$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft File: U2v43c6AJmc3j0e9SVSpC3xwCcE.mft (raw, json) Hash identifier: VMVZblhEsN9Zoq6kIBoJl4NM0NVv/3UoURDwwsT1ekw= Subject key identifier: 18:CF:DB:4D:F6:E6:F3:ED:49:6D:1A:C4:45:90:E2:9D:AA:4F:D1:A9 Authority key identifier: 53:6B:F8:DD:CE:80:26:67:37:8F:47:BD:49:54:A9:0B:7C:70:09:C1 Certificate issuer: /CN=A91A5849/serialNumber=536BF8DDCE802667378F47BD4954A90B7C7009C1 Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft Manifest number: 018B Signing time: Thu 21 May 2026 04:28:26 +0000 Manifest this update: Thu 21 May 2026 04:28:26 +0000 Manifest next update: Thu 28 May 2026 04:28:26 +0000 Files and hashes: 1: U2v43c6AJmc3j0e9SVSpC3xwCcE.crl (hash: 10Oo9RLz4i04vONU36KA85H41MI2q3taQp6xhoRI3+I=) 2: FA3B5DCAF7A011EEBAC1E03BC4F9AE02.roa (hash: 1Lk248Kt03Gu0ojNjhSbpSSO373t7dM1LsyR+Uq6bxc=) 3: D8346320F7A011EE8BE8843BC4F9AE02.roa (hash: pZOaDUH0nfBeAf7y7YbUpvrNXJh3luHM6SLLYuxsD14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.crl rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 04:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5849, serialNumber=536BF8DDCE802667378F47BD4954A90B7C7009C1 Validity Not Before: May 21 04:28:26 2026 GMT Not After : May 28 04:28:26 2026 GMT Subject: CN=6a0e89ea-6c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:bc:b0:b3:bc:aa:07:84:b2:ac:23:5d:b6:a7: 92:d4:c5:af:32:76:64:19:d1:ff:62:b7:5e:d0:7d: df:2d:63:ae:34:bd:dc:d5:b5:a4:a3:29:71:11:17: e6:02:7d:cb:63:32:7c:a5:8f:0c:59:f0:19:2b:c9: 7b:e5:f9:b6:5f:a4:78:fc:3d:09:10:29:70:d2:ac: d3:b9:46:72:b4:85:5d:fe:6f:08:bf:5e:8a:44:7c: 4f:dd:d5:92:75:b2:34:40:f9:d2:27:02:26:c4:aa: 36:47:47:c9:8c:10:8b:ce:ac:7c:e3:13:83:17:aa: 21:ce:75:23:96:f4:be:95:f2:8f:69:17:58:2a:00: 35:fe:bb:f5:fd:0a:4b:3b:ed:bb:70:32:e1:55:d8: 4a:0f:d2:68:c4:c4:b0:c2:eb:67:12:e6:8b:9e:0c: 6e:48:e4:c4:71:7c:6b:c6:90:ae:d1:67:ca:db:88: a2:f3:0e:ec:93:a3:b3:48:97:f4:4f:1f:20:51:ae: c8:e7:20:2f:50:56:fe:3b:41:19:c1:50:af:82:42: ee:ec:16:9b:92:e3:e3:4d:e0:03:34:bb:51:74:0a: e4:e4:ca:68:26:93:8a:68:33:30:46:47:7b:4f:b6: 1b:70:93:58:a9:d1:95:4c:5c:7c:16:24:50:51:b4: a3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:CF:DB:4D:F6:E6:F3:ED:49:6D:1A:C4:45:90:E2:9D:AA:4F:D1:A9 X509v3 Authority Key Identifier: keyid:53:6B:F8:DD:CE:80:26:67:37:8F:47:BD:49:54:A9:0B:7C:70:09:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U2v43c6AJmc3j0e9SVSpC3xwCcE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5849/DBAD384EF79E11EEA45AAE2CC4F9AE02/U2v43c6AJmc3j0e9SVSpC3xwCcE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f5:b1:9d:f2:05:47:64:a3:87:07:db:41:0e:54:99:72:96: 9f:a4:47:48:99:5b:c6:21:ee:cd:1e:08:09:f7:98:e5:44:90: 03:60:09:4f:39:66:38:2b:63:5c:3f:6d:a5:7e:bd:4d:4e:21: 2d:0f:7e:59:38:72:b5:13:d9:bd:ea:5f:55:a8:c9:57:63:f8: 4d:01:1f:4b:7e:2e:87:fc:16:de:9c:d7:32:25:8d:77:97:d5: c8:7d:7e:44:eb:88:a9:19:b4:2e:f2:ac:d8:4b:5c:02:35:27: 81:29:3e:d2:bb:65:1d:ca:b6:0a:90:1d:99:9b:1b:9e:5d:01: 89:a6:82:a3:23:40:0a:cc:8c:10:a0:53:df:ec:6e:ca:6b:8e: fe:7d:d4:d8:bd:3e:a3:3f:bb:13:b5:80:d0:cf:1e:93:5b:2e: a8:18:99:22:84:9f:71:2d:35:6c:7f:6b:ec:eb:99:1b:5c:ad: 09:86:77:7a:4b:8b:b4:b9:af:f4:a4:fc:ba:6f:4b:15:b0:56: 18:52:ea:0d:f4:75:bd:cf:57:8b:62:40:aa:81:e8:42:6d:87: a5:f2:29:d5:61:b3:3a:0b:c8:e5:d7:0b:6e:bd:21:42:d9:60: 48:13:88:73:f4:1c:dd:3d:34:51:d5:81:b7:f5:fb:c9:de:c3: 42:ac:72:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU4NDkxMTAvBgNVBAUTKDUzNkJGOEREQ0U4MDI2NjczNzhGNDdCRDQ5NTRBOTBC N0M3MDA5QzEwHhcNMjYwNTIxMDQyODI2WhcNMjYwNTI4MDQyODI2WjAYMRYwFAYD VQQDEw02YTBlODllYS02YzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA57yws7yqB4SyrCNdtqeS1MWvMnZkGdH/Yrde0H3fLWOuNL3c1bWkoylxERfm An3LYzJ8pY8MWfAZK8l75fm2X6R4/D0JEClw0qzTuUZytIVd/m8Iv16KRHxP3dWS dbI0QPnSJwImxKo2R0fJjBCLzqx84xODF6ohznUjlvS+lfKPaRdYKgA1/rv1/QpL O+27cDLhVdhKD9JoxMSwwutnEuaLngxuSOTEcXxrxpCu0WfK24ii8w7sk6OzSJf0 Tx8gUa7I5yAvUFb+O0EZwVCvgkLu7BabkuPjTeADNLtRdArk5MpoJpOKaDMwRkd7 T7YbcJNYqdGVTFx8FiRQUbSjDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBjP2032 5vPtSW0axEWQ4p2qT9GpMB8GA1UdIwQYMBaAFFNr+N3OgCZnN49HvUlUqQt8cAnB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTg0OS9EQkFEMzg0RUY3 OUUxMUVFQTQ1QUFFMkNDNEY5QUUwMi9VMnY0M2M2QUptYzNqMGU5U1ZTcEMzeHdD Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UydjQzYzZBSm1jM2owZTlTVlNwQzN4d0NjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTg0OS9EQkFEMzg0RUY3OUUxMUVFQTQ1QUFFMkNDNEY5QUUwMi9VMnY0M2M2QUpt YzNqMGU5U1ZTcEMzeHdDY0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASvWxnfIFR2SjhwfbQQ5UmXKWn6RHSJlbxiHuzR4ICfeY5USQA2AJTzlmOCtj XD9tpX69TU4hLQ9+WThytRPZvepfVajJV2P4TQEfS34uh/wW3pzXMiWNd5fVyH1+ ROuIqRm0LvKs2EtcAjUngSk+0rtlHcq2CpAdmZsbnl0BiaaCoyNACsyMEKBT3+xu ymuO/n3U2L0+oz+7E7WA0M8ek1suqBiZIoSfcS01bH9r7OuZG1ytCYZ3ekuLtLmv 9KT8um9LFbBWGFLqDfR1vc9Xi2JAqoHoQm2HpfIp1WGzOgvI5dcLbr0hQtlgSBOI c/Qc3T00UdWBt/X7yd7DQqxytg== -----END CERTIFICATE-----Generated at Thu May 21 09:36:15 2026 by rpki-client