$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft File: 0Eyx4nFXho90821weRXZ1_CXyQg.mft (raw, json) Hash identifier: 5tXn5qZUDXR4kchJAAbHyQFix6Qu1eHTPxvCpDNLIPU= Subject key identifier: B6:B8:8A:7A:3F:87:D8:E8:3E:1E:E6:2C:B2:F7:1C:68:26:A1:F5:16 Authority key identifier: D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08 Certificate issuer: /CN=A91D5AA8/serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908 Certificate serial: 0289 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft Manifest number: 027E Signing time: Thu 21 May 2026 02:02:53 +0000 Manifest this update: Thu 21 May 2026 02:02:53 +0000 Manifest next update: Thu 28 May 2026 02:02:53 +0000 Files and hashes: 1: 0Eyx4nFXho90821weRXZ1_CXyQg.crl (hash: e2EsBC9FVVCc1RKkcowpmEfDl6aYDlfwpKX7NmSPbkE=) 2: 994AC0903E1E11EFB5BBDD3BC4F9AE02.roa (hash: kbZVkD6jRKFqNBUgIZMNtq7Y+KDfzPzcA1djWWgpFT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 649 (0x289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5AA8, serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908 Validity Not Before: May 21 02:02:53 2026 GMT Not After : May 28 02:02:53 2026 GMT Subject: CN=6a0e67cd-d012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5f:49:1f:e9:7c:7c:38:dd:42:78:b1:ce:6d: 47:a5:93:00:29:93:28:e6:f5:b3:83:f6:e3:29:6e: 20:b8:af:c4:51:4e:ac:59:1d:1e:8e:7d:55:7d:67: 73:ff:7f:76:b5:4d:e1:ee:fd:41:34:28:1a:b0:88: 8f:31:59:3a:0e:64:cc:d7:3e:20:f1:13:6b:5a:49: 96:4a:95:d2:4d:2a:ef:2f:54:44:bb:ad:22:dc:8d: a8:18:48:31:8e:45:df:60:6a:a9:cd:6a:1e:f2:f7: 56:58:8b:e8:3e:ca:a4:74:16:7b:be:de:a9:70:98: ff:75:d8:d2:ca:63:60:82:8a:da:f5:3d:0e:8c:ef: ff:c3:84:1d:2f:b4:6f:2b:19:70:1e:60:24:78:08: 74:5b:3d:0a:51:65:f9:e3:0a:1e:5d:a1:db:57:e0: 04:73:ec:34:8e:bc:06:00:e7:9e:24:e8:3c:08:f9: 75:62:ca:77:83:d3:6b:f4:aa:9a:fa:90:f8:71:af: 4c:6a:fc:d3:8c:1c:18:d9:94:96:06:6f:22:86:56: 9d:51:e5:ca:7e:e4:e4:41:6e:91:fc:61:72:d1:23: 8a:0a:ef:2f:5d:c1:61:dd:fc:de:ce:e3:66:d5:7c: e6:4b:d7:0b:04:a1:80:10:8d:98:cb:65:1e:44:1a: c2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B8:8A:7A:3F:87:D8:E8:3E:1E:E6:2C:B2:F7:1C:68:26:A1:F5:16 X509v3 Authority Key Identifier: keyid:D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:f9:64:9f:53:54:a3:34:84:6b:79:9c:ed:13:31:d1:cb:0e: 82:11:8a:70:94:0d:3c:f7:ba:ad:dd:77:78:d3:4f:97:c3:c2: 52:40:82:14:1a:55:ad:1c:e6:a8:f1:a9:6f:9c:d9:80:d8:07: 39:63:80:dc:c3:d7:7b:b6:d7:24:61:9e:5f:d3:5f:b3:fd:d7: db:50:81:b2:f9:ad:cb:98:1d:60:be:1a:2e:e6:86:01:93:9d: 08:26:a7:30:c1:cd:c3:a0:fd:35:ec:c4:f9:57:5d:5a:98:32: ac:78:b5:bc:39:f4:e6:30:f4:23:ec:b6:90:7e:04:8e:ce:96: 2b:39:2b:06:a4:ca:b6:a9:4b:e3:93:2b:fc:2a:3e:2d:87:1d: 1a:5a:78:c4:30:e6:c3:ab:43:de:b9:cd:10:d4:5d:7f:80:a9: 74:69:cc:b2:60:8c:a5:2e:71:9c:50:71:13:a3:73:65:de:89: c5:e8:6b:c7:29:57:0c:a2:52:e9:43:fe:b6:95:0b:0d:b4:89: 81:f3:7d:40:b2:2b:36:c1:c5:61:d7:d6:ff:b9:71:79:8f:95: a1:89:b9:fe:c4:8c:67:03:07:7f:06:40:68:7c:6c:18:a4:f0: d6:75:cf:0f:3d:81:e2:8a:7a:b6:57:30:f5:37:22:93:3f:8a: 39:59:a2:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVBQTgxMTAvBgNVBAUTKEQwNENCMUUyNzE1Nzg2OEY3NEYzNkQ3MDc5MTVEOUQ3 RjA5N0M5MDgwHhcNMjYwNTIxMDIwMjUzWhcNMjYwNTI4MDIwMjUzWjAYMRYwFAYD VQQDEw02YTBlNjdjZC1kMDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk19JH+l8fDjdQnixzm1HpZMAKZMo5vWzg/bjKW4guK/EUU6sWR0ejn1VfWdz /392tU3h7v1BNCgasIiPMVk6DmTM1z4g8RNrWkmWSpXSTSrvL1REu60i3I2oGEgx jkXfYGqpzWoe8vdWWIvoPsqkdBZ7vt6pcJj/ddjSymNggora9T0OjO//w4QdL7Rv KxlwHmAkeAh0Wz0KUWX54woeXaHbV+AEc+w0jrwGAOeeJOg8CPl1Ysp3g9Nr9Kqa +pD4ca9MavzTjBwY2ZSWBm8ihladUeXKfuTkQW6R/GFy0SOKCu8vXcFh3fzezuNm 1XzmS9cLBKGAEI2Yy2UeRBrCnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLa4ino/ h9joPh7mLLL3HGgmofUWMB8GA1UdIwQYMBaAFNBMseJxV4aPdPNtcHkV2dfwl8kI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUFBOC8yNzg1OTkxMjkx RUYxMUVEQjA2QkFEMUZDNEY5QUUwMi8wRXl4NG5GWGhvOTA4MjF3ZVJYWjFfQ1h5 UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBFeXg0bkZYaG85MDgyMXdlUlhaMV9DWHlRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUFBOC8yNzg1OTkxMjkxRUYxMUVEQjA2QkFEMUZDNEY5QUUwMi8wRXl4NG5GWGhv OTA4MjF3ZVJYWjFfQ1h5UWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKflkn1NUozSEa3mc7RMx0csOghGKcJQNPPe6rd13eNNPl8PCUkCCFBpVrRzm qPGpb5zZgNgHOWOA3MPXe7bXJGGeX9Nfs/3X21CBsvmty5gdYL4aLuaGAZOdCCan MMHNw6D9NezE+VddWpgyrHi1vDn05jD0I+y2kH4Ejs6WKzkrBqTKtqlL45Mr/Co+ LYcdGlp4xDDmw6tD3rnNENRdf4CpdGnMsmCMpS5xnFBxE6NzZd6JxehrxylXDKJS 6UP+tpULDbSJgfN9QLIrNsHFYdfW/7lxeY+VoYm5/sSMZwMHfwZAaHxsGKTw1nXP Dz2B4op6tlcw9Tcikz+KOVmi7A== -----END CERTIFICATE-----Generated at Thu May 21 09:38:56 2026 by rpki-client