$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft File: tSlwZVVtKyKTSTXnUgcivVMz2k8.mft (raw, json) Hash identifier: iYTn+EQPfvE22gZSZ0XVadVmLkCvrQz0oYQU428kdos= Subject key identifier: 48:8A:D6:16:41:35:99:B5:3C:90:1E:64:C8:35:6B:BB:3E:D3:A2:10 Authority key identifier: B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F Certificate issuer: /CN=A91CD7A4/serialNumber=B5297065556D2B22934935E7520722BD5333DA4F Certificate serial: 0231 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft Manifest number: 0227 Signing time: Thu 21 May 2026 02:48:11 +0000 Manifest this update: Thu 21 May 2026 02:48:11 +0000 Manifest next update: Thu 28 May 2026 02:48:11 +0000 Files and hashes: 1: tSlwZVVtKyKTSTXnUgcivVMz2k8.crl (hash: G84ppI7r2amVF1ZqPt6kWPutgA6kYx3dwbSL5u8BQiQ=) 2: 275245323AB511F0AE5E5919C4F9AE02.roa (hash: k50pyswPVAJjF83tcl2ttbv+lV78Nbi1RduGBQNNES0=) 3: AD47BEC4320611EE845F4A5AC4F9AE02.roa (hash: HkA6U1wFsTKTzUQHdDn6LGozzBTZRy33eQX4h5sxnuY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:48:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 561 (0x231) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD7A4, serialNumber=B5297065556D2B22934935E7520722BD5333DA4F Validity Not Before: May 21 02:48:11 2026 GMT Not After : May 28 02:48:11 2026 GMT Subject: CN=6a0e726b-064d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:39:5d:64:f8:e9:9b:16:a8:57:b5:6a:32:65: 9d:77:fe:d4:0b:bd:19:d7:47:06:a3:7e:4b:96:d0: 74:5d:de:ce:91:e1:8c:a9:00:04:a1:e0:85:07:ce: de:74:dd:7a:1c:ae:4b:73:b8:a7:af:d9:af:ba:6d: 0b:35:91:9c:23:0b:f7:50:76:d2:68:e5:d7:e6:38: 94:84:c2:f4:8f:ad:0b:d3:68:61:39:d9:cf:05:94: c5:bb:80:fa:a1:1b:d7:6b:ed:23:e4:9a:15:f3:77: a2:1f:5b:98:d3:a2:15:9d:83:55:17:42:02:b2:f1: 35:53:97:19:f3:70:22:ff:00:48:19:34:63:56:ef: ef:80:fc:de:5a:7f:ab:12:db:bb:76:93:0a:41:db: df:80:14:a1:e4:d8:81:c7:f9:0f:f7:34:c3:76:9b: 3c:c9:ca:09:a0:e0:87:9c:b2:19:16:07:73:77:13: 9f:1b:29:8d:67:a9:3c:7c:0a:23:e4:93:80:48:64: 98:ed:39:5a:22:89:80:fa:67:98:af:78:b7:58:c5: 6d:8f:e6:38:d5:eb:48:e3:ad:a1:cf:0d:d8:d6:45: a6:33:24:95:41:fc:92:1b:52:ba:d6:1b:53:ce:3d: 0d:e9:c1:b1:f1:71:80:e5:fc:27:69:02:77:43:d0: a5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:8A:D6:16:41:35:99:B5:3C:90:1E:64:C8:35:6B:BB:3E:D3:A2:10 X509v3 Authority Key Identifier: keyid:B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ea:32:fc:c1:32:a2:ad:be:09:8d:1d:53:6f:10:fb:29:7e: e1:cf:e4:a5:ee:19:be:4c:d1:04:92:b2:bd:96:3b:44:ee:d1: a3:58:22:61:0b:4d:8e:c4:62:a7:ac:10:67:f1:89:90:20:dc: 8c:35:c2:ae:08:99:6c:88:7e:6f:74:a6:80:41:b8:85:04:ad: 81:6d:44:33:56:5e:90:4c:3d:81:9c:a6:79:ae:59:b4:dd:08: 11:1a:d7:91:40:22:d0:b1:28:14:e5:36:60:1d:a0:50:9c:1f: 4b:d5:78:d5:d2:91:b6:26:8f:55:76:fc:89:3d:41:7f:1d:72: a0:4e:a3:f6:be:77:8a:71:a2:96:bd:3f:41:13:5a:73:2d:0a: 43:77:57:a4:f1:90:53:d4:bc:2c:eb:1e:28:ab:7e:4b:83:39: 46:f3:95:61:0c:1f:88:4c:e8:c5:4a:b0:05:ec:b2:94:5c:68: 84:7d:dd:cd:b8:6c:4c:c9:f8:a3:5a:e2:55:d0:fe:3b:59:7a: 05:2f:39:4b:10:7f:01:fe:26:51:f1:95:01:08:3a:c7:94:bd: 6f:ef:2c:d9:78:33:09:e0:2c:76:61:1e:ad:54:88:76:8c:8e: 7e:0b:3c:81:8b:f2:2a:1b:c9:0f:43:aa:5b:95:21:ab:b8:54: 29:0a:08:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q3QTQxMTAvBgNVBAUTKEI1Mjk3MDY1NTU2RDJCMjI5MzQ5MzVFNzUyMDcyMkJE NTMzM0RBNEYwHhcNMjYwNTIxMDI0ODExWhcNMjYwNTI4MDI0ODExWjAYMRYwFAYD VQQDEw02YTBlNzI2Yi0wNjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0zldZPjpmxaoV7VqMmWdd/7UC70Z10cGo35LltB0Xd7OkeGMqQAEoeCFB87e dN16HK5Lc7inr9mvum0LNZGcIwv3UHbSaOXX5jiUhML0j60L02hhOdnPBZTFu4D6 oRvXa+0j5JoV83eiH1uY06IVnYNVF0ICsvE1U5cZ83Ai/wBIGTRjVu/vgPzeWn+r Etu7dpMKQdvfgBSh5NiBx/kP9zTDdps8ycoJoOCHnLIZFgdzdxOfGymNZ6k8fAoj 5JOASGSY7TlaIomA+meYr3i3WMVtj+Y41etI462hzw3Y1kWmMySVQfySG1K61htT zj0N6cGx8XGA5fwnaQJ3Q9ClOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEiK1hZB NZm1PJAeZMg1a7s+06IQMB8GA1UdIwQYMBaAFLUpcGVVbSsik0k151IHIr1TM9pP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDdBNC8zQ0M3MTk5NjEx ODcxMUVFQjM5RkUyNDNDNEY5QUUwMi90U2x3WlZWdEt5S1RTVFhuVWdjaXZWTXoy azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RTbHdaVlZ0S3lLVFNUWG5VZ2NpdlZNejJrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDdBNC8zQ0M3MTk5NjExODcxMUVFQjM5RkUyNDNDNEY5QUUwMi90U2x3WlZWdEt5 S1RTVFhuVWdjaXZWTXoyazgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHeoy/MEyoq2+CY0dU28Q+yl+4c/kpe4ZvkzRBJKyvZY7RO7Ro1giYQtNjsRi p6wQZ/GJkCDcjDXCrgiZbIh+b3SmgEG4hQStgW1EM1ZekEw9gZymea5ZtN0IERrX kUAi0LEoFOU2YB2gUJwfS9V41dKRtiaPVXb8iT1Bfx1yoE6j9r53inGilr0/QRNa cy0KQ3dXpPGQU9S8LOseKKt+S4M5RvOVYQwfiEzoxUqwBeyylFxohH3dzbhsTMn4 o1riVdD+O1l6BS85SxB/Af4mUfGVAQg6x5S9b+8s2XgzCeAsdmEerVSIdoyOfgs8 gYvyKhvJD0OqW5Uhq7hUKQoI2Q== -----END CERTIFICATE-----Generated at Thu May 21 14:43:58 2026 by rpki-client