$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft File: i6wN0-SRhYlP2uKChO3IBHILRhQ.mft (raw, json) Hash identifier: XY/kI/yGImIkF6G/8CteZqv5Oq7X6oLXd2ZM8TJtDO8= Subject key identifier: 93:0C:06:77:48:5B:78:1F:D5:7E:5C:45:FB:57:87:EA:55:7D:F7:65 Authority key identifier: 8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14 Certificate issuer: /CN=A91EBFAE/serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614 Certificate serial: 3544 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft Manifest number: 3543 Signing time: Wed 20 May 2026 14:32:25 +0000 Manifest this update: Wed 20 May 2026 14:32:25 +0000 Manifest next update: Wed 27 May 2026 14:32:25 +0000 Files and hashes: 1: i6wN0-SRhYlP2uKChO3IBHILRhQ.crl (hash: toAHbmCuoVFo2Yod/VC8kdZWQxjlG4hnUZnYz+r+iuo=) 2: 93F991501F4C11F19ED52041133D8C67.roa (hash: riV+YFoj73RGskIzJAtr/Lp7lGHXyMFCcQQ1eQ66pUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 14:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13636 (0x3544) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBFAE, serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614 Validity Not Before: May 20 14:32:25 2026 GMT Not After : May 27 14:32:25 2026 GMT Subject: CN=6a0dc5f9-928e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:56:68:9b:73:36:35:fd:43:ae:25:47:05:2f: 60:f3:a7:c4:d2:a8:18:0a:a2:4f:ea:de:d3:cb:04: b2:9f:c3:3f:62:28:c6:d9:6b:2f:a7:ea:b2:8a:a8: f0:e1:00:9d:0f:10:e2:fd:61:1f:b3:c1:7a:18:a2: 10:d3:06:e8:9b:5a:63:73:4d:c0:fa:fb:54:9d:46: 13:eb:b4:dc:74:e9:fc:57:7e:ab:41:97:c5:b5:83: 34:c1:17:49:16:8d:b3:6d:ea:c9:f3:08:9a:f9:60: 72:91:2e:72:4d:16:a8:b9:53:5f:ef:54:af:72:f7: 14:97:3b:e8:9d:57:b9:37:32:54:b2:d1:a4:be:93: eb:41:5f:03:3d:83:07:3c:91:2b:40:5f:9e:44:33: f0:2f:0c:38:b0:01:5c:a5:7c:fb:25:94:a8:25:64: f8:c0:d2:d6:ff:21:7e:61:1f:c6:35:7b:f1:ab:e2: d3:5c:7a:4e:01:f9:e8:16:ce:78:85:f3:24:2b:63: 87:e5:7c:90:b6:fb:0b:33:52:65:a1:de:93:6c:82: da:48:36:6e:5c:48:e7:be:e5:1b:a3:ac:5d:1f:12: f9:1f:b1:d9:a0:57:77:10:2b:29:7b:52:de:9b:26: 0f:d3:3f:ad:31:6d:d5:21:27:93:46:53:99:d2:39: af:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:0C:06:77:48:5B:78:1F:D5:7E:5C:45:FB:57:87:EA:55:7D:F7:65 X509v3 Authority Key Identifier: keyid:8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:aa:24:c0:49:56:f4:83:6a:91:98:f9:eb:46:dc:77:4f:2c: d3:c5:ba:84:c4:38:c7:48:dc:64:68:ba:d0:de:3a:1d:12:f3: 8a:4d:bb:27:bf:c0:cd:87:b2:fe:d2:13:35:98:99:d3:78:df: e3:67:f9:ea:e9:1b:15:d5:28:8c:d0:ae:64:fa:86:f1:e3:c0: 84:47:0d:c2:ea:03:10:e7:e4:8a:16:28:80:cc:e7:d6:17:38: 82:5c:67:bc:2d:51:6e:93:fd:2f:70:0f:fe:c0:0e:89:32:be: e8:94:fd:72:a7:c8:12:a2:c4:73:b4:1e:a0:54:aa:e7:06:58: 4e:ec:12:1b:ee:a8:28:03:3b:9a:87:a8:40:c9:65:b2:0f:50: df:1c:b2:bc:62:2d:c4:4d:42:af:46:4d:33:ad:10:7d:41:cc: 6b:9d:df:e3:24:b1:db:68:b2:54:78:16:7b:4d:f1:e4:7e:2a: e8:af:be:a5:fb:60:1f:be:67:88:a7:e4:c6:7c:10:9f:50:51: 56:f2:a7:85:6b:01:20:a2:2a:4d:d0:ab:bd:8e:20:63:f6:33: 20:a2:29:46:2c:9d:66:8a:7e:26:e7:1a:00:e9:eb:8c:ee:04: 72:63:59:fc:f4:fa:f5:90:21:c8:6e:fd:1e:35:c8:28:66:a1: 70:55:61:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGQUUxMTAvBgNVBAUTKDhCQUMwREQzRTQ5MTg1ODk0RkRBRTI4Mjg0RURDODA0 NzIwQjQ2MTQwHhcNMjYwNTIwMTQzMjI1WhcNMjYwNTI3MTQzMjI1WjAYMRYwFAYD VQQDEw02YTBkYzVmOS05MjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslZom3M2Nf1DriVHBS9g86fE0qgYCqJP6t7TywSyn8M/YijG2Wsvp+qyiqjw 4QCdDxDi/WEfs8F6GKIQ0wbom1pjc03A+vtUnUYT67TcdOn8V36rQZfFtYM0wRdJ Fo2zberJ8wia+WBykS5yTRaouVNf71SvcvcUlzvonVe5NzJUstGkvpPrQV8DPYMH PJErQF+eRDPwLww4sAFcpXz7JZSoJWT4wNLW/yF+YR/GNXvxq+LTXHpOAfnoFs54 hfMkK2OH5XyQtvsLM1Jlod6TbILaSDZuXEjnvuUbo6xdHxL5H7HZoFd3ECspe1Le myYP0z+tMW3VISeTRlOZ0jmvhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJMMBndI W3gf1X5cRftXh+pVffdlMB8GA1UdIwQYMBaAFIusDdPkkYWJT9rigoTtyARyC0YU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkZBRS8xNjhGRkQ2QzFE OEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZbFAydUtDaE8zSUJISUxS aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k2d04wLVNSaFlsUDJ1S0NoTzNJQkhJTFJoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkZBRS8xNjhGRkQ2QzFEOEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZ bFAydUtDaE8zSUJISUxSaFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYqokwElW9INqkZj560bcd08s08W6hMQ4x0jcZGi60N46HRLzik27J7/AzYey /tITNZiZ03jf42f56ukbFdUojNCuZPqG8ePAhEcNwuoDEOfkihYogMzn1hc4glxn vC1RbpP9L3AP/sAOiTK+6JT9cqfIEqLEc7QeoFSq5wZYTuwSG+6oKAM7moeoQMll sg9Q3xyyvGItxE1Cr0ZNM60QfUHMa53f4ySx22iyVHgWe03x5H4q6K++pftgH75n iKfkxnwQn1BRVvKnhWsBIKIqTdCrvY4gY/YzIKIpRiydZop+JucaAOnrjO4EcmNZ /PT69ZAhyG79HjXIKGahcFVhkw== -----END CERTIFICATE-----Generated at Thu May 21 21:54:54 2026 by rpki-client