$ rpki-client -vvf rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft File: MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft (raw, json) Hash identifier: W3NYrbgU6eYKwZ6FZu7MxZV6y5pO01l/3xlwXsVCIkg= Subject key identifier: 7F:E8:73:03:B5:EE:B1:C5:9F:66:6B:25:75:40:B4:17:A9:FF:10:81 Authority key identifier: 32:53:21:9C:B6:0C:7D:9C:FA:6E:63:3D:BB:4C:A9:4D:68:39:92:E0 Certificate issuer: /CN=A91B886F/serialNumber=3253219CB60C7D9CFA6E633DBB4CA94D683992E0 Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft Manifest number: 57 Signing time: Sun 03 May 2026 08:27:42 +0000 Manifest this update: Sun 03 May 2026 08:27:42 +0000 Manifest next update: Sun 10 May 2026 08:27:42 +0000 Files and hashes: 1: MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl (hash: gHJX+L7b8FIPWWXVtt8uflLBLWSsaQliOTMgdTIO400=) 2: 1DB45B20C8ED11F0B740F848C4F9AE02.roa (hash: YgMVa/NKSadZ8Pl0yQHFdoPMQfnm0r1V/gi6KwsxDA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 22:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B886F, serialNumber=3253219CB60C7D9CFA6E633DBB4CA94D683992E0 Validity Not Before: May 3 08:27:42 2026 GMT Not After : May 10 08:27:42 2026 GMT Subject: CN=69f706fe-9a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e3:6f:c7:d5:79:3b:69:4c:20:df:a4:e5:73: d4:7f:11:32:0e:75:20:e2:60:3c:38:81:b6:80:b8: 52:eb:90:63:78:2c:62:d2:5e:fc:29:74:a9:2e:ff: 6e:90:94:12:1a:0d:3b:f8:d7:4e:ea:43:0f:d0:e1: 19:7e:03:0b:d9:fa:06:bb:88:8c:86:36:cd:d1:9a: 15:2a:b3:3c:e2:32:97:28:31:bc:20:9e:00:d0:36: 31:7b:6c:b0:9c:a4:3b:ea:bf:c4:f0:ad:5b:a2:92: 0b:8b:d9:c4:b2:30:45:5f:55:58:88:c7:11:e3:13: e2:8c:01:bb:06:97:ee:19:13:93:66:d7:02:f8:b2: c3:97:2c:2f:19:e8:6a:40:3a:7d:17:03:23:46:a5: 7b:c5:d8:06:be:e9:ff:02:73:cc:a4:06:de:b2:dc: 5d:e0:95:da:3a:6b:2b:71:83:03:05:ed:09:4b:7f: 29:f7:e1:c5:91:42:12:79:03:e7:9e:5d:a0:f4:a1: e3:09:f9:fd:aa:0c:fb:58:48:8a:9e:0d:d0:c8:4a: da:2b:9d:43:81:42:c0:3f:87:82:e1:26:84:4b:3f: 6e:0d:1e:a5:ec:ec:89:6f:2d:19:4f:47:21:a4:04: 16:9c:34:f2:f5:f4:4d:3b:6b:28:8e:24:f5:3e:c0: 8c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E8:73:03:B5:EE:B1:C5:9F:66:6B:25:75:40:B4:17:A9:FF:10:81 X509v3 Authority Key Identifier: keyid:32:53:21:9C:B6:0C:7D:9C:FA:6E:63:3D:BB:4C:A9:4D:68:39:92:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlMhnLYMfZz6bmM9u0ypTWg5kuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B886F/F1F567D0C8E811F086C2764FC4F9AE02/MlMhnLYMfZz6bmM9u0ypTWg5kuA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ed:b1:1c:4a:b6:28:61:9f:11:bb:87:c0:bf:48:8c:cc:14: b7:68:a7:97:1a:e2:a4:dc:be:42:7d:79:ab:32:a5:aa:b9:9c: ba:c5:47:9f:54:27:ab:db:ca:03:bb:53:45:8a:a6:f9:63:79: bc:e7:5f:c3:d6:23:a3:33:3a:a7:ce:41:99:09:0f:61:c3:04: f1:3f:21:39:f2:fe:53:c3:11:1e:f4:5d:1c:e6:e8:26:77:df: 29:03:a9:95:f8:61:f0:a7:5c:c4:17:04:5f:07:e9:59:01:f1: d6:93:66:b8:69:82:a4:73:1c:8c:51:ef:69:77:e4:4b:ea:81: f2:9d:f1:55:63:bd:92:0b:f6:21:d8:d7:34:86:3a:15:9c:4a: 15:36:20:89:12:ab:c5:de:8a:ad:fc:04:93:c5:68:3b:d8:1b: a9:e1:f4:9b:e2:d6:c2:3f:c7:63:ff:3f:ea:b5:72:93:84:82: a0:16:23:b1:a6:3d:4f:41:7c:4d:81:30:99:f9:98:46:fa:5e: da:70:ae:48:6c:5f:dc:d0:74:36:23:55:9f:0d:48:67:8f:f6: 5b:9b:fe:3b:69:5d:ae:53:1f:77:13:a3:6f:11:e5:ea:21:4c: 90:99:14:49:1b:a3:60:cb:0c:13:35:cc:fe:8a:61:da:71:af: 61:b3:25:71 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC ODg2RjExMC8GA1UEBRMoMzI1MzIxOUNCNjBDN0Q5Q0ZBNkU2MzNEQkI0Q0E5NEQ2 ODM5OTJFMDAeFw0yNjA1MDMwODI3NDJaFw0yNjA1MTAwODI3NDJaMBgxFjAUBgNV BAMTDTY5ZjcwNmZlLTlhNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDi42/H1Xk7aUwg36Tlc9R/ETIOdSDiYDw4gbaAuFLrkGN4LGLSXvwpdKku/26Q lBIaDTv4107qQw/Q4Rl+AwvZ+ga7iIyGNs3RmhUqszziMpcoMbwgngDQNjF7bLCc pDvqv8TwrVuikguL2cSyMEVfVViIxxHjE+KMAbsGl+4ZE5Nm1wL4ssOXLC8Z6GpA On0XAyNGpXvF2Aa+6f8Cc8ykBt6y3F3gldo6aytxgwMF7QlLfyn34cWRQhJ5A+ee XaD0oeMJ+f2qDPtYSIqeDdDIStornUOBQsA/h4LhJoRLP24NHqXs7IlvLRlPRyGk BBacNPL19E07ayiOJPU+wIxpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUf+hzA7Xu scWfZmsldUC0F6n/EIEwHwYDVR0jBBgwFoAUMlMhnLYMfZz6bmM9u0ypTWg5kuAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4ODZGL0YxRjU2N0QwQzhF ODExRjA4NkMyNzY0RkM0RjlBRTAyL01sTWhuTFlNZlp6NmJtTTl1MHlwVFdnNWt1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTWxNaG5MWU1mWno2Ym1NOXUweXBUV2c1a3VBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 ODZGL0YxRjU2N0QwQzhFODExRjA4NkMyNzY0RkM0RjlBRTAyL01sTWhuTFlNZlp6 NmJtTTl1MHlwVFdnNWt1QS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB77bEcSrYoYZ8Ru4fAv0iMzBS3aKeXGuKk3L5CfXmrMqWquZy6xUefVCer28oD u1NFiqb5Y3m851/D1iOjMzqnzkGZCQ9hwwTxPyE58v5TwxEe9F0c5ugmd98pA6mV +GHwp1zEFwRfB+lZAfHWk2a4aYKkcxyMUe9pd+RL6oHynfFVY72SC/Yh2Nc0hjoV nEoVNiCJEqvF3oqt/ASTxWg72Bup4fSb4tbCP8dj/z/qtXKThIKgFiOxpj1PQXxN gTCZ+ZhG+l7acK5IbF/c0HQ2I1WfDUhnj/Zbm/47aV2uUx93E6NvEeXqIUyQmRRJ G6NgywwTNcz+imHaca9hsyVx -----END CERTIFICATE-----Generated at Tue May 5 06:15:02 2026 by rpki-client