$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft File: o1D687bxS8juGymW7tSOJwIOEIM.mft (raw, json) Hash identifier: WapII2vp3cRbVjCIdzhfoGJ4H6ePQEmG72AmfcqpEWI= Subject key identifier: 92:08:93:F7:0A:69:4C:0A:C2:2C:38:D1:23:2E:B1:6F:56:49:90:9B Authority key identifier: A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83 Certificate issuer: /CN=A91D4834/serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083 Certificate serial: 092C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft Manifest number: 090E Signing time: Tue 26 May 2026 20:23:25 +0000 Manifest this update: Tue 26 May 2026 20:23:25 +0000 Manifest next update: Tue 02 Jun 2026 20:23:25 +0000 Files and hashes: 1: o1D687bxS8juGymW7tSOJwIOEIM.crl (hash: 2ZV6YhcJQL6LxkX7ZnXxA36FHKKfU77ShgBlwrSU9L4=) 2: D32DB3AE7FC111F0B3BEC06AC4F9AE02.roa (hash: e1E68Ho50ngwWh9r7dC17sN0VAiVWs7P5I7wOcaITiM=) 3: ECE8975685D811F09A4FFA45C4F9AE02.roa (hash: fecuy51h04kA/93Fl9Jso7L2bJu10CuAwHp5PsU5FhA=) 4: C5E7AA2289A011F08D995D74C4F9AE02.roa (hash: O+J9NJa3UAiRFIsaF/1cDe44mda6RPgxat0aYJVT3MQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Jun 2026 20:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2348 (0x92c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4834, serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083 Validity Not Before: May 26 20:23:25 2026 GMT Not After : Jun 2 20:23:25 2026 GMT Subject: CN=6a16013d-07e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3c:b6:aa:bf:1f:c4:dd:ec:92:aa:b9:a4:64: 9c:60:81:d2:1f:d4:6d:c5:97:05:79:6b:fa:c4:10: 5f:28:0a:ea:65:c1:25:b1:2e:ef:26:ea:5a:1a:f1: 0e:5b:7a:f3:87:6b:d2:82:46:4a:17:ad:5b:1f:6f: 42:df:a2:18:73:c8:1d:ed:00:26:43:29:22:57:95: 61:36:1d:2b:6b:f4:c5:0c:9e:29:f8:0f:58:a9:53: 75:78:2d:e7:d0:f8:89:25:10:82:ba:2a:c3:47:dc: 08:a7:6b:30:c0:ba:35:aa:bd:00:44:b5:de:c1:b8: 7f:a5:b4:c1:f5:9b:85:5d:0b:0b:e0:2b:2c:0a:14: 26:cc:f7:72:4e:f0:22:85:b0:92:90:ab:0b:0b:89: 5f:41:c9:a2:7b:84:e1:f9:db:1d:62:c7:b5:6e:ee: 2b:a7:e4:68:17:79:f3:1e:06:74:10:35:b3:92:9c: d3:81:6c:51:48:a2:55:e5:a2:04:4d:3c:36:8b:97: d7:e9:13:84:12:1d:c7:03:68:db:93:d8:2d:ee:b2: 8f:4a:8a:c4:99:87:72:d7:69:3f:c2:29:7c:f5:d3: b2:69:46:f3:0e:d5:33:91:e5:41:ed:cf:d3:45:1d: f9:40:87:96:52:f8:2c:74:a6:9d:30:61:9a:cb:c7: 33:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:08:93:F7:0A:69:4C:0A:C2:2C:38:D1:23:2E:B1:6F:56:49:90:9B X509v3 Authority Key Identifier: keyid:A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:bf:11:34:d2:b9:b2:a4:29:87:dc:b9:c8:17:52:2c:f4:72: 1a:39:8e:4c:59:dc:82:2e:48:50:30:4d:41:26:bf:b4:15:94: f5:0b:b6:7f:35:50:79:55:bd:99:4d:aa:64:3e:5d:d6:d6:0f: 2b:75:12:0e:b6:99:a7:19:2c:24:29:ec:e4:78:bf:02:35:92: 65:54:56:da:b0:01:42:61:9d:4f:19:44:a3:06:a0:c0:6e:12: c1:9c:ea:6c:26:02:90:ec:7a:74:db:f9:6b:f9:0e:08:05:e2: f2:aa:6e:80:b5:77:c6:cb:66:51:4a:98:5f:4d:a7:c7:d9:96: 56:bc:c5:be:99:ec:12:e1:96:50:50:f9:06:b0:7c:eb:24:b2: f3:e2:1f:0d:7d:ed:b6:30:1a:6a:39:7c:eb:c7:6d:fc:34:52: 1c:d1:16:48:1f:ea:87:c6:ba:28:3f:ea:50:df:ce:ef:41:a7: 2d:75:b9:e1:ac:72:07:a7:32:e3:91:a8:9d:d0:b7:c4:56:ea: 59:0d:a3:80:ac:47:28:b9:25:92:e3:d0:2a:26:84:be:5f:1e: 5c:da:25:00:01:c5:ae:62:0a:63:f0:8e:db:d5:95:37:97:b3: e2:b1:ce:d3:c5:35:d4:60:36:aa:00:0b:b9:3c:bc:3a:f5:29: eb:54:02:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ4MzQxMTAvBgNVBAUTKEEzNTBGQUYzQjZGMTRCQzhFRTFCMjk5NkVFRDQ4RTI3 MDIwRTEwODMwHhcNMjYwNTI2MjAyMzI1WhcNMjYwNjAyMjAyMzI1WjAYMRYwFAYD VQQDEw02YTE2MDEzZC0wN2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArTy2qr8fxN3skqq5pGScYIHSH9RtxZcFeWv6xBBfKArqZcElsS7vJupaGvEO W3rzh2vSgkZKF61bH29C36IYc8gd7QAmQykiV5VhNh0ra/TFDJ4p+A9YqVN1eC3n 0PiJJRCCuirDR9wIp2swwLo1qr0ARLXewbh/pbTB9ZuFXQsL4CssChQmzPdyTvAi hbCSkKsLC4lfQcmie4Th+dsdYse1bu4rp+RoF3nzHgZ0EDWzkpzTgWxRSKJV5aIE TTw2i5fX6ROEEh3HA2jbk9gt7rKPSorEmYdy12k/wil89dOyaUbzDtUzkeVB7c/T RR35QIeWUvgsdKadMGGay8czHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJIIk/cK aUwKwiw40SMusW9WSZCbMB8GA1UdIwQYMBaAFKNQ+vO28UvI7hsplu7UjicCDhCD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDgzNC81MUJFREZDNEND OEQxMUVBQUZGRURCMzZDNEY5QUUwMi9vMUQ2ODdieFM4anVHeW1XN3RTT0p3SU9F SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28xRDY4N2J4UzhqdUd5bVc3dFNPSndJT0VJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDgzNC81MUJFREZDNENDOEQxMUVBQUZGRURCMzZDNEY5QUUwMi9vMUQ2ODdieFM4 anVHeW1XN3RTT0p3SU9FSU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ78RNNK5sqQph9y5yBdSLPRyGjmOTFncgi5IUDBNQSa/tBWU9Qu2fzVQeVW9 mU2qZD5d1tYPK3USDraZpxksJCns5Hi/AjWSZVRW2rABQmGdTxlEowagwG4SwZzq bCYCkOx6dNv5a/kOCAXi8qpugLV3xstmUUqYX02nx9mWVrzFvpnsEuGWUFD5BrB8 6ySy8+IfDX3ttjAaajl868dt/DRSHNEWSB/qh8a6KD/qUN/O70GnLXW54axyB6cy 45GondC3xFbqWQ2jgKxHKLklkuPQKiaEvl8eXNolAAHFrmIKY/CO29WVN5ez4rHO 08U11GA2qgALuTy8OvUp61QCGQ== -----END CERTIFICATE-----Generated at Thu May 28 19:20:43 2026 by rpki-client