$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft File: -WS28tsd8I3d2tR5U1OdnFk9CmY.mft (raw, json) Hash identifier: PfrjLkv/Wc6eOunqWS1/aabjV6GrjJjhZauVLCbpAh0= Subject key identifier: D9:6E:42:0C:28:05:8C:2F:4E:01:71:0F:21:12:66:E6:27:FC:0E:9D Authority key identifier: F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66 Certificate issuer: /CN=A91F0F53/serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66 Certificate serial: 02C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft Manifest number: 02B0 Signing time: Thu 21 May 2026 01:34:31 +0000 Manifest this update: Thu 21 May 2026 01:34:30 +0000 Manifest next update: Thu 28 May 2026 01:34:30 +0000 Files and hashes: 1: -WS28tsd8I3d2tR5U1OdnFk9CmY.crl (hash: K2v6lzurqZxnXrz9KvvhCvU+0ISpOy4oqcrafvdK5vw=) 2: 50AC0FBE329011EEB46D367FC4F9AE02.roa (hash: TRXYmyqIh38BJQpPjdJnxxRS6yMm2jbuDarUopXUSZc=) 3: 051D87824A9A11ED9B9F6E25C4F9AE02.roa (hash: 5RaPjFBnhiFZyA3PtlxXYhV1TZyEd5Mgtbgk5McoTSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 01:34:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 708 (0x2c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0F53, serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66 Validity Not Before: May 21 01:34:30 2026 GMT Not After : May 28 01:34:30 2026 GMT Subject: CN=6a0e6127-a62e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e7:6d:88:9b:28:dc:18:84:dd:e4:d0:e6:2a: bf:c6:ec:70:93:0e:98:10:36:1c:df:27:c3:29:0a: 26:3a:6b:3e:01:83:b4:ad:c8:43:bf:23:54:a8:2c: cf:87:15:4b:87:e2:dc:02:3f:09:2e:11:9b:c1:3b: ec:0d:bc:f4:5f:1b:94:22:37:58:64:64:01:26:82: d4:53:d7:97:db:cc:37:60:8f:41:6e:2f:17:d4:fe: 9d:6d:2a:35:0a:ac:21:ee:24:09:a3:af:36:8c:17: 02:65:df:0b:f2:51:9c:ba:5f:4c:f4:89:d0:2f:c1: 4f:80:d1:1c:e4:b8:fc:60:33:9d:4e:94:04:8d:1f: 02:b9:fa:fa:00:7b:03:9d:58:0c:2c:23:40:b4:ef: 01:b8:7c:b4:84:db:cd:f5:32:09:14:2b:2d:4e:f4: 14:6c:63:0d:f5:65:c3:61:a8:65:f5:bf:6c:27:6f: f1:ee:2f:d8:c4:a5:7d:66:93:a3:10:a7:b5:58:fc: eb:0e:02:9d:f6:8c:f1:64:38:42:f9:7a:50:2f:69: bc:aa:de:c2:4c:c6:53:06:4d:74:10:49:ec:65:22: a7:a8:39:41:45:62:c1:bc:68:93:a8:94:d6:6a:42: 54:71:7c:8c:0e:93:82:77:c4:5a:3d:16:8d:13:27: 35:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6E:42:0C:28:05:8C:2F:4E:01:71:0F:21:12:66:E6:27:FC:0E:9D X509v3 Authority Key Identifier: keyid:F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:03:86:e3:62:db:33:5f:f6:62:d8:39:a6:16:e9:70:17:92: 73:35:81:ed:8b:24:5d:e2:46:14:d9:e8:61:ed:c3:18:f3:26: c4:6e:a5:5d:7a:f7:0c:28:13:9a:f4:cf:70:2f:4a:60:06:78: 66:39:ca:78:1d:3e:6e:7e:5b:d3:96:b9:3e:53:64:82:a9:75: a3:7d:3b:83:e0:15:82:15:dc:68:38:c8:6a:55:d7:31:0a:28: 26:d0:99:50:04:4d:54:dd:55:c2:c7:84:c2:f7:32:86:96:76: 38:2d:04:da:3c:ea:a4:ea:1a:92:bb:53:18:39:2b:64:c9:7e: 95:d6:d3:91:7b:3d:35:c7:3e:d5:8c:cb:f0:a1:55:fe:58:22: eb:79:bc:b4:86:a2:f6:cb:76:81:65:fd:8e:8d:65:d4:e5:94: 33:2b:4e:27:f8:3f:02:25:ef:1f:ac:18:b8:fe:91:2c:ad:52: 84:c2:12:ea:a2:23:5b:a1:a5:be:8c:58:ce:44:fe:62:93:ae: fb:07:5c:14:38:b1:e3:c9:94:f7:28:b5:c7:6d:0f:e9:22:7e: dd:f6:92:2d:58:cc:3f:e7:b1:76:b3:0d:e2:bf:23:fc:11:43: 5b:c6:ca:15:67:d9:48:fc:29:96:05:83:03:2a:b7:88:a1:4c: 20:1d:be:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGNTMxMTAvBgNVBAUTKEY5NjRCNkYyREIxREYwOERERERBRDQ3OTUzNTM5RDlD NTkzRDBBNjYwHhcNMjYwNTIxMDEzNDMwWhcNMjYwNTI4MDEzNDMwWjAYMRYwFAYD VQQDEw02YTBlNjEyNy1hNjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsudtiJso3BiE3eTQ5iq/xuxwkw6YEDYc3yfDKQomOms+AYO0rchDvyNUqCzP hxVLh+LcAj8JLhGbwTvsDbz0XxuUIjdYZGQBJoLUU9eX28w3YI9Bbi8X1P6dbSo1 Cqwh7iQJo682jBcCZd8L8lGcul9M9InQL8FPgNEc5Lj8YDOdTpQEjR8Cufr6AHsD nVgMLCNAtO8BuHy0hNvN9TIJFCstTvQUbGMN9WXDYahl9b9sJ2/x7i/YxKV9ZpOj EKe1WPzrDgKd9ozxZDhC+XpQL2m8qt7CTMZTBk10EEnsZSKnqDlBRWLBvGiTqJTW akJUcXyMDpOCd8RaPRaNEyc1VwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNluQgwo BYwvTgFxDyESZuYn/A6dMB8GA1UdIwQYMBaAFPlktvLbHfCN3drUeVNTnZxZPQpm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEY1My9BMjIzNTJDMjRB OTYxMUVEOTg5MURDMThDNEY5QUUwMi8tV1MyOHRzZDhJM2QydFI1VTFPZG5GazlD bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1XUzI4dHNkOEkzZDJ0UjVVMU9kbkZrOUNtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEY1My9BMjIzNTJDMjRBOTYxMUVEOTg5MURDMThDNEY5QUUwMi8tV1MyOHRzZDhJ M2QydFI1VTFPZG5GazlDbVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXAOG42LbM1/2Ytg5phbpcBeSczWB7YskXeJGFNnoYe3DGPMmxG6lXXr3DCgT mvTPcC9KYAZ4ZjnKeB0+bn5b05a5PlNkgql1o307g+AVghXcaDjIalXXMQooJtCZ UARNVN1VwseEwvcyhpZ2OC0E2jzqpOoakrtTGDkrZMl+ldbTkXs9Ncc+1YzL8KFV /lgi63m8tIai9st2gWX9jo1l1OWUMytOJ/g/AiXvH6wYuP6RLK1ShMIS6qIjW6Gl voxYzkT+YpOu+wdcFDix48mU9yi1x20P6SJ+3faSLVjMP+exdrMN4r8j/BFDW8bK FWfZSPwplgWDAyq3iKFMIB2+aA== -----END CERTIFICATE-----Generated at Thu May 21 09:30:22 2026 by rpki-client