$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.mft File: 5bsti54YaXwBWe2BMuXzS4axN7E.mft (raw, json) Hash identifier: bmVBC8Jy+MKm08fvcIY9Xm+ZtLPl3GxPwhCXbq2j5+A= Subject key identifier: 27:62:BA:55:BE:BD:D8:A0:71:09:11:4B:11:E9:55:7B:3C:41:64:70 Authority key identifier: E5:BB:2D:8B:9E:18:69:7C:01:59:ED:81:32:E5:F3:4B:86:B1:37:B1 Certificate issuer: /CN=A91E0C2B/serialNumber=E5BB2D8B9E18697C0159ED8132E5F34B86B137B1 Certificate serial: 025C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bsti54YaXwBWe2BMuXzS4axN7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.mft Manifest number: 0255 Signing time: Thu 21 May 2026 02:22:49 +0000 Manifest this update: Thu 21 May 2026 02:22:49 +0000 Manifest next update: Thu 28 May 2026 02:22:49 +0000 Files and hashes: 1: 5bsti54YaXwBWe2BMuXzS4axN7E.crl (hash: FbPCJuMxLO0R+wOrwiQTmlcGh9q/Sb+HWvXfSEsxp9E=) 2: 12B9A5DECBC211EDB6F09516C4F9AE02.roa (hash: r/QdasLc5bg8TvtpOH3qUVDciFGg4kgkaUmfu3ixoOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.crl rsync://rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bsti54YaXwBWe2BMuXzS4axN7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:22:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 604 (0x25c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0C2B, serialNumber=E5BB2D8B9E18697C0159ED8132E5F34B86B137B1 Validity Not Before: May 21 02:22:49 2026 GMT Not After : May 28 02:22:49 2026 GMT Subject: CN=6a0e6c79-451f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ac:ea:d8:66:fe:67:7d:45:09:85:ed:0e:5d: d0:06:4c:85:dc:de:cd:f2:ed:08:19:27:b1:46:6f: b8:0c:5a:f0:e1:ec:83:d3:9c:90:eb:ea:63:38:1b: a7:d8:5d:d6:57:b4:2b:dd:28:8a:51:13:3d:28:d8: 97:3f:1b:14:d0:a4:4a:26:e8:96:7f:f2:0d:4d:d4: c2:e8:b6:3a:9e:b7:c6:d7:fe:a6:71:ec:63:19:0e: bd:f4:68:e8:f5:17:65:80:e5:f1:69:12:42:d2:06: b9:08:c7:2c:8c:b8:24:c5:d3:9f:91:a1:68:7e:d9: 44:f9:23:6f:2e:1d:be:bf:dd:0e:58:3f:ce:3a:04: 56:87:2c:ba:77:2f:d8:7d:ad:ec:2a:d5:86:70:85: c5:c1:cf:d7:82:56:9b:a6:99:ba:0b:70:7b:11:37: 34:f0:1f:70:c7:56:e3:84:5a:1e:45:f8:1c:ff:6a: d9:27:53:47:2e:8a:e7:8f:0f:cc:20:be:56:69:6d: 53:bd:35:77:c0:48:af:55:f5:12:01:5c:0a:b1:5c: 65:a5:34:f4:3f:4e:c3:bf:06:30:93:15:54:46:ba: 20:02:64:29:04:9d:4e:ae:5c:57:37:9b:98:64:d2: 68:33:56:58:0c:97:2d:30:cb:ba:0e:0e:04:9a:94: 45:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:62:BA:55:BE:BD:D8:A0:71:09:11:4B:11:E9:55:7B:3C:41:64:70 X509v3 Authority Key Identifier: keyid:E5:BB:2D:8B:9E:18:69:7C:01:59:ED:81:32:E5:F3:4B:86:B1:37:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bsti54YaXwBWe2BMuXzS4axN7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:d2:bb:01:be:f6:cb:df:c6:61:1c:59:84:5f:56:3b:91:5e: e5:fb:95:29:4b:1b:7a:7b:3b:46:1d:85:47:4f:d5:d3:3d:4a: 17:65:33:5c:c8:a0:e2:ec:da:64:68:85:68:00:91:99:7e:93: ce:96:59:72:98:0a:d5:6a:53:ac:15:97:dc:7d:d8:56:85:a2: 00:d6:cd:96:a9:fd:60:9c:45:cc:5f:fa:b2:bc:e1:12:7d:d6: ff:8a:e8:95:ba:a9:2a:09:79:f2:eb:9d:31:95:13:61:51:88: 30:04:f7:81:03:9a:9a:51:f4:74:ec:da:98:d5:e1:6c:cf:7f: 1f:ca:5b:63:00:60:2f:93:4d:f9:21:a0:fc:f6:36:ff:02:27: ba:81:db:ab:e1:b3:aa:e3:82:65:9a:c8:8c:41:03:e5:de:91: cd:33:45:5e:aa:26:6b:cd:cd:7b:c1:87:bf:ec:6c:13:10:86: 84:b3:34:6a:1e:06:6f:b4:b9:f5:b3:2f:c7:cd:b6:af:ad:c0: 2f:a8:52:6b:63:a3:fc:72:65:6b:df:74:27:11:cb:fe:ff:24: 33:46:16:f7:8f:b5:8a:6c:43:2b:dd:d5:b8:03:84:52:ed:4c: 2c:e8:5a:d9:b6:9a:39:a9:60:98:5d:78:49:62:49:ec:0e:e1: ea:92:01:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDMkIxMTAvBgNVBAUTKEU1QkIyRDhCOUUxODY5N0MwMTU5RUQ4MTMyRTVGMzRC ODZCMTM3QjEwHhcNMjYwNTIxMDIyMjQ5WhcNMjYwNTI4MDIyMjQ5WjAYMRYwFAYD VQQDEw02YTBlNmM3OS00NTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm6zq2Gb+Z31FCYXtDl3QBkyF3N7N8u0IGSexRm+4DFrw4eyD05yQ6+pjOBun 2F3WV7Qr3SiKURM9KNiXPxsU0KRKJuiWf/INTdTC6LY6nrfG1/6mcexjGQ699Gjo 9RdlgOXxaRJC0ga5CMcsjLgkxdOfkaFoftlE+SNvLh2+v90OWD/OOgRWhyy6dy/Y fa3sKtWGcIXFwc/Xglabppm6C3B7ETc08B9wx1bjhFoeRfgc/2rZJ1NHLornjw/M IL5WaW1TvTV3wEivVfUSAVwKsVxlpTT0P07DvwYwkxVURrogAmQpBJ1OrlxXN5uY ZNJoM1ZYDJctMMu6Dg4EmpRFSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCdiulW+ vdigcQkRSxHpVXs8QWRwMB8GA1UdIwQYMBaAFOW7LYueGGl8AVntgTLl80uGsTex MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEMyQi9EMjdFNkVEMENC OTYxMUVEQUMzNDlCNzlDNEY5QUUwMi81YnN0aTU0WWFYd0JXZTJCTXVYelM0YXhO N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVic3RpNTRZYVh3QldlMkJNdVh6UzRheE43RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEMyQi9EMjdFNkVEMENCOTYxMUVEQUMzNDlCNzlDNEY5QUUwMi81YnN0aTU0WWFY d0JXZTJCTXVYelM0YXhON0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoNK7Ab72y9/GYRxZhF9WO5Fe5fuVKUsbens7Rh2FR0/V0z1KF2UzXMig4uza ZGiFaACRmX6TzpZZcpgK1WpTrBWX3H3YVoWiANbNlqn9YJxFzF/6srzhEn3W/4ro lbqpKgl58uudMZUTYVGIMAT3gQOamlH0dOzamNXhbM9/H8pbYwBgL5NN+SGg/PY2 /wInuoHbq+GzquOCZZrIjEED5d6RzTNFXqoma83Ne8GHv+xsExCGhLM0ah4Gb7S5 9bMvx822r63AL6hSa2Oj/HJla990JxHL/v8kM0YW94+1imxDK93VuAOEUu1MLOha 2baaOalgmF14SWJJ7A7h6pIBbQ== -----END CERTIFICATE-----Generated at Thu May 21 10:20:52 2026 by rpki-client