$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft File: rC4NP0JyIX_vudMtzhozLelqOF4.mft (raw, json) Hash identifier: w3JyGgXOSAcL2c2OgJqyDkLB9PR5Ev0sfLCL6ogLuIM= Subject key identifier: 6F:94:D4:C4:6C:33:67:5B:DD:12:A5:F2:F9:F3:20:98:41:55:AA:DD Authority key identifier: AC:2E:0D:3F:42:72:21:7F:EF:B9:D3:2D:CE:1A:33:2D:E9:6A:38:5E Certificate issuer: /CN=A91DD5E1/serialNumber=AC2E0D3F4272217FEFB9D32DCE1A332DE96A385E Certificate serial: 095F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft Manifest number: 0954 Signing time: Wed 20 May 2026 20:10:09 +0000 Manifest this update: Wed 20 May 2026 20:10:08 +0000 Manifest next update: Wed 27 May 2026 20:10:08 +0000 Files and hashes: 1: rC4NP0JyIX_vudMtzhozLelqOF4.crl (hash: p9NQ0Z7VSv9k7KT9hFdXgxo2NBCY5LdMEVOCgaKYvOo=) 2: E034D1A6BC6F11EA8FE53280C4F9AE02.roa (hash: +Pd2aWEI7828mfSanwxonyoz5UIPIwJJCaXRRPJ3RbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.crl rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 20:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2399 (0x95f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD5E1, serialNumber=AC2E0D3F4272217FEFB9D32DCE1A332DE96A385E Validity Not Before: May 20 20:10:08 2026 GMT Not After : May 27 20:10:08 2026 GMT Subject: CN=6a0e1521-c2a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c6:80:3b:3f:a3:5a:7e:b6:12:4b:04:03:d8: f9:13:7d:a5:50:29:af:c3:88:9d:29:d5:bc:53:42: 38:ac:6c:65:fd:81:3a:0f:0d:39:ad:82:9c:a2:fd: b4:a6:74:9e:9a:27:63:d6:b6:e3:4d:25:9d:39:15: b4:28:e7:a9:c4:2d:1f:87:b4:18:41:1d:86:43:fe: 29:a2:4b:68:91:56:59:74:ac:10:47:70:83:fc:30: 8d:77:e2:99:b4:f3:30:d8:a4:b2:43:25:f4:3f:df: ec:bf:d5:c0:61:dd:2f:6d:1f:01:65:8e:d6:30:52: 5e:a2:11:6e:62:2b:aa:ab:11:57:eb:cc:a1:96:9a: fe:5d:c6:2b:7f:43:9e:85:1d:ac:e7:99:8d:82:e1: bf:99:1b:26:70:51:b4:c6:fa:2c:c2:e6:de:17:d3: 49:a9:6c:20:fd:02:1a:a0:1a:b9:4e:2d:bc:e5:02: 16:62:10:54:66:7c:3c:54:41:d5:62:f6:46:e7:96: db:74:56:a1:1e:f1:b4:6d:e1:29:75:bc:e3:bb:1e: c3:5f:c1:26:b6:7b:6e:f8:3b:6a:6d:93:d5:2e:a0: 61:3b:d4:ad:04:a2:7a:5a:f4:7c:02:f5:db:ff:58: 7b:65:9f:38:3e:af:3e:00:46:11:bd:de:24:c6:27: e0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:94:D4:C4:6C:33:67:5B:DD:12:A5:F2:F9:F3:20:98:41:55:AA:DD X509v3 Authority Key Identifier: keyid:AC:2E:0D:3F:42:72:21:7F:EF:B9:D3:2D:CE:1A:33:2D:E9:6A:38:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:0a:01:5d:c5:96:4b:5d:2c:a2:67:e5:40:80:6c:82:48:c8: 34:56:22:b2:a5:69:7b:0e:04:07:c1:e7:41:f5:ca:a8:d5:40: a6:f4:e9:d5:fd:19:83:ec:b5:b9:01:af:d0:1b:3f:73:fe:0d: d0:fc:9f:bc:26:c1:34:9b:fc:e2:42:a6:64:6b:08:a4:f4:16: eb:68:c2:2d:f9:b2:b9:bd:2c:07:39:4f:55:f0:3a:da:fd:0c: 0d:02:4d:6c:0c:25:51:dd:f0:67:b1:78:77:c7:24:98:eb:14: a2:51:b0:84:f8:98:66:18:4e:75:49:ee:b3:7e:9e:31:3f:60: 27:7e:d3:90:3d:ee:62:23:22:77:b1:e3:db:b0:d0:26:c5:9e: 9f:42:f3:4f:aa:4a:e7:39:30:24:55:65:a7:d1:df:0a:a0:26: a5:bb:d6:2d:34:97:45:7f:f1:c7:ae:9f:e1:08:4d:20:98:0b: 88:d8:b7:ba:5e:a4:6c:b0:f6:08:cf:b1:4a:fd:6e:09:02:48: 5d:20:1c:b4:4f:9e:77:6c:77:c5:6a:48:7f:1a:e5:79:4f:81: 4f:eb:ab:44:63:b1:12:9d:76:8b:7a:84:45:15:3e:f8:37:68: 55:17:a1:2d:93:88:32:79:7e:38:11:04:57:af:fe:bc:96:79: db:41:d2:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ1RTExMTAvBgNVBAUTKEFDMkUwRDNGNDI3MjIxN0ZFRkI5RDMyRENFMUEzMzJE RTk2QTM4NUUwHhcNMjYwNTIwMjAxMDA4WhcNMjYwNTI3MjAxMDA4WjAYMRYwFAYD VQQDEw02YTBlMTUyMS1jMmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMaAOz+jWn62EksEA9j5E32lUCmvw4idKdW8U0I4rGxl/YE6Dw05rYKcov20 pnSemidj1rbjTSWdORW0KOepxC0fh7QYQR2GQ/4poktokVZZdKwQR3CD/DCNd+KZ tPMw2KSyQyX0P9/sv9XAYd0vbR8BZY7WMFJeohFuYiuqqxFX68yhlpr+XcYrf0Oe hR2s55mNguG/mRsmcFG0xvoswubeF9NJqWwg/QIaoBq5Ti285QIWYhBUZnw8VEHV YvZG55bbdFahHvG0beEpdbzjux7DX8Emtntu+DtqbZPVLqBhO9StBKJ6WvR8AvXb /1h7ZZ84Pq8+AEYRvd4kxifg5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG+U1MRs M2db3RKl8vnzIJhBVardMB8GA1UdIwQYMBaAFKwuDT9CciF/77nTLc4aMy3pajhe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDVFMS8xNjVCN0JGNkJD NkUxMUVBQTVDQjAzN0RDNEY5QUUwMi9yQzROUDBKeUlYX3Z1ZE10emhvekxlbHFP RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JDNE5QMEp5SVhfdnVkTXR6aG96TGVscU9GNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDVFMS8xNjVCN0JGNkJDNkUxMUVBQTVDQjAzN0RDNEY5QUUwMi9yQzROUDBKeUlY X3Z1ZE10emhvekxlbHFPRjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGgoBXcWWS10somflQIBsgkjINFYisqVpew4EB8HnQfXKqNVApvTp1f0Zg+y1 uQGv0Bs/c/4N0PyfvCbBNJv84kKmZGsIpPQW62jCLfmyub0sBzlPVfA62v0MDQJN bAwlUd3wZ7F4d8ckmOsUolGwhPiYZhhOdUnus36eMT9gJ37TkD3uYiMid7Hj27DQ JsWen0LzT6pK5zkwJFVlp9HfCqAmpbvWLTSXRX/xx66f4QhNIJgLiNi3ul6kbLD2 CM+xSv1uCQJIXSActE+ed2x3xWpIfxrleU+BT+urRGOxEp12i3qERRU++DdoVReh LZOIMnl+OBEEV6/+vJZ520HSbQ== -----END CERTIFICATE-----Generated at Thu May 21 10:16:18 2026 by rpki-client