$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft File: mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft (raw, json) Hash identifier: tQKFBpEvEXPBR6LQv2JVw7AbvEwq1HU5XkkfDhAF7sA= Subject key identifier: 71:54:7D:FC:97:2E:67:14:A4:C4:F9:32:25:49:35:8E:59:0C:19:EA Authority key identifier: 9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70 Certificate issuer: /CN=A91CB21D/serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70 Certificate serial: 028A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft Manifest number: 0279 Signing time: Tue 19 May 2026 01:56:03 +0000 Manifest this update: Tue 19 May 2026 01:56:02 +0000 Manifest next update: Tue 26 May 2026 01:56:02 +0000 Files and hashes: 1: mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl (hash: spNilj4M04D/IwpfMoqgRkq+pS5buYLzJ76Sl4dk95k=) 2: D8D317ACE7CE11F0AC86B9F45C6F56BC.roa (hash: 1IF3HCjLUpn5Rqg27GBvL6hXv6iteBjvIyKUpAO7Dio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 01:56:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 650 (0x28a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB21D, serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70 Validity Not Before: May 19 01:56:02 2026 GMT Not After : May 26 01:56:02 2026 GMT Subject: CN=6a0bc333-1388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:09:6a:8e:09:a1:9b:a3:14:54:d4:c5:c0:b8: 05:6c:57:f4:12:e2:ce:e5:36:75:c9:19:82:bf:e8: 1f:23:19:4c:b7:b2:af:a9:fc:83:06:95:c5:a7:25: 61:92:09:b5:84:d6:5f:33:39:90:5d:13:8b:63:ac: 2d:1e:bc:2b:e9:b7:41:fb:cb:e3:b3:5d:37:74:ec: 0e:e1:8e:a2:4f:6f:54:d0:37:c0:5c:1a:48:ed:4f: 66:00:8f:24:82:6b:19:dc:d4:29:66:0c:a9:39:f4: 10:99:52:37:43:ed:72:57:75:ac:69:2a:4f:d7:a8: b0:67:fc:b0:03:32:b2:6e:5f:4a:4c:ea:aa:01:a7: 50:8e:fc:41:77:4f:a6:80:0f:a0:7d:0a:37:45:61: 02:f0:f2:0d:51:69:fb:ad:23:22:6f:99:69:e4:51: 1a:87:e5:08:f3:30:c9:d8:9c:d9:28:0c:f1:cf:7d: 0f:2e:70:a7:eb:cc:32:d3:65:e6:de:32:b8:87:24: 14:55:4f:fd:7e:57:fd:e9:dd:9a:aa:5f:24:1b:9d: fa:35:f6:c7:d8:6e:6c:7d:f1:c2:cf:3b:71:71:a1: d9:41:e9:39:8e:16:1b:77:a5:32:d7:35:0d:22:23: 20:0c:a9:80:44:22:f1:66:82:bc:fe:ef:88:e9:1b: 94:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:54:7D:FC:97:2E:67:14:A4:C4:F9:32:25:49:35:8E:59:0C:19:EA X509v3 Authority Key Identifier: keyid:9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:71:04:27:2f:e8:74:61:01:04:2d:57:79:d5:b5:36:21:f1: 07:26:48:dc:73:a1:01:4a:78:14:4e:eb:a9:34:c6:c0:9d:9b: 06:0a:58:05:d4:ee:ea:d6:99:12:96:4d:7a:55:75:02:00:7e: 4b:6c:94:20:4c:ac:dc:9e:80:53:49:df:07:b1:5e:7e:c7:c4: 3b:cb:4f:f7:8c:b4:d0:64:30:5c:04:0b:13:8b:69:f5:e6:5d: 81:39:d4:10:e2:87:0b:f3:12:eb:e4:46:51:51:17:21:38:9c: 5c:25:96:bb:cb:25:50:5a:66:2d:20:a2:aa:46:15:c7:72:5e: 7f:bb:88:d0:14:da:d1:95:8a:23:9b:02:1e:4d:78:be:ea:b8: af:44:39:b5:05:fa:03:03:97:c0:62:c7:fe:48:7f:41:b2:29: 9e:33:4f:48:25:81:e1:14:8b:00:62:9d:46:33:35:da:70:43: ba:86:05:6e:b1:0e:8d:ae:da:e6:1b:0c:29:52:b4:31:05:b8: 97:58:d2:b1:c8:ba:70:cc:3d:52:72:23:0b:cf:5e:5f:78:0c: af:4e:ab:75:d6:4c:4e:36:b2:e7:a6:fa:8d:15:a9:79:77:7b: 07:84:11:6b:47:5e:d0:8b:d0:28:cb:92:76:5a:4b:e7:63:d9: 5f:da:23:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IyMUQxMTAvBgNVBAUTKDlCMUU4MTg4Q0U2NDM5N0U4QjQyNDFFNjc1OEQ0MjlE QTBGRjJFNzAwHhcNMjYwNTE5MDE1NjAyWhcNMjYwNTI2MDE1NjAyWjAYMRYwFAYD VQQDEw02YTBiYzMzMy0xMzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQlqjgmhm6MUVNTFwLgFbFf0EuLO5TZ1yRmCv+gfIxlMt7KvqfyDBpXFpyVh kgm1hNZfMzmQXROLY6wtHrwr6bdB+8vjs103dOwO4Y6iT29U0DfAXBpI7U9mAI8k gmsZ3NQpZgypOfQQmVI3Q+1yV3WsaSpP16iwZ/ywAzKybl9KTOqqAadQjvxBd0+m gA+gfQo3RWEC8PINUWn7rSMib5lp5FEah+UI8zDJ2JzZKAzxz30PLnCn68wy02Xm 3jK4hyQUVU/9flf96d2aql8kG536NfbH2G5sffHCzztxcaHZQek5jhYbd6Uy1zUN IiMgDKmARCLxZoK8/u+I6RuUjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHFUffyX LmcUpMT5MiVJNY5ZDBnqMB8GA1UdIwQYMBaAFJsegYjOZDl+i0JB5nWNQp2g/y5w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjIxRC82MzJDRDNFNkE3 RjYxMUVEQjlENjBDNDNDNEY5QUUwMi9teDZCaU01a09YNkxRa0htZFkxQ25hRF9M bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL214NkJpTTVrT1g2TFFrSG1kWTFDbmFEX0xuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjIxRC82MzJDRDNFNkE3RjYxMUVEQjlENjBDNDNDNEY5QUUwMi9teDZCaU01a09Y NkxRa0htZFkxQ25hRF9MbkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtXEEJy/odGEBBC1XedW1NiHxByZI3HOhAUp4FE7rqTTGwJ2bBgpYBdTu6taZ EpZNelV1AgB+S2yUIEys3J6AU0nfB7FefsfEO8tP94y00GQwXAQLE4tp9eZdgTnU EOKHC/MS6+RGUVEXITicXCWWu8slUFpmLSCiqkYVx3Jef7uI0BTa0ZWKI5sCHk14 vuq4r0Q5tQX6AwOXwGLH/kh/QbIpnjNPSCWB4RSLAGKdRjM12nBDuoYFbrEOja7a 5hsMKVK0MQW4l1jSsci6cMw9UnIjC89eX3gMr06rddZMTjay56b6jRWpeXd7B4QR a0de0IvQKMuSdlpL52PZX9ojiw== -----END CERTIFICATE-----Generated at Tue May 19 10:20:46 2026 by rpki-client