$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2FF9/8B9369B042DC11F1A82C4355CB833773/cnTOXaBB8mCNjIJt7g5xWhhxUro.mft File: cnTOXaBB8mCNjIJt7g5xWhhxUro.mft (raw, json) Hash identifier: IquohIHC9z2JqqWVs1JxBQ/Nzlk5wEejZ1tD6BX0epc= Subject key identifier: 36:E7:61:60:DB:8B:C7:36:02:AF:5E:2C:0C:26:90:76:5E:06:71:A0 Authority key identifier: 72:74:CE:5D:A0:41:F2:60:8D:8C:82:6D:EE:0E:71:5A:18:71:52:BA Certificate issuer: /CN=A91A2FF9/serialNumber=7274CE5DA041F2608D8C826DEE0E715A187152BA Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnTOXaBB8mCNjIJt7g5xWhhxUro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2FF9/8B9369B042DC11F1A82C4355CB833773/cnTOXaBB8mCNjIJt7g5xWhhxUro.mft Manifest number: 0D Signing time: Tue 19 May 2026 08:59:56 +0000 Manifest this update: Tue 19 May 2026 08:59:55 +0000 Manifest next update: Tue 26 May 2026 08:59:55 +0000 Files and hashes: 1: cnTOXaBB8mCNjIJt7g5xWhhxUro.crl (hash: H/dJ+n2Kt1gP6QSeslPPmkTfI+367rPHkPcqUcG/Tm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2FF9/8B9369B042DC11F1A82C4355CB833773/cnTOXaBB8mCNjIJt7g5xWhhxUro.crl rsync://rpki.apnic.net/member_repository/A91A2FF9/8B9369B042DC11F1A82C4355CB833773/cnTOXaBB8mCNjIJt7g5xWhhxUro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnTOXaBB8mCNjIJt7g5xWhhxUro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:59:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2FF9, serialNumber=7274CE5DA041F2608D8C826DEE0E715A187152BA Validity Not Before: May 19 08:59:55 2026 GMT Not After : May 26 08:59:55 2026 GMT Subject: CN=6a0c268c-6596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:61:ca:53:0c:e8:90:66:0a:16:53:7d:ab:f4: b6:2d:e1:b6:39:60:a2:06:d4:f4:ba:34:80:3b:05: 85:8e:1d:fc:7d:b0:1b:91:97:c3:8c:92:55:0f:3d: b1:90:c2:10:26:d1:79:d5:cd:67:1e:72:bc:95:27: de:95:73:2f:bf:06:6c:b6:56:a6:ce:04:57:d8:26: b5:93:1b:2a:cc:7e:95:54:6c:fc:14:c8:2e:57:0e: 6a:99:7a:d5:0c:75:4c:e4:17:31:ef:1e:81:c8:0d: 41:aa:7f:04:99:b4:4f:11:13:02:74:5a:c7:62:65: 13:95:c3:96:d7:e9:cb:4e:ba:30:46:e7:6b:fb:28: 1d:9f:a5:38:3d:6f:a3:de:3f:2f:c0:8d:84:0e:15: 8b:c6:be:14:29:90:a3:52:19:d8:3d:7e:a2:c0:2e: b1:28:0c:4c:8a:91:d1:ae:23:de:4e:15:ae:3d:ba: cd:02:25:09:de:40:98:aa:46:a1:c8:58:b0:cf:1e: b5:31:60:98:5f:a7:30:e3:d6:15:43:d0:45:49:13: 6e:02:64:69:e7:cc:83:4d:24:ce:4c:41:91:73:dd: 9b:fb:83:f8:2c:16:bd:61:73:b0:d3:7b:dd:8d:29: 43:0f:b5:91:b3:30:53:e4:50:e8:bf:87:bb:94:01: 91:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E7:61:60:DB:8B:C7:36:02:AF:5E:2C:0C:26:90:76:5E:06:71:A0 X509v3 Authority Key Identifier: keyid:72:74:CE:5D:A0:41:F2:60:8D:8C:82:6D:EE:0E:71:5A:18:71:52:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2FF9/8B9369B042DC11F1A82C4355CB833773/cnTOXaBB8mCNjIJt7g5xWhhxUro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnTOXaBB8mCNjIJt7g5xWhhxUro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2FF9/8B9369B042DC11F1A82C4355CB833773/cnTOXaBB8mCNjIJt7g5xWhhxUro.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:69:6d:56:43:56:4a:2d:f4:57:87:a5:2e:fd:85:3e:77:a9: 46:3e:39:38:34:0c:55:ec:74:ec:9f:c2:ea:31:84:5f:7a:0c: 9e:05:ce:c5:98:0a:f0:75:30:a1:1f:c9:75:30:04:79:23:01: 36:f1:9b:db:78:ea:f9:45:c1:dc:ab:7c:52:e2:a8:a4:34:71: 6b:0d:5d:9a:46:c4:8b:b1:9f:f1:81:6b:a1:a1:52:e1:e7:f8: e3:d1:9a:d3:58:0f:85:e2:cf:41:07:28:a6:0e:32:12:1e:67: b6:fe:e1:24:3b:9d:dc:e9:ce:86:b9:c5:55:45:cf:30:33:18: 19:bb:63:c0:49:70:69:1e:c4:fb:b7:31:bf:9a:03:12:f9:f3: 51:6a:10:24:d3:aa:22:5d:8e:b5:b7:e9:5b:56:0c:de:3d:9f: fe:46:1d:e0:01:8b:cf:01:c1:7c:46:d3:92:81:af:e1:f5:f1: cd:44:43:32:1a:b4:0c:e8:79:90:f5:d3:f0:34:91:78:6a:be: cb:14:ae:43:b3:3e:fc:e7:dc:55:42:1e:ab:7e:a9:66:21:c5: 35:6d:fa:0c:3e:dc:c9:48:c4:c3:45:9c:a5:f9:f8:0c:ea:e0: 5d:c9:b2:34:57:e2:80:e0:43:8e:46:4c:1e:78:17:df:3b:cf: a7:fe:9d:a3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MkZGOTExMC8GA1UEBRMoNzI3NENFNURBMDQxRjI2MDhEOEM4MjZERUUwRTcxNUEx ODcxNTJCQTAeFw0yNjA1MTkwODU5NTVaFw0yNjA1MjYwODU5NTVaMBgxFjAUBgNV BAMTDTZhMGMyNjhjLTY1OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNYcpTDOiQZgoWU32r9LYt4bY5YKIG1PS6NIA7BYWOHfx9sBuRl8OMklUPPbGQ whAm0XnVzWcecryVJ96Vcy+/Bmy2VqbOBFfYJrWTGyrMfpVUbPwUyC5XDmqZetUM dUzkFzHvHoHIDUGqfwSZtE8REwJ0WsdiZROVw5bX6ctOujBG52v7KB2fpTg9b6Pe Py/AjYQOFYvGvhQpkKNSGdg9fqLALrEoDEyKkdGuI95OFa49us0CJQneQJiqRqHI WLDPHrUxYJhfpzDj1hVD0EVJE24CZGnnzINNJM5MQZFz3Zv7g/gsFr1hc7DTe92N KUMPtZGzMFPkUOi/h7uUAZFBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUNudhYNuL xzYCr14sDCaQdl4GcaAwHwYDVR0jBBgwFoAUcnTOXaBB8mCNjIJt7g5xWhhxUrow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyRkY5LzhCOTM2OUIwNDJE QzExRjFBODJDNDM1NUNCODMzNzczL2NuVE9YYUJCOG1DTmpJSnQ3ZzV4V2hoeFVy by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY25UT1hhQkI4bUNOaklKdDdnNXhXaGh4VXJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEy RkY5LzhCOTM2OUIwNDJEQzExRjFBODJDNDM1NUNCODMzNzczL2NuVE9YYUJCOG1D TmpJSnQ3ZzV4V2hoeFVyby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBNaW1WQ1ZKLfRXh6Uu/YU+d6lGPjk4NAxV7HTsn8LqMYRfegyeBc7FmArwdTCh H8l1MAR5IwE28ZvbeOr5RcHcq3xS4qikNHFrDV2aRsSLsZ/xgWuhoVLh5/jj0ZrT WA+F4s9BByimDjISHme2/uEkO53c6c6GucVVRc8wMxgZu2PASXBpHsT7tzG/mgMS +fNRahAk06oiXY61t+lbVgzePZ/+Rh3gAYvPAcF8RtOSga/h9fHNREMyGrQM6HmQ 9dPwNJF4ar7LFK5Dsz7859xVQh6rfqlmIcU1bfoMPtzJSMTDRZyl+fgM6uBdybI0 V+KA4EOORkweeBffO8+n/p2j -----END CERTIFICATE-----Generated at Thu May 21 09:39:32 2026 by rpki-client