$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft File: _GUnKrz-olrSH5XhQm4gZ5zfyG4.mft (raw, json) Hash identifier: JWj2WGLWNoYtLgq7Wl1RHhOj8uAdkj9IuzGktwIrii0= Subject key identifier: 03:CC:DB:32:5D:72:7C:2F:48:D6:24:36:12:39:3D:FF:12:93:7F:BA Authority key identifier: FC:65:27:2A:BC:FE:A2:5A:D2:1F:95:E1:42:6E:20:67:9C:DF:C8:6E Certificate issuer: /CN=A91E5FCD/serialNumber=FC65272ABCFEA25AD21F95E1426E20679CDFC86E Certificate serial: 19FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GUnKrz-olrSH5XhQm4gZ5zfyG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft Manifest number: 203F Signing time: Wed 20 May 2026 16:21:19 +0000 Manifest this update: Wed 20 May 2026 16:21:18 +0000 Manifest next update: Wed 27 May 2026 16:21:18 +0000 Files and hashes: 1: _GUnKrz-olrSH5XhQm4gZ5zfyG4.crl (hash: 0xZz77hJtNnwc5olTFz4R49lTa68brNW3ojwwdH1RDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.crl rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GUnKrz-olrSH5XhQm4gZ5zfyG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 16:21:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6654 (0x19fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5FCD, serialNumber=FC65272ABCFEA25AD21F95E1426E20679CDFC86E Validity Not Before: May 20 16:21:18 2026 GMT Not After : May 27 16:21:18 2026 GMT Subject: CN=6a0ddf7f-c8b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ba:d5:55:a3:ce:bb:eb:85:0d:e8:2b:e8:c8: 45:d7:49:a9:db:d5:5b:59:03:90:80:d4:82:f2:aa: b7:2a:25:7a:a0:87:04:3a:c1:15:e9:e9:ed:74:a9: 3a:bc:3a:3a:e3:34:e5:9c:ed:bf:ed:e6:db:bc:69: 49:30:c0:47:be:45:28:53:6c:5d:06:99:c7:0c:77: 1c:90:ce:05:31:01:c9:9e:2c:d1:c3:e8:5a:63:e5: a3:62:7c:90:b7:99:34:34:02:86:82:e1:30:98:29: 5c:3f:bb:17:b7:94:f3:5f:bb:07:00:9b:05:87:5c: 06:59:52:4c:5d:e7:56:b2:45:39:0d:4b:77:78:41: 45:81:f0:6f:70:d9:26:98:9b:be:a1:35:b0:73:a0: 72:8c:23:1b:96:d0:42:e9:62:51:9b:13:20:6a:7d: 84:40:72:8c:4d:b6:26:72:8b:4b:3a:69:ee:62:db: f4:3a:87:6c:b6:02:ed:28:c4:70:39:cd:3f:e0:e3: d4:32:76:fd:76:14:d4:d6:c4:76:cf:e5:72:a0:4e: d3:69:26:d8:e6:75:1b:83:01:c2:0a:62:8d:94:39: 85:58:6b:95:c8:1a:0e:e0:91:ba:7a:83:5d:a7:bf: 27:82:21:79:8f:d6:6e:32:79:b9:cb:d6:04:2a:f5: d8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:CC:DB:32:5D:72:7C:2F:48:D6:24:36:12:39:3D:FF:12:93:7F:BA X509v3 Authority Key Identifier: keyid:FC:65:27:2A:BC:FE:A2:5A:D2:1F:95:E1:42:6E:20:67:9C:DF:C8:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GUnKrz-olrSH5XhQm4gZ5zfyG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5FCD/0BE0FFE0780E11E78334C521C4F9AE02/_GUnKrz-olrSH5XhQm4gZ5zfyG4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:b6:70:9b:6d:4c:5d:9e:44:a0:2f:1e:a4:b1:73:f7:0a:cc: 4d:38:ea:c3:e6:f7:1b:39:4e:59:05:4d:7d:0d:74:da:f0:90: c0:b5:fb:48:fd:29:86:f7:b4:70:b8:8a:ec:1c:b9:1a:63:da: 55:fa:28:e7:74:3e:56:c7:83:28:61:6f:68:d9:ac:5a:a4:3e: 55:16:22:0e:71:65:f7:cc:91:e3:1c:a9:5a:71:27:d3:90:e7: 57:27:ab:94:17:29:b3:1b:fd:9e:f8:08:31:76:18:bb:8e:3f: b2:c2:e5:2d:63:2a:62:dd:75:e7:5a:7a:c9:d0:b8:f9:87:44: 92:63:45:c0:5c:00:a5:52:41:96:d8:2c:95:85:aa:45:5a:49: d4:ad:e8:03:59:81:52:30:94:96:a2:d0:7d:01:a6:d9:40:31: 60:33:06:eb:63:1e:4c:1f:b0:38:85:ff:23:e7:7b:b9:6f:d2: 1f:2c:69:d9:fa:d5:a9:a7:c5:33:23:75:1a:4d:21:50:48:c0: 2f:bd:d2:2b:cf:13:fd:56:b8:76:de:2f:4c:17:7e:0a:f8:93: 21:2e:04:c6:c1:dd:97:1d:40:68:4e:f6:69:a7:ba:dd:0f:ac: d1:cf:14:81:29:42:a3:49:0f:dd:ba:84:4a:3f:21:b8:49:6c: 72:02:1b:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVGQ0QxMTAvBgNVBAUTKEZDNjUyNzJBQkNGRUEyNUFEMjFGOTVFMTQyNkUyMDY3 OUNERkM4NkUwHhcNMjYwNTIwMTYyMTE4WhcNMjYwNTI3MTYyMTE4WjAYMRYwFAYD VQQDEw02YTBkZGY3Zi1jOGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7rVVaPOu+uFDegr6MhF10mp29VbWQOQgNSC8qq3KiV6oIcEOsEV6entdKk6 vDo64zTlnO2/7ebbvGlJMMBHvkUoU2xdBpnHDHcckM4FMQHJnizRw+haY+WjYnyQ t5k0NAKGguEwmClcP7sXt5TzX7sHAJsFh1wGWVJMXedWskU5DUt3eEFFgfBvcNkm mJu+oTWwc6ByjCMbltBC6WJRmxMgan2EQHKMTbYmcotLOmnuYtv0OodstgLtKMRw Oc0/4OPUMnb9dhTU1sR2z+VyoE7TaSbY5nUbgwHCCmKNlDmFWGuVyBoO4JG6eoNd p78ngiF5j9ZuMnm5y9YEKvXYDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAPM2zJd cnwvSNYkNhI5Pf8Sk3+6MB8GA1UdIwQYMBaAFPxlJyq8/qJa0h+V4UJuIGec38hu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUZDRC8wQkUwRkZFMDc4 MEUxMUU3ODMzNEM1MjFDNEY5QUUwMi9fR1VuS3J6LW9sclNINVhoUW00Z1o1emZ5 RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19HVW5Lcnotb2xyU0g1WGhRbTRnWjV6ZnlHNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUZDRC8wQkUwRkZFMDc4MEUxMUU3ODMzNEM1MjFDNEY5QUUwMi9fR1VuS3J6LW9s clNINVhoUW00Z1o1emZ5RzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlLZwm21MXZ5EoC8epLFz9wrMTTjqw+b3GzlOWQVNfQ102vCQwLX7SP0phve0 cLiK7By5GmPaVfoo53Q+VseDKGFvaNmsWqQ+VRYiDnFl98yR4xypWnEn05DnVyer lBcpsxv9nvgIMXYYu44/ssLlLWMqYt1151p6ydC4+YdEkmNFwFwApVJBltgslYWq RVpJ1K3oA1mBUjCUlqLQfQGm2UAxYDMG62MeTB+wOIX/I+d7uW/SHyxp2frVqafF MyN1Gk0hUEjAL73SK88T/Va4dt4vTBd+CviTIS4ExsHdlx1AaE72aae63Q+s0c8U gSlCo0kP3bqESj8huElscgIbTA== -----END CERTIFICATE-----Generated at Thu May 21 09:38:56 2026 by rpki-client