$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft File: 4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft (raw, json) Hash identifier: sos81haQydNWhe584D4ScjwuVWUTq8exwhpnbWrBr7w= Subject key identifier: 5E:C9:15:97:0E:76:EF:79:47:63:F5:99:A4:42:5C:80:4F:24:EE:85 Authority key identifier: E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6 Certificate issuer: /CN=A91BBA4F/serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft Manifest number: BA Signing time: Thu 21 May 2026 07:06:00 +0000 Manifest this update: Thu 21 May 2026 07:06:00 +0000 Manifest next update: Thu 28 May 2026 07:06:00 +0000 Files and hashes: 1: 4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl (hash: RzcWC00zw1+Ij1YISHFC+dpOgJKbWdpRSwQB+VIgkyA=) 2: 58C16E043B7811F099AF3F55C4F9AE02.roa (hash: ff9Hb3p8NVhNbBeRoRPoSLLnHieGzUbHBlT6U/ikvfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 07:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA4F, serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6 Validity Not Before: May 21 07:06:00 2026 GMT Not After : May 28 07:06:00 2026 GMT Subject: CN=6a0eaed8-4661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:19:92:61:f8:58:b0:66:73:3b:e5:34:b4:ce: 9f:6f:96:b1:c6:d3:f4:87:2a:a9:06:dd:01:d2:52: 42:b2:b0:26:d7:bb:08:07:08:4a:50:3b:44:0f:6c: 4b:cb:18:86:cd:13:bd:4d:62:1c:43:f4:22:78:b7: 38:77:3f:fd:b6:b1:4c:fe:13:9a:92:6e:5e:9a:50: ff:ca:c7:49:6d:66:b4:3b:8f:c6:af:cd:f1:a3:29: 1a:55:72:b1:da:03:14:28:13:90:26:21:a0:77:63: 67:ef:f3:43:c9:fc:29:ba:45:e8:db:1b:99:27:9c: 16:2f:86:c8:df:c4:5d:0d:ad:b1:60:15:6a:3b:27: 24:44:b5:2f:41:5c:ab:b3:91:31:67:d8:7a:b2:cd: 55:25:4c:68:44:02:8b:70:fa:52:9a:23:c4:5a:5f: 42:0d:bf:55:9b:3d:52:13:aa:8d:94:16:35:26:b8: 5c:54:65:4e:4e:6d:96:83:de:ac:95:93:14:56:ff: 6d:c1:3c:21:16:d2:ab:eb:4a:0f:d0:22:81:a9:f8: 61:f5:e4:0c:76:af:94:f2:dd:6a:ad:4d:93:dc:d4: 9b:5c:9a:2b:f4:d5:ec:6b:a6:4f:b3:6d:d6:bf:d9: 40:f7:06:94:48:12:f9:ec:09:91:23:8f:e8:6c:ee: 5e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C9:15:97:0E:76:EF:79:47:63:F5:99:A4:42:5C:80:4F:24:EE:85 X509v3 Authority Key Identifier: keyid:E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:1e:f4:c3:ab:48:e7:00:75:43:ac:b8:14:37:ea:d4:c0:7d: 92:e1:c3:24:e7:0a:be:d1:01:e6:53:6f:3c:8c:ea:66:5e:83: b3:7b:00:c1:98:4e:f0:91:6d:ec:f5:e3:fc:ae:4b:86:b5:56: a3:81:4e:e6:f2:78:83:c2:c8:36:67:61:b9:24:54:ff:d4:10: 3b:97:d6:b9:51:0d:81:c7:ef:33:59:e8:68:77:08:2f:63:5d: 7a:75:33:0f:d0:a8:56:0a:c9:ca:27:52:a1:b6:57:92:78:07: 7d:0f:45:e8:51:6c:e8:f6:86:33:4e:36:44:c2:2b:df:98:61: 6a:35:c1:8d:bd:2d:ed:ec:cf:e7:8f:d3:89:c5:fe:6a:62:da: 7d:b8:f0:43:4c:1e:81:bc:a5:b8:d9:0e:78:17:32:31:b3:3a: dd:d2:d2:40:75:90:df:b2:d2:82:bb:49:92:20:f5:f7:fe:4a: 27:7a:b3:c6:8e:68:ad:aa:fc:2d:7f:c0:95:13:17:ab:23:4b: ca:9a:dd:f0:e9:fd:af:a5:39:47:4b:c3:98:70:77:98:d0:e9: 62:bf:fd:aa:96:2d:b8:43:46:6b:4c:ec:71:49:13:30:fe:72: c0:91:8e:01:c8:7a:76:67:b5:9b:23:1c:9e:62:b6:98:de:7d: fc:6e:14:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJBNEYxMTAvBgNVBAUTKEUwMzk4RDU0QUNEOURCMzNFRDRGQ0FBOEQyMjgwNUQ0 NUU4MENCQjYwHhcNMjYwNTIxMDcwNjAwWhcNMjYwNTI4MDcwNjAwWjAYMRYwFAYD VQQDEw02YTBlYWVkOC00NjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxmSYfhYsGZzO+U0tM6fb5axxtP0hyqpBt0B0lJCsrAm17sIBwhKUDtED2xL yxiGzRO9TWIcQ/QieLc4dz/9trFM/hOakm5emlD/ysdJbWa0O4/Gr83xoykaVXKx 2gMUKBOQJiGgd2Nn7/NDyfwpukXo2xuZJ5wWL4bI38RdDa2xYBVqOyckRLUvQVyr s5ExZ9h6ss1VJUxoRAKLcPpSmiPEWl9CDb9Vmz1SE6qNlBY1JrhcVGVOTm2Wg96s lZMUVv9twTwhFtKr60oP0CKBqfhh9eQMdq+U8t1qrU2T3NSbXJor9NXsa6ZPs23W v9lA9waUSBL57AmRI4/obO5eewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF7JFZcO du95R2P1maRCXIBPJO6FMB8GA1UdIwQYMBaAFOA5jVSs2dsz7U/KqNIoBdRegMu2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkE0Ri81ODdGMzVEQTNC NzcxMUYwOTdBOEJCMjRDNEY5QUUwMi80RG1OVkt6WjJ6UHRUOHFvMGlnRjFGNkF5 N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzREbU5WS3paMnpQdFQ4cW8waWdGMUY2QXk3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkE0Ri81ODdGMzVEQTNCNzcxMUYwOTdBOEJCMjRDNEY5QUUwMi80RG1OVkt6WjJ6 UHRUOHFvMGlnRjFGNkF5N1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvB70w6tI5wB1Q6y4FDfq1MB9kuHDJOcKvtEB5lNvPIzqZl6Ds3sAwZhO8JFt 7PXj/K5LhrVWo4FO5vJ4g8LINmdhuSRU/9QQO5fWuVENgcfvM1noaHcIL2NdenUz D9CoVgrJyidSobZXkngHfQ9F6FFs6PaGM042RMIr35hhajXBjb0t7ezP54/TicX+ amLafbjwQ0wegbyluNkOeBcyMbM63dLSQHWQ37LSgrtJkiD19/5KJ3qzxo5orar8 LX/AlRMXqyNLyprd8On9r6U5R0vDmHB3mNDpYr/9qpYtuENGa0zscUkTMP5ywJGO Ach6dme1myMcnmK2mN59/G4U9w== -----END CERTIFICATE-----Generated at Thu May 21 11:05:17 2026 by rpki-client