$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft File: CROi4pwkcA4hQx4EweNJf9X5qAA.mft (raw, json) Hash identifier: JrqW27qIWB0+G9oMLtqauS/GHiT7JA3uwsNsmBUr8rU= Subject key identifier: 4A:25:A0:E1:24:A2:70:02:E0:E5:D1:37:DE:10:67:F4:1E:01:8E:03 Authority key identifier: 09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 Certificate issuer: /CN=A91D65C2/serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Certificate serial: 01CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft Manifest number: 01BB Signing time: Tue 05 May 2026 03:55:46 +0000 Manifest this update: Tue 05 May 2026 03:55:46 +0000 Manifest next update: Tue 12 May 2026 03:55:46 +0000 Files and hashes: 1: CROi4pwkcA4hQx4EweNJf9X5qAA.crl (hash: 4+taHN9SlOXCI5z/NUY/Tc3baaHkw4j4n4RDuFQu3ek=) 2: AA134FD6BD1411EE95F45624C4F9AE02.roa (hash: PppVk2NI0XPWKna+ZtR6ofXLD7gkTcUleObVM6K34rE=) 3: C3A53484B06011EEA1D18B7FC4F9AE02.roa (hash: mmPmljEgq/UT3GHcfHd5W8JqbEjou9e+RRjhVJG9hpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 22:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 460 (0x1cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D65C2, serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Validity Not Before: May 5 03:55:46 2026 GMT Not After : May 12 03:55:46 2026 GMT Subject: CN=69f96a42-5dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d6:d3:d7:19:29:7d:7b:4f:a4:b2:ec:37:dd: a8:71:8e:90:87:01:72:7b:93:57:c3:fa:8f:c0:30: c5:de:de:b0:e5:6e:3b:b0:82:26:cd:87:d0:1e:a8: 25:13:d6:ee:0d:a3:50:37:0c:ff:c3:fc:30:c3:66: 84:ac:bc:50:e9:18:01:8d:fb:f3:e1:11:e0:83:f1: 8a:cf:70:82:74:b1:3b:6b:b9:69:eb:38:a4:d9:3e: 19:a0:f3:51:e7:39:c5:73:6b:1f:52:43:5a:56:dd: 3e:a3:38:e0:73:18:c6:b1:cb:11:90:65:43:dd:09: f9:66:3e:73:4f:b1:88:b2:d2:9e:b5:be:c4:2a:39: 4f:62:c4:fc:6b:47:fa:1b:fa:91:db:0d:83:ed:84: dd:63:35:a7:5f:6e:2d:57:bd:b9:69:71:74:a3:b5: 92:8f:c5:a8:e2:32:81:c7:da:72:9d:66:f5:80:3e: 9d:12:22:e7:f1:ad:e2:c6:f4:48:7b:10:06:81:34: 87:83:39:8a:7a:b7:25:db:0d:4c:07:84:28:70:bb: bd:05:54:56:36:a8:66:bd:30:25:c2:0b:01:e9:98: e9:30:5e:72:35:2d:94:d4:73:15:d3:ab:c6:c0:6e: ea:77:2e:14:93:55:ca:eb:35:b1:e4:6f:c3:bf:7c: 26:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:25:A0:E1:24:A2:70:02:E0:E5:D1:37:DE:10:67:F4:1E:01:8E:03 X509v3 Authority Key Identifier: keyid:09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:b4:61:a9:45:15:d5:eb:cb:d6:19:84:30:a5:33:f4:96:de: 93:0d:78:91:6b:ea:2f:f2:cd:dc:3d:03:6a:cf:a9:ef:76:d1: 0c:07:e3:07:09:9f:e5:5e:28:ba:16:88:73:34:42:88:52:a1: cf:e2:04:08:25:99:6f:89:d4:f2:f4:a7:46:29:b0:7e:21:fd: 68:63:dd:06:d2:76:14:43:b5:1b:59:ae:52:8c:34:17:cc:ac: f0:21:1c:a4:0b:43:ab:08:94:f9:0c:d1:f2:bd:74:9a:3b:6f: 0b:d9:6e:09:79:0c:64:63:95:fb:4b:88:87:b1:65:20:e0:fb: 6a:5d:dd:e7:13:a2:47:6c:18:b4:81:64:52:b3:41:2e:91:da: e4:4a:72:6e:95:27:6e:38:23:09:95:86:95:ab:4c:bd:aa:fc: e5:0c:4a:2e:89:a1:72:33:0a:7d:0b:ef:4a:cd:f8:40:a0:a1: 31:c8:51:09:d7:41:d1:9d:82:7d:4f:76:5d:8f:ab:2b:03:ca: f4:4d:94:f9:49:48:99:d8:27:8c:c5:9e:c6:56:da:fe:4f:3f: 21:d5:ab:7b:d8:d9:dd:0c:7a:09:51:95:2c:99:4a:b3:b2:a4: 7f:2e:c8:93:bf:fa:66:4d:e5:9d:c6:5a:13:6a:38:d8:48:01: 28:1a:ae:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1QzIxMTAvBgNVBAUTKDA5MTNBMkUyOUMyNDcwMEUyMTQzMUUwNEMxRTM0OTdG RDVGOUE4MDAwHhcNMjYwNTA1MDM1NTQ2WhcNMjYwNTEyMDM1NTQ2WjAYMRYwFAYD VQQDEw02OWY5NmE0Mi01ZGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9bT1xkpfXtPpLLsN92ocY6QhwFye5NXw/qPwDDF3t6w5W47sIImzYfQHqgl E9buDaNQNwz/w/www2aErLxQ6RgBjfvz4RHgg/GKz3CCdLE7a7lp6zik2T4ZoPNR 5znFc2sfUkNaVt0+ozjgcxjGscsRkGVD3Qn5Zj5zT7GIstKetb7EKjlPYsT8a0f6 G/qR2w2D7YTdYzWnX24tV725aXF0o7WSj8Wo4jKBx9pynWb1gD6dEiLn8a3ixvRI exAGgTSHgzmKercl2w1MB4QocLu9BVRWNqhmvTAlwgsB6ZjpMF5yNS2U1HMV06vG wG7qdy4Uk1XK6zWx5G/Dv3wmcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEoloOEk onAC4OXRN94QZ/QeAY4DMB8GA1UdIwQYMBaAFAkTouKcJHAOIUMeBMHjSX/V+agA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjVDMi83NkVFNzk1Q0Iw NjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NBNGhReDRFd2VOSmY5WDVx QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NST2k0cHdrY0E0aFF4NEV3ZU5KZjlYNXFBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjVDMi83NkVFNzk1Q0IwNjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NB NGhReDRFd2VOSmY5WDVxQUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkbRhqUUV1evL1hmEMKUz9Jbekw14kWvqL/LN3D0Das+p73bRDAfjBwmf5V4o uhaIczRCiFKhz+IECCWZb4nU8vSnRimwfiH9aGPdBtJ2FEO1G1muUow0F8ys8CEc pAtDqwiU+QzR8r10mjtvC9luCXkMZGOV+0uIh7FlIOD7al3d5xOiR2wYtIFkUrNB LpHa5EpybpUnbjgjCZWGlatMvar85QxKLomhcjMKfQvvSs34QKChMchRCddB0Z2C fU92XY+rKwPK9E2U+UlImdgnjMWexlba/k8/IdWre9jZ3Qx6CVGVLJlKs7Kkfy7I k7/6Zk3lncZaE2o42EgBKBqunw== -----END CERTIFICATE-----Generated at Wed May 6 06:30:13 2026 by rpki-client