$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft File: cYQNfZjFz5vWvrRIatRnQGXxR0E.mft (raw, json) Hash identifier: Mvn95XysAd7V65YLwYOAhrTGOtGr7fimjcXaQ1RawW8= Subject key identifier: 2A:62:58:CB:D6:56:06:5F:4C:4F:82:1E:58:36:DF:DA:E7:DA:7A:A0 Authority key identifier: 71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41 Certificate issuer: /CN=A91B7B61/serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741 Certificate serial: 0669 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft Manifest number: 0662 Signing time: Wed 20 May 2026 22:40:23 +0000 Manifest this update: Wed 20 May 2026 22:40:22 +0000 Manifest next update: Wed 27 May 2026 22:40:22 +0000 Files and hashes: 1: cYQNfZjFz5vWvrRIatRnQGXxR0E.crl (hash: DFo6dhxN/18F+m3sIa/M9GOVodCv1Lh8gtJzEG88PRk=) 2: C2EFC706CAAE11EBA95C5E64C4F9AE02.roa (hash: DIxhiXc0lWrP1HFp4dV9JN6j/Zz8GVR/zOlWSXrjAEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.crl rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 22:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1641 (0x669) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B61, serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741 Validity Not Before: May 20 22:40:22 2026 GMT Not After : May 27 22:40:22 2026 GMT Subject: CN=6a0e3857-ea72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:55:f5:0d:5d:12:0d:fa:f4:28:ab:44:a7:db: b9:83:52:a3:ab:0b:52:ae:e0:f2:b2:5d:fb:b5:15: 9a:d5:4f:16:6d:73:26:0f:f9:17:26:1d:ed:0e:9e: 2b:21:1a:22:90:a0:a8:d4:13:c5:6a:30:7e:f1:21: a0:e1:fb:c0:17:42:27:de:85:36:dd:da:d0:93:66: 8b:76:fc:c6:16:ea:f2:c0:8e:3f:a3:45:71:3b:42: 44:5a:29:7e:86:62:71:88:81:ad:20:61:a5:55:41: 07:cd:a4:24:ba:30:3d:71:2e:ec:1a:5e:33:28:d4: 43:e3:e2:92:f1:9f:9e:3f:35:68:b4:42:e7:cd:5d: b5:65:92:a0:8a:d5:3f:24:7c:17:7e:4e:b9:8c:8a: 01:d9:a9:31:0a:04:1a:d3:7e:d8:1e:10:1c:1b:0a: c8:90:68:c5:b9:71:87:da:06:6a:30:13:7c:0d:47: 1e:cc:36:fc:b5:5c:9f:d5:ef:65:30:c9:d6:b4:80: f4:92:59:59:c0:a4:94:4c:38:04:eb:0e:f5:97:a2: 78:da:35:47:c5:ca:f7:f9:29:d5:7f:b5:39:e6:db: f6:cd:d6:eb:89:af:cd:7c:7e:7c:d6:bc:fe:49:9a: c8:b1:f7:c8:ac:cd:68:84:26:c0:28:15:85:34:d4: 1a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:62:58:CB:D6:56:06:5F:4C:4F:82:1E:58:36:DF:DA:E7:DA:7A:A0 X509v3 Authority Key Identifier: keyid:71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:14:de:fe:63:ef:d3:a1:eb:60:4c:a7:f1:c8:f9:bb:03:19: c2:a0:77:ad:47:e8:82:b8:20:75:a2:7d:28:3a:1f:22:03:00: 3c:b0:10:2d:40:9a:08:13:59:97:0e:f5:f4:04:20:ea:0e:87: 48:2e:e9:2b:3f:e6:ee:8f:b2:74:5c:98:b0:11:fa:87:e2:55: 54:1e:10:b4:73:bc:ef:d9:f6:97:f2:c7:f2:39:fd:0d:4f:46: ba:fd:c0:8d:61:5a:21:c2:ae:12:e5:d6:68:b9:cf:aa:3c:4a: b4:71:8b:0a:14:96:77:1c:df:df:1b:78:e4:5f:92:45:9f:24: 89:82:01:e0:ec:6a:bd:ff:59:16:e8:c7:b4:61:78:cf:11:cd: 39:e9:15:64:8f:72:2d:95:33:d6:9c:7b:c7:6c:a6:43:3b:48: a4:77:11:60:c4:08:0d:83:8b:58:4f:13:d3:3d:df:1e:6b:04: c1:2d:ac:66:e8:9d:34:db:23:b9:64:12:0f:f2:4b:ae:9c:72: b7:2e:f1:e2:7d:21:29:58:e6:08:2a:9c:89:b9:b2:e5:6f:06: b1:aa:83:e7:db:16:8d:90:af:e6:c3:55:73:17:db:1c:30:4a: 21:79:68:b1:8a:2d:ec:23:b8:ab:26:be:99:0b:58:c9:b4:c5: d3:75:3e:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCNjExMTAvBgNVBAUTKDcxODQwRDdEOThDNUNGOUJENkJFQjQ0ODZBRDQ2NzQw NjVGMTQ3NDEwHhcNMjYwNTIwMjI0MDIyWhcNMjYwNTI3MjI0MDIyWjAYMRYwFAYD VQQDEw02YTBlMzg1Ny1lYTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFX1DV0SDfr0KKtEp9u5g1KjqwtSruDysl37tRWa1U8WbXMmD/kXJh3tDp4r IRoikKCo1BPFajB+8SGg4fvAF0In3oU23drQk2aLdvzGFurywI4/o0VxO0JEWil+ hmJxiIGtIGGlVUEHzaQkujA9cS7sGl4zKNRD4+KS8Z+ePzVotELnzV21ZZKgitU/ JHwXfk65jIoB2akxCgQa037YHhAcGwrIkGjFuXGH2gZqMBN8DUcezDb8tVyf1e9l MMnWtID0kllZwKSUTDgE6w71l6J42jVHxcr3+SnVf7U55tv2zdbria/NfH581rz+ SZrIsffIrM1ohCbAKBWFNNQawwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCpiWMvW VgZfTE+CHlg239rn2nqgMB8GA1UdIwQYMBaAFHGEDX2Yxc+b1r60SGrUZ0Bl8UdB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0I2MS9CRTY4RDMwMkNB QUExMUVCQjhDMDJCNUNDNEY5QUUwMi9jWVFOZlpqRno1dld2clJJYXRSblFHWHhS MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NZUU5mWmpGejV2V3ZyUklhdFJuUUdYeFIwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0I2MS9CRTY4RDMwMkNBQUExMUVCQjhDMDJCNUNDNEY5QUUwMi9jWVFOZlpqRno1 dld2clJJYXRSblFHWHhSMEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAThTe/mPv06HrYEyn8cj5uwMZwqB3rUfogrggdaJ9KDofIgMAPLAQLUCaCBNZ lw719AQg6g6HSC7pKz/m7o+ydFyYsBH6h+JVVB4QtHO879n2l/LH8jn9DU9Guv3A jWFaIcKuEuXWaLnPqjxKtHGLChSWdxzf3xt45F+SRZ8kiYIB4Oxqvf9ZFujHtGF4 zxHNOekVZI9yLZUz1px7x2ymQztIpHcRYMQIDYOLWE8T0z3fHmsEwS2sZuidNNsj uWQSD/JLrpxyty7x4n0hKVjmCCqcibmy5W8GsaqD59sWjZCv5sNVcxfbHDBKIXlo sYot7CO4qya+mQtYybTF03U+Og== -----END CERTIFICATE-----Generated at Thu May 21 09:38:15 2026 by rpki-client