$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft File: UdUxrvegh8GOMB4OaixjcbJkw-g.mft (raw, json) Hash identifier: jlG3hj1/Nbl6C43jAeYx0/mRh6ScclHsF2AXFaPrJUk= Subject key identifier: 2B:AA:F5:07:CD:5B:E8:54:D8:89:6F:43:15:5A:DA:11:41:A8:AA:4D Authority key identifier: 51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 Certificate issuer: /CN=A91EFAFF/serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Certificate serial: 0292 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft Manifest number: 0274 Signing time: Thu 21 May 2026 02:23:10 +0000 Manifest this update: Thu 21 May 2026 02:23:10 +0000 Manifest next update: Thu 28 May 2026 02:23:10 +0000 Files and hashes: 1: UdUxrvegh8GOMB4OaixjcbJkw-g.crl (hash: 0NpA/K2QdSvZqGormejvKbmSH5MpQywUDr0lT8rwABs=) 2: 891E633CB7F111EFA500D67CC4F9AE02.roa (hash: UgIjU1Y9FIQZMVmVVjbiH3ya5cbpCsU387MDkBuS42U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 658 (0x292) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFAFF, serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Validity Not Before: May 21 02:23:10 2026 GMT Not After : May 28 02:23:10 2026 GMT Subject: CN=6a0e6c8e-027b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:1f:94:bf:48:db:89:55:46:59:d9:4f:dd:4e: 75:84:79:0a:a9:a7:b8:49:77:29:f8:27:81:ac:59: 64:ad:0c:ac:3f:b0:5f:f9:1f:86:b2:d8:1f:df:0e: dd:07:9c:fb:75:c0:ee:ca:58:13:65:7a:59:4c:cc: d4:d0:30:2c:48:d5:71:fc:81:cc:c8:82:c3:59:dc: 6f:66:79:65:9c:8c:01:6e:4f:6c:40:c8:55:0f:bb: 33:e7:4e:95:12:a8:5a:34:b8:44:18:2a:00:85:ad: 0b:03:32:e8:e2:48:c4:29:eb:28:77:82:92:94:ca: 96:81:29:5b:3f:b2:de:ee:45:9f:03:67:86:c7:a3: 6f:e8:8b:b7:55:be:5f:c4:39:52:e9:4e:e6:ec:10: 7f:aa:a5:50:10:63:fc:cd:65:fb:33:71:f8:c9:68: b8:7f:5c:8f:7e:50:1a:a6:d4:c2:c0:57:d8:02:9b: 91:b3:7e:65:ea:bf:a4:f8:b2:e4:d2:dc:97:e4:ef: 81:3d:f9:d4:1f:e7:71:5b:e6:e6:4e:9d:2d:cf:5f: 3b:d9:f3:32:5c:15:85:6a:09:f1:62:92:11:55:b6: 55:26:38:c2:4a:4b:c7:00:ac:ab:7a:95:45:91:ca: 79:9d:4d:2b:e4:9f:b2:83:e1:cb:63:94:6c:fd:80: 57:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:AA:F5:07:CD:5B:E8:54:D8:89:6F:43:15:5A:DA:11:41:A8:AA:4D X509v3 Authority Key Identifier: keyid:51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:15:de:ed:99:7b:c2:1d:b1:17:e9:24:94:cf:cb:b9:14:16: 53:2f:35:33:6d:e9:91:47:3e:46:ee:7b:77:37:1a:a5:a0:4e: fd:67:fe:72:a2:83:24:57:ce:45:0f:73:1c:68:6b:14:e5:75: d0:c0:d0:df:d0:f8:ff:c1:41:85:74:9b:b6:76:79:95:f8:03: 8c:33:d1:ea:36:49:d2:4c:1f:42:6d:71:da:8f:13:97:03:60: 1f:a4:f0:a2:af:df:f4:c4:96:15:7a:28:70:e1:b2:59:7c:fc: a2:63:eb:6d:be:7a:f4:c6:74:56:a9:38:58:54:17:4d:e5:76: 33:f5:b1:83:ff:90:76:a6:ac:e1:7c:a6:c7:2d:cc:2d:38:b2: ef:13:c1:5f:a3:85:1e:71:d4:c0:df:7c:0f:77:43:1e:a7:37: 28:b0:69:62:eb:7e:33:cf:fd:08:d9:ad:38:6f:be:38:a8:7b: 30:2f:1b:fa:21:6f:72:fc:2a:7e:93:d2:4c:c8:f3:cd:6a:17: 92:b0:c7:67:cb:dd:76:d8:57:36:ff:9e:61:e4:11:58:a8:a1: 02:2a:a1:db:ce:55:7c:88:0c:7d:5b:1c:c5:3d:62:fa:47:7a: 39:cb:79:bd:17:ba:f9:97:d1:c6:c2:23:e8:17:cf:ec:bb:81: 54:ac:21:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZBRkYxMTAvBgNVBAUTKDUxRDUzMUFFRjdBMDg3QzE4RTMwMUUwRTZBMkM2Mzcx QjI2NEMzRTgwHhcNMjYwNTIxMDIyMzEwWhcNMjYwNTI4MDIyMzEwWjAYMRYwFAYD VQQDEw02YTBlNmM4ZS0wMjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7R+Uv0jbiVVGWdlP3U51hHkKqae4SXcp+CeBrFlkrQysP7Bf+R+Gstgf3w7d B5z7dcDuylgTZXpZTMzU0DAsSNVx/IHMyILDWdxvZnllnIwBbk9sQMhVD7sz506V EqhaNLhEGCoAha0LAzLo4kjEKesod4KSlMqWgSlbP7Le7kWfA2eGx6Nv6Iu3Vb5f xDlS6U7m7BB/qqVQEGP8zWX7M3H4yWi4f1yPflAaptTCwFfYApuRs35l6r+k+LLk 0tyX5O+BPfnUH+dxW+bmTp0tz1872fMyXBWFagnxYpIRVbZVJjjCSkvHAKyrepVF kcp5nU0r5J+yg+HLY5Rs/YBXTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCuq9QfN W+hU2IlvQxVa2hFBqKpNMB8GA1UdIwQYMBaAFFHVMa73oIfBjjAeDmosY3GyZMPo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkFGRi9EMDYxMUYwNEND NDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4R09NQjRPYWl4amNiSmt3 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VkVXhydmVnaDhHT01CNE9haXhqY2JKa3ctZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkFGRi9EMDYxMUYwNENDNDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4 R09NQjRPYWl4amNiSmt3LWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYhXe7Zl7wh2xF+kklM/LuRQWUy81M23pkUc+Ru57dzcapaBO/Wf+cqKDJFfO RQ9zHGhrFOV10MDQ39D4/8FBhXSbtnZ5lfgDjDPR6jZJ0kwfQm1x2o8TlwNgH6Tw oq/f9MSWFXoocOGyWXz8omPrbb569MZ0Vqk4WFQXTeV2M/Wxg/+Qdqas4Xymxy3M LTiy7xPBX6OFHnHUwN98D3dDHqc3KLBpYut+M8/9CNmtOG++OKh7MC8b+iFvcvwq fpPSTMjzzWoXkrDHZ8vddthXNv+eYeQRWKihAiqh285VfIgMfVscxT1i+kd6Oct5 vRe6+ZfRxsIj6BfP7LuBVKwhag== -----END CERTIFICATE-----Generated at Thu May 21 10:37:11 2026 by rpki-client