$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft File: Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft (raw, json) Hash identifier: 1cHApPp2M/gVkrUM1a45edN+jxmzWPOWsH0F5bo0/WY= Subject key identifier: 91:9E:0D:F8:F6:8E:23:9D:E9:0A:6D:C7:F2:F1:AB:23:FA:8C:0C:CE Authority key identifier: 05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D Certificate issuer: /CN=A91A3526/serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D Certificate serial: 01DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft Manifest number: 01D0 Signing time: Thu 21 May 2026 03:46:46 +0000 Manifest this update: Thu 21 May 2026 03:46:45 +0000 Manifest next update: Thu 28 May 2026 03:46:45 +0000 Files and hashes: 1: Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl (hash: dgYPIH5KjJoEbPy4j8eLDCYLHnkOYsNaK7ytg8klhac=) 2: 13E4471298B711EE99FD1F09C4F9AE02.roa (hash: CSGjDy/wdYYzGXyvOOUl98bHiR5LO+1hU3+jdzF0bhY=) 3: 134D519098B711EE99FD1F09C4F9AE02.roa (hash: TP4JixOOcg9YnuGelQlIMV1MqlMNS4cHb5eiwzX8uV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 03:46:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3526, serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D Validity Not Before: May 21 03:46:45 2026 GMT Not After : May 28 03:46:45 2026 GMT Subject: CN=6a0e8026-3679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9d:1d:b2:e0:fd:eb:43:b2:c6:58:8c:3a:5f: ba:77:3f:0c:4c:5d:fa:1c:85:2b:a8:81:8d:e2:8b: b7:a2:ce:c5:4e:47:f5:44:38:f4:b2:74:55:0e:92: 01:6c:96:db:a2:00:a3:c3:6d:48:eb:67:4b:30:ff: e9:b3:b1:1c:a5:02:f2:0f:be:17:b1:af:63:81:58: 63:2a:a3:15:8d:27:32:a8:f7:15:84:68:ae:61:46: 1c:ac:80:5c:47:45:b7:05:bd:36:64:3a:8a:9b:19: 88:63:e5:05:53:b0:08:a3:c1:5c:5b:99:7d:65:c0: 47:81:a9:8a:1b:21:38:a5:ce:f7:22:7a:01:19:7d: a4:88:5c:f0:df:43:1f:0a:37:7d:8d:22:7a:77:8b: 64:bc:a7:41:ee:3a:97:0f:c1:20:42:85:24:8b:94: 68:3c:4a:9e:e6:24:0a:ac:c2:00:84:f5:ac:af:81: 34:16:99:87:2e:d0:5f:13:db:f9:91:e6:58:bf:21: b0:ff:12:c1:4c:ef:65:d1:9b:ce:9b:f6:79:67:10: ff:f8:db:9e:31:17:4a:82:b3:22:7c:a4:f3:a2:d8: c6:9b:2a:66:28:a5:7b:a1:44:15:cc:14:98:24:00: f6:77:80:5d:83:6c:02:1d:06:8d:9f:52:eb:39:24: 04:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9E:0D:F8:F6:8E:23:9D:E9:0A:6D:C7:F2:F1:AB:23:FA:8C:0C:CE X509v3 Authority Key Identifier: keyid:05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:1f:3a:ee:ff:47:80:89:fb:dc:e8:fc:d1:b6:44:4e:a8:6a: 76:ed:f0:91:75:57:b9:2b:cb:41:98:2c:c3:d4:94:e4:41:df: 4b:bd:d2:22:22:3f:b1:c6:6a:c1:b8:fd:4c:95:8f:23:63:01: ac:ed:94:47:62:21:a7:8c:f3:af:0a:14:18:80:64:f4:5a:68: 12:c9:61:44:30:fa:6f:56:e6:c2:a1:ad:ca:e5:d0:14:a8:96: bc:23:49:b7:27:94:31:05:c9:a6:e5:dc:2c:89:45:6c:8c:90: fc:d0:d0:6e:66:be:a6:4c:16:eb:ad:a9:54:78:61:e4:d2:8d: 78:4c:1f:04:ca:40:20:cb:ea:07:46:a6:de:b2:1e:ee:90:83: 71:4f:2e:04:0e:05:f3:f6:38:ad:2d:85:2f:2a:5c:ea:8f:0d: 5b:f2:c6:db:33:08:9e:83:d7:2d:a8:94:2f:2b:1d:99:97:08: 59:86:e5:bb:47:6d:4e:22:c8:b2:14:5f:04:c6:51:3e:fd:ea: 73:60:5e:f2:d6:51:60:e5:4d:91:3e:7e:7a:b7:75:a1:eb:c9: 4d:51:2e:6e:b0:75:9c:eb:6b:5f:9c:52:f6:39:24:4d:11:3a: 58:ff:93:44:b0:de:db:86:62:27:30:d2:fb:87:6a:16:7a:e3: 8c:d6:bc:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM1MjYxMTAvBgNVBAUTKDA1RkQyRDUxOUQ0MENCMjA4OTM3QkY4QThFNDYzRTZE ODQyQ0MwN0QwHhcNMjYwNTIxMDM0NjQ1WhcNMjYwNTI4MDM0NjQ1WjAYMRYwFAYD VQQDEw02YTBlODAyNi0zNjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmp0dsuD960OyxliMOl+6dz8MTF36HIUrqIGN4ou3os7FTkf1RDj0snRVDpIB bJbbogCjw21I62dLMP/ps7EcpQLyD74Xsa9jgVhjKqMVjScyqPcVhGiuYUYcrIBc R0W3Bb02ZDqKmxmIY+UFU7AIo8FcW5l9ZcBHgamKGyE4pc73InoBGX2kiFzw30Mf Cjd9jSJ6d4tkvKdB7jqXD8EgQoUki5RoPEqe5iQKrMIAhPWsr4E0FpmHLtBfE9v5 keZYvyGw/xLBTO9l0ZvOm/Z5ZxD/+NueMRdKgrMifKTzotjGmypmKKV7oUQVzBSY JAD2d4Bdg2wCHQaNn1LrOSQEuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJGeDfj2 jiOd6Qptx/LxqyP6jAzOMB8GA1UdIwQYMBaAFAX9LVGdQMsgiTe/io5GPm2ELMB9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzUyNi9BMTNDNTVDRTk4 QjYxMUVFOEI0OTA0ODdDNEY5QUUwMi9CZjB0VVoxQXl5Q0pONy1LamtZLWJZUXN3 SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JmMHRVWjFBeXlDSk43LUtqa1ktYllRc3dIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzUyNi9BMTNDNTVDRTk4QjYxMUVFOEI0OTA0ODdDNEY5QUUwMi9CZjB0VVoxQXl5 Q0pONy1LamtZLWJZUXN3SDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFx867v9HgIn73Oj80bZETqhqdu3wkXVXuSvLQZgsw9SU5EHfS73SIiI/scZq wbj9TJWPI2MBrO2UR2Ihp4zzrwoUGIBk9FpoEslhRDD6b1bmwqGtyuXQFKiWvCNJ tyeUMQXJpuXcLIlFbIyQ/NDQbma+pkwW662pVHhh5NKNeEwfBMpAIMvqB0am3rIe 7pCDcU8uBA4F8/Y4rS2FLypc6o8NW/LG2zMInoPXLaiULysdmZcIWYblu0dtTiLI shRfBMZRPv3qc2Be8tZRYOVNkT5+erd1oevJTVEubrB1nOtrX5xS9jkkTRE6WP+T RLDe24ZiJzDS+4dqFnrjjNa8TA== -----END CERTIFICATE-----Generated at Thu May 21 09:38:51 2026 by rpki-client