$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft File: -a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft (raw, json) Hash identifier: hHEeu1quKUL+f4RS7cv9x7CQc13iagVb+fC4llegymY= Subject key identifier: 2E:CA:45:C2:0E:2A:37:CA:C6:BF:D8:69:CA:08:C4:4E:04:53:05:60 Authority key identifier: F9:AE:5E:2A:9D:C8:0B:51:EA:A7:57:72:78:C3:DE:06:1A:80:AB:63 Certificate issuer: /CN=A91DBAA3/serialNumber=F9AE5E2A9DC80B51EAA7577278C3DE061A80AB63 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft Manifest number: 56 Signing time: Fri 15 May 2026 08:23:01 +0000 Manifest this update: Fri 15 May 2026 08:23:01 +0000 Manifest next update: Fri 22 May 2026 08:23:01 +0000 Files and hashes: 1: -a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl (hash: aVVK43SCMaP1ME4RRfu3G4Ant0Z0AnMGcrxvFHdrAqU=) 2: D0B6868A1D1B11F1ACF733B0103D8C67.roa (hash: jWdMxZZFTY4CsUZBn1lrTkWtYy/fDMYlI5r04PJk980=) 3: CF0F37FA1D1B11F1ACF733B0103D8C67.roa (hash: H5fMs/4SHZ+R2ioXCxpygGkCRluzXa/ZhyiVh3gWuO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 May 2026 08:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAA3, serialNumber=F9AE5E2A9DC80B51EAA7577278C3DE061A80AB63 Validity Not Before: May 15 08:23:01 2026 GMT Not After : May 22 08:23:01 2026 GMT Subject: CN=6a06d7e5-6396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b3:1c:38:62:61:87:5b:d4:22:d6:23:4f:dc: e4:c4:01:3c:f0:ae:64:48:05:3c:02:c5:57:99:8d: 8b:4d:df:71:67:be:fd:a8:8e:85:a6:71:a6:fc:31: de:20:7b:8d:2f:8d:13:09:55:77:9b:b9:87:1b:40: 5a:c7:9b:b9:2c:e2:32:dc:3e:81:13:04:f4:d6:17: 44:dc:99:b0:83:56:42:d2:a5:60:bf:7d:1b:39:2c: ee:46:61:0c:54:1c:82:18:ee:16:94:37:5d:cf:e0: fd:bc:82:da:4c:d4:94:c4:d2:df:24:bb:26:20:60: 58:78:d1:72:91:7c:f8:5c:64:bc:e2:52:6f:73:2d: 94:98:33:8c:06:24:7c:a3:56:61:15:8d:7b:68:a4: 90:e0:f9:64:d4:4e:b0:26:52:6a:79:23:cd:37:15: 1c:ef:39:bc:5b:28:e4:3f:9c:66:c3:c6:8b:47:c5: 2b:e8:f3:50:b8:82:9d:e3:c9:d7:2f:f8:b3:fe:f0: f8:a0:3f:c6:e4:4b:a9:ce:29:8f:35:ba:71:b5:23: b7:7c:cb:c6:5b:b1:cd:a5:36:a6:79:ab:47:01:7a: 87:33:45:3f:1e:74:d5:c9:21:2e:3d:ce:ce:06:3a: f4:f0:06:36:ed:c2:f8:bd:41:a5:86:d9:c7:00:70: ae:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CA:45:C2:0E:2A:37:CA:C6:BF:D8:69:CA:08:C4:4E:04:53:05:60 X509v3 Authority Key Identifier: keyid:F9:AE:5E:2A:9D:C8:0B:51:EA:A7:57:72:78:C3:DE:06:1A:80:AB:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:2e:23:73:62:85:79:eb:28:f6:ae:3e:13:4c:51:9d:f0:66: c3:c8:a1:80:6b:c0:02:74:65:67:5a:7c:36:96:c3:0d:53:88: 78:7d:82:95:6d:36:ea:1b:eb:c5:23:84:9d:de:de:9e:aa:98: 57:a2:42:a1:e7:27:7c:40:67:9c:de:21:ba:d2:d9:f6:75:ae: 35:5b:b6:73:2a:39:d7:81:77:e0:70:66:f8:90:9f:b2:56:fe: ce:64:1f:63:73:8c:03:32:f6:dc:3f:91:40:aa:89:8a:1f:ff: a2:b0:b8:98:4a:e3:14:10:6a:ce:a0:81:5e:9e:3a:35:64:0e: ea:8a:d6:39:7e:63:09:37:f0:0f:2a:5b:20:f0:8f:7c:7e:62: 7f:46:ff:86:d0:75:79:ba:4a:38:96:f2:a2:c7:ea:0f:a8:9b: 9d:ef:83:b5:ba:fa:68:cf:9c:c6:64:bd:c1:4a:df:6a:04:85: 21:e7:b9:4f:33:de:a5:3f:e9:0f:c0:bb:59:f1:b3:ee:dc:6f: df:23:b7:bc:c8:d3:a5:b6:b5:e3:24:3e:1d:0e:ce:f0:01:da: f9:f1:d1:fb:57:ce:04:e0:be:5d:da:4e:74:9d:be:d8:ab:2d: 56:88:44:96:c6:72:b0:ee:dc:10:ef:23:31:e5:ab:e4:11:e3: b5:64:25:a6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QkFBMzExMC8GA1UEBRMoRjlBRTVFMkE5REM4MEI1MUVBQTc1NzcyNzhDM0RFMDYx QTgwQUI2MzAeFw0yNjA1MTUwODIzMDFaFw0yNjA1MjIwODIzMDFaMBgxFjAUBgNV BAMTDTZhMDZkN2U1LTYzOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+sxw4YmGHW9Qi1iNP3OTEATzwrmRIBTwCxVeZjYtN33Fnvv2ojoWmcab8Md4g e40vjRMJVXebuYcbQFrHm7ks4jLcPoETBPTWF0TcmbCDVkLSpWC/fRs5LO5GYQxU HIIY7haUN13P4P28gtpM1JTE0t8kuyYgYFh40XKRfPhcZLziUm9zLZSYM4wGJHyj VmEVjXtopJDg+WTUTrAmUmp5I803FRzvObxbKOQ/nGbDxotHxSvo81C4gp3jydcv +LP+8PigP8bkS6nOKY81unG1I7d8y8Zbsc2lNqZ5q0cBeoczRT8edNXJIS49zs4G OvTwBjbtwvi9QaWG2ccAcK4zAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULspFwg4q N8rGv9hpygjETgRTBWAwHwYDVR0jBBgwFoAU+a5eKp3IC1Hqp1dyeMPeBhqAq2Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCQUEzLzFDMTc5MTNBRDkw RDExRjA4NjgwRDVGMTdDRDM2NDFELy1hNWVLcDNJQzFIcXAxZHllTVBlQmhxQXEy TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLWE1ZUtwM0lDMUhxcDFkeWVNUGVCaHFBcTJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC QUEzLzFDMTc5MTNBRDkwRDExRjA4NjgwRDVGMTdDRDM2NDFELy1hNWVLcDNJQzFI cXAxZHllTVBlQmhxQXEyTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDbLiNzYoV56yj2rj4TTFGd8GbDyKGAa8ACdGVnWnw2lsMNU4h4fYKVbTbqG+vF I4Sd3t6eqphXokKh5yd8QGec3iG60tn2da41W7ZzKjnXgXfgcGb4kJ+yVv7OZB9j c4wDMvbcP5FAqomKH/+isLiYSuMUEGrOoIFenjo1ZA7qitY5fmMJN/APKlsg8I98 fmJ/Rv+G0HV5uko4lvKix+oPqJud74O1uvpoz5zGZL3BSt9qBIUh57lPM96lP+kP wLtZ8bPu3G/fI7e8yNOltrXjJD4dDs7wAdr58dH7V84E4L5d2k50nb7Yqy1WiESW xnKw7twQ7yMx5avkEeO1ZCWm -----END CERTIFICATE-----Generated at Sun May 17 04:37:15 2026 by rpki-client