$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.mft File: PDml0ZGM9lqyVjMi8PXxQwmme48.mft (raw, json) Hash identifier: wFl5hVgab0AkEHFJEBSIF3EiIdH2aiL9Kbah03mH+/0= Subject key identifier: E0:EE:62:C3:66:AC:F6:5A:7A:E1:C4:48:06:CF:21:93:C5:96:15:91 Authority key identifier: 3C:39:A5:D1:91:8C:F6:5A:B2:56:33:22:F0:F5:F1:43:09:A6:7B:8F Certificate issuer: /CN=A91E2F2C/serialNumber=3C39A5D1918CF65AB2563322F0F5F14309A67B8F Certificate serial: 0A41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDml0ZGM9lqyVjMi8PXxQwmme48.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.mft Manifest number: 0A2D Signing time: Wed 20 May 2026 19:49:16 +0000 Manifest this update: Wed 20 May 2026 19:49:16 +0000 Manifest next update: Wed 27 May 2026 19:49:16 +0000 Files and hashes: 1: PDml0ZGM9lqyVjMi8PXxQwmme48.crl (hash: MzkVdcAwfTVfyDrB6o26GTdVepLvhdhsOnwOuBOelqs=) 2: DE07328A778911ECBD9C7748C4F9AE02.roa (hash: b+aLVYk2tgs7wuTrLgj88F2Zzs9HvJ7ppCzvA/wlonM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.crl rsync://rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDml0ZGM9lqyVjMi8PXxQwmme48.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 19:49:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2625 (0xa41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2F2C, serialNumber=3C39A5D1918CF65AB2563322F0F5F14309A67B8F Validity Not Before: May 20 19:49:16 2026 GMT Not After : May 27 19:49:16 2026 GMT Subject: CN=6a0e103c-553e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:af:58:fd:40:ab:57:c7:7f:56:c4:9d:d0:d3: 16:2e:47:8f:36:f5:a8:e7:7a:42:52:a8:b9:31:81: d4:5b:0c:bd:74:1e:94:78:dd:91:1c:bd:84:b6:ce: cd:d6:a4:4b:8c:93:93:78:93:64:98:f1:43:1e:67: 5c:78:61:2c:d0:87:22:3a:ae:a4:d2:36:9b:1e:75: f1:5e:8d:b1:a3:1c:69:ac:5b:f2:67:7c:66:93:c3: d9:7d:bd:79:f6:1c:ae:e9:75:07:0e:23:19:83:b0: ff:52:b3:60:d2:c5:da:15:0b:96:82:d5:19:e1:b3: 81:10:dd:89:73:7b:22:4c:27:44:f6:d9:9a:c2:00: 0f:b6:97:3f:35:db:71:7a:aa:5b:f0:74:bb:04:23: 5c:05:e5:38:44:da:1a:cc:46:51:c7:8b:2a:26:be: 99:1e:ec:4d:3f:f9:ba:aa:4a:60:99:bc:07:31:7a: 86:90:85:a9:40:44:8b:05:35:7d:61:11:04:ae:50: f9:de:cd:82:3c:1d:59:92:45:3b:dc:cc:de:0c:d4: 7e:d7:62:b8:78:c5:16:52:71:d0:80:11:7a:9b:b4: 17:fe:f1:2e:ed:db:b3:ba:f0:e4:dd:4f:33:ef:cc: f7:c5:44:de:20:6d:2f:5d:76:0f:eb:ce:77:e1:4a: a3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:EE:62:C3:66:AC:F6:5A:7A:E1:C4:48:06:CF:21:93:C5:96:15:91 X509v3 Authority Key Identifier: keyid:3C:39:A5:D1:91:8C:F6:5A:B2:56:33:22:F0:F5:F1:43:09:A6:7B:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDml0ZGM9lqyVjMi8PXxQwmme48.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2F2C/FFB761FA967811EA840F0029C4F9AE02/PDml0ZGM9lqyVjMi8PXxQwmme48.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:96:b8:79:f3:8a:05:b4:3b:9e:ac:cf:d3:00:09:78:d5:23: 41:12:e0:ec:ba:45:e4:98:b1:4a:61:a7:66:f2:73:8f:a5:40: 6f:02:0f:b2:3a:fc:58:cb:a6:2d:9c:32:cd:f0:02:0a:d4:dd: cb:41:ee:16:36:b1:7a:58:7b:45:f8:d1:9f:96:7f:1d:7b:aa: 4b:2c:02:55:ab:2e:ed:04:ed:5d:71:36:45:8d:ba:7c:fe:2b: 75:81:d5:54:3b:9c:01:f7:43:ed:6e:a4:90:fe:ad:92:df:b5: 14:ad:8f:4f:8d:25:f6:ee:b4:d1:09:05:b1:b7:62:81:41:76: 5d:12:03:31:7c:3b:f1:9a:b4:8e:cd:34:14:1a:94:44:13:79: da:40:63:2b:7b:54:1e:2e:28:ff:4c:99:67:28:cb:62:dd:02: 41:20:a0:8b:a1:05:48:3d:64:2b:f3:ef:8f:cc:3f:fd:2d:69: f8:54:16:19:8e:47:fa:a0:1e:c8:44:87:c6:5f:3c:87:c3:58: a4:1c:35:b1:7a:1e:b8:db:7e:80:dd:91:54:25:7c:4d:ea:ec: 6b:99:2c:3d:c8:1e:30:ab:0c:85:6d:70:02:4a:7c:9e:15:4e: d0:ad:88:a8:41:cc:eb:9c:b1:3b:1c:ec:5a:9d:db:b2:5c:2b: 9f:22:36:8d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJGMkMxMTAvBgNVBAUTKDNDMzlBNUQxOTE4Q0Y2NUFCMjU2MzMyMkYwRjVGMTQz MDlBNjdCOEYwHhcNMjYwNTIwMTk0OTE2WhcNMjYwNTI3MTk0OTE2WjAYMRYwFAYD VQQDEw02YTBlMTAzYy01NTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl69Y/UCrV8d/VsSd0NMWLkePNvWo53pCUqi5MYHUWwy9dB6UeN2RHL2Ets7N 1qRLjJOTeJNkmPFDHmdceGEs0IciOq6k0jabHnXxXo2xoxxprFvyZ3xmk8PZfb15 9hyu6XUHDiMZg7D/UrNg0sXaFQuWgtUZ4bOBEN2Jc3siTCdE9tmawgAPtpc/Ndtx eqpb8HS7BCNcBeU4RNoazEZRx4sqJr6ZHuxNP/m6qkpgmbwHMXqGkIWpQESLBTV9 YREErlD53s2CPB1ZkkU73MzeDNR+12K4eMUWUnHQgBF6m7QX/vEu7duzuvDk3U8z 78z3xUTeIG0vXXYP68534UqjcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFODuYsNm rPZaeuHESAbPIZPFlhWRMB8GA1UdIwQYMBaAFDw5pdGRjPZaslYzIvD18UMJpnuP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkYyQy9GRkI3NjFGQTk2 NzgxMUVBODQwRjAwMjlDNEY5QUUwMi9QRG1sMFpHTTlscXlWak1pOFBYeFF3bW1l NDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BEbWwwWkdNOWxxeVZqTWk4UFh4UXdtbWU0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkYyQy9GRkI3NjFGQTk2NzgxMUVBODQwRjAwMjlDNEY5QUUwMi9QRG1sMFpHTTls cXlWak1pOFBYeFF3bW1lNDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlZa4efOKBbQ7nqzP0wAJeNUjQRLg7LpF5JixSmGnZvJzj6VAbwIPsjr8WMum LZwyzfACCtTdy0HuFjaxelh7RfjRn5Z/HXuqSywCVasu7QTtXXE2RY26fP4rdYHV VDucAfdD7W6kkP6tkt+1FK2PT40l9u600QkFsbdigUF2XRIDMXw78Zq0js00FBqU RBN52kBjK3tUHi4o/0yZZyjLYt0CQSCgi6EFSD1kK/Pvj8w//S1p+FQWGY5H+qAe yESHxl88h8NYpBw1sXoeuNt+gN2RVCV8Tersa5ksPcgeMKsMhW1wAkp8nhVO0K2I qEHM65yxOxzsWp3bslwrnyI2jQ== -----END CERTIFICATE-----Generated at Thu May 21 10:23:57 2026 by rpki-client