$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft File: fNlYoAf08OVuSo0kV2aIYiurciE.mft (raw, json) Hash identifier: +ZSVxQyiKnarsstu+Qn5LOWkKIVjYgM+sViiCJUo+h0= Subject key identifier: 2D:73:2C:74:05:BA:87:D8:D9:74:A7:42:4E:76:33:C7:F2:57:E2:95 Authority key identifier: 7C:D9:58:A0:07:F4:F0:E5:6E:4A:8D:24:57:66:88:62:2B:AB:72:21 Certificate issuer: /CN=A91E8AF2/serialNumber=7CD958A007F4F0E56E4A8D24576688622BAB7221 Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft Manifest number: 01E5 Signing time: Thu 21 May 2026 03:36:40 +0000 Manifest this update: Thu 21 May 2026 03:36:39 +0000 Manifest next update: Thu 28 May 2026 03:36:39 +0000 Files and hashes: 1: fNlYoAf08OVuSo0kV2aIYiurciE.crl (hash: JYbcCfxJ1sE3O2iXg3DDHhvyf2f0+JhD3LqOwyEzPP8=) 2: E5196DA6335811F1BC79FB1BCA833773.roa (hash: vyYp7IA/5MNA4gMbec/CoUCTSiktnAR4FwpLUhRjRvU=) 3: 27A66CC4335811F18709AA0FCA833773.roa (hash: pPUHKA5s9wq04L2qfb/B2EY59WS05X4PfzFkdep1N34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.crl rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 03:36:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8AF2, serialNumber=7CD958A007F4F0E56E4A8D24576688622BAB7221 Validity Not Before: May 21 03:36:39 2026 GMT Not After : May 28 03:36:39 2026 GMT Subject: CN=6a0e7dc7-ec8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:19:b8:b7:aa:5b:23:f6:e6:58:08:18:ea:c4: f0:28:20:2a:b6:2e:82:43:50:2c:1e:18:b4:a6:4b: 4e:81:b1:f8:ef:a9:39:69:07:17:11:d8:d7:1d:65: a9:e7:0d:e1:55:41:5e:9a:d9:47:db:ca:f6:90:d0: 71:96:7f:dd:13:f6:16:b4:71:d7:74:48:9c:78:42: b2:97:30:fa:ad:af:f4:0a:2e:cd:3f:27:ad:76:7a: 42:b6:a2:dd:2e:8e:3e:b6:69:e5:75:2d:61:02:68: 9d:40:a0:b5:c3:31:b0:b4:22:fb:9e:32:5e:50:ca: 51:74:73:1a:6b:ba:bd:26:c1:99:d8:fc:82:d3:d5: a7:b1:7e:86:03:66:d4:e8:cc:5d:42:f5:27:07:ae: f5:42:a4:8a:1a:03:69:e6:b5:84:d9:2a:da:0c:81: ef:f8:e7:8c:d2:b2:3f:26:67:82:03:5a:5d:71:49: fc:81:40:4f:9c:da:24:a2:01:59:b2:f2:87:16:4c: 6a:e8:51:da:01:ec:fd:79:47:23:79:75:b2:2c:58: ee:ab:8d:59:b3:88:b7:c4:cc:d7:19:4c:d6:50:ef: 03:39:ad:5b:26:0b:cb:09:fd:2a:f4:1b:dc:cb:4a: a6:7b:20:c4:e6:51:a6:d9:a0:d2:c1:e5:ad:df:51: ef:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:73:2C:74:05:BA:87:D8:D9:74:A7:42:4E:76:33:C7:F2:57:E2:95 X509v3 Authority Key Identifier: keyid:7C:D9:58:A0:07:F4:F0:E5:6E:4A:8D:24:57:66:88:62:2B:AB:72:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNlYoAf08OVuSo0kV2aIYiurciE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8AF2/5732C838844C11EEB1F2CA29C4F9AE02/fNlYoAf08OVuSo0kV2aIYiurciE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:ce:1a:2c:d6:76:4f:39:ab:03:b9:3d:3b:94:3f:30:37:90: 7e:15:44:8c:3f:b5:04:48:c8:27:96:2b:5d:f3:0d:ac:31:c0: 08:5f:c7:37:05:96:e5:a4:b2:fa:cc:8e:14:3d:cc:fb:83:02: db:31:aa:b3:32:b4:75:ac:47:66:b0:a7:e2:ce:54:68:50:e8: a3:3c:9a:c3:eb:37:7f:9f:a2:db:b6:c0:a4:3e:9c:31:ce:bd: 34:9d:ac:94:f4:c7:1b:93:08:e4:a5:41:4e:73:0d:a9:ae:ca: 31:5a:a9:46:ea:19:65:ff:f8:4f:e5:b4:9a:b4:82:11:10:4b: fb:26:79:7d:33:ff:8d:0f:0b:20:ee:5e:55:6c:55:95:6a:19: b9:3e:fb:86:0c:35:74:e6:a7:8f:a8:a1:8b:05:05:6d:95:07: 39:b1:e7:f4:ed:3d:d6:8d:c6:a7:56:38:11:2f:fe:1c:fc:64: 42:c2:1c:07:77:5b:bc:ea:c0:24:e1:a7:4d:8f:8c:12:27:a3: 35:39:e0:f4:7f:c4:44:dd:35:76:81:1e:33:ce:9c:a8:dd:ca: 48:7d:37:96:24:db:62:d6:94:22:f2:af:1a:db:d4:f3:37:80: e2:b0:98:bd:97:7d:7e:f7:71:0e:5f:38:db:6d:52:52:11:45: 86:1b:7f:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThBRjIxMTAvBgNVBAUTKDdDRDk1OEEwMDdGNEYwRTU2RTRBOEQyNDU3NjY4ODYy MkJBQjcyMjEwHhcNMjYwNTIxMDMzNjM5WhcNMjYwNTI4MDMzNjM5WjAYMRYwFAYD VQQDEw02YTBlN2RjNy1lYzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxm4t6pbI/bmWAgY6sTwKCAqti6CQ1AsHhi0pktOgbH476k5aQcXEdjXHWWp 5w3hVUFemtlH28r2kNBxln/dE/YWtHHXdEiceEKylzD6ra/0Ci7NPyetdnpCtqLd Lo4+tmnldS1hAmidQKC1wzGwtCL7njJeUMpRdHMaa7q9JsGZ2PyC09WnsX6GA2bU 6MxdQvUnB671QqSKGgNp5rWE2SraDIHv+OeM0rI/JmeCA1pdcUn8gUBPnNokogFZ svKHFkxq6FHaAez9eUcjeXWyLFjuq41Zs4i3xMzXGUzWUO8DOa1bJgvLCf0q9Bvc y0qmeyDE5lGm2aDSweWt31HvkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC1zLHQF uofY2XSnQk52M8fyV+KVMB8GA1UdIwQYMBaAFHzZWKAH9PDlbkqNJFdmiGIrq3Ih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEFGMi81NzMyQzgzODg0 NEMxMUVFQjFGMkNBMjlDNEY5QUUwMi9mTmxZb0FmMDhPVnVTbzBrVjJhSVlpdXJj aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZObFlvQWYwOE9WdVNvMGtWMmFJWWl1cmNpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEFGMi81NzMyQzgzODg0NEMxMUVFQjFGMkNBMjlDNEY5QUUwMi9mTmxZb0FmMDhP VnVTbzBrVjJhSVlpdXJjaUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgs4aLNZ2TzmrA7k9O5Q/MDeQfhVEjD+1BEjIJ5YrXfMNrDHACF/HNwWW5aSy +syOFD3M+4MC2zGqszK0daxHZrCn4s5UaFDoozyaw+s3f5+i27bApD6cMc69NJ2s lPTHG5MI5KVBTnMNqa7KMVqpRuoZZf/4T+W0mrSCERBL+yZ5fTP/jQ8LIO5eVWxV lWoZuT77hgw1dOanj6ihiwUFbZUHObHn9O091o3Gp1Y4ES/+HPxkQsIcB3dbvOrA JOGnTY+MEiejNTng9H/ERN01doEeM86cqN3KSH03liTbYtaUIvKvGtvU8zeA4rCY vZd9fvdxDl84221SUhFFhht/fg== -----END CERTIFICATE-----Generated at Thu May 21 11:03:45 2026 by rpki-client