$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft File: umn8tA4zSXV_ok-OM1eRxfAEXVg.mft (raw, json) Hash identifier: J422E8d88NLBTqM3U6X4WKOz214oXaS/+rV+tIifs7U= Subject key identifier: F1:B1:89:04:75:05:49:E6:DD:A2:59:BD:1C:30:0A:4B:4C:30:C7:10 Authority key identifier: BA:69:FC:B4:0E:33:49:75:7F:A2:4F:8E:33:57:91:C5:F0:04:5D:58 Certificate issuer: /CN=A91EBA81/serialNumber=BA69FCB40E3349757FA24F8E335791C5F0045D58 Certificate serial: 04D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft Manifest number: 04C8 Signing time: Wed 20 May 2026 23:57:57 +0000 Manifest this update: Wed 20 May 2026 23:57:56 +0000 Manifest next update: Wed 27 May 2026 23:57:56 +0000 Files and hashes: 1: umn8tA4zSXV_ok-OM1eRxfAEXVg.crl (hash: 8MGdkrdELwFwFyjWMVLgVboetYCgoZLdEPBE+op57oM=) 2: 159DA092E9B711EFB8454123C4F9AE02.roa (hash: 7ShatlVB6jSiCRe5XmNvlt4TSEhHSPt1cgEmAve1hIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.crl rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 23:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1237 (0x4d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA81, serialNumber=BA69FCB40E3349757FA24F8E335791C5F0045D58 Validity Not Before: May 20 23:57:56 2026 GMT Not After : May 27 23:57:56 2026 GMT Subject: CN=6a0e4a84-5186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:91:ef:86:dd:e8:75:d6:63:95:96:92:47:05: 32:dc:7d:08:ed:c4:ee:56:b9:5a:97:7e:8c:69:41: f2:41:2a:03:df:8e:55:47:8c:a7:7d:a0:19:eb:e5: f0:ff:f1:69:15:c9:ab:8d:16:09:9c:3e:ff:6b:74: 4d:fb:94:38:90:b1:5e:7c:25:e6:f8:3b:8c:53:e2: f0:69:ac:5c:ed:f6:40:6e:b7:d7:3e:5e:4a:37:40: 36:5b:bf:a9:6d:f5:47:27:f3:8a:4a:ee:f1:af:08: 31:7a:7e:19:08:95:34:94:17:9c:64:06:58:6c:7b: 20:b2:92:a4:e4:8d:51:35:19:53:da:62:15:aa:54: 9c:5b:bb:b1:02:9d:7e:6d:cc:a2:28:ba:cc:68:46: 29:b2:ac:42:bb:a2:df:c0:70:3d:47:df:90:8d:f0: 28:81:4b:f8:ec:fa:16:6f:e8:14:77:2f:ef:29:dc: 17:02:76:d1:02:b1:82:bc:b0:d4:17:66:83:95:23: 04:60:d7:a9:2e:c0:a9:f5:2d:82:37:41:b4:d4:51: df:a0:0e:f3:75:f2:0d:52:55:eb:16:58:3e:48:74: 89:bf:8f:18:b5:f8:20:3d:81:40:4f:e8:d5:00:12: 70:48:10:14:87:63:ea:dc:ea:61:5b:83:04:2f:d9: 26:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B1:89:04:75:05:49:E6:DD:A2:59:BD:1C:30:0A:4B:4C:30:C7:10 X509v3 Authority Key Identifier: keyid:BA:69:FC:B4:0E:33:49:75:7F:A2:4F:8E:33:57:91:C5:F0:04:5D:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:78:85:ab:87:4e:4a:65:5b:03:03:42:b4:95:be:68:b6:74: e7:f9:b2:13:43:26:c3:fd:b0:c7:77:3b:0d:03:36:3d:9b:88: 7b:6e:a6:82:81:0e:16:de:d0:3f:a7:0b:c7:36:6c:a0:0e:c2: 7f:9c:9e:2d:fb:02:0c:e6:75:a9:f8:10:05:25:5c:e1:87:2c: 7a:fa:36:35:e7:8f:58:99:24:4d:d9:fd:c0:03:eb:57:c1:9c: 82:0e:bb:cb:26:f7:5e:27:3d:ea:49:e3:55:e5:9e:58:65:46: f3:07:3b:bc:65:90:3e:0f:24:76:23:5b:42:c9:c1:ff:49:28: 36:42:ad:b0:d7:11:fa:1f:f5:bc:11:fb:56:fe:59:ed:1c:dc: d8:76:59:e6:f8:e6:cd:04:67:28:0c:4a:d4:20:c8:c1:5c:b0: 39:b6:37:e7:a0:ce:45:c7:2a:e3:21:af:a2:31:e1:83:31:6a: cb:a6:37:76:44:31:8f:a5:6c:a7:78:6f:9c:09:ff:f9:e4:0e: 15:2a:1c:e4:51:14:73:d2:9e:ea:4f:9d:64:a9:0f:04:3b:34: d7:41:f0:9f:a0:4f:32:00:3e:68:39:51:9c:af:df:b9:f3:3b: 48:2d:8c:ec:51:df:2a:bc:ad:4d:47:b9:ee:56:39:c8:2b:78: 0c:3d:c7:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBODExMTAvBgNVBAUTKEJBNjlGQ0I0MEUzMzQ5NzU3RkEyNEY4RTMzNTc5MUM1 RjAwNDVENTgwHhcNMjYwNTIwMjM1NzU2WhcNMjYwNTI3MjM1NzU2WjAYMRYwFAYD VQQDEw02YTBlNGE4NC01MTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZHvht3oddZjlZaSRwUy3H0I7cTuVrlal36MaUHyQSoD345VR4ynfaAZ6+Xw //FpFcmrjRYJnD7/a3RN+5Q4kLFefCXm+DuMU+Lwaaxc7fZAbrfXPl5KN0A2W7+p bfVHJ/OKSu7xrwgxen4ZCJU0lBecZAZYbHsgspKk5I1RNRlT2mIVqlScW7uxAp1+ bcyiKLrMaEYpsqxCu6LfwHA9R9+QjfAogUv47PoWb+gUdy/vKdwXAnbRArGCvLDU F2aDlSMEYNepLsCp9S2CN0G01FHfoA7zdfINUlXrFlg+SHSJv48YtfggPYFAT+jV ABJwSBAUh2Pq3OphW4MEL9kmcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPGxiQR1 BUnm3aJZvRwwCktMMMcQMB8GA1UdIwQYMBaAFLpp/LQOM0l1f6JPjjNXkcXwBF1Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkE4MS9DRTEzNkJEMDc0 NTcxMUVDQjM5ODc1MThDNEY5QUUwMi91bW44dEE0elNYVl9vay1PTTFlUnhmQUVY VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vtbjh0QTR6U1hWX29rLU9NMWVSeGZBRVhWZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkE4MS9DRTEzNkJEMDc0NTcxMUVDQjM5ODc1MThDNEY5QUUwMi91bW44dEE0elNY Vl9vay1PTTFlUnhmQUVYVmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKniFq4dOSmVbAwNCtJW+aLZ05/myE0Mmw/2wx3c7DQM2PZuIe26mgoEOFt7Q P6cLxzZsoA7Cf5yeLfsCDOZ1qfgQBSVc4Ycsevo2NeePWJkkTdn9wAPrV8Gcgg67 yyb3Xic96knjVeWeWGVG8wc7vGWQPg8kdiNbQsnB/0koNkKtsNcR+h/1vBH7Vv5Z 7Rzc2HZZ5vjmzQRnKAxK1CDIwVywObY356DORccq4yGvojHhgzFqy6Y3dkQxj6Vs p3hvnAn/+eQOFSoc5FEUc9Ke6k+dZKkPBDs010Hwn6BPMgA+aDlRnK/fufM7SC2M 7FHfKrytTUe57lY5yCt4DD3Hdg== -----END CERTIFICATE-----Generated at Thu May 21 10:28:48 2026 by rpki-client