$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft File: iWZCPuKkFWMfevMU5NiEAHqEaLY.mft (raw, json) Hash identifier: B1FjP77rVnR8LmCvJMiY/9o/TkDmMw3WLFKv0aTI4aM= Subject key identifier: 4F:2A:36:00:F8:E8:4A:B8:51:1E:AF:10:A4:1F:CD:F0:30:92:D3:E2 Authority key identifier: 89:66:42:3E:E2:A4:15:63:1F:7A:F3:14:E4:D8:84:00:7A:84:68:B6 Certificate issuer: /CN=A91A91CB/serialNumber=8966423EE2A415631F7AF314E4D884007A8468B6 Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft Manifest number: F0 Signing time: Thu 21 May 2026 06:28:46 +0000 Manifest this update: Thu 21 May 2026 06:28:45 +0000 Manifest next update: Thu 28 May 2026 06:28:45 +0000 Files and hashes: 1: iWZCPuKkFWMfevMU5NiEAHqEaLY.crl (hash: nHwyyZzC6yeySgJBIdz9Hl1cHfIfSp47I0KCUSuUeAI=) 2: 0EB302DCEA5B11EFABB07C6DC4F9AE02.roa (hash: yxcEwj+JBBXiVTX+aFQc5ddxq/vEi232S7B1rwDfWO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.crl rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 04:46:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91CB, serialNumber=8966423EE2A415631F7AF314E4D884007A8468B6 Validity Not Before: May 21 06:28:45 2026 GMT Not After : May 28 06:28:45 2026 GMT Subject: CN=6a0ea61e-e8cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4e:13:51:2b:0f:b9:7a:06:cf:c0:26:dd:4c: db:0d:7a:62:6f:34:b1:3f:d0:4c:9d:e2:30:a9:f4: b8:92:73:be:0f:49:8e:55:01:99:32:95:38:b7:bd: 4b:07:cf:45:1f:7d:f8:ec:1a:af:bf:66:cf:e4:18: b1:b5:19:63:d3:53:96:fe:2f:83:34:c6:00:d6:23: 86:08:b1:87:ec:f2:fc:53:23:07:8d:86:4c:61:82: ac:6a:ce:8e:ae:8f:e3:d8:a1:b5:e6:71:98:05:f4: fb:50:9b:2b:4f:4f:bf:ed:24:59:f2:bf:61:e2:d1: 44:af:dc:9f:42:20:08:a3:e6:63:96:d4:06:fe:67: 1c:98:bd:88:04:90:97:29:0e:d6:da:14:b5:06:c0: f0:a6:74:c1:40:f5:6f:e2:09:b3:e8:a4:7b:1c:73: a0:5e:af:af:37:c5:c1:1e:aa:da:07:ee:b6:2e:2b: f1:13:ff:b6:18:ac:c1:6a:f9:92:88:b1:93:13:bd: f9:b8:e4:3d:74:5e:29:61:d7:74:30:ce:da:99:4e: 6c:ce:9d:0a:c3:90:0f:eb:19:e6:c0:93:3c:ae:9f: df:50:e3:34:ab:60:15:2c:42:19:a7:ac:34:3a:ba: 32:29:73:ce:5a:8c:8e:6c:b8:ed:5b:b4:84:d2:49: 61:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:2A:36:00:F8:E8:4A:B8:51:1E:AF:10:A4:1F:CD:F0:30:92:D3:E2 X509v3 Authority Key Identifier: keyid:89:66:42:3E:E2:A4:15:63:1F:7A:F3:14:E4:D8:84:00:7A:84:68:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:c2:ba:50:74:20:ea:a8:7b:7b:63:65:26:91:a6:12:90:67: b3:35:2b:8f:13:bb:ae:aa:8d:d0:b6:38:37:93:ed:e8:1c:55: f8:55:72:dc:8f:ba:0a:7c:d0:25:da:09:ba:87:66:42:b1:37: 10:b4:92:04:52:22:ad:c4:e6:ca:40:14:cd:eb:19:21:a8:9a: 82:5e:d9:35:95:71:e6:58:40:9b:2e:d9:61:c4:3b:9a:7b:8b: fa:ad:13:14:72:26:1f:b2:9e:4a:de:0d:11:e1:55:6b:02:91: 5d:5e:37:75:bf:ae:29:f9:48:44:0c:30:1e:71:b3:0d:c3:60: de:ad:c5:db:f9:eb:72:a6:9e:c3:6a:a7:2c:3a:94:cb:45:21: 7d:9d:ac:2e:ab:ba:c0:64:ba:f4:2a:7e:34:1a:b4:ee:2b:cd: 69:d6:d5:b5:03:5e:4a:b1:0f:e8:16:97:ff:4c:80:f1:35:20: 22:14:46:72:ea:04:89:bf:ba:22:e6:b4:52:c2:75:3a:4a:00: dd:19:a5:52:0a:02:70:bd:32:8e:4c:91:6b:e9:e4:1d:b2:e9: 68:ae:80:d7:91:c7:82:76:f2:29:27:c1:dd:4f:80:a8:56:3d: af:eb:d5:6e:fc:20:92:e7:41:89:49:d7:04:aa:4d:f1:ba:e1: 9f:81:c8:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxQ0IxMTAvBgNVBAUTKDg5NjY0MjNFRTJBNDE1NjMxRjdBRjMxNEU0RDg4NDAw N0E4NDY4QjYwHhcNMjYwNTIxMDYyODQ1WhcNMjYwNTI4MDYyODQ1WjAYMRYwFAYD VQQDEw02YTBlYTYxZS1lOGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn04TUSsPuXoGz8Am3UzbDXpibzSxP9BMneIwqfS4knO+D0mOVQGZMpU4t71L B89FH3347Bqvv2bP5BixtRlj01OW/i+DNMYA1iOGCLGH7PL8UyMHjYZMYYKsas6O ro/j2KG15nGYBfT7UJsrT0+/7SRZ8r9h4tFEr9yfQiAIo+ZjltQG/mccmL2IBJCX KQ7W2hS1BsDwpnTBQPVv4gmz6KR7HHOgXq+vN8XBHqraB+62LivxE/+2GKzBavmS iLGTE735uOQ9dF4pYdd0MM7amU5szp0Kw5AP6xnmwJM8rp/fUOM0q2AVLEIZp6w0 OroyKXPOWoyObLjtW7SE0klhGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE8qNgD4 6Eq4UR6vEKQfzfAwktPiMB8GA1UdIwQYMBaAFIlmQj7ipBVjH3rzFOTYhAB6hGi2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFDQi82NTBFNjAwQUVB NUExMUVGQjg0QUU0NjhDNEY5QUUwMi9pV1pDUHVLa0ZXTWZldk1VNU5pRUFIcUVh TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lXWkNQdUtrRldNZmV2TVU1TmlFQUhxRWFMWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTFDQi82NTBFNjAwQUVBNUExMUVGQjg0QUU0NjhDNEY5QUUwMi9pV1pDUHVLa0ZX TWZldk1VNU5pRUFIcUVhTFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkMK6UHQg6qh7e2NlJpGmEpBnszUrjxO7rqqN0LY4N5Pt6BxV+FVy3I+6CnzQ JdoJuodmQrE3ELSSBFIircTmykAUzesZIaiagl7ZNZVx5lhAmy7ZYcQ7mnuL+q0T FHImH7KeSt4NEeFVawKRXV43db+uKflIRAwwHnGzDcNg3q3F2/nrcqaew2qnLDqU y0UhfZ2sLqu6wGS69Cp+NBq07ivNadbVtQNeSrEP6BaX/0yA8TUgIhRGcuoEib+6 Iua0UsJ1OkoA3RmlUgoCcL0yjkyRa+nkHbLpaK6A15HHgnbyKSfB3U+AqFY9r+vV bvwgkudBiUnXBKpN8brhn4HIEg== -----END CERTIFICATE-----Generated at Thu May 21 09:37:06 2026 by rpki-client