$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft File: N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft (raw, json) Hash identifier: uN6uUNIe9ZZ99a2hVUZQ8tGlfxMWFqUv3vw/Pkvq9vI= Subject key identifier: CA:5B:6A:AB:34:99:11:DD:02:CF:B1:78:D1:89:CF:00:67:98:21:48 Authority key identifier: 37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB Certificate issuer: /CN=A91E3E33/serialNumber=379743714CE012230AA978BB1AA8C790E70667AB Certificate serial: 12CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft Manifest number: 12A4 Signing time: Mon 04 May 2026 17:04:10 +0000 Manifest this update: Mon 04 May 2026 17:04:09 +0000 Manifest next update: Mon 11 May 2026 17:04:09 +0000 Files and hashes: 1: N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl (hash: TA8lCZShjChGEct+ahXFg32rKEhHZYq6fqNPfsODu9k=) 2: 4551BE2CD19D11EAA120EE14C4F9AE02.roa (hash: yX0Uzg9eTPoxhzg9lrLk/1K20OmA34T+jetmGie5oOM=) 3: D0B8C09E1BBF11EAA64ECF70C4F9AE02.roa (hash: QNLelKdMSlDKmsbvqvRzrLkhu/2hfJJqmOa+I6J1bAk=) 4: 29ED0D46839011EE946C5E63C4F9AE02.roa (hash: QiP/Tw9hklight716IQFhsBaTNPHXt42nLTbqUKFQ1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 22:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4813 (0x12cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E33, serialNumber=379743714CE012230AA978BB1AA8C790E70667AB Validity Not Before: May 4 17:04:09 2026 GMT Not After : May 11 17:04:09 2026 GMT Subject: CN=69f8d18a-abb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:45:14:4c:d8:5a:5f:ea:64:21:f1:46:f1:b2: f2:47:94:90:db:81:cb:e1:4b:a8:c4:14:58:82:41: 7b:f6:c3:bf:65:00:52:67:bc:37:a6:47:4e:53:fc: 9c:49:14:23:d9:b2:35:d9:35:a6:bd:32:ef:d2:d8: 7e:b1:c7:b8:f4:9c:66:7f:5c:68:2d:1f:95:5f:db: a8:98:fb:5d:44:a9:8c:0f:62:2e:ff:38:3d:8c:16: 29:9f:e9:20:be:e0:5d:aa:c6:dc:04:a3:f8:f1:d8: a2:7f:02:01:af:8a:e4:e6:0d:d1:c9:cc:20:8a:89: 1e:1a:60:77:d2:3e:38:ef:ab:82:64:e7:89:a7:f4: d4:18:ca:97:6d:bf:6d:c3:44:c1:ab:60:d2:23:ca: d0:28:5d:12:26:6f:29:a3:a2:e6:82:d7:3a:0a:b6: 3e:4b:3d:be:0e:8f:5b:ca:c6:45:70:28:bb:87:42: 8b:76:f5:45:cc:a0:35:8f:3f:52:76:83:ba:16:78: 7d:ad:cb:d1:1b:f2:75:82:39:91:e8:f9:04:07:56: 9d:7d:79:5d:e9:d2:b2:b8:c1:e1:67:d8:86:d8:43: 13:bf:22:a0:1f:ab:b0:98:76:be:41:b4:36:52:fe: 86:9c:90:35:d8:bb:21:38:60:c7:7e:c3:36:6a:35: 0a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:5B:6A:AB:34:99:11:DD:02:CF:B1:78:D1:89:CF:00:67:98:21:48 X509v3 Authority Key Identifier: keyid:37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:cd:38:fe:96:99:0b:6d:29:5d:7a:a3:3f:de:6b:d7:11:dc: e8:20:39:b6:70:ef:53:98:ba:5d:6f:16:8d:f4:81:33:eb:56: 7a:97:a3:44:d1:8d:4f:7b:5b:4e:d1:07:6c:46:60:a1:08:3c: b1:09:1c:19:23:a8:ae:b5:16:8d:70:a6:98:ce:f4:85:65:0c: bb:11:71:fb:ca:f1:c8:78:eb:24:97:79:14:fb:bb:a4:a1:58: ac:fb:7e:e6:83:a4:26:fd:83:8c:7d:6f:0d:ad:43:c4:d7:22: ba:7f:56:fb:68:8b:3d:ad:ea:5e:86:99:73:9a:3c:40:c8:09: 0a:31:5b:40:75:cb:1b:f2:07:b6:5a:33:86:c3:6b:30:ee:68: 00:c2:d4:45:00:30:e6:67:af:85:2d:4f:4d:3c:f1:05:6e:8d: ad:d3:13:6d:3e:34:a2:4e:ff:dd:ef:31:28:ed:e5:62:aa:86: 69:3a:f0:6d:6a:f1:c3:bd:03:4a:29:41:cc:22:ed:12:53:ac: 38:9a:22:04:a1:f7:04:68:28:26:9a:09:2e:21:d6:45:b1:6c: 9f:9f:46:6e:ac:16:f9:95:9d:d5:f5:93:4e:42:b3:d1:dc:ed: c2:e9:22:4a:cd:8a:13:ca:fd:0f:ad:8c:6e:8b:e7:04:e1:97: 53:8e:a5:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNFMzMxMTAvBgNVBAUTKDM3OTc0MzcxNENFMDEyMjMwQUE5NzhCQjFBQThDNzkw RTcwNjY3QUIwHhcNMjYwNTA0MTcwNDA5WhcNMjYwNTExMTcwNDA5WjAYMRYwFAYD VQQDEw02OWY4ZDE4YS1hYmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEUUTNhaX+pkIfFG8bLyR5SQ24HL4UuoxBRYgkF79sO/ZQBSZ7w3pkdOU/yc SRQj2bI12TWmvTLv0th+sce49Jxmf1xoLR+VX9uomPtdRKmMD2Iu/zg9jBYpn+kg vuBdqsbcBKP48diifwIBr4rk5g3RycwgiokeGmB30j4476uCZOeJp/TUGMqXbb9t w0TBq2DSI8rQKF0SJm8po6Lmgtc6CrY+Sz2+Do9bysZFcCi7h0KLdvVFzKA1jz9S doO6Fnh9rcvRG/J1gjmR6PkEB1adfXld6dKyuMHhZ9iG2EMTvyKgH6uwmHa+QbQ2 Uv6GnJA12LshOGDHfsM2ajUKRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMpbaqs0 mRHdAs+xeNGJzwBnmCFIMB8GA1UdIwQYMBaAFDeXQ3FM4BIjCql4uxqox5DnBmer MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0UzMy84NzdBNzlCNkU5 RDExMUU4QUM4OTI3NzBDNEY5QUUwMi9ONWREY1V6Z0VpTUtxWGk3R3FqSGtPY0da NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041ZERjVXpnRWlNS3FYaTdHcWpIa09jR1o2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0UzMy84NzdBNzlCNkU5RDExMUU4QUM4OTI3NzBDNEY5QUUwMi9ONWREY1V6Z0Vp TUtxWGk3R3FqSGtPY0daNnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHM04/paZC20pXXqjP95r1xHc6CA5tnDvU5i6XW8WjfSBM+tWepejRNGNT3tb TtEHbEZgoQg8sQkcGSOorrUWjXCmmM70hWUMuxFx+8rxyHjrJJd5FPu7pKFYrPt+ 5oOkJv2DjH1vDa1DxNciun9W+2iLPa3qXoaZc5o8QMgJCjFbQHXLG/IHtlozhsNr MO5oAMLURQAw5mevhS1PTTzxBW6NrdMTbT40ok7/3e8xKO3lYqqGaTrwbWrxw70D SilBzCLtElOsOJoiBKH3BGgoJpoJLiHWRbFsn59GbqwW+ZWd1fWTTkKz0dztwuki Ss2KE8r9D62MbovnBOGXU46lyA== -----END CERTIFICATE-----Generated at Wed May 6 03:28:31 2026 by rpki-client