$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft File: 5Otd-leSQpC7j-xFuZd_xsf2-jc.mft (raw, json) Hash identifier: y82Ixf99EzqBSGejf6AATQMwNILCgqXEs3vTS0IKtok= Subject key identifier: 24:4F:00:5A:26:52:09:E0:76:38:BF:D8:81:F9:04:1F:A0:10:A6:AF Authority key identifier: E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 Certificate issuer: /CN=A91A8B0B/serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Certificate serial: 0D4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft Manifest number: 0D36 Signing time: Wed 20 May 2026 18:05:31 +0000 Manifest this update: Wed 20 May 2026 18:05:30 +0000 Manifest next update: Wed 27 May 2026 18:05:30 +0000 Files and hashes: 1: 5Otd-leSQpC7j-xFuZd_xsf2-jc.crl (hash: k8S3HH6TMy0za8sfOR0jj2JKo3yr/HI/UyhgKazxJWM=) 2: 5842DDF0FCE511E9BFA4B27AC4F9AE02.roa (hash: tiznFO31M77tVMAqZuT5RhZyjOfXG4VtSqcUKQ0h8mI=) 3: EA17F65E6C6711ECB7C0925AC4F9AE02.roa (hash: JBITMoocNfEn/DC51LyDttOjzmGPPbU/nUR+4OvjGYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:05:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3406 (0xd4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8B0B, serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Validity Not Before: May 20 18:05:30 2026 GMT Not After : May 27 18:05:30 2026 GMT Subject: CN=6a0df7eb-4c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1e:49:cb:a4:2d:d0:1d:0d:4f:89:d1:3d:6e: 34:a7:98:da:b8:a2:09:31:d6:7d:3f:1b:96:b7:b1: b6:3f:db:1e:a7:87:08:32:33:67:08:09:bf:59:dc: d3:5a:2a:10:33:d8:2a:fd:54:ab:4b:1f:9e:6c:42: 33:3a:39:b2:31:a1:29:44:b6:c7:61:14:a1:c6:6d: 94:18:62:ce:38:03:24:fd:a3:ee:d3:52:cf:76:35: 1a:4b:d9:19:ba:80:db:9e:14:0c:b4:97:e7:4e:03: 82:b3:9a:58:be:63:36:72:a5:50:7d:e7:c7:cf:28: 19:eb:00:bc:c6:ef:24:91:21:93:7f:04:13:fa:9a: 24:c1:4c:cd:79:26:23:de:d2:6e:67:90:2e:41:a5: 10:52:39:11:41:f1:3f:38:4d:55:7f:03:89:44:88: 1e:e5:71:d4:af:fd:bc:df:72:e8:ea:4c:a5:36:a2: b6:4d:42:b5:b2:1d:f4:c7:77:6b:74:7f:70:1c:6d: f0:30:65:cd:83:07:c9:9a:bf:f2:e7:70:df:33:ab: 8f:1c:92:91:78:92:0f:0d:f5:06:52:a0:13:d6:b6: d8:61:53:e5:fc:78:cf:24:a6:17:c3:10:6d:fc:60: 0e:ff:69:33:54:54:73:71:fc:48:db:b5:01:bd:ca: 2a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:4F:00:5A:26:52:09:E0:76:38:BF:D8:81:F9:04:1F:A0:10:A6:AF X509v3 Authority Key Identifier: keyid:E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:1d:3c:42:21:58:19:3a:ae:45:03:c8:9e:6e:2d:da:f9:0a: 6a:47:59:87:95:fc:6c:94:5e:15:f1:53:b7:cd:af:7f:09:7a: 99:ba:48:6e:97:54:75:96:d6:92:9d:08:20:95:80:08:9e:38: 68:3d:a1:ed:e2:b1:ff:92:40:3c:df:c1:46:31:c3:80:d3:14: 23:d2:fd:e3:38:c0:2d:d2:10:6e:62:f4:ea:c8:ec:1d:2a:d3: d2:42:f1:95:ef:b6:29:98:db:65:45:df:ac:f8:ad:5e:7a:b8: 0b:a4:5a:da:25:d7:34:94:2e:13:98:b1:73:46:8b:89:29:0d: d6:1d:5c:d5:89:a2:64:55:b0:b9:d0:5f:57:91:6c:e8:20:8c: 80:d8:97:19:cf:30:09:25:62:00:61:cc:8c:15:4d:67:09:d0: eb:0c:fe:26:70:39:9f:85:72:72:64:cd:fc:ea:bb:03:6f:38: d3:3a:b6:7d:5a:30:a5:f5:16:c3:7e:30:a9:19:64:80:c8:70: f3:4c:00:21:ea:45:e7:3f:6b:6a:eb:45:37:01:f9:aa:34:e6: 40:cb:6f:32:03:e7:48:2f:e9:6e:8d:86:03:7f:b1:44:08:37: 85:00:62:b2:58:f5:98:96:32:44:4d:ea:28:a5:57:18:f4:56: 5e:88:8f:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThCMEIxMTAvBgNVBAUTKEU0RUI1REZBNTc5MjQyOTBCQjhGRUM0NUI5OTc3RkM2 QzdGNkZBMzcwHhcNMjYwNTIwMTgwNTMwWhcNMjYwNTI3MTgwNTMwWjAYMRYwFAYD VQQDEw02YTBkZjdlYi00YzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkh5Jy6Qt0B0NT4nRPW40p5jauKIJMdZ9PxuWt7G2P9sep4cIMjNnCAm/WdzT WioQM9gq/VSrSx+ebEIzOjmyMaEpRLbHYRShxm2UGGLOOAMk/aPu01LPdjUaS9kZ uoDbnhQMtJfnTgOCs5pYvmM2cqVQfefHzygZ6wC8xu8kkSGTfwQT+pokwUzNeSYj 3tJuZ5AuQaUQUjkRQfE/OE1VfwOJRIge5XHUr/2833Lo6kylNqK2TUK1sh30x3dr dH9wHG3wMGXNgwfJmr/y53DfM6uPHJKReJIPDfUGUqAT1rbYYVPl/HjPJKYXwxBt /GAO/2kzVFRzcfxI27UBvcoqJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCRPAFom Ugngdji/2IH5BB+gEKavMB8GA1UdIwQYMBaAFOTrXfpXkkKQu4/sRbmXf8bH9vo3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEIwQi81QUVCNUVCMkZD QzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1FwQzdqLXhGdVpkX3hzZjIt amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPdGQtbGVTUXBDN2oteEZ1WmRfeHNmMi1qYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEIwQi81QUVCNUVCMkZDQzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1Fw QzdqLXhGdVpkX3hzZjItamMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgR08QiFYGTquRQPInm4t2vkKakdZh5X8bJReFfFTt82vfwl6mbpIbpdUdZbW kp0IIJWACJ44aD2h7eKx/5JAPN/BRjHDgNMUI9L94zjALdIQbmL06sjsHSrT0kLx le+2KZjbZUXfrPitXnq4C6Ra2iXXNJQuE5ixc0aLiSkN1h1c1YmiZFWwudBfV5Fs 6CCMgNiXGc8wCSViAGHMjBVNZwnQ6wz+JnA5n4VycmTN/Oq7A2840zq2fVowpfUW w34wqRlkgMhw80wAIepF5z9rautFNwH5qjTmQMtvMgPnSC/pbo2GA3+xRAg3hQBi slj1mJYyRE3qKKVXGPRWXoiPkA== -----END CERTIFICATE-----Generated at Thu May 21 09:36:33 2026 by rpki-client