$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft File: _D97sEVCVvMfJcoAhkvDpr11X5Y.mft (raw, json) Hash identifier: lP1YOpE3cIFlzuL7/CCJXynWOiIgNzGlKsozqTiLmSg= Subject key identifier: F9:B1:74:0C:77:F9:68:09:FC:B3:21:30:61:C6:52:1E:BF:02:C5:E6 Authority key identifier: FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96 Certificate issuer: /CN=A91CE2DE/serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96 Certificate serial: 02CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft Manifest number: 02C4 Signing time: Thu 21 May 2026 01:28:38 +0000 Manifest this update: Thu 21 May 2026 01:28:37 +0000 Manifest next update: Thu 28 May 2026 01:28:37 +0000 Files and hashes: 1: _D97sEVCVvMfJcoAhkvDpr11X5Y.crl (hash: DOHq6a+pCRL9IjvpizzEyy+5oo1xUIAtLMs7exLcXIY=) 2: 97B4F5603B3D11ED822BB46CC4F9AE02.roa (hash: qWq9FBfV0TlO+Nnhl0xmqfZ2SJgk0It8nQYA3EDnxXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.crl rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 01:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 715 (0x2cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE2DE, serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96 Validity Not Before: May 21 01:28:37 2026 GMT Not After : May 28 01:28:37 2026 GMT Subject: CN=6a0e5fc6-d344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6b:6b:2b:6d:1d:b8:ad:84:28:b8:97:73:35: 32:1b:f2:0e:3f:03:a6:ef:03:89:a9:f5:1f:9a:74: ff:3a:fc:23:29:10:e2:66:26:14:88:f2:08:23:16: 6e:9f:ed:99:ea:9c:74:d0:ea:a6:b5:51:fe:87:77: 73:ff:39:28:bd:50:f6:38:9b:90:9c:af:d4:be:b6: 66:29:eb:9e:cc:1c:79:1f:33:22:a3:32:af:8c:3b: f0:19:a5:2c:97:5e:81:63:84:59:68:1f:d1:05:d2: 6b:c1:01:76:e0:4b:37:74:07:76:3d:d3:e0:e5:d3: 45:d6:3a:d1:00:83:24:c2:8a:7a:4b:fc:71:61:ae: e1:6e:5f:b3:f7:9c:b8:f1:12:5b:ad:1d:06:09:93: 34:26:17:eb:f9:aa:77:9b:3b:be:77:34:61:b8:87: a5:4e:e4:74:45:af:02:d5:cf:40:1e:d0:7a:af:43: 65:17:ed:cd:28:c4:3d:e5:05:f9:34:8c:00:1e:35: 0e:ca:a8:34:8f:c4:d9:fa:77:f6:4a:86:ee:d2:68: fa:31:e6:72:eb:e3:3a:a7:97:c5:04:5d:d3:a6:d0: df:71:89:ec:4b:62:b5:80:55:85:38:db:3c:d2:74: f9:15:db:3c:fc:42:da:50:aa:09:ab:ac:b4:1b:68: c8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B1:74:0C:77:F9:68:09:FC:B3:21:30:61:C6:52:1E:BF:02:C5:E6 X509v3 Authority Key Identifier: keyid:FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:23:7d:a6:6d:61:38:95:4a:bf:ff:33:c2:39:9a:e8:7b:d0: 74:d2:b6:b1:c3:61:60:14:2c:ab:67:04:ed:7c:16:5e:4f:f6: 74:eb:3a:a1:54:c3:52:86:f1:11:d7:cb:1f:fa:a0:11:63:15: 98:e9:36:3e:18:27:34:a9:5a:53:59:8a:d5:b7:4a:8b:c5:f2: 46:30:af:eb:18:0c:2f:d3:6c:6a:d7:23:39:8b:ca:41:cf:4a: 7d:69:9f:96:59:18:1e:82:88:eb:f5:e5:64:7b:e4:8a:87:8d: 6b:0a:b3:a2:25:0e:8d:08:d8:78:1f:e3:ca:31:fd:d0:14:37: 5e:c4:4b:6a:68:7c:bf:30:94:02:81:ce:70:7e:1f:99:55:6e: 28:fd:f3:09:82:b1:07:74:2f:3f:fb:55:95:97:77:f5:66:fd: 8b:e6:93:41:34:60:7d:1b:3e:36:20:d4:ff:c9:22:96:af:c5: 9b:92:be:49:38:1d:3e:07:3d:d2:ce:b1:2f:ac:ae:51:f8:8c: 8b:ca:8e:ad:fc:1e:e7:fd:9b:56:5f:4a:dc:1d:76:40:94:27: fc:67:e8:f7:c9:60:2c:7f:02:02:cb:52:fe:e7:42:10:a0:9d: 25:3e:2d:6f:c5:f0:94:b1:26:6f:0c:6a:33:04:41:bf:9a:37: c8:6c:6d:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UyREUxMTAvBgNVBAUTKEZDM0Y3QkIwNDU0MjU2RjMxRjI1Q0EwMDg2NEJDM0E2 QkQ3NTVGOTYwHhcNMjYwNTIxMDEyODM3WhcNMjYwNTI4MDEyODM3WjAYMRYwFAYD VQQDEw02YTBlNWZjNi1kMzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGtrK20duK2EKLiXczUyG/IOPwOm7wOJqfUfmnT/OvwjKRDiZiYUiPIIIxZu n+2Z6px00OqmtVH+h3dz/zkovVD2OJuQnK/UvrZmKeuezBx5HzMiozKvjDvwGaUs l16BY4RZaB/RBdJrwQF24Es3dAd2PdPg5dNF1jrRAIMkwop6S/xxYa7hbl+z95y4 8RJbrR0GCZM0Jhfr+ap3mzu+dzRhuIelTuR0Ra8C1c9AHtB6r0NlF+3NKMQ95QX5 NIwAHjUOyqg0j8TZ+nf2Sobu0mj6MeZy6+M6p5fFBF3TptDfcYnsS2K1gFWFONs8 0nT5Fds8/ELaUKoJq6y0G2jIYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPmxdAx3 +WgJ/LMhMGHGUh6/AsXmMB8GA1UdIwQYMBaAFPw/e7BFQlbzHyXKAIZLw6a9dV+W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTJERS9BQkRFRTg3QTM3 RTYxMUVEQjUxRTFENDVDNEY5QUUwMi9fRDk3c0VWQ1Z2TWZKY29BaGt2RHByMTFY NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19EOTdzRVZDVnZNZkpjb0Foa3ZEcHIxMVg1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTJERS9BQkRFRTg3QTM3RTYxMUVEQjUxRTFENDVDNEY5QUUwMi9fRDk3c0VWQ1Z2 TWZKY29BaGt2RHByMTFYNVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgSN9pm1hOJVKv/8zwjma6HvQdNK2scNhYBQsq2cE7XwWXk/2dOs6oVTDUobx EdfLH/qgEWMVmOk2PhgnNKlaU1mK1bdKi8XyRjCv6xgML9NsatcjOYvKQc9KfWmf llkYHoKI6/XlZHvkioeNawqzoiUOjQjYeB/jyjH90BQ3XsRLamh8vzCUAoHOcH4f mVVuKP3zCYKxB3QvP/tVlZd39Wb9i+aTQTRgfRs+NiDU/8kilq/Fm5K+STgdPgc9 0s6xL6yuUfiMi8qOrfwe5/2bVl9K3B12QJQn/Gfo98lgLH8CAstS/udCEKCdJT4t b8XwlLEmbwxqMwRBv5o3yGxtyQ== -----END CERTIFICATE-----Generated at Thu May 21 10:15:14 2026 by rpki-client