$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft File: 2cuKblTiS1D0r_v6oFlb_YECQ-4.mft (raw, json) Hash identifier: nlppJcP9GS6k5JTFmhsK8uBrDXVXB3D3c9LQIpHexF8= Subject key identifier: 2A:6A:0A:11:E9:EA:FE:9A:C3:00:9E:2D:FF:A7:22:A7:02:EB:50:45 Authority key identifier: D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE Certificate issuer: /CN=A91AC4DB/serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE Certificate serial: 07E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft Manifest number: 07E1 Signing time: Wed 20 May 2026 21:21:13 +0000 Manifest this update: Wed 20 May 2026 21:21:12 +0000 Manifest next update: Wed 27 May 2026 21:21:12 +0000 Files and hashes: 1: 2cuKblTiS1D0r_v6oFlb_YECQ-4.crl (hash: H0Lr0cXZWe1Fg481Tjyfm2YU2CJ4u5mZVTPGHYLOxEQ=) 2: 4157856E347511EB84CD472CC4F9AE02.roa (hash: zq6YsHOFAkCUjOwvFtu/Gf7IKiFUQhFU7rExUxXP4/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 21:21:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2025 (0x7e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4DB, serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE Validity Not Before: May 20 21:21:12 2026 GMT Not After : May 27 21:21:12 2026 GMT Subject: CN=6a0e25c8-9bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:da:98:d8:49:a9:3a:80:22:b1:46:bc:7d:71: 98:04:4e:ac:e5:2b:d3:57:db:0c:f2:82:cb:bc:99: bf:4a:0c:64:db:ed:44:da:92:aa:08:f0:56:64:68: 79:16:bf:27:b9:29:86:25:69:d7:6a:2d:22:96:5f: cb:da:7f:2f:ca:15:54:80:51:7c:96:a7:be:c2:86: fc:de:4d:fd:ad:8c:37:2a:79:25:62:63:9e:55:85: c2:9a:5c:25:0f:a3:a2:45:0b:33:fd:e1:13:61:6f: 88:21:7b:75:1b:6b:da:07:2a:49:91:f1:b3:a5:71: 84:b4:61:45:e4:ea:e3:03:7a:36:39:6c:a4:a4:80: b8:b3:e4:c0:6c:9b:b2:ef:fc:c6:4e:d4:f8:ce:61: b5:76:67:da:32:21:7f:9d:42:00:d4:b4:33:1f:0e: 14:9a:6e:84:6d:6b:42:16:5b:2d:10:8e:e8:7d:ea: 04:14:3b:9d:9c:47:5c:b3:45:25:f3:27:02:8a:73: a9:a7:b0:6a:56:47:56:da:3c:c7:9a:eb:9a:b0:86: 75:19:ad:7c:6d:58:e7:e1:2a:02:a3:af:c4:df:4d: 55:2b:07:cf:34:fa:65:f9:ba:d7:c7:c7:13:61:1f: 49:bd:da:ad:1c:ad:5b:2e:01:6e:99:0d:fb:ec:3d: 73:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:6A:0A:11:E9:EA:FE:9A:C3:00:9E:2D:FF:A7:22:A7:02:EB:50:45 X509v3 Authority Key Identifier: keyid:D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:e6:ad:45:43:eb:9d:18:4e:01:21:8a:5c:15:8e:e7:6c:2c: 3b:30:af:4a:16:a9:93:11:a3:b7:7e:c9:50:49:9d:89:7e:ae: e4:d0:b9:8c:33:17:64:ea:bb:5a:44:cc:dc:b6:98:b6:55:20: 7b:40:82:14:47:e3:69:6c:c0:b7:8c:4f:fe:ed:03:10:86:85: 73:56:e6:e3:30:de:9f:95:8d:f8:b6:18:01:9c:cf:65:2c:c2: 40:f4:da:02:85:e7:5d:3f:8b:b5:0d:65:36:42:4c:11:e5:4d: 56:36:bd:e8:b8:57:04:81:f5:06:00:06:da:7d:8a:e9:d8:21: e3:c0:d9:9b:c9:04:db:21:a0:14:b7:1a:37:93:aa:8b:21:cf: e3:59:15:ae:02:b9:8f:11:76:a9:52:fe:fb:fe:e9:c2:94:16: e9:6f:a0:9a:ef:cd:2b:3b:f5:91:d3:b1:bf:67:8f:88:32:3d: 1c:59:b3:fc:22:8b:ad:03:08:56:92:9d:d1:82:35:58:c0:59: 1f:0d:09:11:75:df:37:a3:88:49:a2:10:00:87:ae:1f:08:30: 8e:30:b9:63:73:6a:82:46:c8:49:5a:9c:75:5c:8d:d0:c1:b7: 82:42:22:0d:ff:3c:07:b6:50:a1:db:78:3c:0e:b5:5f:17:ca: 45:af:65:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0REIxMTAvBgNVBAUTKEQ5Q0I4QTZFNTRFMjRCNTBGNEFGRkJGQUEwNTk1QkZE ODEwMjQzRUUwHhcNMjYwNTIwMjEyMTEyWhcNMjYwNTI3MjEyMTEyWjAYMRYwFAYD VQQDEw02YTBlMjVjOC05YmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAldqY2EmpOoAisUa8fXGYBE6s5SvTV9sM8oLLvJm/Sgxk2+1E2pKqCPBWZGh5 Fr8nuSmGJWnXai0ill/L2n8vyhVUgFF8lqe+wob83k39rYw3KnklYmOeVYXCmlwl D6OiRQsz/eETYW+IIXt1G2vaBypJkfGzpXGEtGFF5OrjA3o2OWykpIC4s+TAbJuy 7/zGTtT4zmG1dmfaMiF/nUIA1LQzHw4Umm6EbWtCFlstEI7ofeoEFDudnEdcs0Ul 8ycCinOpp7BqVkdW2jzHmuuasIZ1Ga18bVjn4SoCo6/E301VKwfPNPpl+brXx8cT YR9JvdqtHK1bLgFumQ377D1zTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCpqChHp 6v6awwCeLf+nIqcC61BFMB8GA1UdIwQYMBaAFNnLim5U4ktQ9K/7+qBZW/2BAkPu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzREQi8zQzA3RTJENjM0 NzMxMUVCOTc5NEUyMjZDNEY5QUUwMi8yY3VLYmxUaVMxRDByX3Y2b0ZsYl9ZRUNR LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJjdUtibFRpUzFEMHJfdjZvRmxiX1lFQ1EtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzREQi8zQzA3RTJENjM0NzMxMUVCOTc5NEUyMjZDNEY5QUUwMi8yY3VLYmxUaVMx RDByX3Y2b0ZsYl9ZRUNRLTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEuatRUPrnRhOASGKXBWO52wsOzCvShapkxGjt37JUEmdiX6u5NC5jDMXZOq7 WkTM3LaYtlUge0CCFEfjaWzAt4xP/u0DEIaFc1bm4zDen5WN+LYYAZzPZSzCQPTa AoXnXT+LtQ1lNkJMEeVNVja96LhXBIH1BgAG2n2K6dgh48DZm8kE2yGgFLcaN5Oq iyHP41kVrgK5jxF2qVL++/7pwpQW6W+gmu/NKzv1kdOxv2ePiDI9HFmz/CKLrQMI VpKd0YI1WMBZHw0JEXXfN6OISaIQAIeuHwgwjjC5Y3NqgkbISVqcdVyN0MG3gkIi Df88B7ZQodt4PA61XxfKRa9lHA== -----END CERTIFICATE-----Generated at Thu May 21 09:28:52 2026 by rpki-client