$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft File: 2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft (raw, json) Hash identifier: A/KehOqNGeTqlTL0Qq+kOPgdRh1iakcwQZF0ZvRzdD0= Subject key identifier: D6:CB:BA:FD:8B:81:53:AD:20:E0:09:50:B4:CD:05:8A:B7:48:34:FB Authority key identifier: DA:B4:A5:2A:8E:C1:AA:D6:C9:25:2E:EA:4D:5D:15:69:D2:7A:F4:6B Certificate issuer: /CN=A91D1C7F/serialNumber=DAB4A52A8EC1AAD6C9252EEA4D5D1569D27AF46B Certificate serial: 042D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft Manifest number: 041E Signing time: Thu 21 May 2026 00:26:50 +0000 Manifest this update: Thu 21 May 2026 00:26:49 +0000 Manifest next update: Thu 28 May 2026 00:26:49 +0000 Files and hashes: 1: 2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl (hash: 2WwyAunMhiwW+udAdLBLKACOQBvEsgkC0m4X2MhjWuI=) 2: E5B25D84B0D211ECB7B1BA7DC4F9AE02.roa (hash: VgbuCbt2B5V4RwKAtDeC1bN0tj3w9fLDaipQp5XINf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 00:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1069 (0x42d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1C7F, serialNumber=DAB4A52A8EC1AAD6C9252EEA4D5D1569D27AF46B Validity Not Before: May 21 00:26:49 2026 GMT Not After : May 28 00:26:49 2026 GMT Subject: CN=6a0e514a-ff67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d4:98:16:e9:49:6d:e4:6f:e8:99:88:a9:bf: d1:53:71:b2:c7:4e:27:e8:ff:3a:31:11:3c:1d:b4: 08:2f:c7:f0:50:32:57:1d:e3:53:34:67:1a:4b:b8: 8a:7b:d4:e8:6a:7a:a0:6c:2d:4d:ac:d1:19:06:90: e8:c8:6a:72:b5:28:bc:7b:7f:8f:b1:01:dd:8b:47: b2:a5:15:de:24:ca:07:05:27:94:dd:ac:00:df:f1: 21:58:6c:dc:b1:a8:1e:e3:de:b4:bc:87:f9:69:0e: e9:12:54:f8:34:b3:b2:6c:44:28:f4:db:c2:04:32: fc:7c:b7:e1:48:d4:16:c3:6d:c9:50:89:d2:a4:72: ec:cc:08:fc:21:28:60:5d:21:d5:b7:63:55:50:02: c6:1c:f4:4e:83:46:cf:52:17:9a:93:5e:82:5d:92: 78:43:4d:81:76:38:81:d2:37:e7:fb:e4:4f:89:40: 96:7d:e0:c9:b8:7c:fc:5e:2e:b2:47:a1:78:28:6d: 30:5a:2b:dc:b6:67:30:de:1a:a9:9b:5b:b7:ce:59: 79:33:39:02:13:a5:f1:8c:12:41:c9:58:56:7b:75: 48:29:f6:ed:02:f0:ce:a6:9b:69:9d:47:76:2a:c9: 79:23:11:42:29:c2:59:a2:33:ad:0c:5f:85:13:2f: 20:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:CB:BA:FD:8B:81:53:AD:20:E0:09:50:B4:CD:05:8A:B7:48:34:FB X509v3 Authority Key Identifier: keyid:DA:B4:A5:2A:8E:C1:AA:D6:C9:25:2E:EA:4D:5D:15:69:D2:7A:F4:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:ca:e7:59:5d:ad:6f:1b:d5:63:31:32:46:6e:97:ab:bd:a7: 2e:d4:1a:4b:24:ac:3f:83:59:20:c7:c4:3e:2e:48:60:a4:e1: 0e:bc:f1:46:4c:4d:22:4b:08:fb:d1:cf:ac:d1:ab:81:4e:f0: 39:b6:a7:02:bf:6e:cd:fa:71:1f:66:a1:43:cb:26:8c:37:1a: 04:ba:bd:c0:db:5e:f9:d8:e3:76:2a:af:65:f5:16:bb:3d:98: ea:0a:0b:94:52:bf:49:ab:75:99:5b:07:eb:9c:3d:3a:2c:83: 50:e2:3e:2a:1a:06:5b:18:12:d2:82:0b:1e:0b:0f:dd:b7:c7: 1a:9b:ad:be:a5:b2:1b:76:58:0d:04:77:9a:24:b3:9f:7a:8c: cb:ce:d9:2f:94:54:6a:39:14:b7:ea:16:12:32:6a:c4:97:a4: 65:a6:d1:f2:fa:2a:01:7d:26:6d:8e:78:9a:58:8d:ab:c4:15: 7c:b1:18:0e:6b:65:1f:a2:99:22:b0:23:c0:66:98:75:c3:d3: 39:57:f6:c0:92:7b:5c:aa:7e:7f:3b:2c:e2:bc:97:eb:0d:9f: a6:52:96:72:c9:ba:84:9b:b7:c1:1b:94:e8:59:f7:86:16:ca: ae:b6:f7:27:8c:a2:26:de:ea:e5:cc:72:7d:f7:7b:c1:a6:28: 8d:c5:b1:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFDN0YxMTAvBgNVBAUTKERBQjRBNTJBOEVDMUFBRDZDOTI1MkVFQTRENUQxNTY5 RDI3QUY0NkIwHhcNMjYwNTIxMDAyNjQ5WhcNMjYwNTI4MDAyNjQ5WjAYMRYwFAYD VQQDEw02YTBlNTE0YS1mZjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAltSYFulJbeRv6JmIqb/RU3Gyx04n6P86MRE8HbQIL8fwUDJXHeNTNGcaS7iK e9ToanqgbC1NrNEZBpDoyGpytSi8e3+PsQHdi0eypRXeJMoHBSeU3awA3/EhWGzc sage4960vIf5aQ7pElT4NLOybEQo9NvCBDL8fLfhSNQWw23JUInSpHLszAj8IShg XSHVt2NVUALGHPROg0bPUheak16CXZJ4Q02BdjiB0jfn++RPiUCWfeDJuHz8Xi6y R6F4KG0wWivctmcw3hqpm1u3zll5MzkCE6XxjBJByVhWe3VIKfbtAvDOpptpnUd2 Ksl5IxFCKcJZojOtDF+FEy8gMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNbLuv2L gVOtIOAJULTNBYq3SDT7MB8GA1UdIwQYMBaAFNq0pSqOwarWySUu6k1dFWnSevRr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUM3Ri8wOTFFMUVBQUIw RDAxMUVDQkIwNEEzNzhDNEY5QUUwMi8yclNsS283QnF0YkpKUzdxVFYwVmFkSjY5 R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyU2xLbzdCcXRiSkpTN3FUVjBWYWRKNjlHcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUM3Ri8wOTFFMUVBQUIwRDAxMUVDQkIwNEEzNzhDNEY5QUUwMi8yclNsS283QnF0 YkpKUzdxVFYwVmFkSjY5R3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF8rnWV2tbxvVYzEyRm6Xq72nLtQaSySsP4NZIMfEPi5IYKThDrzxRkxNIksI +9HPrNGrgU7wObanAr9uzfpxH2ahQ8smjDcaBLq9wNte+djjdiqvZfUWuz2Y6goL lFK/Sat1mVsH65w9OiyDUOI+KhoGWxgS0oILHgsP3bfHGputvqWyG3ZYDQR3miSz n3qMy87ZL5RUajkUt+oWEjJqxJekZabR8voqAX0mbY54mliNq8QVfLEYDmtlH6KZ IrAjwGaYdcPTOVf2wJJ7XKp+fzss4ryX6w2fplKWcsm6hJu3wRuU6Fn3hhbKrrb3 J4yiJt7q5cxyffd7waYojcWx9w== -----END CERTIFICATE-----Generated at Thu May 21 10:53:18 2026 by rpki-client