$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft File: RYSuojlMRtaTTmPtaIfUcm_fehM.mft (raw, json) Hash identifier: Dzt+6NtMM9VJQrq9n3Xc3u2TCOOgTyM9VAi2YVD12aA= Subject key identifier: 35:4B:76:AF:32:A4:18:B9:27:36:22:4F:2B:7C:39:53:01:D8:BB:FC Authority key identifier: 45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13 Certificate issuer: /CN=A91EAAF5/serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13 Certificate serial: 0501 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft Manifest number: 04D9 Signing time: Sun 03 May 2026 00:09:58 +0000 Manifest this update: Sun 03 May 2026 00:09:58 +0000 Manifest next update: Sun 10 May 2026 00:09:58 +0000 Files and hashes: 1: RYSuojlMRtaTTmPtaIfUcm_fehM.crl (hash: sJb5pgRWMc4fnrRV0BoXPeEP2IXxNMqs8G2VQ/hDKrQ=) 2: BCD8D1DCD22B11EE9443A443C4F9AE02.roa (hash: 39C+hq9yHLOlvpEI0BBXna/9+vYl0n36FnAzYDNDqZ0=) 3: BC148566D22B11EE9443A443C4F9AE02.roa (hash: cfcf5ZIlJUYMjr0+qHEumL0rToA0BJQdmmF24Iwecxg=) 4: 783C88A285FF11EEAFD34A2CC4F9AE02.roa (hash: e8gT8HqV1esire/8xcI7iv1N+KlJ6UFqhxx1NHbDo3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 22:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1281 (0x501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAAF5, serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13 Validity Not Before: May 3 00:09:58 2026 GMT Not After : May 10 00:09:58 2026 GMT Subject: CN=69f69256-a1c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c9:5e:d4:15:b0:e4:f3:40:2a:be:59:82:dc: 93:ec:8f:de:1d:19:82:41:b7:9e:1b:47:75:aa:29: 67:4b:c1:37:ca:bf:cf:c9:6c:67:b4:9b:5f:f2:22: 53:a4:2e:20:88:36:5d:94:65:43:b4:3f:a3:91:77: 4c:c0:13:f3:e2:d5:fe:df:c6:fb:22:7d:39:ee:e1: ce:47:59:00:6a:ce:d8:03:99:05:6a:cd:6c:40:b6: 34:11:3d:6a:13:94:56:bf:22:4a:fa:76:f5:34:df: 4b:9e:d9:09:c9:90:37:78:ac:a0:3c:4b:1c:bf:10: 1c:cb:4b:b4:5c:8e:c6:ae:d5:49:4f:ec:64:d9:0b: 80:2f:4b:ff:d3:34:13:f8:df:f8:62:98:32:0b:f7: d5:f1:dd:b5:bc:11:1b:e1:0c:b1:f2:5d:73:bd:69: 14:9e:5d:c0:17:7e:19:06:8e:a8:00:3e:09:53:22: 03:20:14:bc:8a:cb:48:0d:30:9a:a8:29:7b:13:2d: 45:85:98:0b:1c:57:1d:63:85:2e:4c:d5:2a:bb:4f: d9:02:10:cb:d3:6b:c5:b3:eb:bb:03:69:74:86:ab: a7:db:37:bd:3e:79:b2:65:e8:ea:49:ea:0a:f0:d5: 2b:f9:f6:e0:83:2c:74:9c:7e:e5:3e:7e:2d:03:da: 3e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:4B:76:AF:32:A4:18:B9:27:36:22:4F:2B:7C:39:53:01:D8:BB:FC X509v3 Authority Key Identifier: keyid:45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:64:0d:c2:62:c1:72:61:de:30:c7:94:f2:30:fd:dc:e3:26: 7e:8e:92:f1:14:fa:6f:cd:e3:95:3f:2a:17:b0:28:11:98:11: 44:2e:de:c0:e7:ba:0d:95:a8:03:bf:1a:a5:ab:61:0d:fe:6d: f9:2e:69:b9:fc:fc:7c:84:71:f2:c2:81:c0:31:2d:75:c3:6b: 0f:89:6a:b6:07:00:4f:2f:56:2a:31:16:b0:a7:80:70:e4:f6: 5c:3e:a2:2f:77:f0:e3:17:39:42:83:84:5d:43:31:a5:d2:b3: 7f:7e:e6:d2:8c:cf:b4:22:69:93:e5:13:ef:e4:b2:af:4b:8e: 91:5e:dd:0b:92:7d:f0:b1:df:95:44:7f:e0:25:56:a2:54:7b: 41:01:18:3e:b3:6e:ec:e9:d0:fd:b7:18:aa:40:a4:43:03:fc: bc:c7:ff:99:ca:7e:da:eb:1a:fe:07:85:95:67:af:82:98:76: 1f:1e:6b:e7:d1:a2:d6:5f:33:cb:71:b6:29:e9:77:6a:02:10: 7c:cc:be:dc:00:07:d8:df:a3:5e:4b:e8:b4:4b:d5:d5:9a:56: 16:dd:ac:17:61:8b:46:af:0f:d3:bb:c2:bd:76:fd:c5:56:46: 53:a3:b2:8e:d6:ed:84:fd:c2:a9:80:85:17:8e:b5:b9:6d:2d: a9:4f:68:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFBRjUxMTAvBgNVBAUTKDQ1ODRBRUEyMzk0QzQ2RDY5MzRFNjNFRDY4ODdENDcy NkZERjdBMTMwHhcNMjYwNTAzMDAwOTU4WhcNMjYwNTEwMDAwOTU4WjAYMRYwFAYD VQQDEw02OWY2OTI1Ni1hMWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsle1BWw5PNAKr5ZgtyT7I/eHRmCQbeeG0d1qilnS8E3yr/PyWxntJtf8iJT pC4giDZdlGVDtD+jkXdMwBPz4tX+38b7In057uHOR1kAas7YA5kFas1sQLY0ET1q E5RWvyJK+nb1NN9LntkJyZA3eKygPEscvxAcy0u0XI7GrtVJT+xk2QuAL0v/0zQT +N/4YpgyC/fV8d21vBEb4Qyx8l1zvWkUnl3AF34ZBo6oAD4JUyIDIBS8istIDTCa qCl7Ey1FhZgLHFcdY4UuTNUqu0/ZAhDL02vFs+u7A2l0hqun2ze9PnmyZejqSeoK 8NUr+fbggyx0nH7lPn4tA9o+0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDVLdq8y pBi5JzYiTyt8OVMB2Lv8MB8GA1UdIwQYMBaAFEWErqI5TEbWk05j7WiH1HJv33oT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUFGNS9FOTlGNTIzQTZF QzQxMUVDQUZEMjczMzFDNEY5QUUwMi9SWVN1b2psTVJ0YVRUbVB0YUlmVWNtX2Zl aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JZU3VvamxNUnRhVFRtUHRhSWZVY21fZmVoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUFGNS9FOTlGNTIzQTZFQzQxMUVDQUZEMjczMzFDNEY5QUUwMi9SWVN1b2psTVJ0 YVRUbVB0YUlmVWNtX2ZlaE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH2QNwmLBcmHeMMeU8jD93OMmfo6S8RT6b83jlT8qF7AoEZgRRC7ewOe6DZWo A78apathDf5t+S5pufz8fIRx8sKBwDEtdcNrD4lqtgcATy9WKjEWsKeAcOT2XD6i L3fw4xc5QoOEXUMxpdKzf37m0ozPtCJpk+UT7+Syr0uOkV7dC5J98LHflUR/4CVW olR7QQEYPrNu7OnQ/bcYqkCkQwP8vMf/mcp+2usa/geFlWevgph2Hx5r59Gi1l8z y3G2Kel3agIQfMy+3AAH2N+jXkvotEvV1ZpWFt2sF2GLRq8P07vCvXb9xVZGU6Oy jtbthP3CqYCFF461uW0tqU9oYA== -----END CERTIFICATE-----Generated at Sun May 3 16:12:02 2026 by rpki-client