$ rpki-client -vvf rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft File: iXCkAMzM8BCTPDMMN2Ch7F204K0.mft (raw, json) Hash identifier: PJU4cvATcOHJW70WS7VhUAb9IQTXmUduzxQ0e1vkoNw= Subject key identifier: 5A:17:87:81:53:17:4B:57:4A:44:FD:08:78:68:58:E5:EE:34:D9:08 Authority key identifier: 89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD Certificate issuer: /CN=A91C92DC/serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD Certificate serial: 05FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft Manifest number: 05EE Signing time: Wed 20 May 2026 23:00:04 +0000 Manifest this update: Wed 20 May 2026 23:00:03 +0000 Manifest next update: Wed 27 May 2026 23:00:03 +0000 Files and hashes: 1: iXCkAMzM8BCTPDMMN2Ch7F204K0.crl (hash: xUJOEyHBfG3gywagwI9iY1f9KwDnlV0mOIy5/Qz4y94=) 2: C3CE90CEF99A11EB936CCA1EC4F9AE02.roa (hash: Wnvaq8Ww3Bk3d2vemeHqavsME8uCxGuZGCjNCIrVG9I=) 3: AD1469EC7A3911ECB5639D41C4F9AE02.roa (hash: 96gxdKQyCmuf4UCiLnFZLLSpfBwM2iUrQWCesjIYcd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1534 (0x5fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C92DC, serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD Validity Not Before: May 20 23:00:03 2026 GMT Not After : May 27 23:00:03 2026 GMT Subject: CN=6a0e3cf4-c30f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:5f:1c:0c:f6:a3:d9:16:a8:c3:a4:93:dc:81: 57:f5:8d:bb:98:9a:24:7d:ef:bf:08:cd:cc:d4:10: 03:07:0f:49:e2:f1:0f:0c:28:67:36:72:f5:84:bd: f7:eb:ec:45:51:ef:8c:9b:3b:25:bf:0d:89:fb:ec: 96:4c:f2:9e:36:3d:9f:4d:88:89:29:f9:49:35:12: 01:d2:82:0e:22:af:c1:2b:57:db:12:78:4e:83:62: 67:43:4b:4f:aa:59:be:8d:7f:72:be:a3:4f:c3:43: 7c:0e:7e:e1:3d:fb:04:9d:a4:b6:2d:73:00:f0:ce: f2:e8:d4:96:26:55:35:76:15:84:13:e7:ec:1f:82: b6:fd:d3:0b:a9:21:88:c4:64:73:b1:e7:bd:13:13: 8a:a2:bf:8a:47:ee:39:0a:18:64:4a:c6:d3:26:1f: 95:a0:06:0b:a8:c3:ff:bf:40:5d:db:43:45:76:d9: 1d:b2:2b:aa:3c:1b:9d:9e:0a:89:ae:fc:e7:60:b0: 65:55:bd:29:f8:5c:d9:90:fd:6a:a4:a7:ea:58:bf: 5b:4e:d6:dc:cf:2a:50:48:83:6b:f3:d6:dc:d0:be: 2f:37:94:57:ff:0f:f8:45:9b:69:e8:25:c0:c6:3a: 37:89:66:6e:ed:08:55:51:6c:8c:18:81:71:9a:ba: e4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:17:87:81:53:17:4B:57:4A:44:FD:08:78:68:58:E5:EE:34:D9:08 X509v3 Authority Key Identifier: keyid:89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:99:5b:f6:3f:99:4d:28:61:ce:d1:18:eb:a9:77:83:56:87: 20:1d:38:04:39:9b:36:95:db:7b:42:a0:40:62:19:1a:d0:7e: 31:3e:4c:78:c1:0b:7b:f0:a9:56:5f:9c:13:ec:13:74:81:16: 97:de:5d:53:32:3a:aa:f9:ae:fb:41:c0:aa:1c:5b:51:9e:e6: 65:72:95:cb:fb:de:63:66:18:87:75:49:59:db:3d:a6:1b:7b: 31:a1:81:ad:48:96:2d:87:c4:41:a1:4e:c6:79:31:c8:b9:6f: e3:33:af:b9:0d:9e:fa:11:d8:7a:5f:de:96:3b:d1:81:44:74: 26:81:25:7b:2f:9b:cb:c5:d1:a4:a3:c7:98:38:7e:5e:c2:ed: 15:97:40:75:12:36:09:bb:98:52:b5:fc:ac:56:b1:95:77:b1: ba:c2:a9:74:f3:86:cd:d9:33:8f:d2:60:7a:e1:10:bb:ac:e5: c7:72:9f:ff:bf:81:85:ef:26:cb:a3:a1:cc:0c:4e:6c:dd:ee: e9:ce:e5:e2:4f:2d:c6:a1:0d:dc:09:98:24:dd:1b:35:fc:66: 7f:fe:38:40:42:74:04:e8:91:f4:1b:09:9b:9f:d8:54:01:ab: 7e:f6:26:b9:0c:0d:dc:e8:d7:9e:9c:79:aa:93:ee:a5:bb:9d: ca:34:96:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkyREMxMTAvBgNVBAUTKDg5NzBBNDAwQ0NDQ0YwMTA5MzNDMzMwQzM3NjBBMUVD NURCNEUwQUQwHhcNMjYwNTIwMjMwMDAzWhcNMjYwNTI3MjMwMDAzWjAYMRYwFAYD VQQDEw02YTBlM2NmNC1jMzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7F8cDPaj2Raow6ST3IFX9Y27mJokfe+/CM3M1BADBw9J4vEPDChnNnL1hL33 6+xFUe+Mmzslvw2J++yWTPKeNj2fTYiJKflJNRIB0oIOIq/BK1fbEnhOg2JnQ0tP qlm+jX9yvqNPw0N8Dn7hPfsEnaS2LXMA8M7y6NSWJlU1dhWEE+fsH4K2/dMLqSGI xGRzsee9ExOKor+KR+45ChhkSsbTJh+VoAYLqMP/v0Bd20NFdtkdsiuqPBudngqJ rvznYLBlVb0p+FzZkP1qpKfqWL9bTtbczypQSINr89bc0L4vN5RX/w/4RZtp6CXA xjo3iWZu7QhVUWyMGIFxmrrkrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFoXh4FT F0tXSkT9CHhoWOXuNNkIMB8GA1UdIwQYMBaAFIlwpADMzPAQkzwzDDdgoexdtOCt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTJEQy9DNjA1NzhBMEY5 OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThCQ1RQRE1NTjJDaDdGMjA0 SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYQ2tBTXpNOEJDVFBETU1OMkNoN0YyMDRLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTJEQy9DNjA1NzhBMEY5OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThC Q1RQRE1NTjJDaDdGMjA0SzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGJlb9j+ZTShhztEY66l3g1aHIB04BDmbNpXbe0KgQGIZGtB+MT5MeMELe/Cp Vl+cE+wTdIEWl95dUzI6qvmu+0HAqhxbUZ7mZXKVy/veY2YYh3VJWds9pht7MaGB rUiWLYfEQaFOxnkxyLlv4zOvuQ2e+hHYel/eljvRgUR0JoEley+by8XRpKPHmDh+ XsLtFZdAdRI2CbuYUrX8rFaxlXexusKpdPOGzdkzj9JgeuEQu6zlx3Kf/7+Bhe8m y6OhzAxObN3u6c7l4k8txqEN3AmYJN0bNfxmf/44QEJ0BOiR9BsJm5/YVAGrfvYm uQwN3OjXnpx5qpPupbudyjSW4g== -----END CERTIFICATE-----Generated at Thu May 21 09:35:42 2026 by rpki-client