$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft File: CBzlpnA274VGmQv1lMzWMoB0BR0.mft (raw, json) Hash identifier: BMBKas8UmFpj927ZlfyEyGSsiMFOhoc7UvNftLIDH7w= Subject key identifier: 4B:1B:BB:C8:00:74:FE:E7:8A:D8:F0:D4:CC:5A:6B:E1:DD:E4:CE:4B Authority key identifier: 08:1C:E5:A6:70:36:EF:85:46:99:0B:F5:94:CC:D6:32:80:74:05:1D Certificate issuer: /CN=A91AB1F6/serialNumber=081CE5A67036EF8546990BF594CCD6328074051D Certificate serial: 0A2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft Manifest number: 0A20 Signing time: Wed 20 May 2026 19:48:22 +0000 Manifest this update: Wed 20 May 2026 19:48:21 +0000 Manifest next update: Wed 27 May 2026 19:48:21 +0000 Files and hashes: 1: CBzlpnA274VGmQv1lMzWMoB0BR0.crl (hash: 6S3DlygrGNOUkZ58fY2wlJFd3dSfpGXu/3TQXSvLBYk=) 2: 59675AB20A4011F0AC302962C4F9AE02.roa (hash: 2Iz+yAVxYx71x7F/RxujD049uCoDIu8QgELmnr4mv9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.crl rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 19:48:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2605 (0xa2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB1F6, serialNumber=081CE5A67036EF8546990BF594CCD6328074051D Validity Not Before: May 20 19:48:21 2026 GMT Not After : May 27 19:48:21 2026 GMT Subject: CN=6a0e1005-5b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9d:41:b9:53:64:ed:32:1e:2a:7c:e6:e7:69: c4:cb:db:c9:12:77:88:15:9a:76:a7:b9:93:18:a3: fb:3c:16:60:03:3c:d1:9f:af:e7:b5:e6:c5:53:79: 58:6e:3b:07:cd:6b:98:f0:8f:42:e6:32:83:d4:44: 83:ba:8a:9b:53:3a:20:a1:17:21:37:08:82:c8:59: 57:a9:9e:90:f3:dc:20:b2:6a:49:88:60:de:67:da: 11:97:dd:3b:7c:15:dd:97:28:43:16:63:d7:de:cd: 4b:1a:14:13:94:7c:19:83:d5:4d:46:65:d6:9c:e4: 98:8d:1e:59:11:66:6c:d8:81:10:79:b2:36:8e:3c: 2b:6f:5d:60:bc:84:4c:04:3f:ff:2b:15:a3:9a:fb: de:ed:d9:5f:41:cf:3d:88:df:16:aa:7d:3a:52:03: 42:c9:36:45:1c:4e:6c:d4:7b:00:37:2c:fd:11:ef: e8:b2:fc:70:a5:c7:aa:f7:90:99:a3:62:8f:46:6a: 71:1a:aa:29:a7:ff:6a:00:59:b0:3c:b0:37:29:ae: b9:4e:b2:ed:ba:a4:fc:36:c4:54:2b:c8:a0:5b:89: cc:3d:c9:6f:b4:33:66:a2:34:e8:10:59:d4:fb:00: f4:a4:21:5c:86:39:2e:08:63:fa:0c:bf:d9:e6:04: 16:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:1B:BB:C8:00:74:FE:E7:8A:D8:F0:D4:CC:5A:6B:E1:DD:E4:CE:4B X509v3 Authority Key Identifier: keyid:08:1C:E5:A6:70:36:EF:85:46:99:0B:F5:94:CC:D6:32:80:74:05:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:5d:e0:d9:d6:28:c0:58:6a:e2:f0:87:9e:62:46:bb:de:e8: a2:aa:23:14:5c:a8:cf:79:54:71:d1:b0:37:61:61:6e:1e:2f: a5:c7:ac:8d:f9:12:1b:e0:74:7f:1b:33:72:07:9f:30:11:19: 52:05:a3:87:95:9d:31:5e:ed:fc:fc:8f:69:a5:d5:8a:cb:b0: c8:b6:9a:93:a3:66:68:6c:d0:9c:b8:c5:f6:14:aa:8f:d1:07: 86:ee:9d:75:79:dc:aa:ac:2b:a2:a2:8f:78:d9:40:e7:49:79: 0c:c8:f3:99:d8:c6:63:6a:d7:0e:e6:44:96:80:08:6b:71:27: 36:3d:c8:7e:5b:17:fa:fe:7a:01:48:fd:9d:24:cc:7f:0d:39: 85:33:2e:dc:f7:0e:41:45:3e:a4:dc:be:9e:0d:3c:5c:53:58: b1:94:02:1f:45:6d:0d:33:3b:24:bd:88:41:29:89:15:d0:2d: e1:dd:7d:55:a8:7b:39:a9:1c:51:a3:0d:ba:c1:ed:c9:6e:91: b9:99:fa:df:5c:a3:a7:c5:f1:05:4f:5e:d5:3c:a3:c2:33:0d: 98:15:07:af:18:d7:0d:e1:f7:0b:5e:ea:86:4e:61:98:40:f7: 46:17:c8:60:5e:67:b5:4f:86:54:51:31:8e:b3:bb:23:ca:d0: 2f:66:63:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIxRjYxMTAvBgNVBAUTKDA4MUNFNUE2NzAzNkVGODU0Njk5MEJGNTk0Q0NENjMy ODA3NDA1MUQwHhcNMjYwNTIwMTk0ODIxWhcNMjYwNTI3MTk0ODIxWjAYMRYwFAYD VQQDEw02YTBlMTAwNS01YjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZ1BuVNk7TIeKnzm52nEy9vJEneIFZp2p7mTGKP7PBZgAzzRn6/ntebFU3lY bjsHzWuY8I9C5jKD1ESDuoqbUzogoRchNwiCyFlXqZ6Q89wgsmpJiGDeZ9oRl907 fBXdlyhDFmPX3s1LGhQTlHwZg9VNRmXWnOSYjR5ZEWZs2IEQebI2jjwrb11gvIRM BD//KxWjmvve7dlfQc89iN8Wqn06UgNCyTZFHE5s1HsANyz9Ee/osvxwpceq95CZ o2KPRmpxGqopp/9qAFmwPLA3Ka65TrLtuqT8NsRUK8igW4nMPclvtDNmojToEFnU +wD0pCFchjkuCGP6DL/Z5gQWnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEsbu8gA dP7nitjw1Mxaa+Hd5M5LMB8GA1UdIwQYMBaAFAgc5aZwNu+FRpkL9ZTM1jKAdAUd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjFGNi8wRjE0MDE1MDk0 QzkxMUVBQjFEQjYyN0NDNEY5QUUwMi9DQnpscG5BMjc0VkdtUXYxbE16V01vQjBC UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NCemxwbkEyNzRWR21RdjFsTXpXTW9CMEJSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjFGNi8wRjE0MDE1MDk0QzkxMUVBQjFEQjYyN0NDNEY5QUUwMi9DQnpscG5BMjc0 VkdtUXYxbE16V01vQjBCUjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM13g2dYowFhq4vCHnmJGu97ooqojFFyoz3lUcdGwN2Fhbh4vpcesjfkSG+B0 fxszcgefMBEZUgWjh5WdMV7t/PyPaaXVisuwyLaak6NmaGzQnLjF9hSqj9EHhu6d dXncqqwroqKPeNlA50l5DMjzmdjGY2rXDuZEloAIa3EnNj3IflsX+v56AUj9nSTM fw05hTMu3PcOQUU+pNy+ng08XFNYsZQCH0VtDTM7JL2IQSmJFdAt4d19Vah7Oakc UaMNusHtyW6RuZn631yjp8XxBU9e1TyjwjMNmBUHrxjXDeH3C17qhk5hmED3RhfI YF5ntU+GVFExjrO7I8rQL2ZjXg== -----END CERTIFICATE-----Generated at Thu May 21 10:28:09 2026 by rpki-client