$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft File: 5CANRK2dbstocvZTqVhD-yfYR6Q.mft (raw, json) Hash identifier: KEUqfJJDxaxTmgk9ILnvyFWA3FyGuDGMVff+T8CJJ84= Subject key identifier: 8A:22:D5:0E:CA:04:E6:5D:83:FC:88:8E:24:5F:03:F5:E6:7D:6B:BF Authority key identifier: E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 Certificate issuer: /CN=A91C0D37/serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Certificate serial: 020C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft Manifest number: 0201 Signing time: Mon 01 Jun 2026 03:54:04 +0000 Manifest this update: Mon 01 Jun 2026 03:54:03 +0000 Manifest next update: Mon 08 Jun 2026 03:54:03 +0000 Files and hashes: 1: 5CANRK2dbstocvZTqVhD-yfYR6Q.crl (hash: PwZs5Jnv3G8GIcjbK2oQxMudhwFy/+lq2ZuLwCneQhw=) 2: C7C45DD643F611EF84151D6FC4F9AE02.roa (hash: eCz90crmLyyT4eJR0NDAlMlvL0AfXIIanbDH55qxfQE=) 3: 0099AE56536911EE8594503BC4F9AE02.roa (hash: A3g1MvapK720MR4guCb5ZHynm0vdBJ498DzGR8wq4fU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 03:54:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 524 (0x20c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37, serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Validity Not Before: Jun 1 03:54:03 2026 GMT Not After : Jun 8 03:54:03 2026 GMT Subject: CN=6a1d025c-d523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0c:40:0a:05:9c:ba:ea:89:79:f9:c6:d1:ee: 93:cb:a1:a9:12:a5:e1:0e:1c:ee:22:ba:96:90:32: 1a:b5:fd:ea:47:c2:87:26:a6:e1:e3:4d:36:a0:e1: 67:48:d4:55:6a:2a:81:24:a6:bc:80:79:90:dc:fc: 3e:d1:3a:7e:a1:c9:83:75:64:28:6d:15:fc:c4:7d: b1:9b:7d:7e:13:e3:81:bc:7c:ca:42:70:3e:3b:9f: 6a:c2:16:ff:81:7a:f8:be:b1:98:35:98:83:e8:1f: e3:32:b7:43:4a:f0:44:33:97:b2:86:d1:78:5b:11: 1c:7c:80:98:a2:1c:0e:e9:f2:27:1d:22:da:db:55: 7f:a9:5b:ee:69:4b:0e:b2:9b:d2:82:72:1a:3a:ea: 0b:db:41:17:af:5b:0d:5a:b5:e0:0e:d6:6e:b2:7b: 61:6b:0e:1d:46:61:50:ef:70:0d:4f:a3:5c:04:23: 59:8d:3c:60:db:4e:5e:37:55:df:15:57:bf:d7:16: f1:dd:47:ba:92:13:94:a0:1d:58:f7:fd:6e:70:44: 3c:de:d0:22:8c:d6:90:a0:a3:d1:34:b1:cb:ce:d4: 54:78:2a:e7:31:f5:14:7a:11:ca:6a:6e:36:6b:1d: 36:bc:8d:90:52:b9:b4:39:f0:5d:a4:02:fa:b1:64: 7d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:22:D5:0E:CA:04:E6:5D:83:FC:88:8E:24:5F:03:F5:E6:7D:6B:BF X509v3 Authority Key Identifier: keyid:E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:1a:db:90:dc:23:74:d7:ce:8c:03:17:25:2e:99:55:9e:25: e1:79:f0:ef:b1:c8:ca:a2:ac:6a:e7:7c:6c:b6:68:9c:f1:4d: 74:41:91:d1:e1:a6:39:0e:17:0d:17:19:c4:1e:4d:3c:98:c3: cd:0f:d4:05:e8:52:d5:9a:8a:a0:96:21:2b:5a:7a:55:30:2e: 5a:c2:97:91:70:4b:b0:62:74:c2:2b:a8:60:1f:3f:b3:8f:d1: 1e:b0:75:10:1e:e7:29:a6:71:cc:4d:5d:ab:b5:ed:c3:09:5b: 9c:c7:b0:64:07:58:10:96:50:07:d9:df:0e:a6:8f:7a:a8:81: 25:29:24:02:31:d2:a3:f3:b6:c6:70:d6:8f:d6:3a:e8:3b:6e: 4e:c0:d8:1e:94:26:51:38:b4:c9:cf:f6:7c:fb:3c:d2:ba:ec: 26:79:11:db:05:d5:b9:42:27:c8:d2:39:92:74:ad:d6:1f:3d: 75:04:c1:ab:e4:15:ea:7f:d3:2b:7c:61:f3:02:76:24:81:53: fa:4e:45:94:b9:dd:b2:08:00:42:ab:df:99:ce:b4:27:b6:fa: 17:7a:7f:61:a1:6a:d5:74:62:77:30:9d:81:ab:84:78:a9:c8: 84:e5:4e:b5:2a:f6:18:e5:69:8a:01:55:fe:63:37:40:b0:2d: 42:87:94:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKEU0MjAwRDQ0QUQ5RDZFQ0I2ODcyRjY1M0E5NTg0M0ZC MjdEODQ3QTQwHhcNMjYwNjAxMDM1NDAzWhcNMjYwNjA4MDM1NDAzWjAYMRYwFAYD VQQDEw02YTFkMDI1Yy1kNTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgxACgWcuuqJefnG0e6Ty6GpEqXhDhzuIrqWkDIatf3qR8KHJqbh4002oOFn SNRVaiqBJKa8gHmQ3Pw+0Tp+ocmDdWQobRX8xH2xm31+E+OBvHzKQnA+O59qwhb/ gXr4vrGYNZiD6B/jMrdDSvBEM5eyhtF4WxEcfICYohwO6fInHSLa21V/qVvuaUsO spvSgnIaOuoL20EXr1sNWrXgDtZusnthaw4dRmFQ73ANT6NcBCNZjTxg205eN1Xf FVe/1xbx3Ue6khOUoB1Y9/1ucEQ83tAijNaQoKPRNLHLztRUeCrnMfUUehHKam42 ax02vI2QUrm0OfBdpAL6sWR94QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIoi1Q7K BOZdg/yIjiRfA/XmfWu/MB8GA1UdIwQYMBaAFOQgDUStnW7LaHL2U6lYQ/sn2Eek MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wNUVFQ0Q4NjUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJzdG9jdlpUcVZoRC15ZllS NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVDQU5SSzJkYnN0b2N2WlRxVmhELXlmWVI2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEQzNy8wNUVFQ0Q4NjUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJz dG9jdlpUcVZoRC15ZllSNlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdxrbkNwjdNfOjAMXJS6ZVZ4l4Xnw77HIyqKsaud8bLZonPFNdEGR0eGmOQ4X DRcZxB5NPJjDzQ/UBehS1ZqKoJYhK1p6VTAuWsKXkXBLsGJ0wiuoYB8/s4/RHrB1 EB7nKaZxzE1dq7XtwwlbnMewZAdYEJZQB9nfDqaPeqiBJSkkAjHSo/O2xnDWj9Y6 6DtuTsDYHpQmUTi0yc/2fPs80rrsJnkR2wXVuUInyNI5knSt1h89dQTBq+QV6n/T K3xh8wJ2JIFT+k5FlLndsggAQqvfmc60J7b6F3p/YaFq1XRidzCdgauEeKnIhOVO tSr2GOVpigFV/mM3QLAtQoeU8w== -----END CERTIFICATE-----Generated at Tue Jun 2 21:23:26 2026 by rpki-client