$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft File: c1jmvCkIxoFAvzuKgV9pXcsqiks.mft (raw, json) Hash identifier: Uw39Iy+465QKwG1dKvAYA6CJLK+Dd9fLLzDQiQH+kMk= Subject key identifier: B8:4F:A7:52:A3:0A:6B:FB:34:42:8D:92:9E:09:AA:E3:2B:2D:9D:A4 Authority key identifier: 73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B Certificate issuer: /CN=A91BB227/serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B Certificate serial: 01FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft Manifest number: 01F3 Signing time: Thu 21 May 2026 03:19:42 +0000 Manifest this update: Thu 21 May 2026 03:19:41 +0000 Manifest next update: Thu 28 May 2026 03:19:41 +0000 Files and hashes: 1: c1jmvCkIxoFAvzuKgV9pXcsqiks.crl (hash: UGM7R1jdmTZf6J0zXIq8T+02dgC9z8CasCw7+PrjJkE=) 2: C01378B2D87411EE85EACB5CC4F9AE02.roa (hash: Dn+JL4IFF8F6udJCXJBfFR0N/JW0riYqK/noh4aF+Rg=) 3: 71014290D87411EE97234F5CC4F9AE02.roa (hash: 6S2UbDPQhc0s/ttHg30hgcMezorQYndA+hy2IrwcJyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 03:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 510 (0x1fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB227, serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B Validity Not Before: May 21 03:19:41 2026 GMT Not After : May 28 03:19:41 2026 GMT Subject: CN=6a0e79cd-1e8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c6:6b:13:60:4d:31:e2:48:63:be:e8:38:70: 8f:49:ce:2c:9e:f8:e8:fe:5c:f0:2a:0d:68:9e:3a: d5:b7:c9:c1:21:97:ba:15:4a:d8:d1:d3:ac:98:56: 2b:d8:0f:3b:58:c4:b1:fb:79:cd:35:0e:be:f0:79: cb:36:2a:63:19:b0:d4:64:1a:cf:26:c6:e9:07:40: 07:e9:27:b4:ea:ad:55:f4:76:a5:a6:05:32:5f:8a: 6d:19:09:ad:3b:84:e0:23:80:11:a9:89:05:74:51: c6:45:82:dc:21:3b:cb:99:69:5e:b1:bf:91:20:13: b8:61:5b:cc:8b:af:05:e8:5b:8a:8f:22:d2:03:16: 62:60:a6:3e:f6:39:98:b8:ea:18:d6:8d:49:53:ce: 27:1d:40:60:69:60:46:24:7d:24:d5:1e:6f:09:9b: ec:a0:10:da:2c:6b:6f:d2:05:92:cf:ad:82:87:92: 3b:6d:5f:a2:09:0a:3d:e6:1d:9c:fe:dd:e0:cf:89: ed:c9:2d:f6:4b:96:82:6e:7d:b6:75:2a:c8:f6:3a: 27:95:e4:bb:a7:a4:c9:7d:5b:9a:75:a1:d0:da:4b: 98:84:a5:cd:29:58:50:41:06:a3:1b:d2:30:7f:b3: 57:65:40:3a:52:a6:78:f4:2c:c6:50:39:6f:54:55: db:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4F:A7:52:A3:0A:6B:FB:34:42:8D:92:9E:09:AA:E3:2B:2D:9D:A4 X509v3 Authority Key Identifier: keyid:73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:26:54:b9:21:9f:48:5b:ea:5e:01:17:41:a5:db:f1:37:54: 63:83:7a:83:f7:e4:6e:97:0a:10:9c:ed:a2:64:34:0a:76:df: c0:68:a4:bf:da:1e:e2:59:b9:09:ca:09:f5:e5:03:3f:a1:74: ce:1a:0f:bf:ae:9c:c2:ad:2a:0c:3c:8d:4e:69:7c:ad:ab:1c: 28:5d:ff:a8:1a:ba:dc:a5:02:00:4e:99:94:c8:20:b7:9d:ae: c8:f2:68:7f:2e:4b:f4:4f:a8:bb:ae:75:e8:79:23:82:2c:36: bd:39:7b:f6:38:9a:a7:56:f6:90:64:0d:5b:b8:f5:57:31:61: a8:0c:19:95:c2:50:df:66:8e:9a:7d:5a:e8:7b:47:f6:f0:6a: b5:ab:21:8d:99:f7:a5:89:b9:be:dd:5e:aa:43:a5:38:37:1f: e4:d1:9f:31:68:72:9d:fb:19:f1:68:3c:6e:61:75:cd:2d:b4: 68:08:4a:8f:26:0a:92:0a:77:5f:46:e6:31:70:60:2e:12:b8: 3e:cb:0c:e0:a2:7b:6c:e5:84:c7:8d:db:89:f5:21:be:12:2a: 5c:58:44:aa:5d:e3:b9:2e:37:1d:fa:f3:d4:6c:1e:0b:58:21: fe:c9:9b:43:80:db:d3:89:b6:53:d1:3d:2b:19:ef:22:f8:e7: 21:57:0c:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIyMjcxMTAvBgNVBAUTKDczNThFNkJDMjkwOEM2ODE0MEJGM0I4QTgxNUY2OTVE Q0IyQThBNEIwHhcNMjYwNTIxMDMxOTQxWhcNMjYwNTI4MDMxOTQxWjAYMRYwFAYD VQQDEw02YTBlNzljZC0xZThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAicZrE2BNMeJIY77oOHCPSc4snvjo/lzwKg1onjrVt8nBIZe6FUrY0dOsmFYr 2A87WMSx+3nNNQ6+8HnLNipjGbDUZBrPJsbpB0AH6Se06q1V9HalpgUyX4ptGQmt O4TgI4ARqYkFdFHGRYLcITvLmWlesb+RIBO4YVvMi68F6FuKjyLSAxZiYKY+9jmY uOoY1o1JU84nHUBgaWBGJH0k1R5vCZvsoBDaLGtv0gWSz62Ch5I7bV+iCQo95h2c /t3gz4ntyS32S5aCbn22dSrI9jonleS7p6TJfVuadaHQ2kuYhKXNKVhQQQajG9Iw f7NXZUA6UqZ49CzGUDlvVFXbkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLhPp1Kj Cmv7NEKNkp4JquMrLZ2kMB8GA1UdIwQYMBaAFHNY5rwpCMaBQL87ioFfaV3LKopL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjIyNy9ENUE1NTM5ODVE MkQxMUVFQTNFMzlGNTdDNEY5QUUwMi9jMWptdkNrSXhvRkF2enVLZ1Y5cFhjc3Fp a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Mxam12Q2tJeG9GQXZ6dUtnVjlwWGNzcWlrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjIyNy9ENUE1NTM5ODVEMkQxMUVFQTNFMzlGNTdDNEY5QUUwMi9jMWptdkNrSXhv RkF2enVLZ1Y5cFhjc3Fpa3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANCZUuSGfSFvqXgEXQaXb8TdUY4N6g/fkbpcKEJztomQ0CnbfwGikv9oe4lm5 CcoJ9eUDP6F0zhoPv66cwq0qDDyNTml8rascKF3/qBq63KUCAE6ZlMggt52uyPJo fy5L9E+ou6516Hkjgiw2vTl79jiap1b2kGQNW7j1VzFhqAwZlcJQ32aOmn1a6HtH 9vBqtashjZn3pYm5vt1eqkOlODcf5NGfMWhynfsZ8Wg8bmF1zS20aAhKjyYKkgp3 X0bmMXBgLhK4PssM4KJ7bOWEx43bifUhvhIqXFhEql3juS43Hfrz1GweC1gh/smb Q4Db04m2U9E9KxnvIvjnIVcMwg== -----END CERTIFICATE-----Generated at Fri May 22 15:08:13 2026 by rpki-client