsSxiq4ID65RbN0Mlg8oDXdpckR1+s cERnL+33wXUcL5vDvfZJZcmlN5k17AF4zp+e7oaWUEL1I5lmuRndoSV8FHMmbXcy kiko4N22juNe+4fBKaM13OQYYOeMzx+x6PTy5VNODfQYsSjbee3gUa7etZYgMMFY h/ghe+0O5AujdtYx/F9rfSg1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUL2laWEX1 jGO9+YhwOktZeps7BawwHwYDVR0jBBgwFoAU8k8UcXI6ZOTVcNuw1EyCQwVCYmYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1OEZGLzRFM0NCNkMwRDcx QjExRjA5QTE0OEQyNTlBRDM2NDFELzhrOFVjWEk2Wk9UVmNOdXcxRXlDUXdWQ1lt WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOGs4VWNYSTZaT1RWY051dzFFeUNRd1ZDWW1ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1 OEZGLzRFM0NCNkMwRDcxQjExRjA5QTE0OEQyNTlBRDM2NDFELzhrOFVjWEk2Wk9U VmNOdXcxRXlDUXdWQ1ltWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQATuqIrasty5YQZEFb1umKEkcu49LlqbtuEt7b0WalwITOeMi59piZCzsbARAPg g8HcODkbthXmZ9IpVk1u6r8hxuj1TyGx6LFCuL16gpxAC+jgtVf3m2m6xXDCkxpn zZdw9Ccx8YzLlfxao7u+WnkVwgjw/oeTexi0tiEBAcxpYX2pTQdQPdVIyks71lM9 jR64uVZDtGJJHrME3f6x5qCyUKoZ0FUOExiQvsY8VvPPBLTEMSNRx7kEwpRCAJty o8MULfgLGnHWKhnSiH/AkntE+E9LhDY4QKIqWZJFvxI2NbSJI3AFcSfnrMlmmm0F VatMbeijI7ZV1QzE1GvDd+xe -----END CERTIFICATE-----Generated at Sun May 17 04:37:47 2026 by rpki-client