$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft File: K90xURFt6dvFXPw9LNrKWOdLGeY.mft (raw, json) Hash identifier: fstmTsqeTl18TE+x27so8djhlm0DGadu4dCvzk3GjQc= Subject key identifier: 5E:47:47:75:51:5A:7E:EF:55:90:77:C0:F4:1D:7B:77:3E:B7:B2:DD Authority key identifier: 2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6 Certificate issuer: /CN=A91CA815/serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6 Certificate serial: 355D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft Manifest number: 354F Signing time: Wed 20 May 2026 14:57:11 +0000 Manifest this update: Wed 20 May 2026 14:57:10 +0000 Manifest next update: Wed 27 May 2026 14:57:10 +0000 Files and hashes: 1: K90xURFt6dvFXPw9LNrKWOdLGeY.crl (hash: O2odXVHntQZn8gCJFf5uXnz5CUPA78CGIwK7ELHuJfc=) 2: E9E555FA506211EAA2BC3E2EC4F9AE02.roa (hash: 07LE9X8LH2BaI/dz0O3mbMsKmiKgclhDrz2z98RF0c0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 14:57:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13661 (0x355d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA815, serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6 Validity Not Before: May 20 14:57:10 2026 GMT Not After : May 27 14:57:10 2026 GMT Subject: CN=6a0dcbc6-c98c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5f:a3:ab:a1:89:48:dd:c4:40:36:48:75:e7: 3c:c9:aa:83:aa:2a:c5:8c:04:32:7a:82:ea:50:5b: 89:94:88:96:8c:03:03:f2:b7:37:e6:40:c8:f3:a1: 76:fa:c5:dd:85:22:ad:19:41:58:14:fe:4f:13:f0: 90:32:10:5b:ff:fa:bf:1c:9c:01:c1:24:61:87:ee: b4:66:79:0d:ff:49:33:b1:43:32:9e:14:04:ed:11: 2b:4b:f8:f9:1a:b9:d9:40:e5:0a:a4:3d:e8:9e:7c: 98:da:cd:b7:3a:67:00:97:8e:17:91:70:f9:be:dd: bf:b6:91:ee:37:9b:a6:23:29:92:52:87:43:0d:e3: e0:eb:4b:d6:23:8a:6e:af:67:03:f1:52:19:b4:66: e9:b6:9d:36:67:aa:7d:15:67:58:2d:6f:e8:2c:b7: e3:70:01:72:a7:5e:9a:dd:5c:61:b3:1a:46:51:77: d2:b9:b9:ad:ef:da:62:05:91:b4:80:28:a9:3f:07: 7c:f0:c3:eb:63:f3:4e:02:16:69:7c:68:e2:5f:9e: 9e:3e:1a:a2:6d:fe:05:ca:6d:eb:65:18:e2:3d:ee: ae:51:b6:cd:ec:c7:5e:fa:cc:4b:94:e0:aa:d8:91: 7d:40:82:6b:e9:85:23:c5:84:87:b5:18:cf:8a:88: 8d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:47:47:75:51:5A:7E:EF:55:90:77:C0:F4:1D:7B:77:3E:B7:B2:DD X509v3 Authority Key Identifier: keyid:2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:1c:8c:fc:6e:f7:fb:0f:d8:7c:1e:e4:c3:9a:80:fc:8a:eb: 01:18:28:cf:5f:92:16:d8:52:13:b2:59:59:56:65:ad:ff:bb: 30:e8:39:03:c1:ef:24:db:a0:2d:28:7d:40:b0:ad:8f:fa:21: a9:78:10:22:bf:a3:08:ba:37:01:f0:4f:01:bb:07:ec:6d:23: a7:5a:57:b9:da:55:b1:f7:8a:33:af:ad:30:3a:20:0d:6d:8a: 33:f3:c3:6a:4c:67:51:28:f4:df:26:61:28:36:2c:65:46:7b: 5d:d3:60:c8:85:cb:1b:12:f0:9b:1d:3b:76:59:60:bc:df:23: c3:c3:f0:f1:0c:3a:97:d1:19:8a:27:dc:89:6d:0e:ab:da:00: 60:af:40:87:de:8c:54:83:63:d8:a0:7a:c5:14:02:b8:90:28: e7:e4:db:07:db:02:88:49:d1:e9:9b:51:ce:0d:c8:8c:f2:3d: ef:3a:58:49:e1:ad:bd:5e:a7:be:be:fe:03:93:9b:3a:dc:e1: 6e:31:e6:13:79:4d:60:20:59:00:65:e5:72:90:90:56:59:20: 62:60:5e:df:67:a7:8e:d3:99:43:a6:35:b9:8d:a2:82:bd:25: 05:64:ec:5f:28:0f:a9:a3:78:de:6b:7c:a1:6b:d8:18:c7:af: 81:52:44:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E4MTUxMTAvBgNVBAUTKDJCREQzMTUxMTE2REU5REJDNTVDRkMzRDJDREFDQTU4 RTc0QjE5RTYwHhcNMjYwNTIwMTQ1NzEwWhcNMjYwNTI3MTQ1NzEwWjAYMRYwFAYD VQQDEw02YTBkY2JjNi1jOThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtF+jq6GJSN3EQDZIdec8yaqDqirFjAQyeoLqUFuJlIiWjAMD8rc35kDI86F2 +sXdhSKtGUFYFP5PE/CQMhBb//q/HJwBwSRhh+60ZnkN/0kzsUMynhQE7RErS/j5 GrnZQOUKpD3onnyY2s23OmcAl44XkXD5vt2/tpHuN5umIymSUodDDePg60vWI4pu r2cD8VIZtGbptp02Z6p9FWdYLW/oLLfjcAFyp16a3VxhsxpGUXfSubmt79piBZG0 gCipPwd88MPrY/NOAhZpfGjiX56ePhqibf4Fym3rZRjiPe6uUbbN7Mde+sxLlOCq 2JF9QIJr6YUjxYSHtRjPioiN+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF5HR3VR Wn7vVZB3wPQde3c+t7LdMB8GA1UdIwQYMBaAFCvdMVERbenbxVz8PSzayljnSxnm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTgxNS84RENEMUVBODFE OUIxMUUyOTFEMjg0ODkwOEIwMkNEMi9LOTB4VVJGdDZkdkZYUHc5TE5yS1dPZExH ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s5MHhVUkZ0NmR2RlhQdzlMTnJLV09kTEdlWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTgxNS84RENEMUVBODFEOUIxMUUyOTFEMjg0ODkwOEIwMkNEMi9LOTB4VVJGdDZk dkZYUHc5TE5yS1dPZExHZVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYhyM/G73+w/YfB7kw5qA/IrrARgoz1+SFthSE7JZWVZlrf+7MOg5A8HvJNug LSh9QLCtj/ohqXgQIr+jCLo3AfBPAbsH7G0jp1pXudpVsfeKM6+tMDogDW2KM/PD akxnUSj03yZhKDYsZUZ7XdNgyIXLGxLwmx07dllgvN8jw8Pw8Qw6l9EZiifciW0O q9oAYK9Ah96MVINj2KB6xRQCuJAo5+TbB9sCiEnR6ZtRzg3IjPI97zpYSeGtvV6n vr7+A5ObOtzhbjHmE3lNYCBZAGXlcpCQVlkgYmBe32enjtOZQ6Y1uY2igr0lBWTs XygPqaN43mt8oWvYGMevgVJEpg== -----END CERTIFICATE-----Generated at Thu May 21 10:20:50 2026 by rpki-client