$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft File: l_PsEBRVjghHCgOpR4yE8j5FADo.mft (raw, json) Hash identifier: QNLhHxIJMjofatksKBrBc/amdAad03tlAeKuAnrB0Ek= Subject key identifier: 91:D5:96:93:12:BA:29:60:D5:00:00:EA:6C:74:7D:14:30:EC:0D:9E Authority key identifier: 97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A Certificate issuer: /CN=A91E2E92/serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A Certificate serial: 024F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft Manifest number: 023A Signing time: Thu 21 May 2026 02:44:11 +0000 Manifest this update: Thu 21 May 2026 02:44:10 +0000 Manifest next update: Thu 28 May 2026 02:44:10 +0000 Files and hashes: 1: l_PsEBRVjghHCgOpR4yE8j5FADo.crl (hash: vhBDizSJcEdRO9R2hVOHnsdnOEibINdUgd3b6OMeohg=) 2: D78EA2DE44ED11EEA6685324C4F9AE02.roa (hash: l+wLTHIqrekcKTj0QKuQF0Rx57+DsEFBlDvziPYrkC0=) 3: B7D34CC444ED11EE8D931624C4F9AE02.roa (hash: ikN5tRwLqDlsCqslEfbzVnOUPYHIszI42NOtjTWTVog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 591 (0x24f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2E92, serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A Validity Not Before: May 21 02:44:10 2026 GMT Not After : May 28 02:44:10 2026 GMT Subject: CN=6a0e717b-0177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1e:be:c7:31:d4:c9:e4:77:7d:03:ce:e7:46: 6c:a7:91:da:7e:16:46:43:45:68:03:91:6d:f7:85: e6:f2:98:80:5a:9c:4b:3d:5d:fa:bf:90:aa:d7:9d: 4f:5e:b7:87:61:63:1f:45:95:ec:ac:fe:c9:4d:b1: 72:fc:cd:59:14:36:18:13:dc:c1:cd:ac:79:fe:32: 0a:9d:af:7a:8b:40:c3:d0:31:cc:2e:ec:3d:2c:25: 50:7d:ec:a7:f5:4d:1e:65:b1:b1:55:78:8e:b3:29: 03:28:07:cd:0f:67:25:29:7c:6a:cd:80:c0:12:3a: ea:7a:95:6f:b3:0f:c8:a8:88:58:1a:d6:4b:91:f8: 48:b0:88:0e:e6:eb:2c:d0:13:f9:5b:e9:ba:59:54: 00:fa:ed:fe:fb:ac:c8:44:6e:86:38:90:6e:b3:6d: 8f:65:00:c2:35:78:80:24:aa:ef:c4:11:09:e2:fa: a5:60:d7:d8:13:fa:44:0b:36:10:c5:6f:65:6d:6d: 6a:51:88:8c:5f:fa:5f:28:ab:aa:bc:18:58:8e:4c: 4d:50:f4:5a:be:13:49:04:3d:8a:fd:45:ff:17:01: d5:7a:a7:7c:04:a6:da:68:fa:fb:f4:ef:25:94:04: fd:65:15:4f:e7:ee:60:2e:6d:37:03:65:4f:d8:7e: c7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D5:96:93:12:BA:29:60:D5:00:00:EA:6C:74:7D:14:30:EC:0D:9E X509v3 Authority Key Identifier: keyid:97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:5b:19:53:22:36:b6:90:12:70:d0:cd:c0:71:98:cd:e7:83: fe:f9:c1:62:ce:f0:c6:f3:05:2f:df:92:8c:d9:79:e7:91:36: 1f:ab:6d:e4:a4:41:b9:e8:63:33:e0:f3:17:50:e0:55:a9:fe: b2:2b:15:06:f2:eb:65:5e:5f:d1:50:04:5d:2f:02:7b:88:74: c1:da:e7:37:90:45:1d:72:57:53:95:06:2a:6c:d4:b9:49:01: a0:d5:47:d7:a7:aa:a8:2c:25:b9:02:52:d9:33:5a:3d:20:d9: 44:6a:29:da:ce:53:e2:ce:1f:f1:54:62:c5:55:39:e1:fc:2b: 67:81:e2:07:a3:72:a8:64:27:31:24:e1:c3:ae:84:53:91:b0: 5a:a5:5b:e0:f3:4b:38:c2:77:90:19:26:51:91:c3:bc:46:a5: 63:8c:2e:76:ee:7f:2d:47:58:99:d2:36:4f:a7:6b:4f:fb:ac: 25:0f:b9:30:2b:60:18:e5:fe:96:9d:c8:8a:79:cb:7e:22:7c: 0b:24:f2:1e:d4:9a:fe:40:a8:c0:ab:79:04:3a:51:78:14:0d: 06:22:c8:02:01:d4:06:81:fb:b0:63:70:43:b1:5b:05:16:f6: cd:06:8f:d4:b0:11:23:13:a3:f4:64:a5:10:7f:5a:43:42:4c: e5:8a:2a:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFOTIxMTAvBgNVBAUTKDk3RjNFQzEwMTQ1NThFMDg0NzBBMDNBOTQ3OEM4NEYy M0U0NTAwM0EwHhcNMjYwNTIxMDI0NDEwWhcNMjYwNTI4MDI0NDEwWjAYMRYwFAYD VQQDEw02YTBlNzE3Yi0wMTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvB6+xzHUyeR3fQPO50Zsp5HafhZGQ0VoA5Ft94Xm8piAWpxLPV36v5Cq151P XreHYWMfRZXsrP7JTbFy/M1ZFDYYE9zBzax5/jIKna96i0DD0DHMLuw9LCVQfeyn 9U0eZbGxVXiOsykDKAfND2clKXxqzYDAEjrqepVvsw/IqIhYGtZLkfhIsIgO5uss 0BP5W+m6WVQA+u3++6zIRG6GOJBus22PZQDCNXiAJKrvxBEJ4vqlYNfYE/pECzYQ xW9lbW1qUYiMX/pfKKuqvBhYjkxNUPRavhNJBD2K/UX/FwHVeqd8BKbaaPr79O8l lAT9ZRVP5+5gLm03A2VP2H7HFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJHVlpMS uilg1QAA6mx0fRQw7A2eMB8GA1UdIwQYMBaAFJfz7BAUVY4IRwoDqUeMhPI+RQA6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkU5Mi8xODg1QTZEMjA2 Q0YxMUVFOUM5NzEyN0JDNEY5QUUwMi9sX1BzRUJSVmpnaEhDZ09wUjR5RThqNUZB RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xfUHNFQlJWamdoSENnT3BSNHlFOGo1RkFEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkU5Mi8xODg1QTZEMjA2Q0YxMUVFOUM5NzEyN0JDNEY5QUUwMi9sX1BzRUJSVmpn aEhDZ09wUjR5RThqNUZBRG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtVsZUyI2tpAScNDNwHGYzeeD/vnBYs7wxvMFL9+SjNl555E2H6tt5KRBuehj M+DzF1DgVan+sisVBvLrZV5f0VAEXS8Ce4h0wdrnN5BFHXJXU5UGKmzUuUkBoNVH 16eqqCwluQJS2TNaPSDZRGop2s5T4s4f8VRixVU54fwrZ4HiB6NyqGQnMSThw66E U5GwWqVb4PNLOMJ3kBkmUZHDvEalY4wudu5/LUdYmdI2T6drT/usJQ+5MCtgGOX+ lp3IinnLfiJ8CyTyHtSa/kCowKt5BDpReBQNBiLIAgHUBoH7sGNwQ7FbBRb2zQaP 1LARIxOj9GSlEH9aQ0JM5YoqEA== -----END CERTIFICATE-----Generated at Thu May 21 09:39:11 2026 by rpki-client