$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft File: 5KlM-o0vn1s570Y1BZHOMS5RT7M.mft (raw, json) Hash identifier: QyEW0c+YcUgBclLn5ZPnP51vBjliWK8gaItkm1kXrrA= Subject key identifier: 5D:5E:23:EE:A4:8B:E6:80:B9:F5:BF:93:91:CD:6A:8F:A0:31:73:A8 Authority key identifier: E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3 Certificate issuer: /CN=A91A3AB3/serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3 Certificate serial: 0347 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft Manifest number: 032B Signing time: Thu 21 May 2026 01:17:51 +0000 Manifest this update: Thu 21 May 2026 01:17:50 +0000 Manifest next update: Thu 28 May 2026 01:17:50 +0000 Files and hashes: 1: 5KlM-o0vn1s570Y1BZHOMS5RT7M.crl (hash: aZHh9SNxxGlJTy48Afdn+s/830Md2xXf/54NLODxUxA=) 2: 5B69CE3A474A11EF8624EE6DC4F9AE02.roa (hash: BV3fAhzYpd4ungoocRUfiG5/5RWB1BiAarK17R/lLO0=) 3: 3D331986E17211EFA5959B2FC4F9AE02.roa (hash: GgxFX6325kuN6RICOxtS2gvb+gkFJTzGc8YA7E0IOc0=) 4: F3997FACE21D11EFA5819B7EC4F9AE02.roa (hash: SaiPWLAHUnkyojVdelS2uSfpAinLvbN01a3ry45lnng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 01:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 839 (0x347) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3AB3, serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3 Validity Not Before: May 21 01:17:50 2026 GMT Not After : May 28 01:17:50 2026 GMT Subject: CN=6a0e5d3f-46d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:06:3a:16:64:81:7a:18:64:0d:7e:62:11:4e: 76:ca:ab:2a:85:99:50:e1:16:77:04:19:1d:41:a6: 59:17:22:00:64:98:de:4f:75:d5:37:da:e3:4c:55: 75:ab:06:01:32:a5:11:ed:29:58:f9:91:f4:1a:a4: 29:34:bd:75:de:99:06:f2:62:35:52:59:f9:fb:0e: d5:8c:d0:85:21:0e:f3:cc:2d:8e:71:81:1a:7b:57: 35:39:a8:ac:eb:0c:b4:d1:6a:81:2e:a2:d5:8e:ed: f2:15:4e:eb:93:c7:d9:cc:3a:b0:6e:eb:2e:5a:c1: fd:ad:05:58:19:06:e2:39:0c:eb:41:45:ee:67:28: bb:52:be:86:37:bd:ea:4e:a0:a7:25:dd:e1:92:f4: 4c:a5:c0:9e:4b:9c:db:9a:56:2a:8e:35:87:2c:73: 2b:ed:ef:53:90:a4:54:95:e2:47:7e:1e:44:aa:18: df:60:8f:33:1a:bc:6c:89:cb:78:a0:af:70:21:8f: e3:31:d1:5c:89:16:86:91:e9:de:06:74:fa:95:c0: f3:53:e5:92:94:e1:43:1d:1e:3a:1b:46:43:da:73: c6:f8:4e:6f:7d:d2:20:f1:55:40:a2:07:d3:82:d3: c3:0f:19:6f:b5:02:a7:13:35:ff:b5:36:74:c6:a9: 1b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:5E:23:EE:A4:8B:E6:80:B9:F5:BF:93:91:CD:6A:8F:A0:31:73:A8 X509v3 Authority Key Identifier: keyid:E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:8d:86:b2:e8:8c:5d:2c:95:c0:52:23:18:92:6b:bd:98:02: 0e:f3:15:9c:14:ff:4d:3e:6f:41:ee:3c:02:24:fb:0f:1b:5a: 1f:76:d2:ef:e8:70:c6:93:5b:a0:a8:0b:40:bd:a9:29:b6:bc: e1:1f:41:31:cc:1c:a8:2e:2f:f9:89:e5:49:d3:2d:f7:2d:eb: dd:67:d2:01:a9:88:f9:c5:10:fc:fa:bc:0b:25:59:df:00:d6: cc:bb:e9:dc:f3:82:14:db:0c:3c:1f:6b:5a:9d:22:22:61:4d: ed:87:f8:8b:bb:39:d3:27:ca:6c:1e:fe:fd:a9:18:b3:af:30: 1d:02:fc:d6:92:74:5b:7b:5e:21:b9:ba:79:81:5c:f0:1d:72: fe:ac:05:10:b6:e6:aa:ec:46:6f:be:56:4c:c6:62:ba:05:59: 35:86:1d:a4:b2:fd:75:5b:79:5e:a2:24:90:e1:4f:e6:b5:06: d2:7a:25:61:02:2e:83:5f:ef:80:ce:be:82:c4:5b:09:e7:cb: ac:86:76:4e:34:ec:ee:e2:0e:94:8a:70:c5:83:94:6c:b8:7f: 49:07:60:2a:47:ea:01:38:b3:78:2b:cf:8b:98:28:71:3c:72: a9:e6:03:44:ea:12:c1:cf:06:69:3d:08:02:4d:9c:03:09:ce: 88:26:c2:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNBQjMxMTAvBgNVBAUTKEU0QTk0Q0ZBOEQyRjlGNUIzOUVGNDYzNTA1OTFDRTMx MkU1MTRGQjMwHhcNMjYwNTIxMDExNzUwWhcNMjYwNTI4MDExNzUwWjAYMRYwFAYD VQQDEw02YTBlNWQzZi00NmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjgY6FmSBehhkDX5iEU52yqsqhZlQ4RZ3BBkdQaZZFyIAZJjeT3XVN9rjTFV1 qwYBMqUR7SlY+ZH0GqQpNL113pkG8mI1Uln5+w7VjNCFIQ7zzC2OcYEae1c1Oais 6wy00WqBLqLVju3yFU7rk8fZzDqwbusuWsH9rQVYGQbiOQzrQUXuZyi7Ur6GN73q TqCnJd3hkvRMpcCeS5zbmlYqjjWHLHMr7e9TkKRUleJHfh5EqhjfYI8zGrxsict4 oK9wIY/jMdFciRaGkeneBnT6lcDzU+WSlOFDHR46G0ZD2nPG+E5vfdIg8VVAogfT gtPDDxlvtQKnEzX/tTZ0xqkbrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF1eI+6k i+aAufW/k5HNao+gMXOoMB8GA1UdIwQYMBaAFOSpTPqNL59bOe9GNQWRzjEuUU+z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0FCMy8wNUVEOTRDRTE5 NEMxMUVEQUQzOEYyMkJDNEY5QUUwMi81S2xNLW8wdm4xczU3MFkxQlpIT01TNVJU N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVLbE0tbzB2bjFzNTcwWTFCWkhPTVM1UlQ3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0FCMy8wNUVEOTRDRTE5NEMxMUVEQUQzOEYyMkJDNEY5QUUwMi81S2xNLW8wdm4x czU3MFkxQlpIT01TNVJUN00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQI2GsuiMXSyVwFIjGJJrvZgCDvMVnBT/TT5vQe48AiT7DxtaH3bS7+hwxpNb oKgLQL2pKba84R9BMcwcqC4v+YnlSdMt9y3r3WfSAamI+cUQ/Pq8CyVZ3wDWzLvp 3POCFNsMPB9rWp0iImFN7Yf4i7s50yfKbB7+/akYs68wHQL81pJ0W3teIbm6eYFc 8B1y/qwFELbmquxGb75WTMZiugVZNYYdpLL9dVt5XqIkkOFP5rUG0nolYQIug1/v gM6+gsRbCefLrIZ2TjTs7uIOlIpwxYOUbLh/SQdgKkfqATizeCvPi5gocTxyqeYD ROoSwc8GaT0IAk2cAwnOiCbCPA== -----END CERTIFICATE-----Generated at Thu May 21 10:17:56 2026 by rpki-client