$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.mft File: 4Y-ehXQ6vsrARiuP30On20pij_k.mft (raw, json) Hash identifier: SadSnxPOXkBn1pYpbvr8shM/LlGR1p5GnrwwbW6eL60= Subject key identifier: FE:02:7C:E1:04:83:73:BA:2E:72:42:B8:11:6F:00:ED:B7:4A:3D:27 Authority key identifier: E1:8F:9E:85:74:3A:BE:CA:C0:46:2B:8F:DF:43:A7:DB:4A:62:8F:F9 Certificate issuer: /CN=A91C9A8D/serialNumber=E18F9E85743ABECAC0462B8FDF43A7DB4A628FF9 Certificate serial: 049D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Y-ehXQ6vsrARiuP30On20pij_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.mft Manifest number: 058D Signing time: Thu 21 May 2026 00:04:59 +0000 Manifest this update: Thu 21 May 2026 00:04:59 +0000 Manifest next update: Thu 28 May 2026 00:04:59 +0000 Files and hashes: 1: 4Y-ehXQ6vsrARiuP30On20pij_k.crl (hash: H1j2SZTRWHkDx2d6RgplSoQAcLMKjhRxuf2hAUtSG3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.crl rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Y-ehXQ6vsrARiuP30On20pij_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 00:04:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1181 (0x49d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9A8D, serialNumber=E18F9E85743ABECAC0462B8FDF43A7DB4A628FF9 Validity Not Before: May 21 00:04:59 2026 GMT Not After : May 28 00:04:59 2026 GMT Subject: CN=6a0e4c2b-b7de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:96:cf:b1:fb:11:40:75:04:80:18:ca:7f:ef: 8f:f1:15:91:d0:a5:b6:2a:b2:e4:12:11:14:67:9c: 1a:64:e6:c8:4b:a0:86:7f:79:e2:a6:38:c5:02:82: 46:98:18:3b:8e:3f:a0:82:70:9d:e9:76:57:00:94: fe:bb:25:b5:d3:c5:08:3a:b5:e9:ad:83:18:ba:b8: 4e:ee:7f:16:3d:60:01:a3:f4:32:a7:82:6a:71:58: db:5f:61:be:de:58:00:c9:c1:fd:9b:9b:4a:2d:30: 76:b6:13:63:ea:f8:ab:c4:51:f3:48:6f:0e:21:65: 1f:d1:e9:3b:a5:39:a5:10:cb:87:3e:08:3a:63:2b: 0f:f2:46:f8:a9:23:de:9e:80:7a:0e:a9:1d:c7:21: 36:1a:71:cb:1f:02:88:8a:f1:8b:6e:ee:30:ad:8e: f7:b5:f0:e2:a8:60:66:a3:eb:23:54:47:3b:7d:73: 0d:34:dc:9f:70:be:d1:f7:47:a8:66:f1:40:2b:01: 9f:62:5d:a6:ce:dd:92:15:12:cd:9c:ba:fb:9f:e1: 91:38:01:d9:9c:50:1e:e9:4c:9a:c0:73:30:2f:a3: 5c:cd:2b:9b:7c:3e:c3:6c:5c:d6:6b:53:71:b6:bd: ab:da:fe:1a:31:72:a8:3e:44:2b:dd:d5:40:b4:e5: 04:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:02:7C:E1:04:83:73:BA:2E:72:42:B8:11:6F:00:ED:B7:4A:3D:27 X509v3 Authority Key Identifier: keyid:E1:8F:9E:85:74:3A:BE:CA:C0:46:2B:8F:DF:43:A7:DB:4A:62:8F:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Y-ehXQ6vsrARiuP30On20pij_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9A8D/32F1F4C283E911ECB873C871C4F9AE02/4Y-ehXQ6vsrARiuP30On20pij_k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:9c:03:11:ea:93:68:1c:a7:8a:21:15:66:a4:be:ab:b3:93: 61:ba:5d:a0:bf:c8:82:0e:01:cd:4c:f1:37:09:53:4c:7f:e3: 30:dc:a3:00:46:c3:b6:a7:23:d1:c8:39:fd:85:f6:b7:93:cc: b6:d6:ef:44:16:3b:dd:15:8b:02:a8:81:37:2e:03:62:c7:9f: 70:3f:33:aa:d4:6d:7e:c7:79:13:5b:b0:33:a5:4f:1b:78:6e: 8d:c9:e8:3f:a7:53:1a:bc:f1:ab:a8:58:0a:c7:e0:9b:17:85: 5d:5b:b5:b2:82:f6:fe:aa:23:7e:01:67:5d:7b:d1:5e:b5:ed: f1:d2:57:78:a2:73:47:a9:20:2f:6e:c9:a1:ea:5a:da:68:87: 16:58:9c:3f:aa:c6:b7:e2:d2:40:57:fe:ec:64:d7:5e:8b:a0: 5f:87:bc:c2:eb:fe:46:d4:3d:f1:d8:fa:14:4d:66:da:f6:74: 80:76:cf:33:09:22:8f:21:79:d2:98:72:32:c6:49:d0:22:b4: ff:2a:d3:b4:62:47:08:04:23:7c:8b:8c:9c:77:c4:cb:1e:fc: 4e:77:e9:d6:01:10:9b:1c:d1:25:07:54:81:ab:f4:70:14:c9: 86:f6:28:1d:04:23:38:0f:9d:a1:81:8f:65:6b:e0:36:57:47: f6:45:fd:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlBOEQxMTAvBgNVBAUTKEUxOEY5RTg1NzQzQUJFQ0FDMDQ2MkI4RkRGNDNBN0RC NEE2MjhGRjkwHhcNMjYwNTIxMDAwNDU5WhcNMjYwNTI4MDAwNDU5WjAYMRYwFAYD VQQDEw02YTBlNGMyYi1iN2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl5bPsfsRQHUEgBjKf++P8RWR0KW2KrLkEhEUZ5waZObIS6CGf3nipjjFAoJG mBg7jj+ggnCd6XZXAJT+uyW108UIOrXprYMYurhO7n8WPWABo/Qyp4JqcVjbX2G+ 3lgAycH9m5tKLTB2thNj6virxFHzSG8OIWUf0ek7pTmlEMuHPgg6YysP8kb4qSPe noB6DqkdxyE2GnHLHwKIivGLbu4wrY73tfDiqGBmo+sjVEc7fXMNNNyfcL7R90eo ZvFAKwGfYl2mzt2SFRLNnLr7n+GROAHZnFAe6UyawHMwL6NczSubfD7DbFzWa1Nx tr2r2v4aMXKoPkQr3dVAtOUEXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP4CfOEE g3O6LnJCuBFvAO23Sj0nMB8GA1UdIwQYMBaAFOGPnoV0Or7KwEYrj99Dp9tKYo/5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUE4RC8zMkYxRjRDMjgz RTkxMUVDQjg3M0M4NzFDNEY5QUUwMi80WS1laFhRNnZzckFSaXVQMzBPbjIwcGlq X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRZLWVoWFE2dnNyQVJpdVAzME9uMjBwaWpfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUE4RC8zMkYxRjRDMjgzRTkxMUVDQjg3M0M4NzFDNEY5QUUwMi80WS1laFhRNnZz ckFSaXVQMzBPbjIwcGlqX2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASJwDEeqTaByniiEVZqS+q7OTYbpdoL/Igg4BzUzxNwlTTH/jMNyjAEbDtqcj 0cg5/YX2t5PMttbvRBY73RWLAqiBNy4DYsefcD8zqtRtfsd5E1uwM6VPG3hujcno P6dTGrzxq6hYCsfgmxeFXVu1soL2/qojfgFnXXvRXrXt8dJXeKJzR6kgL27Joepa 2miHFlicP6rGt+LSQFf+7GTXXougX4e8wuv+RtQ98dj6FE1m2vZ0gHbPMwkijyF5 0phyMsZJ0CK0/yrTtGJHCAQjfIuMnHfEyx78Tnfp1gEQmxzRJQdUgav0cBTJhvYo HQQjOA+doYGPZWvgNldH9kX94w== -----END CERTIFICATE-----Generated at Thu May 21 09:38:14 2026 by rpki-client