$ rpki-client -vvf rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.mft File: tf2tPRjnRiTLOUI_tRTK26Z5JuY.mft (raw, json) Hash identifier: BdLpHhSRnQRQB6WddIxjvJ6O8sZc29xrStdjsdzQsF4= Subject key identifier: 0A:C5:DC:EF:63:9E:C0:09:94:44:0B:B8:E7:AF:15:E2:50:79:41:02 Authority key identifier: B5:FD:AD:3D:18:E7:46:24:CB:39:42:3F:B5:14:CA:DB:A6:79:26:E6 Certificate issuer: /CN=A91B637A/serialNumber=B5FDAD3D18E74624CB39423FB514CADBA67926E6 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tf2tPRjnRiTLOUI_tRTK26Z5JuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.mft Manifest number: 1B Signing time: Tue 19 May 2026 08:51:01 +0000 Manifest this update: Tue 19 May 2026 08:51:01 +0000 Manifest next update: Tue 26 May 2026 08:51:01 +0000 Files and hashes: 1: tf2tPRjnRiTLOUI_tRTK26Z5JuY.crl (hash: T0tE47AR6O+otxyY1LGIooRQJeuk/keih8XBlJKyOFU=) 2: D0F478D02E7011F1B3CAF1C4A3833773.roa (hash: bM7Q3Goo2yIx6mUK1MyLG8gg5MzYy2/CvHGPwmnvAsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.crl rsync://rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tf2tPRjnRiTLOUI_tRTK26Z5JuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B637A, serialNumber=B5FDAD3D18E74624CB39423FB514CADBA67926E6 Validity Not Before: May 19 08:51:01 2026 GMT Not After : May 26 08:51:01 2026 GMT Subject: CN=6a0c2475-e70e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:18:fa:d7:eb:2c:fe:2a:d3:66:60:77:6e:f9: e6:26:b0:48:fe:fe:3d:34:5c:4f:67:55:d0:36:a9: 54:2d:21:80:27:ef:8f:94:13:15:d1:0b:46:cb:c3: d2:c4:cf:ba:74:ba:67:86:41:eb:db:ce:a0:85:58: 30:cb:e9:31:a8:47:04:45:58:df:48:c1:d1:fe:ef: 00:3d:9b:dc:dc:fe:fb:43:76:50:76:6f:26:a9:f6: 9f:a6:aa:f0:a1:79:02:0e:02:a3:45:5a:9c:0c:98: e7:09:37:21:48:e8:06:21:27:a5:a1:61:95:53:b8: 05:26:bb:37:8e:22:46:7a:7b:8f:50:62:a1:34:f5: d7:32:31:50:e8:7c:69:f5:17:38:a9:d5:7b:62:ec: 4b:ef:3b:41:e7:b1:b6:a8:8b:d0:16:8d:e6:01:9e: fb:0a:b0:18:f7:b1:a1:5b:6e:60:97:bd:56:1e:9a: 96:60:c6:9e:68:22:49:3e:e5:58:50:e1:c4:46:2a: b6:09:63:e2:64:46:98:fa:9b:bc:ba:8f:74:93:b9: bd:34:0f:9c:4d:e9:8e:36:2b:87:07:e9:47:ed:18: 2e:c6:5d:db:43:b5:12:a8:94:ef:82:88:99:14:83: 87:f8:4f:ff:da:7f:3d:0d:e1:e8:a4:5a:48:a0:6b: 9e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C5:DC:EF:63:9E:C0:09:94:44:0B:B8:E7:AF:15:E2:50:79:41:02 X509v3 Authority Key Identifier: keyid:B5:FD:AD:3D:18:E7:46:24:CB:39:42:3F:B5:14:CA:DB:A6:79:26:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tf2tPRjnRiTLOUI_tRTK26Z5JuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B637A/3AC03B562E7011F181C5DF73A3833773/tf2tPRjnRiTLOUI_tRTK26Z5JuY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:a4:d1:ab:4b:2e:f9:2d:91:95:be:7b:58:d8:f7:08:b8:90: 6f:c8:a0:85:d8:f8:2c:7b:99:73:db:ef:2f:88:88:d3:a9:b6: b2:5b:81:7d:f4:ee:14:69:10:22:12:2d:7d:aa:9d:c7:e4:e8: db:53:e8:94:e8:49:47:0d:9f:c4:48:e1:5e:b2:9e:bb:63:97: 47:22:7c:5c:62:8c:a1:84:e5:53:da:11:20:fb:6e:0d:6c:58: 1a:1a:3c:23:23:34:38:49:9c:58:12:91:bb:d1:f4:96:d9:73: ef:5d:c6:f6:17:ba:48:a2:46:4c:91:21:62:8e:3e:c9:70:49: 2e:19:67:bf:ed:d7:1c:19:fe:4c:a9:9e:b7:1c:2c:17:ad:2f: 53:a6:66:39:73:29:cd:dc:33:14:f3:fa:62:29:9f:8c:78:e9: 69:e1:d8:f9:44:18:ae:e2:28:61:fb:1d:e0:52:52:5b:08:f1: 55:84:63:f2:11:e1:4c:a5:c8:ee:77:25:36:d6:be:79:02:d0: 34:d2:d6:88:21:28:c5:6c:ea:98:f1:c8:d9:f3:19:f0:bf:7b: f1:51:bb:cb:5d:01:35:6c:98:aa:67:56:f3:ce:1d:83:10:ef: d8:cc:b8:2e:7d:b5:78:c9:56:f4:40:e5:3f:03:b8:0c:a0:3c: ad:1e:4f:56 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjM3QTExMC8GA1UEBRMoQjVGREFEM0QxOEU3NDYyNENCMzk0MjNGQjUxNENBREJB Njc5MjZFNjAeFw0yNjA1MTkwODUxMDFaFw0yNjA1MjYwODUxMDFaMBgxFjAUBgNV BAMTDTZhMGMyNDc1LWU3MGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMGPrX6yz+KtNmYHdu+eYmsEj+/j00XE9nVdA2qVQtIYAn74+UExXRC0bLw9LE z7p0umeGQevbzqCFWDDL6TGoRwRFWN9IwdH+7wA9m9zc/vtDdlB2byap9p+mqvCh eQIOAqNFWpwMmOcJNyFI6AYhJ6WhYZVTuAUmuzeOIkZ6e49QYqE09dcyMVDofGn1 Fzip1Xti7EvvO0Hnsbaoi9AWjeYBnvsKsBj3saFbbmCXvVYempZgxp5oIkk+5VhQ 4cRGKrYJY+JkRpj6m7y6j3STub00D5xN6Y42K4cH6UftGC7GXdtDtRKolO+CiJkU g4f4T//afz0N4eikWkiga57xAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUCsXc72Oe wAmURAu4568V4lB5QQIwHwYDVR0jBBgwFoAUtf2tPRjnRiTLOUI/tRTK26Z5JuYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2MzdBLzNBQzAzQjU2MkU3 MDExRjE4MUM1REY3M0EzODMzNzczL3RmMnRQUmpuUmlUTE9VSV90UlRLMjZaNUp1 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdGYydFBSam5SaVRMT1VJX3RSVEsyNlo1SnVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 MzdBLzNBQzAzQjU2MkU3MDExRjE4MUM1REY3M0EzODMzNzczL3RmMnRQUmpuUmlU TE9VSV90UlRLMjZaNUp1WS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC4pNGrSy75LZGVvntY2PcIuJBvyKCF2Pgse5lz2+8viIjTqbayW4F99O4UaRAi Ei19qp3H5OjbU+iU6ElHDZ/ESOFesp67Y5dHInxcYoyhhOVT2hEg+24NbFgaGjwj IzQ4SZxYEpG70fSW2XPvXcb2F7pIokZMkSFijj7JcEkuGWe/7dccGf5MqZ63HCwX rS9TpmY5cynN3DMU8/piKZ+MeOlp4dj5RBiu4ihh+x3gUlJbCPFVhGPyEeFMpcju dyU21r55AtA00taIISjFbOqY8cjZ8xnwv3vxUbvLXQE1bJiqZ1bzzh2DEO/YzLgu fbV4yVb0QOU/A7gMoDytHk9W -----END CERTIFICATE-----Generated at Thu May 21 10:16:05 2026 by rpki-client