$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft File: 4ed5yzH_53MaM7Xrfq_GsqvbROM.mft (raw, json) Hash identifier: k8ktRRC63jQ3mtJR8PbF5c3qXkdwOxU+1EmefYVH2AY= Subject key identifier: 92:0D:63:12:0E:6D:92:1A:D5:E8:FB:75:8B:6E:93:B3:E0:BA:E6:DE Authority key identifier: E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 Certificate issuer: /CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3 Certificate serial: 0225 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft Manifest number: 0213 Signing time: Thu 21 May 2026 03:01:42 +0000 Manifest this update: Thu 21 May 2026 03:01:41 +0000 Manifest next update: Thu 28 May 2026 03:01:41 +0000 Files and hashes: 1: 4ed5yzH_53MaM7Xrfq_GsqvbROM.crl (hash: kn0rr3A67dwzBXDPpGXvlPBiNOHO56hjwmsPm7Pqibw=) 2: 9E6C93C6372311EEACE5BF61C4F9AE02.roa (hash: oIFWU2U3FpoDzzLzWPnxsOr677OIj+OUoCa9oBm5yVg=) 3: 9F1B80CA372311EEACE5BF61C4F9AE02.roa (hash: pEZ4PzrQv6b6ndP0HpfE6ghr1BZrsxRE21MGz3Ej87E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 03:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 549 (0x225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3737, serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3 Validity Not Before: May 21 03:01:41 2026 GMT Not After : May 28 03:01:41 2026 GMT Subject: CN=6a0e7596-bacf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:19:e1:02:83:72:3e:a0:9b:63:8d:49:a6:b8: f8:dc:84:48:01:de:9e:6a:5d:51:9b:a6:41:a7:e2: 04:40:4b:49:0f:28:31:9f:a6:e2:f7:e0:e7:53:60: 89:75:9f:a1:a0:28:12:71:38:f0:f2:5c:9a:78:64: 5b:b9:4d:2a:26:0a:ae:8d:b7:20:15:75:e2:42:f2: f1:d5:ce:b0:71:45:dc:ef:46:d6:4d:ef:53:e1:81: 69:71:5c:66:48:02:03:c4:dc:03:35:57:3c:d2:d4: a7:6e:e1:14:2d:d0:f7:a7:98:ca:ef:ac:17:f4:89: 0e:a0:4a:95:c8:69:03:6b:17:67:89:e4:57:27:37: a7:7b:ba:91:2e:55:3f:a5:46:c1:65:49:30:6d:ad: 34:ed:89:1e:a2:a6:b2:19:db:0e:5f:06:ef:c1:8c: 42:4d:cc:48:f4:73:73:e5:57:b8:78:b8:e0:91:69: fc:e7:d7:06:4b:d4:b2:4d:70:48:b5:e1:b5:b6:7b: 08:20:34:af:71:cb:b8:22:d9:b4:33:ff:fd:4a:10: 9b:c4:98:4b:a2:e0:2d:18:8a:41:24:55:8b:ae:c8: d6:66:c4:54:d7:3d:6d:5e:36:e4:97:69:87:73:e6: 7e:1c:c9:5d:37:af:e1:72:1a:b6:f6:e4:e5:72:57: 95:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:0D:63:12:0E:6D:92:1A:D5:E8:FB:75:8B:6E:93:B3:E0:BA:E6:DE X509v3 Authority Key Identifier: keyid:E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:d2:16:44:55:a6:ba:b9:62:60:4d:f9:f5:c9:ec:9b:3c:dd: 21:02:61:b8:f7:36:cd:90:75:02:c3:69:2d:79:2a:0f:c9:ee: fe:02:18:52:19:bb:58:af:9c:2e:79:29:ca:c2:2d:24:5d:bf: cf:d3:98:82:7d:53:6c:bc:39:db:35:a9:bc:50:d3:f9:e9:a0: b2:70:43:76:d5:52:e3:91:92:b6:70:a5:f1:6d:10:c3:83:49: d4:21:bc:a8:c9:63:bb:a3:55:42:26:16:fd:f3:6d:f3:a5:67: 78:c3:70:07:f4:02:75:36:38:18:72:ee:8c:c6:a0:97:79:19: d1:d0:8b:18:49:12:23:c0:12:0d:24:e5:db:42:aa:7b:d2:1c: 17:50:09:4b:8a:1d:80:d9:d2:cc:75:cc:e6:f4:b1:ad:c5:b2: 2a:45:96:9e:7b:08:14:ed:ae:af:1d:0b:f1:61:34:9c:13:26: b4:55:d3:dd:f0:e8:49:33:6f:b9:aa:20:a8:09:e4:39:e1:da: 4b:92:29:be:22:70:92:70:b2:6b:10:2b:22:df:dd:e5:61:cf: 4c:5f:49:b6:a7:5a:8d:9f:a6:ba:b8:df:2c:d2:2d:b6:e0:1d: bd:c4:ae:18:86:b7:ce:c5:d3:0c:3a:4f:76:07:4f:5f:83:0a: 97:3f:63:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3MzcxMTAvBgNVBAUTKEUxRTc3OUNCMzFGRkU3NzMxQTMzQjVFQjdFQUZDNkIy QUJEQjQ0RTMwHhcNMjYwNTIxMDMwMTQxWhcNMjYwNTI4MDMwMTQxWjAYMRYwFAYD VQQDEw02YTBlNzU5Ni1iYWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRnhAoNyPqCbY41Jprj43IRIAd6eal1Rm6ZBp+IEQEtJDygxn6bi9+DnU2CJ dZ+hoCgScTjw8lyaeGRbuU0qJgqujbcgFXXiQvLx1c6wcUXc70bWTe9T4YFpcVxm SAIDxNwDNVc80tSnbuEULdD3p5jK76wX9IkOoEqVyGkDaxdnieRXJzene7qRLlU/ pUbBZUkwba007YkeoqayGdsOXwbvwYxCTcxI9HNz5Ve4eLjgkWn859cGS9SyTXBI teG1tnsIIDSvccu4Itm0M//9ShCbxJhLouAtGIpBJFWLrsjWZsRU1z1tXjbkl2mH c+Z+HMldN6/hchq29uTlcleV6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJINYxIO bZIa1ej7dYtuk7PguubeMB8GA1UdIwQYMBaAFOHnecsx/+dzGjO1636vxrKr20Tj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzczNy84Mjk0MzYzRTMz NTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUzTWFNN1hyZnFfR3NxdmJS T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRlZDV5ekhfNTNNYU03WHJmcV9Hc3F2YlJPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzczNy84Mjk0MzYzRTMzNTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUz TWFNN1hyZnFfR3NxdmJST00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhNIWRFWmurliYE359cnsmzzdIQJhuPc2zZB1AsNpLXkqD8nu/gIYUhm7WK+c LnkpysItJF2/z9OYgn1TbLw52zWpvFDT+emgsnBDdtVS45GStnCl8W0Qw4NJ1CG8 qMlju6NVQiYW/fNt86VneMNwB/QCdTY4GHLujMagl3kZ0dCLGEkSI8ASDSTl20Kq e9IcF1AJS4odgNnSzHXM5vSxrcWyKkWWnnsIFO2urx0L8WE0nBMmtFXT3fDoSTNv uaogqAnkOeHaS5IpviJwknCyaxArIt/d5WHPTF9JtqdajZ+murjfLNIttuAdvcSu GIa3zsXTDDpPdgdPX4MKlz9jzQ== -----END CERTIFICATE-----Generated at Thu May 21 09:36:40 2026 by rpki-client