$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5911/C35392263E0411F1871F0B19A6833773/wFfoOZ81FgYs0rjsbgjcLEisMTQ.mft File: wFfoOZ81FgYs0rjsbgjcLEisMTQ.mft (raw, json) Hash identifier: wElGz/gX6jsh7WcujqHEeCCS0WXXw+EzfO9n0IQVofo= Subject key identifier: E9:53:7F:E3:64:B3:AD:C0:C5:AB:D0:2F:43:80:4D:CB:A1:E3:29:06 Authority key identifier: C0:57:E8:39:9F:35:16:06:2C:D2:B8:EC:6E:08:DC:2C:48:AC:31:34 Certificate issuer: /CN=A91C5911/serialNumber=C057E8399F3516062CD2B8EC6E08DC2C48AC3134 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFfoOZ81FgYs0rjsbgjcLEisMTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5911/C35392263E0411F1871F0B19A6833773/wFfoOZ81FgYs0rjsbgjcLEisMTQ.mft Manifest number: 10 Signing time: Tue 19 May 2026 08:55:52 +0000 Manifest this update: Tue 19 May 2026 08:55:52 +0000 Manifest next update: Tue 26 May 2026 08:55:52 +0000 Files and hashes: 1: wFfoOZ81FgYs0rjsbgjcLEisMTQ.crl (hash: 8ZhxmeQpk4WE17YxCYIm34k8msdFUFCmdOBsg5z4kys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5911/C35392263E0411F1871F0B19A6833773/wFfoOZ81FgYs0rjsbgjcLEisMTQ.crl rsync://rpki.apnic.net/member_repository/A91C5911/C35392263E0411F1871F0B19A6833773/wFfoOZ81FgYs0rjsbgjcLEisMTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFfoOZ81FgYs0rjsbgjcLEisMTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:55:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5911, serialNumber=C057E8399F3516062CD2B8EC6E08DC2C48AC3134 Validity Not Before: May 19 08:55:52 2026 GMT Not After : May 26 08:55:52 2026 GMT Subject: CN=6a0c2598-2b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:0b:99:04:b7:df:d3:b9:b4:b9:ab:77:f1:be: 43:48:5d:37:bd:95:6a:b3:5e:bd:48:2d:87:e8:26: d4:38:be:90:0e:37:cb:c5:bc:87:44:9b:e4:f1:8e: 05:ea:d3:62:0e:4f:4a:1a:38:b1:24:87:2e:05:c6: c4:26:08:f3:28:22:a1:be:93:a3:86:87:67:2b:45: 2e:4d:92:d9:0f:98:62:e7:56:07:01:b1:23:45:4d: f9:13:3e:46:58:4d:ec:a8:9a:e7:82:5e:17:24:74: a7:10:9a:48:10:c0:92:95:ff:46:b5:92:2f:b4:c5: c6:25:b0:d7:95:d4:72:02:9c:10:80:b9:b8:25:8a: 07:c8:fb:5c:5e:b3:47:d3:43:15:40:9d:06:3c:8f: bc:81:4a:2c:a0:e8:cb:d7:76:84:73:7f:51:11:80: 6f:ca:d5:df:c5:fe:49:46:ef:e4:0b:81:a1:c7:87: 94:ca:0c:7c:54:5f:38:60:d4:dd:81:9f:ca:b1:ea: 2d:e9:ae:ff:18:ae:7c:91:2f:20:55:75:19:65:44: 33:d3:ed:dd:e9:ec:f8:5d:33:56:23:58:2e:fa:86: 66:5c:a5:fb:24:d8:b5:da:2f:29:a1:cc:ad:49:7f: 51:ba:3c:94:3c:3c:5b:77:04:96:f9:43:a1:b2:f5: ca:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:53:7F:E3:64:B3:AD:C0:C5:AB:D0:2F:43:80:4D:CB:A1:E3:29:06 X509v3 Authority Key Identifier: keyid:C0:57:E8:39:9F:35:16:06:2C:D2:B8:EC:6E:08:DC:2C:48:AC:31:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5911/C35392263E0411F1871F0B19A6833773/wFfoOZ81FgYs0rjsbgjcLEisMTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFfoOZ81FgYs0rjsbgjcLEisMTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5911/C35392263E0411F1871F0B19A6833773/wFfoOZ81FgYs0rjsbgjcLEisMTQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:29:67:21:5a:68:05:7e:1a:0e:69:66:55:c3:23:78:2e:8b: fa:fb:74:02:c6:1d:37:d3:ee:b4:a2:a7:d5:a2:ce:1b:56:1e: f7:16:cd:5b:ae:67:eb:29:9f:f2:6f:56:bf:bd:30:66:61:bb: 5a:82:9d:b7:e6:56:30:ac:8e:83:ae:ff:cf:1e:28:a9:2c:ae: 3e:4d:31:90:c8:9e:3d:81:a7:58:96:22:e0:ff:f2:f2:a2:24: 43:18:46:d9:74:23:c9:f8:1b:25:e8:8a:c2:a9:19:1e:3c:0b: 0e:92:e2:4f:09:4e:f9:d1:a4:da:98:88:a5:22:c1:dd:f6:d3: f6:fa:53:9b:55:15:75:7b:91:83:49:ab:9d:9d:0a:66:29:ca: 19:1d:c9:b3:78:0a:5a:5a:1f:2f:09:05:fb:86:07:cb:94:1b: 72:ea:b2:3e:cc:2e:18:67:8a:d0:74:af:80:48:1d:01:9d:4f: e5:4d:6b:2e:b8:0b:eb:d2:fb:06:38:34:8e:ed:7d:f7:24:bd: b4:ce:69:60:74:f6:f9:d9:f6:01:17:ac:9c:38:78:3f:88:c5: 45:59:e9:6d:3c:64:3c:06:9f:c2:f4:5b:de:e6:26:8d:77:3e: b5:06:dc:a4:a3:9b:37:95:9e:6f:29:b0:78:f5:a6:e3:f9:99: 64:5f:00:98 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NTkxMTExMC8GA1UEBRMoQzA1N0U4Mzk5RjM1MTYwNjJDRDJCOEVDNkUwOERDMkM0 OEFDMzEzNDAeFw0yNjA1MTkwODU1NTJaFw0yNjA1MjYwODU1NTJaMBgxFjAUBgNV BAMTDTZhMGMyNTk4LTJiNWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqC5kEt9/TubS5q3fxvkNIXTe9lWqzXr1ILYfoJtQ4vpAON8vFvIdEm+TxjgXq 02IOT0oaOLEkhy4FxsQmCPMoIqG+k6OGh2crRS5NktkPmGLnVgcBsSNFTfkTPkZY TeyomueCXhckdKcQmkgQwJKV/0a1ki+0xcYlsNeV1HICnBCAubgligfI+1xes0fT QxVAnQY8j7yBSiyg6MvXdoRzf1ERgG/K1d/F/klG7+QLgaHHh5TKDHxUXzhg1N2B n8qx6i3prv8YrnyRLyBVdRllRDPT7d3p7PhdM1YjWC76hmZcpfsk2LXaLymhzK1J f1G6PJQ8PFt3BJb5Q6Gy9crXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6VN/42Sz rcDFq9AvQ4BNy6HjKQYwHwYDVR0jBBgwFoAUwFfoOZ81FgYs0rjsbgjcLEisMTQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1OTExL0MzNTM5MjI2M0Uw NDExRjE4NzFGMEIxOUE2ODMzNzczL3dGZm9PWjgxRmdZczByanNiZ2pjTEVpc01U US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd0Zmb09aODFGZ1lzMHJqc2JnamNMRWlzTVRRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1 OTExL0MzNTM5MjI2M0UwNDExRjE4NzFGMEIxOUE2ODMzNzczL3dGZm9PWjgxRmdZ czByanNiZ2pjTEVpc01UUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBCKWchWmgFfhoOaWZVwyN4Lov6+3QCxh030+60oqfVos4bVh73Fs1brmfrKZ/y b1a/vTBmYbtagp235lYwrI6Drv/PHiipLK4+TTGQyJ49gadYliLg//LyoiRDGEbZ dCPJ+Bsl6IrCqRkePAsOkuJPCU750aTamIilIsHd9tP2+lObVRV1e5GDSaudnQpm KcoZHcmzeApaWh8vCQX7hgfLlBty6rI+zC4YZ4rQdK+ASB0BnU/lTWsuuAvr0vsG ODSO7X33JL20zmlgdPb52fYBF6ycOHg/iMVFWeltPGQ8Bp/C9Fve5iaNdz61Btyk o5s3lZ5vKbB49abj+ZlkXwCY -----END CERTIFICATE-----Generated at Thu May 21 09:39:32 2026 by rpki-client