$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft File: MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft (raw, json) Hash identifier: IxD6SHGkz9vq927f1KmO0W9NFryNwCiVN3BfU3GfVlw= Subject key identifier: C9:44:3B:80:E8:F8:7F:26:4E:F1:0E:D1:A1:D4:77:2A:4F:A8:35:F5 Authority key identifier: 30:7A:D4:5E:01:B8:47:9F:A2:28:A1:23:DE:7A:FA:A5:D1:97:C1:7D Certificate issuer: /CN=A91B4F3C/serialNumber=307AD45E01B8479FA228A123DE7AFAA5D197C17D Certificate serial: 3540 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft Manifest number: 3540 Signing time: Wed 20 May 2026 15:11:36 +0000 Manifest this update: Wed 20 May 2026 15:11:35 +0000 Manifest next update: Wed 27 May 2026 15:11:35 +0000 Files and hashes: 1: MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl (hash: TWfoi2aE2mo3IxnBt3dw5SuZehhmfEC4SV0Ku46lLoc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 15:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13632 (0x3540) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4F3C, serialNumber=307AD45E01B8479FA228A123DE7AFAA5D197C17D Validity Not Before: May 20 15:11:35 2026 GMT Not After : May 27 15:11:35 2026 GMT Subject: CN=6a0dcf28-1217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6c:99:46:a2:ec:3a:3c:f1:08:f9:9d:40:26: d5:94:a6:0d:29:d3:63:96:57:be:3d:e2:c3:d7:2f: c6:c9:17:01:ad:3c:e3:75:0c:74:f1:4e:df:8e:30: ed:30:00:22:90:76:91:2e:94:75:53:a4:79:a6:9d: 77:72:04:f3:6b:16:26:6c:09:80:bc:8c:a6:d4:20: e9:b9:93:52:f4:c5:38:4b:70:b8:3f:fc:ef:de:51: 7b:11:12:c4:32:28:42:2d:97:cb:1f:26:0e:13:e2: d4:41:e7:cb:09:10:d8:38:57:76:a7:4c:36:c8:54: 93:dd:f5:58:31:b3:45:d4:91:18:5c:54:19:98:3a: e9:e7:fe:95:0a:70:63:9a:01:7b:0c:05:bd:3b:7a: 8a:5b:68:ce:fc:cd:6c:5f:dd:51:f4:29:8a:17:e2: 89:f8:f2:7d:b7:8b:9d:74:b2:3b:fe:2f:0c:5b:46: 30:3e:83:13:f7:f5:0f:1e:92:67:a4:72:20:b4:6e: 3f:cf:31:40:07:c1:33:43:94:bb:a5:1f:d7:b3:b7: f7:8b:a9:95:91:5b:c4:b5:b2:bb:04:ee:3f:84:e3: 94:36:db:42:af:f3:02:b4:d0:a5:c5:2a:de:f5:90: ab:1e:71:8b:01:5c:63:58:5e:1b:0f:d0:be:44:16: 27:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:44:3B:80:E8:F8:7F:26:4E:F1:0E:D1:A1:D4:77:2A:4F:A8:35:F5 X509v3 Authority Key Identifier: keyid:30:7A:D4:5E:01:B8:47:9F:A2:28:A1:23:DE:7A:FA:A5:D1:97:C1:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:df:76:56:79:a8:0a:0e:65:c8:58:b6:53:b6:79:d0:bc:45: 62:f1:07:b2:f8:9c:7f:f7:2f:40:7d:a1:73:77:12:d5:6c:1c: b4:30:39:aa:2a:c2:ea:e1:3d:e4:a9:36:c0:ce:7e:ff:91:b4: c6:4b:af:d9:ce:eb:8f:07:0b:96:41:dd:60:4c:67:50:85:4b: bf:eb:6c:74:3e:88:0e:da:20:63:24:e4:53:e5:42:44:11:6a: f9:66:64:70:7b:fc:0b:c4:33:72:3e:dd:8b:fc:4d:90:ed:4a: f3:96:54:42:6d:bb:63:ed:68:8b:9b:b2:e3:e1:9c:09:1c:2d: 82:d3:42:55:c2:d5:79:b4:b0:9f:30:67:18:b9:1e:21:2c:99: 44:b7:40:8c:e5:80:af:82:c5:65:8a:6f:1c:ee:2f:a3:18:d8: be:d3:6b:af:fd:c0:05:0d:fe:ed:7c:db:00:05:bd:fe:a5:bd: c8:55:e1:ac:d1:a6:43:67:ae:35:33:42:8f:b5:c3:44:d8:40: e8:c4:28:ab:07:fc:86:b8:13:bc:62:af:a0:62:84:0e:ce:73: 85:4e:fe:9e:f4:f0:12:12:46:a3:b3:bf:42:e6:ac:e4:89:58: ee:34:55:27:50:2c:cd:14:7e:4e:cc:dc:c3:e5:e7:fb:bf:5e: fb:32:f3:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRGM0MxMTAvBgNVBAUTKDMwN0FENDVFMDFCODQ3OUZBMjI4QTEyM0RFN0FGQUE1 RDE5N0MxN0QwHhcNMjYwNTIwMTUxMTM1WhcNMjYwNTI3MTUxMTM1WjAYMRYwFAYD VQQDEw02YTBkY2YyOC0xMjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3GyZRqLsOjzxCPmdQCbVlKYNKdNjlle+PeLD1y/GyRcBrTzjdQx08U7fjjDt MAAikHaRLpR1U6R5pp13cgTzaxYmbAmAvIym1CDpuZNS9MU4S3C4P/zv3lF7ERLE MihCLZfLHyYOE+LUQefLCRDYOFd2p0w2yFST3fVYMbNF1JEYXFQZmDrp5/6VCnBj mgF7DAW9O3qKW2jO/M1sX91R9CmKF+KJ+PJ9t4uddLI7/i8MW0YwPoMT9/UPHpJn pHIgtG4/zzFAB8EzQ5S7pR/Xs7f3i6mVkVvEtbK7BO4/hOOUNttCr/MCtNClxSre 9ZCrHnGLAVxjWF4bD9C+RBYniwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMlEO4Do +H8mTvEO0aHUdypPqDX1MB8GA1UdIwQYMBaAFDB61F4BuEefoiihI956+qXRl8F9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEYzQy84QTU1QTZBNDFE QTYxMUUyQjkxQ0QyOUQwOEIwMkNEMi9NSHJVWGdHNFI1LWlLS0VqM25yNnBkR1h3 WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01IclVYZ0c0UjUtaUtLRWozbnI2cGRHWHdYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEYzQy84QTU1QTZBNDFEQTYxMUUyQjkxQ0QyOUQwOEIwMkNEMi9NSHJVWGdHNFI1 LWlLS0VqM25yNnBkR1h3WDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbN92VnmoCg5lyFi2U7Z50LxFYvEHsvicf/cvQH2hc3cS1WwctDA5qirC6uE9 5Kk2wM5+/5G0xkuv2c7rjwcLlkHdYExnUIVLv+tsdD6IDtogYyTkU+VCRBFq+WZk cHv8C8Qzcj7di/xNkO1K85ZUQm27Y+1oi5uy4+GcCRwtgtNCVcLVebSwnzBnGLke ISyZRLdAjOWAr4LFZYpvHO4voxjYvtNrr/3ABQ3+7XzbAAW9/qW9yFXhrNGmQ2eu NTNCj7XDRNhA6MQoqwf8hrgTvGKvoGKEDs5zhU7+nvTwEhJGo7O/Quas5IlY7jRV J1AszRR+Tszcw+Xn+79e+zLzpA== -----END CERTIFICATE-----Generated at Thu May 21 10:17:46 2026 by rpki-client