$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF78/FABDF29E47C611F19E38693EB1833773/lI6MEddLrPFsv4LNQDaU4Nt-lPI.mft File: lI6MEddLrPFsv4LNQDaU4Nt-lPI.mft (raw, json) Hash identifier: shLC4H9Bv4ipy++EqzObeOwdkIuF52B+DKRQMfrxto4= Subject key identifier: A2:62:F1:D5:96:A1:F0:73:93:F8:4F:2B:E8:01:32:74:07:EB:12:BB Authority key identifier: 94:8E:8C:11:D7:4B:AC:F1:6C:BF:82:CD:40:36:94:E0:DB:7E:94:F2 Certificate issuer: /CN=A91CDF78/serialNumber=948E8C11D74BACF16CBF82CD403694E0DB7E94F2 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI6MEddLrPFsv4LNQDaU4Nt-lPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF78/FABDF29E47C611F19E38693EB1833773/lI6MEddLrPFsv4LNQDaU4Nt-lPI.mft Manifest number: 0A Signing time: Tue 19 May 2026 09:02:57 +0000 Manifest this update: Tue 19 May 2026 09:02:57 +0000 Manifest next update: Tue 26 May 2026 09:02:57 +0000 Files and hashes: 1: lI6MEddLrPFsv4LNQDaU4Nt-lPI.crl (hash: CYhDedx1FEnq7BKmBHgZT75noQrmUywFAHB5L2OUjdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDF78/FABDF29E47C611F19E38693EB1833773/lI6MEddLrPFsv4LNQDaU4Nt-lPI.crl rsync://rpki.apnic.net/member_repository/A91CDF78/FABDF29E47C611F19E38693EB1833773/lI6MEddLrPFsv4LNQDaU4Nt-lPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI6MEddLrPFsv4LNQDaU4Nt-lPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 09:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDF78, serialNumber=948E8C11D74BACF16CBF82CD403694E0DB7E94F2 Validity Not Before: May 19 09:02:57 2026 GMT Not After : May 26 09:02:57 2026 GMT Subject: CN=6a0c2741-e0ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:83:85:fe:00:02:a4:f1:96:bf:b9:00:f4:4e: e1:48:5b:ff:96:0f:b5:3b:3f:3f:35:00:1f:a1:e8: 8f:0e:69:df:b7:18:5b:e1:b6:a0:ef:1e:cc:3a:12: aa:a0:4b:3a:73:04:06:d1:5a:16:ff:3c:88:4e:de: f6:d9:6b:9e:83:71:23:6c:d4:7c:55:97:b3:04:77: a1:79:27:95:da:7b:d9:b2:00:2c:bf:54:5e:65:65: f4:14:75:94:73:7f:ef:56:cb:41:3a:07:d0:1e:2f: c7:5e:5e:c2:30:0d:98:12:1f:22:5f:6b:24:cf:a3: 8e:71:14:1b:57:d7:ac:fd:5d:39:ac:8c:de:d8:ff: 74:b4:39:4c:38:05:9c:1f:13:5f:ce:c6:5e:ad:d9: 72:b2:c0:85:4a:62:70:0f:ce:47:f2:56:95:1c:3e: 3f:6c:7d:f4:b6:c3:ce:fe:c7:e0:02:74:5c:c8:4f: e0:d8:4f:98:06:b7:f3:88:27:98:cb:85:f6:6e:a7: 56:04:27:2e:55:68:04:78:fa:5e:46:90:1e:33:0d: 22:b5:07:1d:a7:15:7a:10:40:6a:0e:e7:45:94:3a: c5:18:8b:28:3d:26:52:20:94:4d:24:5d:bc:a9:22: d4:11:9a:c8:6e:90:21:26:51:28:fc:84:49:b5:7b: 66:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:62:F1:D5:96:A1:F0:73:93:F8:4F:2B:E8:01:32:74:07:EB:12:BB X509v3 Authority Key Identifier: keyid:94:8E:8C:11:D7:4B:AC:F1:6C:BF:82:CD:40:36:94:E0:DB:7E:94:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDF78/FABDF29E47C611F19E38693EB1833773/lI6MEddLrPFsv4LNQDaU4Nt-lPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI6MEddLrPFsv4LNQDaU4Nt-lPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF78/FABDF29E47C611F19E38693EB1833773/lI6MEddLrPFsv4LNQDaU4Nt-lPI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:d0:c2:6a:bb:ec:15:34:ce:a3:55:54:9f:21:63:fc:05:d7: bd:e9:01:9f:cc:d7:19:f9:b6:ab:f7:f4:58:0a:05:f7:a7:a0: 6f:a0:1a:b8:f2:26:16:cd:9d:d6:69:fb:c2:0d:9d:68:d1:81: f7:e2:39:aa:e7:d4:07:06:55:ba:9f:ea:0a:59:c6:ed:99:6c: 01:99:a9:0c:41:c6:8d:86:7a:bd:bb:99:d4:63:31:99:e9:dc: df:f9:d7:de:d2:b7:92:08:d0:dd:28:e6:82:08:65:cb:99:d3: e6:78:10:06:d9:7a:80:b5:75:76:30:52:a1:0c:6b:ee:15:f0: 7f:95:a7:f8:18:50:17:53:b2:0d:f3:4d:e3:3b:7f:bb:f3:9d: 70:16:32:3d:71:15:8b:6f:89:3b:16:77:59:9a:8b:87:26:17: 5e:1c:0a:00:73:3c:c4:fc:9c:18:2a:c1:cb:09:c3:6e:29:0e: bb:73:52:0a:07:4c:08:78:87:7d:ca:61:1e:90:6b:60:65:57: ca:42:19:90:dd:0c:58:4f:ba:36:68:4f:e9:42:07:eb:da:1a: bd:63:78:73:65:ca:ab:c3:1a:d4:2f:a3:d4:e6:86:ff:2d:ad: 18:12:e2:d8:d5:5e:57:e2:9a:de:3c:f8:1b:db:a3:62:82:cf: b2:64:eb:10 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD REY3ODExMC8GA1UEBRMoOTQ4RThDMTFENzRCQUNGMTZDQkY4MkNENDAzNjk0RTBE QjdFOTRGMjAeFw0yNjA1MTkwOTAyNTdaFw0yNjA1MjYwOTAyNTdaMBgxFjAUBgNV BAMTDTZhMGMyNzQxLWUwYmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsg4X+AAKk8Za/uQD0TuFIW/+WD7U7Pz81AB+h6I8Oad+3GFvhtqDvHsw6Eqqg SzpzBAbRWhb/PIhO3vbZa56DcSNs1HxVl7MEd6F5J5Xae9myACy/VF5lZfQUdZRz f+9Wy0E6B9AeL8deXsIwDZgSHyJfayTPo45xFBtX16z9XTmsjN7Y/3S0OUw4BZwf E1/Oxl6t2XKywIVKYnAPzkfyVpUcPj9sffS2w87+x+ACdFzIT+DYT5gGt/OIJ5jL hfZup1YEJy5VaAR4+l5GkB4zDSK1Bx2nFXoQQGoO50WUOsUYiyg9JlIglE0kXbyp ItQRmshukCEmUSj8hEm1e2ZPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUomLx1Zah 8HOT+E8r6AEydAfrErswHwYDVR0jBBgwFoAUlI6MEddLrPFsv4LNQDaU4Nt+lPIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNERjc4L0ZBQkRGMjlFNDdD NjExRjE5RTM4NjkzRUIxODMzNzczL2xJNk1FZGRMclBGc3Y0TE5RRGFVNE50LWxQ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEk2TUVkZExyUEZzdjRMTlFEYVU0TnQtbFBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE Rjc4L0ZBQkRGMjlFNDdDNjExRjE5RTM4NjkzRUIxODMzNzczL2xJNk1FZGRMclBG c3Y0TE5RRGFVNE50LWxQSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA70MJqu+wVNM6jVVSfIWP8Bde96QGfzNcZ+bar9/RYCgX3p6BvoBq48iYWzZ3W afvCDZ1o0YH34jmq59QHBlW6n+oKWcbtmWwBmakMQcaNhnq9u5nUYzGZ6dzf+dfe 0reSCNDdKOaCCGXLmdPmeBAG2XqAtXV2MFKhDGvuFfB/laf4GFAXU7IN803jO3+7 851wFjI9cRWLb4k7FndZmouHJhdeHAoAczzE/JwYKsHLCcNuKQ67c1IKB0wIeId9 ymEekGtgZVfKQhmQ3QxYT7o2aE/pQgfr2hq9Y3hzZcqrwxrUL6PU5ob/La0YEuLY 1V5X4prePPgb26Nigs+yZOsQ -----END CERTIFICATE-----Generated at Thu May 21 09:34:31 2026 by rpki-client