$ rpki-client -vvf rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft File: vK5XMu8hlzK0msgoTbGBTpLIaxE.mft (raw, json) Hash identifier: JU8aMbGxjl8/9WhpFSB466BmRbRXLPsh+4DWOLZC1dk= Subject key identifier: 65:0F:75:07:79:36:67:B9:15:77:27:9A:B6:0D:DF:31:7E:CE:F8:7A Authority key identifier: BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11 Certificate issuer: /CN=A91B653B/serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11 Certificate serial: 0943 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft Manifest number: 0933 Signing time: Wed 20 May 2026 20:14:31 +0000 Manifest this update: Wed 20 May 2026 20:14:30 +0000 Manifest next update: Wed 27 May 2026 20:14:30 +0000 Files and hashes: 1: vK5XMu8hlzK0msgoTbGBTpLIaxE.crl (hash: vL+Syf+4g8wk8ciLEWftJVEdKnGsL25s9Kq8ck6gtvw=) 2: 2015E6B2C66F11EAA0B1B019C4F9AE02.roa (hash: /9OAZib6ORGUsj/nBJu2BYzp5KOlwzvHRnmf3XojSfQ=) 3: 1F99EBD4C66F11EAA0B1B019C4F9AE02.roa (hash: l+N4J4zxNWyxlfAH9ke4Lwu5X6TI6u4/SfyZolyoLUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 20:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2371 (0x943) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B653B, serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11 Validity Not Before: May 20 20:14:30 2026 GMT Not After : May 27 20:14:30 2026 GMT Subject: CN=6a0e1626-60f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:36:20:9b:a3:d5:1b:5a:d5:77:b2:4c:dc:e7: df:ad:2f:ae:07:6d:10:3d:92:e6:6d:80:aa:01:e1: 8a:64:05:f8:52:29:12:c0:87:a5:d4:0f:62:39:a4: 17:6b:d4:70:a6:da:0a:9c:7a:b7:00:69:38:40:ae: 8d:72:95:97:9e:c3:6a:ef:4f:93:ff:05:2c:51:01: 4a:56:f5:4d:9b:5f:b7:17:42:11:d2:b8:b4:1d:f0: 89:66:6a:7c:a9:36:ba:09:15:47:e1:14:c8:a0:87: 3a:4e:42:12:db:3b:da:db:2f:74:48:98:66:50:b8: 4b:c2:36:c0:12:31:31:b6:cf:ed:30:e0:6a:f2:11: 53:86:3e:ca:7e:03:ce:82:32:70:f8:62:82:25:cc: 56:b1:cc:9e:0d:67:58:e1:05:9e:ed:cf:68:ff:18: f6:0c:39:98:9b:54:57:37:c8:1b:90:5c:07:21:39: b7:05:b4:53:a5:b9:ae:14:e6:be:96:05:3d:34:fc: c3:d0:6a:b5:1e:ce:f0:48:00:3a:ae:41:5f:ed:3f: b9:59:d2:18:d8:d2:c6:66:e4:3c:e1:7a:11:a3:a0: e2:f5:6b:08:32:19:c5:ba:6b:bf:66:38:3b:d1:6b: 66:84:ba:bf:1b:be:11:3f:24:33:8b:08:3a:ae:0b: 5e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0F:75:07:79:36:67:B9:15:77:27:9A:B6:0D:DF:31:7E:CE:F8:7A X509v3 Authority Key Identifier: keyid:BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:ab:bb:c3:36:a9:ce:24:58:e6:09:15:9f:60:f3:f5:1c:83: 0f:24:72:f0:67:0c:8d:b9:69:c0:9d:1a:5f:46:97:1b:a9:b5: f6:8f:c4:9a:1e:fe:26:80:c7:ec:d3:a7:c2:20:49:7f:a1:81: 89:fa:17:59:f1:e5:5e:ec:cf:ff:d9:f6:da:27:95:12:51:fa: 63:3c:8f:50:fa:c0:50:58:0a:e7:33:8f:5f:a6:1e:89:eb:b8: 6d:fb:36:75:2a:fd:db:1f:fa:98:43:9e:f0:ed:03:79:69:3c: 3c:58:56:5b:4a:86:bf:b9:cf:1a:9c:cf:b7:6a:8f:4f:75:57: 31:7b:b8:53:91:ab:02:ff:28:97:c3:39:9d:d1:6e:e6:0c:f2: 90:68:4b:03:59:e7:61:65:ad:e5:e2:db:08:ed:96:6d:b4:f3: 73:e8:77:07:11:b5:9c:b2:a0:d9:cc:62:e7:fd:da:48:90:c5: 52:fa:cc:17:50:77:42:4e:25:36:7d:a7:0f:c2:4d:ae:bc:76: a2:31:89:3d:8f:1c:66:dc:32:29:06:ec:b6:ff:37:c5:28:87: 36:26:6d:29:a1:76:b3:32:f7:36:fe:19:84:f6:94:a3:b3:8d: 0e:87:9f:83:8d:10:05:e3:9b:9b:54:84:55:1c:b4:b9:40:de: 87:80:8e:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1M0IxMTAvBgNVBAUTKEJDQUU1NzMyRUYyMTk3MzJCNDlBQzgyODREQjE4MTRF OTJDODZCMTEwHhcNMjYwNTIwMjAxNDMwWhcNMjYwNTI3MjAxNDMwWjAYMRYwFAYD VQQDEw02YTBlMTYyNi02MGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAljYgm6PVG1rVd7JM3OffrS+uB20QPZLmbYCqAeGKZAX4UikSwIel1A9iOaQX a9RwptoKnHq3AGk4QK6NcpWXnsNq70+T/wUsUQFKVvVNm1+3F0IR0ri0HfCJZmp8 qTa6CRVH4RTIoIc6TkIS2zva2y90SJhmULhLwjbAEjExts/tMOBq8hFThj7KfgPO gjJw+GKCJcxWscyeDWdY4QWe7c9o/xj2DDmYm1RXN8gbkFwHITm3BbRTpbmuFOa+ lgU9NPzD0Gq1Hs7wSAA6rkFf7T+5WdIY2NLGZuQ84XoRo6Di9WsIMhnFumu/Zjg7 0WtmhLq/G74RPyQziwg6rgtewwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGUPdQd5 Nme5FXcnmrYN3zF+zvh6MB8GA1UdIwQYMBaAFLyuVzLvIZcytJrIKE2xgU6SyGsR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjUzQi8yOTM4M0NERUMy MEMxMUVBQjgxMkEwMUFDNEY5QUUwMi92SzVYTXU4aGx6SzBtc2dvVGJHQlRwTElh eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZLNVhNdThobHpLMG1zZ29UYkdCVHBMSWF4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjUzQi8yOTM4M0NERUMyMEMxMUVBQjgxMkEwMUFDNEY5QUUwMi92SzVYTXU4aGx6 SzBtc2dvVGJHQlRwTElheEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZau7wzapziRY5gkVn2Dz9RyDDyRy8GcMjblpwJ0aX0aXG6m19o/Emh7+JoDH 7NOnwiBJf6GBifoXWfHlXuzP/9n22ieVElH6YzyPUPrAUFgK5zOPX6Yeieu4bfs2 dSr92x/6mEOe8O0DeWk8PFhWW0qGv7nPGpzPt2qPT3VXMXu4U5GrAv8ol8M5ndFu 5gzykGhLA1nnYWWt5eLbCO2WbbTzc+h3BxG1nLKg2cxi5/3aSJDFUvrMF1B3Qk4l Nn2nD8JNrrx2ojGJPY8cZtwyKQbstv83xSiHNiZtKaF2szL3Nv4ZhPaUo7ONDoef g40QBeObm1SEVRy0uUDeh4COnQ== -----END CERTIFICATE-----Generated at Thu May 21 09:30:24 2026 by rpki-client