$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft File: rg5L7FaP5v7kkvcuTTrLko2cHk8.mft (raw, json) Hash identifier: /IyEI93/4ATd7vlOtepZKgWgdreqrY5vBgpzxirB/58= Subject key identifier: 11:46:FD:C5:C1:24:4D:05:D4:09:C9:04:E9:96:CC:C9:D5:52:D7:2B Authority key identifier: AE:0E:4B:EC:56:8F:E6:FE:E4:92:F7:2E:4D:3A:CB:92:8D:9C:1E:4F Certificate issuer: /CN=A91DBF0C/serialNumber=AE0E4BEC568FE6FEE492F72E4D3ACB928D9C1E4F Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft Manifest number: 0136 Signing time: Mon 01 Jun 2026 06:18:02 +0000 Manifest this update: Mon 01 Jun 2026 06:18:01 +0000 Manifest next update: Mon 08 Jun 2026 06:18:01 +0000 Files and hashes: 1: rg5L7FaP5v7kkvcuTTrLko2cHk8.crl (hash: Mxovt1HpesHdldOmIGSx1iliztkSJ+aSiND1oIdJrs0=) 2: 9E4987668C7F11EFB4290976C4F9AE02.roa (hash: l5WwokX0ZI8Y9CP6TgDkOcP9plGfuJ8GmKuV1BnPJZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.crl rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 06:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBF0C, serialNumber=AE0E4BEC568FE6FEE492F72E4D3ACB928D9C1E4F Validity Not Before: Jun 1 06:18:01 2026 GMT Not After : Jun 8 06:18:01 2026 GMT Subject: CN=6a1d241a-4bf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7e:d6:56:d5:a9:cc:cb:83:39:bb:a5:ff:d0: ad:f4:84:26:9c:b7:8a:d7:49:31:91:a9:33:fc:42: 4a:be:b8:1a:df:da:b3:ba:ba:b3:d8:63:50:3d:3c: f5:34:b0:c8:0a:2c:e9:c0:72:f9:15:36:98:a2:ce: 95:eb:e0:0a:f6:39:b0:7b:14:12:f0:c3:58:f6:c0: e1:ec:32:2b:10:d4:c0:cd:2c:b4:1e:25:c2:25:2a: 19:70:f4:1a:06:67:3d:48:0a:b9:8c:8a:90:97:00: 46:39:e4:5d:bf:88:c1:46:56:97:58:2e:19:16:d3: c2:f6:22:cc:e2:ae:11:37:83:ac:b8:9a:5a:94:c9: df:9a:32:82:e7:ee:e9:21:89:4e:08:0c:f1:72:d6: a2:d3:8c:ba:0f:ae:a1:10:7a:47:df:c9:b9:b2:a8: 88:39:25:52:49:f1:52:a1:fb:11:ee:27:06:1d:db: c2:c5:ee:78:b2:33:f6:0c:4a:d6:b9:cd:54:31:e4: 2f:21:e2:ab:88:65:b8:53:83:be:b6:53:38:86:ba: 42:fe:e7:d6:f4:6a:e4:bc:5a:a6:3c:98:ef:66:d4: 89:c2:99:41:4d:d4:88:a4:5c:2f:99:58:97:48:42: 59:7d:86:c1:d8:e0:f2:32:4f:df:16:1b:5b:e4:e5: d9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:46:FD:C5:C1:24:4D:05:D4:09:C9:04:E9:96:CC:C9:D5:52:D7:2B X509v3 Authority Key Identifier: keyid:AE:0E:4B:EC:56:8F:E6:FE:E4:92:F7:2E:4D:3A:CB:92:8D:9C:1E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:67:f0:96:83:82:e3:36:64:af:29:cf:f9:39:13:f3:19:36: ee:07:d6:db:1f:fd:a3:d9:c7:dc:3d:07:2d:cd:e3:b7:46:3e: dd:50:d7:c0:52:a3:38:47:61:9e:7f:63:1f:d0:08:82:a9:65: 7c:0d:36:1f:73:66:7b:71:29:76:9f:88:17:2a:8f:fe:22:a5: 89:58:c1:e9:ce:1c:ed:e5:20:0e:cf:a9:9d:b8:fa:89:8a:62: 6f:dc:4f:b9:a1:1a:0a:60:a1:a9:36:be:d6:61:61:70:ad:ef: 11:d8:c8:b6:45:c5:a1:f2:ac:1e:2d:17:87:5b:72:20:b3:cb: 1b:3e:04:9a:08:1c:94:db:61:41:2c:cf:2c:e2:3a:98:a3:88: f0:02:1b:0c:cf:c5:31:be:2d:b1:aa:92:82:ef:62:e9:2e:24: 68:f6:f2:46:2b:3b:11:b1:e6:03:b4:2b:8b:ff:6e:b2:e5:17: c8:e2:23:61:5d:8a:e3:09:11:1a:fd:8a:69:1b:39:26:75:92: 9b:8b:c9:5f:45:be:fb:c8:de:82:b3:cd:62:51:9f:4d:f5:93: 8e:75:d4:ba:ab:15:a3:3b:a7:cb:b6:af:03:3b:32:22:ed:a1: 99:15:21:b9:18:dc:4c:61:37:d5:f0:e7:5a:1d:9d:56:d5:d3: 2e:d3:18:8d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJGMEMxMTAvBgNVBAUTKEFFMEU0QkVDNTY4RkU2RkVFNDkyRjcyRTREM0FDQjky OEQ5QzFFNEYwHhcNMjYwNjAxMDYxODAxWhcNMjYwNjA4MDYxODAxWjAYMRYwFAYD VQQDEw02YTFkMjQxYS00YmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0H7WVtWpzMuDObul/9Ct9IQmnLeK10kxkakz/EJKvrga39qzurqz2GNQPTz1 NLDICizpwHL5FTaYos6V6+AK9jmwexQS8MNY9sDh7DIrENTAzSy0HiXCJSoZcPQa Bmc9SAq5jIqQlwBGOeRdv4jBRlaXWC4ZFtPC9iLM4q4RN4OsuJpalMnfmjKC5+7p IYlOCAzxctai04y6D66hEHpH38m5sqiIOSVSSfFSofsR7icGHdvCxe54sjP2DErW uc1UMeQvIeKriGW4U4O+tlM4hrpC/ufW9GrkvFqmPJjvZtSJwplBTdSIpFwvmViX SEJZfYbB2ODyMk/fFhtb5OXZ+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBFG/cXB JE0F1AnJBOmWzMnVUtcrMB8GA1UdIwQYMBaAFK4OS+xWj+b+5JL3Lk06y5KNnB5P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkYwQy80MTQ4NTA3MDhD NUIxMUVGQTcwNjc1N0ZDNEY5QUUwMi9yZzVMN0ZhUDV2N2trdmN1VFRyTGtvMmNI azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JnNUw3RmFQNXY3a2t2Y3VUVHJMa28yY0hrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkYwQy80MTQ4NTA3MDhDNUIxMUVGQTcwNjc1N0ZDNEY5QUUwMi9yZzVMN0ZhUDV2 N2trdmN1VFRyTGtvMmNIazgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATmfwloOC4zZkrynP+TkT8xk27gfW2x/9o9nH3D0HLc3jt0Y+3VDXwFKjOEdh nn9jH9AIgqllfA02H3Nme3Epdp+IFyqP/iKliVjB6c4c7eUgDs+pnbj6iYpib9xP uaEaCmChqTa+1mFhcK3vEdjItkXFofKsHi0Xh1tyILPLGz4EmggclNthQSzPLOI6 mKOI8AIbDM/FMb4tsaqSgu9i6S4kaPbyRis7EbHmA7Qri/9usuUXyOIjYV2K4wkR Gv2KaRs5JnWSm4vJX0W++8jegrPNYlGfTfWTjnXUuqsVozuny7avAzsyIu2hmRUh uRjcTGE31fDnWh2dVtXTLtMYjQ== -----END CERTIFICATE-----Generated at Tue Jun 2 21:18:57 2026 by rpki-client