$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft File: pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft (raw, json) Hash identifier: Q4ZgjdRAOvHrHMvfj7ryMm/zni51O9R8iM084zWXCrw= Subject key identifier: A2:14:74:42:69:B1:9E:2F:33:D7:C9:83:10:E6:65:AA:5D:D8:5D:1F Authority key identifier: A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 Certificate issuer: /CN=A91D6552/serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Certificate serial: 353C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft Manifest number: 353C Signing time: Wed 20 May 2026 14:55:01 +0000 Manifest this update: Wed 20 May 2026 14:55:00 +0000 Manifest next update: Wed 27 May 2026 14:55:00 +0000 Files and hashes: 1: pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl (hash: dKmsrKL8okEmL3/mQUzSCu0Ykp8bMA67q4PuIxGdbqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 14:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13628 (0x353c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6552, serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Validity Not Before: May 20 14:55:00 2026 GMT Not After : May 27 14:55:00 2026 GMT Subject: CN=6a0dcb45-822c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:57:e4:71:1f:00:34:c3:c7:72:15:4b:64:ff: 19:42:9b:69:7e:f2:b6:2f:18:a9:ab:a8:1d:96:36: 3f:d7:ef:3a:22:14:a7:f9:03:dd:6a:ce:aa:a1:37: 98:81:71:d4:a1:b7:c1:f3:cf:ee:db:33:d9:ff:d6: f7:7b:8c:d4:e6:c4:17:b4:28:f6:ba:c3:09:4c:a2: 85:53:ce:c0:8c:30:d9:15:92:41:2c:0c:01:2a:15: 1a:1f:1b:57:4c:70:41:9f:cd:76:bf:a6:90:4e:49: ef:ff:02:a0:6e:85:a1:d3:54:73:8d:62:86:e8:8e: 62:e5:bc:b0:f9:1a:f0:f0:e3:e7:db:33:8b:7b:18: 69:78:f1:32:24:5e:9e:99:bb:20:fc:b5:5a:8c:37: 6a:d0:eb:65:f7:6d:a1:23:99:fb:96:17:00:ed:27: a5:c5:e4:de:df:de:31:61:89:ff:d1:c4:18:94:a1: 90:f6:d5:46:d5:4f:43:3b:d4:e5:9c:72:ab:03:7a: b5:06:c6:bc:4d:ab:06:6a:f4:ec:94:9a:8d:96:ec: df:16:5e:61:78:7b:4a:95:79:86:c8:77:f6:0a:26: 01:83:19:f9:27:e0:6e:37:cf:c7:72:6c:22:92:e1: ca:1a:02:0c:2a:1f:ef:6b:60:12:93:96:c9:95:94: 20:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:14:74:42:69:B1:9E:2F:33:D7:C9:83:10:E6:65:AA:5D:D8:5D:1F X509v3 Authority Key Identifier: keyid:A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:58:67:fb:c8:2f:b9:2c:ea:37:c3:9c:31:5c:ec:d0:8d:3c: a6:7c:cc:4b:f1:b8:a1:b8:40:47:83:1b:bc:1e:15:ee:00:95: 74:15:76:85:25:c5:0d:61:9f:57:08:c1:4a:ca:89:38:16:b2: e5:77:b8:1a:78:73:3b:58:b7:85:75:eb:f2:ff:2b:ec:4d:67: f3:c4:d5:1a:92:a2:b0:82:41:7f:4b:31:0c:7b:88:28:9e:dc: d0:74:21:9c:13:70:ce:01:39:ff:eb:30:4b:1d:13:87:40:fa: 29:a4:5a:a8:6a:94:ad:49:36:db:35:2d:8e:d9:3f:5b:65:12: ce:5b:7b:c9:22:c7:3c:f5:7d:53:a9:4b:8b:1f:97:9b:e4:26: 8c:54:b2:42:0a:3d:68:09:64:18:fc:58:10:73:ee:b0:57:f3: 5d:7d:bf:bd:19:f1:c3:58:59:32:ea:3f:57:49:72:85:68:c0: 1a:3a:e5:4c:b5:aa:43:ee:bc:e8:45:af:10:eb:6d:f8:10:5e: fe:49:7b:65:23:3e:b1:0e:8f:15:3d:13:9f:ad:bd:8b:35:f5: 90:8c:6c:b8:e6:23:99:d9:1e:a7:0d:54:56:0f:0d:25:07:81: b0:f6:05:39:de:bd:ac:15:8c:dd:7e:18:43:59:d3:86:cf:2b: 9f:c0:70:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1NTIxMTAvBgNVBAUTKEE1NkUwNDMzQUVCOEIwRkNDNTlFRkU5MUYwRUFGNTA2 MUI3MEQxMTgwHhcNMjYwNTIwMTQ1NTAwWhcNMjYwNTI3MTQ1NTAwWjAYMRYwFAYD VQQDEw02YTBkY2I0NS04MjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2lfkcR8ANMPHchVLZP8ZQptpfvK2Lxipq6gdljY/1+86IhSn+QPdas6qoTeY gXHUobfB88/u2zPZ/9b3e4zU5sQXtCj2usMJTKKFU87AjDDZFZJBLAwBKhUaHxtX THBBn812v6aQTknv/wKgboWh01RzjWKG6I5i5byw+Rrw8OPn2zOLexhpePEyJF6e mbsg/LVajDdq0Otl922hI5n7lhcA7SelxeTe394xYYn/0cQYlKGQ9tVG1U9DO9Tl nHKrA3q1Bsa8TasGavTslJqNluzfFl5heHtKlXmGyHf2CiYBgxn5J+BuN8/Hcmwi kuHKGgIMKh/va2ASk5bJlZQghwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKIUdEJp sZ4vM9fJgxDmZapd2F0fMB8GA1UdIwQYMBaAFKVuBDOuuLD8xZ7+kfDq9QYbcNEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjU1Mi84ODdENzUxMjFE OTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQekZudjZSOE9yMUJodHcw UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXNEVNNjY0c1B6Rm52NlI4T3IxQmh0dzBSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjU1Mi84ODdENzUxMjFEOTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQ ekZudjZSOE9yMUJodHcwUmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQlhn+8gvuSzqN8OcMVzs0I08pnzMS/G4obhAR4MbvB4V7gCVdBV2hSXFDWGf VwjBSsqJOBay5Xe4GnhzO1i3hXXr8v8r7E1n88TVGpKisIJBf0sxDHuIKJ7c0HQh nBNwzgE5/+swSx0Th0D6KaRaqGqUrUk22zUtjtk/W2USzlt7ySLHPPV9U6lLix+X m+QmjFSyQgo9aAlkGPxYEHPusFfzXX2/vRnxw1hZMuo/V0lyhWjAGjrlTLWqQ+68 6EWvEOtt+BBe/kl7ZSM+sQ6PFT0Tn629izX1kIxsuOYjmdkepw1UVg8NJQeBsPYF Od69rBWM3X4YQ1nThs8rn8BwzQ== -----END CERTIFICATE-----Generated at Thu May 21 10:27:40 2026 by rpki-client