$ rpki-client -vvf rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.mft File: 17VzlML5jR0AnPY_E_yQB2jyGN4.mft (raw, json) Hash identifier: E8uVz5Ntp2VPvnvwCjWWlmBXQ8N5k2rMfTqnhln/0TU= Subject key identifier: 8F:AA:3E:0B:B1:03:72:A9:BA:FB:B5:EA:EE:44:DD:5B:47:09:F7:94 Authority key identifier: D7:B5:73:94:C2:F9:8D:1D:00:9C:F6:3F:13:FC:90:07:68:F2:18:DE Certificate issuer: /CN=A91B33AE/serialNumber=D7B57394C2F98D1D009CF63F13FC900768F218DE Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/17VzlML5jR0AnPY_E_yQB2jyGN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.mft Manifest number: 35 Signing time: Tue 19 May 2026 08:32:16 +0000 Manifest this update: Tue 19 May 2026 08:32:16 +0000 Manifest next update: Tue 26 May 2026 08:32:16 +0000 Files and hashes: 1: 17VzlML5jR0AnPY_E_yQB2jyGN4.crl (hash: Xwkad/WgFdKrVSB/+msciFlpabgLG1blKfUXFViQvNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.crl rsync://rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/17VzlML5jR0AnPY_E_yQB2jyGN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B33AE, serialNumber=D7B57394C2F98D1D009CF63F13FC900768F218DE Validity Not Before: May 19 08:32:16 2026 GMT Not After : May 26 08:32:16 2026 GMT Subject: CN=6a0c2010-7e7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:6e:4e:9a:5f:5c:ed:36:a6:b4:17:d0:aa:a0: ba:92:46:73:08:c6:ac:d0:d8:59:89:01:a8:5d:41: d8:3a:0b:eb:34:8b:52:21:c1:78:5e:a7:33:a9:5c: 28:04:8a:3e:fc:e3:50:d2:a1:a0:e2:93:d4:a6:1f: c0:d3:ce:b0:33:d3:b4:2a:f9:f8:eb:79:25:34:e6: 39:07:7f:c4:10:8b:39:9c:86:52:16:dd:b9:d8:0b: 38:c1:d3:3e:37:98:2a:17:6b:d8:ae:16:6c:b3:9e: c2:9d:6e:cc:34:d0:00:44:2a:cc:5a:ff:a0:46:9d: d1:19:bd:9e:9a:e9:40:a6:e8:21:4c:5c:81:f9:ea: dc:e4:e0:53:0d:70:51:7c:be:b2:64:76:79:bd:75: 55:de:14:fe:e2:df:5d:e3:a0:be:ac:2b:5f:92:a1: b2:9c:48:af:9c:14:c9:30:b5:a4:03:51:d9:8c:ba: 36:e5:9a:b0:65:cb:cb:84:db:68:b0:bb:1a:7a:30: d8:b3:44:87:55:14:f1:3f:1c:19:f8:72:93:39:50: 6d:24:f5:8b:34:de:c8:f0:c9:89:a8:d1:43:04:a0: 96:45:16:b3:de:7e:c1:8d:5f:c0:8e:dd:39:fc:a1: 18:16:4e:e2:f4:b8:a8:3c:6b:9a:27:61:ac:a3:9b: 0c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AA:3E:0B:B1:03:72:A9:BA:FB:B5:EA:EE:44:DD:5B:47:09:F7:94 X509v3 Authority Key Identifier: keyid:D7:B5:73:94:C2:F9:8D:1D:00:9C:F6:3F:13:FC:90:07:68:F2:18:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/17VzlML5jR0AnPY_E_yQB2jyGN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B33AE/880A3B800B3B11F1B75B7741063D8C67/17VzlML5jR0AnPY_E_yQB2jyGN4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:18:cf:11:4c:d9:49:b2:17:d7:7f:27:10:61:08:fc:8a:5f: c4:d9:a7:70:9a:c5:32:9d:08:7e:0f:07:c5:58:0e:19:60:45: b7:43:f6:08:8a:bb:14:8e:15:bd:10:5c:9c:30:a5:1a:e9:be: bf:74:68:1c:f5:cc:4b:8d:70:1d:28:12:08:bf:98:3c:6f:b8: b3:f0:7a:af:27:96:c9:b0:ea:6b:ff:2e:06:7b:89:99:00:d6: c6:be:4e:92:ee:75:ac:ce:ca:4d:12:18:1f:22:7a:12:17:93: 71:52:b9:99:35:51:a1:90:9b:a3:83:9f:d0:a4:9f:fe:ff:59: 62:c0:d0:bc:df:db:60:16:9c:e9:dd:6a:50:2e:6c:9d:18:c6: aa:b2:f6:32:9e:a1:b4:9e:5c:d1:d5:59:20:d4:49:58:9c:95: 79:14:02:19:58:6b:92:cf:92:ac:71:fd:39:b8:c7:77:ee:64: b5:58:5a:4f:7d:94:7c:5c:57:6e:70:f5:72:de:16:52:7f:27: 4d:47:50:c2:45:69:4c:67:67:d3:01:24:3e:66:7b:a9:5c:e3: b3:17:11:59:85:c2:8e:cf:fb:5b:10:48:24:98:bc:db:12:f9: ec:46:7b:a0:54:a0:5c:4c:1f:37:38:eb:0f:6c:7a:43:7b:8d: b2:da:53:20 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzNBRTExMC8GA1UEBRMoRDdCNTczOTRDMkY5OEQxRDAwOUNGNjNGMTNGQzkwMDc2 OEYyMThERTAeFw0yNjA1MTkwODMyMTZaFw0yNjA1MjYwODMyMTZaMBgxFjAUBgNV BAMTDTZhMGMyMDEwLTdlN2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD1bk6aX1ztNqa0F9CqoLqSRnMIxqzQ2FmJAahdQdg6C+s0i1IhwXhepzOpXCgE ij7841DSoaDik9SmH8DTzrAz07Qq+fjreSU05jkHf8QQizmchlIW3bnYCzjB0z43 mCoXa9iuFmyznsKdbsw00ABEKsxa/6BGndEZvZ6a6UCm6CFMXIH56tzk4FMNcFF8 vrJkdnm9dVXeFP7i313joL6sK1+SobKcSK+cFMkwtaQDUdmMujblmrBly8uE22iw uxp6MNizRIdVFPE/HBn4cpM5UG0k9Ys03sjwyYmo0UMEoJZFFrPefsGNX8CO3Tn8 oRgWTuL0uKg8a5onYayjmwwLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUj6o+C7ED cqm6+7Xq7kTdW0cJ95QwHwYDVR0jBBgwFoAU17VzlML5jR0AnPY/E/yQB2jyGN4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzM0FFLzg4MEEzQjgwMEIz QjExRjFCNzVCNzc0MTA2M0Q4QzY3LzE3VnpsTUw1alIwQW5QWV9FX3lRQjJqeUdO NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMTdWemxNTDVqUjBBblBZX0VfeVFCMmp5R040LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz M0FFLzg4MEEzQjgwMEIzQjExRjFCNzVCNzc0MTA2M0Q4QzY3LzE3VnpsTUw1alIw QW5QWV9FX3lRQjJqeUdONC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA1GM8RTNlJshfXfycQYQj8il/E2adwmsUynQh+DwfFWA4ZYEW3Q/YIirsUjhW9 EFycMKUa6b6/dGgc9cxLjXAdKBIIv5g8b7iz8HqvJ5bJsOpr/y4Ge4mZANbGvk6S 7nWszspNEhgfInoSF5NxUrmZNVGhkJujg5/QpJ/+/1liwNC839tgFpzp3WpQLmyd GMaqsvYynqG0nlzR1Vkg1ElYnJV5FAIZWGuSz5Kscf05uMd37mS1WFpPfZR8XFdu cPVy3hZSfydNR1DCRWlMZ2fTASQ+ZnupXOOzFxFZhcKOz/tbEEgkmLzbEvnsRnug VKBcTB83OOsPbHpDe42y2lMg -----END CERTIFICATE-----Generated at Thu May 21 10:28:38 2026 by rpki-client