$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft File: tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft (raw, json) Hash identifier: FnBpcMSHXk92YKdPmv/WeD+EWiOACDvc9gEJLSqzQ5k= Subject key identifier: 0F:84:DF:12:69:76:2C:D8:E4:BE:F8:6F:0B:EA:00:E2:B7:42:C2:7D Authority key identifier: B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 Certificate issuer: /CN=A91DB551/serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Certificate serial: 0DA6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft Manifest number: 0DA3 Signing time: Wed 20 May 2026 17:56:37 +0000 Manifest this update: Wed 20 May 2026 17:56:37 +0000 Manifest next update: Wed 27 May 2026 17:56:37 +0000 Files and hashes: 1: tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl (hash: iNuW+EpsV1ciGlAHFQoZGwbC+KIqZfcs1Z+tEafKYmg=) 2: 3F6AC59EB27A11F095B9C63DC4F9AE02.roa (hash: DNZsoV57+rQGIAJrL+CwAovCV4qI5UyFXg2qYhLRO4o=) 3: 97EA257424D611F1948C90B8AB833773.roa (hash: x7ThlrbpRobxp6D+qx/sidRoN6DyIJk6KWUPxoCM1O0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3494 (0xda6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB551, serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Validity Not Before: May 20 17:56:37 2026 GMT Not After : May 27 17:56:37 2026 GMT Subject: CN=6a0df5d5-af30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:06:cb:d0:8b:05:43:ce:51:43:dc:d3:8c:0e: 18:28:b7:d7:0e:ca:fe:84:25:10:e6:03:79:f6:9c: af:1e:57:d8:45:e5:3a:40:33:d0:60:8e:2c:24:73: cd:ab:15:48:dc:87:56:ca:2f:07:65:f9:ea:36:f3: 30:9d:43:30:6f:0b:c2:c8:f7:d4:a8:7d:ef:5b:69: 47:f9:30:f1:4f:98:ee:e3:ce:7e:02:68:b0:79:f3: b1:43:71:a4:01:de:48:eb:26:80:95:41:af:17:54: ce:12:96:65:fe:d4:22:0f:be:fc:ba:27:c9:8c:7c: 52:1a:23:99:83:fa:da:c0:c6:44:1a:b3:47:a7:d0: 86:db:fe:c6:89:67:65:9f:63:98:97:08:df:f0:7f: bc:59:9d:06:6c:bf:90:0c:f7:38:c3:83:00:52:ac: 89:c5:90:8a:11:fc:c0:5e:e8:bb:2c:57:fd:ba:08: 8f:9f:e1:08:82:df:03:20:25:d2:73:b1:17:f0:24: f8:16:70:69:e3:ff:59:6d:76:73:eb:82:f8:60:1d: 48:8e:59:73:7e:56:36:41:03:a7:e9:4e:ea:e1:2d: 72:6c:66:b7:07:cc:0d:2f:5d:d4:d2:71:44:cd:53: 10:fe:af:ec:a0:54:ea:eb:bc:2e:1e:53:0a:c1:ff: 29:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:84:DF:12:69:76:2C:D8:E4:BE:F8:6F:0B:EA:00:E2:B7:42:C2:7D X509v3 Authority Key Identifier: keyid:B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:cf:50:0c:24:b5:ac:e5:60:26:ef:b2:25:b8:5d:10:15:b1: d7:31:32:7d:10:fc:d6:56:6b:02:8f:1f:c9:d7:06:de:e2:6d: 62:8a:07:51:52:d2:b2:1c:de:02:c5:5f:46:56:11:d9:bf:e4: 35:25:6b:6d:de:43:86:53:ad:23:6e:fb:41:6a:d8:60:2f:c7: 96:a0:ff:92:3a:1d:b4:71:be:ca:1c:10:b6:d1:61:91:7f:55: 99:50:28:23:8a:8c:af:e7:7e:17:42:b3:0d:aa:9c:85:30:2e: 60:3a:22:2b:2c:83:2f:ea:db:5c:f3:95:10:2b:73:53:6f:07: df:0c:b4:df:00:d3:2d:51:5a:80:56:be:2c:bc:99:22:69:39: 6a:85:e2:d3:23:97:15:69:47:3c:66:83:77:78:75:bc:ae:16: 5d:d0:fc:63:34:79:56:bf:09:52:35:b6:6d:cc:10:c3:55:d0: b1:d0:b6:1f:da:b2:ea:3d:d4:b4:97:a3:d2:95:14:92:8a:2d: 01:5f:5d:e1:f0:ec:cc:b2:ea:46:61:cd:06:23:50:d0:11:ce: 73:4e:1b:cb:57:9f:fd:04:c8:4b:a8:ec:dd:7e:86:36:6c:94: 12:94:92:9e:1e:c8:57:d8:07:5d:ad:c9:a1:10:7e:e4:3a:1a: 8b:6d:78:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI1NTExMTAvBgNVBAUTKEI2Mzg5NzkxQkQ1NDA5NkFEMDA5OTlBNzU5MUZCMjA0 MTg5QUYxOTgwHhcNMjYwNTIwMTc1NjM3WhcNMjYwNTI3MTc1NjM3WjAYMRYwFAYD VQQDEw02YTBkZjVkNS1hZjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnAbL0IsFQ85RQ9zTjA4YKLfXDsr+hCUQ5gN59pyvHlfYReU6QDPQYI4sJHPN qxVI3IdWyi8HZfnqNvMwnUMwbwvCyPfUqH3vW2lH+TDxT5ju485+AmiwefOxQ3Gk Ad5I6yaAlUGvF1TOEpZl/tQiD778uifJjHxSGiOZg/rawMZEGrNHp9CG2/7GiWdl n2OYlwjf8H+8WZ0GbL+QDPc4w4MAUqyJxZCKEfzAXui7LFf9ugiPn+EIgt8DICXS c7EX8CT4FnBp4/9ZbXZz64L4YB1IjllzflY2QQOn6U7q4S1ybGa3B8wNL13U0nFE zVMQ/q/soFTq67wuHlMKwf8p4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA+E3xJp dizY5L74bwvqAOK3QsJ9MB8GA1UdIwQYMBaAFLY4l5G9VAlq0AmZp1kfsgQYmvGY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU1MS9EQkY2RTFENEUy RTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNXclFDWm1uV1IteUJCaWE4 WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqaVhrYjFVQ1dyUUNabW5XUi15QkJpYThaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjU1MS9EQkY2RTFENEUyRTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNX clFDWm1uV1IteUJCaWE4WmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAis9QDCS1rOVgJu+yJbhdEBWx1zEyfRD81lZrAo8fydcG3uJtYooHUVLSshze AsVfRlYR2b/kNSVrbd5DhlOtI277QWrYYC/HlqD/kjodtHG+yhwQttFhkX9VmVAo I4qMr+d+F0KzDaqchTAuYDoiKyyDL+rbXPOVECtzU28H3wy03wDTLVFagFa+LLyZ Imk5aoXi0yOXFWlHPGaDd3h1vK4WXdD8YzR5Vr8JUjW2bcwQw1XQsdC2H9qy6j3U tJej0pUUkootAV9d4fDszLLqRmHNBiNQ0BHOc04by1ef/QTIS6js3X6GNmyUEpSS nh7IV9gHXa3JoRB+5Doai214vg== -----END CERTIFICATE-----Generated at Thu May 21 11:15:37 2026 by rpki-client