$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft File: cJdlx9TTMfTDasa-NH-mah8CNJA.mft (raw, json) Hash identifier: IOeTHCIoAlbXnVlHptmlIF6l/47aI95vzX2eCh1tuMU= Subject key identifier: 25:F9:60:76:30:E7:00:0F:37:74:BD:00:A2:7E:16:D8:27:0A:A6:29 Authority key identifier: 70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90 Certificate issuer: /CN=A91AE85E/serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490 Certificate serial: 35A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft Manifest number: 356D Signing time: Wed 20 May 2026 14:18:11 +0000 Manifest this update: Wed 20 May 2026 14:18:11 +0000 Manifest next update: Wed 27 May 2026 14:18:11 +0000 Files and hashes: 1: cJdlx9TTMfTDasa-NH-mah8CNJA.crl (hash: hd8q6qwOL4EuwER+RixJtmtaqhKxoUNNQXmdZvHiyWU=) 2: 09E2DC32B12B11E59337F35AC4F9AE02.roa (hash: 9fz8ROlxgIz9BeZ3bDwbubljhDBRymKASujcQJN55ag=) 3: 392987D254F611E79DF7E643C4F9AE02.roa (hash: 7X7MqnwCg9AKC2Vx1jhncIIk4NudI1eSpazmHMekhvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 14:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13734 (0x35a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE85E, serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490 Validity Not Before: May 20 14:18:11 2026 GMT Not After : May 27 14:18:11 2026 GMT Subject: CN=6a0dc2a3-01c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f6:27:24:21:17:37:3a:6b:c9:e3:90:5d:67: 5f:59:fe:e7:eb:c9:c2:6c:1b:2a:05:3d:68:2d:02: 14:5d:36:d0:54:45:00:22:0c:5d:bb:9f:40:87:16: b6:db:34:ac:de:c8:5b:0a:0b:09:83:94:9d:af:5f: 3a:13:cd:36:d3:33:94:7f:4d:44:70:fc:2e:44:de: 47:5e:31:c6:2a:2b:a6:57:44:dc:cf:9e:58:36:f4: 65:e1:70:21:c8:f5:07:cc:7d:5c:d6:27:72:97:35: ae:b8:51:ce:b2:3e:f3:be:29:64:80:74:26:9f:c8: 2f:be:1c:76:f7:f0:57:10:40:27:fc:53:2c:7c:f4: 4b:b6:f4:ae:c9:b6:0b:1c:cc:2c:a0:fa:6b:9e:09: 58:72:73:a4:3a:99:53:ee:79:db:18:10:78:ef:33: 17:99:60:09:9c:f7:f4:23:54:11:2c:41:9e:f1:28: 0c:34:39:e9:3e:bd:29:5b:03:fc:c2:b1:24:97:72: be:f9:eb:7b:39:3e:04:90:b9:76:94:63:b7:80:33: 66:6e:db:ce:4b:7f:4a:b4:b7:71:5f:56:30:ad:57: da:b3:43:48:4b:a3:a3:0a:ba:15:e8:ca:34:d2:e2: ef:a9:d8:8b:cc:fe:15:47:d7:98:81:15:c8:01:b1: 0f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F9:60:76:30:E7:00:0F:37:74:BD:00:A2:7E:16:D8:27:0A:A6:29 X509v3 Authority Key Identifier: keyid:70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:b2:4d:93:b2:a8:da:21:48:7e:fb:e5:28:c2:2a:2c:7d:61: 30:67:8b:45:5b:54:9f:cd:5b:10:7b:c5:97:02:42:d4:29:5e: 46:c7:51:30:ac:63:66:6d:93:ca:ac:a6:46:66:61:fe:29:d5: 75:b9:53:e1:ca:b3:d6:6e:7a:85:a7:e8:e6:27:ed:77:7d:88: d2:0c:b2:bb:62:8b:c4:32:fc:bf:40:44:e4:59:42:38:6e:6c: 7c:f6:ee:07:a3:31:a9:dc:c4:4c:1c:46:0b:ae:d2:bb:29:16: 84:66:c4:97:e1:14:88:96:3b:6c:a1:14:65:16:3c:12:64:6e: 6e:05:14:2a:3b:4f:b9:bc:bf:9c:b9:28:cc:e5:2f:ea:a0:19: f9:71:69:17:9f:22:39:31:2c:94:34:cb:8d:86:88:72:78:84: e3:48:03:3a:13:d3:67:79:43:8d:d6:b2:ad:b0:24:5d:9b:b9: ed:68:59:13:1c:b4:ac:cb:e3:02:a1:e3:c6:63:32:4a:db:c5: 2b:69:b9:8c:7b:33:3e:cc:ab:da:3b:5a:70:99:91:ad:34:7e: 8b:e3:81:46:91:54:3d:aa:4d:5d:2e:cf:62:e2:fc:2b:a0:c4: 67:bf:e5:87:0f:65:72:09:86:b2:99:27:f3:2c:1c:2f:35:c0: 20:9d:4f:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU4NUUxMTAvBgNVBAUTKDcwOTc2NUM3RDREMzMxRjRDMzZBQzZCRTM0N0ZBNjZB MUYwMjM0OTAwHhcNMjYwNTIwMTQxODExWhcNMjYwNTI3MTQxODExWjAYMRYwFAYD VQQDEw02YTBkYzJhMy0wMWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPYnJCEXNzpryeOQXWdfWf7n68nCbBsqBT1oLQIUXTbQVEUAIgxdu59Ahxa2 2zSs3shbCgsJg5Sdr186E8020zOUf01EcPwuRN5HXjHGKiumV0Tcz55YNvRl4XAh yPUHzH1c1idylzWuuFHOsj7zvilkgHQmn8gvvhx29/BXEEAn/FMsfPRLtvSuybYL HMwsoPprnglYcnOkOplT7nnbGBB47zMXmWAJnPf0I1QRLEGe8SgMNDnpPr0pWwP8 wrEkl3K++et7OT4EkLl2lGO3gDNmbtvOS39KtLdxX1YwrVfas0NIS6OjCroV6Mo0 0uLvqdiLzP4VR9eYgRXIAbEPrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCX5YHYw 5wAPN3S9AKJ+FtgnCqYpMB8GA1UdIwQYMBaAFHCXZcfU0zH0w2rGvjR/pmofAjSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTg1RS8wQkVEMzUyNjFE NkUxMUUyQjA0QTYxQUYwOEIwMkNEMi9jSmRseDlUVE1mVERhc2EtTkgtbWFoOENO SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NKZGx4OVRUTWZURGFzYS1OSC1tYWg4Q05KQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTg1RS8wQkVEMzUyNjFENkUxMUUyQjA0QTYxQUYwOEIwMkNEMi9jSmRseDlUVE1m VERhc2EtTkgtbWFoOENOSkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVbJNk7Ko2iFIfvvlKMIqLH1hMGeLRVtUn81bEHvFlwJC1CleRsdRMKxjZm2T yqymRmZh/inVdblT4cqz1m56hafo5iftd32I0gyyu2KLxDL8v0BE5FlCOG5sfPbu B6MxqdzETBxGC67SuykWhGbEl+EUiJY7bKEUZRY8EmRubgUUKjtPuby/nLkozOUv 6qAZ+XFpF58iOTEslDTLjYaIcniE40gDOhPTZ3lDjdayrbAkXZu57WhZExy0rMvj AqHjxmMyStvFK2m5jHszPsyr2jtacJmRrTR+i+OBRpFUPapNXS7PYuL8K6DEZ7/l hw9lcgmGspkn8ywcLzXAIJ1Pxw== -----END CERTIFICATE-----Generated at Thu May 21 09:39:07 2026 by rpki-client