$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft File: ER6YG60wGDD3weWQzBqotIImDtg.mft (raw, json) Hash identifier: 5fOTaXJW03iD02wkPWlyHEwEJEYQDQ4GiEngQGMfpGY= Subject key identifier: AD:E0:24:CB:4D:64:FD:81:42:2F:A6:14:65:5A:69:1C:5C:36:FA:EE Authority key identifier: 11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8 Certificate issuer: /CN=A91F0FE2/serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8 Certificate serial: 1CF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft Manifest number: 1CDC Signing time: Wed 20 May 2026 16:09:10 +0000 Manifest this update: Wed 20 May 2026 16:09:10 +0000 Manifest next update: Wed 27 May 2026 16:09:10 +0000 Files and hashes: 1: ER6YG60wGDD3weWQzBqotIImDtg.crl (hash: JipqgweU0ptesbFZjMiEws3O1jfWBxWg28zi5AYqSOU=) 2: 20C4803669A011EA9055BD0EC4F9AE02.roa (hash: cZ+rsKEwY27r1nNBdSw0EFhAO0NUVYDXLIIfTM0BpuM=) 3: 14564AB0E83311E6A72DC543C4F9AE02.roa (hash: yeTkxTdBgNi4XQcUnG+Z1pVZk+XziWDEhTeQDqhiWOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 16:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7417 (0x1cf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0FE2, serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8 Validity Not Before: May 20 16:09:10 2026 GMT Not After : May 27 16:09:10 2026 GMT Subject: CN=6a0ddca6-9ccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:de:7d:d4:d8:8b:ed:f8:05:d6:03:d9:f4:5b: 1f:13:e5:55:e4:8e:c3:e5:93:9f:06:4c:7e:67:32: 15:56:29:69:a9:63:94:0e:64:be:db:a0:02:d4:bb: 39:45:8c:32:a1:11:56:03:bd:a7:81:4e:48:c2:9f: 78:12:6e:be:4f:23:f4:29:b0:2a:0e:9c:53:68:7b: 09:4c:83:6c:74:81:0b:d6:0f:44:c0:c0:fd:60:ee: 5d:81:c9:00:df:15:db:72:41:e7:ed:c9:e2:2d:42: 0e:d8:24:fc:17:38:8f:ed:13:b1:51:20:d9:87:69: ee:00:62:97:59:2f:5d:34:9e:3d:37:a1:76:23:1d: 12:12:a5:8e:36:6b:30:90:01:1e:95:fc:50:5a:6b: 73:43:4c:88:5f:73:8a:57:99:86:54:39:43:6c:0a: 29:e9:ff:bf:0e:4d:a9:d4:05:54:8d:44:19:d3:ce: 7e:29:8a:50:a3:fc:e9:df:72:98:49:de:f5:2c:ac: 02:b9:dc:5d:9f:ad:93:4c:72:57:10:90:48:2b:d8: b3:f1:c8:0f:cc:8c:da:fb:42:66:11:7b:5b:ed:54: 74:4a:1e:f2:7d:de:b2:55:d0:cd:49:d1:24:80:b6: a8:e9:12:b7:69:44:c2:a5:29:cc:eb:87:38:17:39: 15:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E0:24:CB:4D:64:FD:81:42:2F:A6:14:65:5A:69:1C:5C:36:FA:EE X509v3 Authority Key Identifier: keyid:11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:45:10:e0:33:e9:df:af:aa:20:4b:ae:e8:35:4a:8a:3e:20: 93:67:95:73:fa:63:a6:35:be:37:b1:18:15:2d:01:ac:15:9d: 7c:f4:ac:08:80:0c:cc:67:86:20:c5:50:1f:cd:2f:78:13:ac: 5c:5f:0d:a4:93:ac:e7:62:0a:f3:b7:8d:fd:b1:50:c4:1c:5e: 09:da:df:f6:5b:0d:ff:22:9b:86:7a:ce:ee:d0:b4:b0:93:8a: 39:52:18:33:1e:04:0c:af:c8:58:ae:d1:f7:db:4f:b3:b9:39: b1:af:68:40:25:a7:21:fa:61:80:5e:e7:9c:bd:12:91:97:99: 54:86:fa:e7:3b:36:15:51:50:67:13:92:3b:19:ce:9f:89:38: b7:65:78:7d:ec:dd:05:59:e5:1d:71:90:aa:59:ea:9b:27:c2: 41:12:d5:77:23:41:ce:cc:42:d7:b0:32:80:c4:cb:b3:fb:b9: 8a:f4:bc:9c:08:e1:f9:7b:ed:dc:00:f9:61:49:e2:94:f3:46: 60:2a:f7:87:42:08:6c:b8:de:6c:d9:18:11:1d:1b:5d:79:cf: 34:bf:d7:40:cd:ce:98:8b:66:97:48:ce:7e:1d:5f:36:1c:25: ba:48:8a:6b:85:86:eb:0c:78:64:22:85:86:37:1c:13:9d:b9: d5:eb:63:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGRTIxMTAvBgNVBAUTKDExMUU5ODFCQUQzMDE4MzBGN0MxRTU5MENDMUFBOEI0 ODIyNjBFRDgwHhcNMjYwNTIwMTYwOTEwWhcNMjYwNTI3MTYwOTEwWjAYMRYwFAYD VQQDEw02YTBkZGNhNi05Y2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApN591NiL7fgF1gPZ9FsfE+VV5I7D5ZOfBkx+ZzIVVilpqWOUDmS+26AC1Ls5 RYwyoRFWA72ngU5Iwp94Em6+TyP0KbAqDpxTaHsJTINsdIEL1g9EwMD9YO5dgckA 3xXbckHn7cniLUIO2CT8FziP7ROxUSDZh2nuAGKXWS9dNJ49N6F2Ix0SEqWONmsw kAEelfxQWmtzQ0yIX3OKV5mGVDlDbAop6f+/Dk2p1AVUjUQZ085+KYpQo/zp33KY Sd71LKwCudxdn62TTHJXEJBIK9iz8cgPzIza+0JmEXtb7VR0Sh7yfd6yVdDNSdEk gLao6RK3aUTCpSnM64c4FzkVGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK3gJMtN ZP2BQi+mFGVaaRxcNvruMB8GA1UdIwQYMBaAFBEemButMBgw98HlkMwaqLSCJg7Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZFMi8yRkY5QkIyMkU4 MzIxMUU2QkY1MTI4NDJDNEY5QUUwMi9FUjZZRzYwd0dERDN3ZVdRekJxb3RJSW1E dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VSNllHNjB3R0REM3dlV1F6QnFvdElJbUR0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEZFMi8yRkY5QkIyMkU4MzIxMUU2QkY1MTI4NDJDNEY5QUUwMi9FUjZZRzYwd0dE RDN3ZVdRekJxb3RJSW1EdGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe0UQ4DPp36+qIEuu6DVKij4gk2eVc/pjpjW+N7EYFS0BrBWdfPSsCIAMzGeG IMVQH80veBOsXF8NpJOs52IK87eN/bFQxBxeCdrf9lsN/yKbhnrO7tC0sJOKOVIY Mx4EDK/IWK7R99tPs7k5sa9oQCWnIfphgF7nnL0SkZeZVIb65zs2FVFQZxOSOxnO n4k4t2V4fezdBVnlHXGQqlnqmyfCQRLVdyNBzsxC17AygMTLs/u5ivS8nAjh+Xvt 3AD5YUnilPNGYCr3h0IIbLjebNkYER0bXXnPNL/XQM3OmItml0jOfh1fNhwlukiK a4WG6wx4ZCKFhjccE5251etjRw== -----END CERTIFICATE-----Generated at Thu May 21 10:38:31 2026 by rpki-client