$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft File: tdM6ejKlCC0za2sFt5ZfMHRwonY.mft (raw, json) Hash identifier: 73DYswcF3bpqjfV6Z/r+ITVlGMiTxb4fDwPcjnQc1G8= Subject key identifier: A9:CE:02:A5:19:9F:55:48:E0:4C:2A:EE:56:52:E2:2E:9E:34:7F:CD Authority key identifier: B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 Certificate issuer: /CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Certificate serial: 03FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft Manifest number: 03E6 Signing time: Tue 05 May 2026 00:36:13 +0000 Manifest this update: Tue 05 May 2026 00:36:12 +0000 Manifest next update: Tue 12 May 2026 00:36:12 +0000 Files and hashes: 1: tdM6ejKlCC0za2sFt5ZfMHRwonY.crl (hash: MdendErcZXStMBeBwKrPIhTUaYXM9fD0ixMyZKe2uqE=) 2: D56B4ABED54E11EFAD8C4E52C4F9AE02.roa (hash: GdMrJQOmwecU85NbmUFnrqBWRHWEAMkwnRXidf68flk=) 3: 31521640C6CB11ECB185E43EC4F9AE02.roa (hash: JsxVCM2jhz9Lx7VvZgXYGsgvn7pvcdkyEVtE+jYL+ow=) 4: 69B0C410EC2411EFBE58C381C4F9AE02.roa (hash: jSMX3ABEtZSpyQCFX5+dmu6REmnL6WokXfamqru1uKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 22:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1023 (0x3ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1446, serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276 Validity Not Before: May 5 00:36:12 2026 GMT Not After : May 12 00:36:12 2026 GMT Subject: CN=69f93b7d-49f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6e:a9:4a:62:13:1f:43:a8:7e:75:34:4f:39: 44:97:2d:94:c7:04:4a:bd:d2:46:d9:12:72:d9:88: a2:1c:75:72:85:1f:51:34:d1:f2:8d:fe:5e:c0:53: fe:da:64:25:e8:61:2d:96:6c:bf:49:c5:30:3e:4b: 4d:19:d8:99:e9:8d:0b:29:c8:ad:e5:38:3f:e7:63: c4:26:66:e7:86:cc:a7:de:15:dd:76:28:f0:71:4c: 4f:6d:07:09:ed:c9:cc:05:7b:da:69:9c:a4:79:72: 2b:b6:9c:0e:18:51:0a:f3:e7:e0:d2:5c:ea:99:4a: 25:85:4d:1a:26:a6:8e:15:20:56:02:d4:d9:80:70: 65:e9:2d:ea:6b:6d:7b:bb:14:4b:96:1b:0d:a2:32: 85:1d:bd:be:a6:b1:d7:ed:ae:09:6c:49:a8:1d:6c: 0d:90:b1:97:67:34:04:e3:e3:03:7a:5c:a9:97:c2: 41:21:62:fd:b0:1d:b1:ca:8c:da:e7:0f:56:dd:e3: e7:84:7f:57:82:75:ad:c4:c5:3b:93:4b:c5:58:34: 45:76:fa:1c:be:23:06:59:31:a0:9e:c2:3c:ab:87: b0:ef:35:1d:37:fb:4b:a8:21:7b:04:b6:b7:66:48: 21:21:e5:99:38:f9:95:eb:3e:5a:b9:2b:c0:80:df: 36:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:CE:02:A5:19:9F:55:48:E0:4C:2A:EE:56:52:E2:2E:9E:34:7F:CD X509v3 Authority Key Identifier: keyid:B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:19:cd:90:3b:8a:9d:67:fe:f7:08:4d:cc:05:e1:43:b5:d5: 3f:27:62:53:35:d9:44:79:b0:0a:f4:f6:53:b6:18:4e:d3:c4: 41:53:90:70:d7:91:ec:53:f2:9a:81:9b:2a:96:42:cf:55:19: 92:61:45:cd:66:6c:0b:36:64:93:9f:3e:b8:f2:15:31:db:19: f6:75:0c:41:f6:1a:c3:97:d7:2a:9d:99:f2:70:01:34:01:24: 01:9f:2f:f4:1e:d6:80:f2:8b:e1:f6:af:9b:8a:b6:98:a8:8b: 71:5c:8c:e3:30:36:e6:f7:c0:6a:1a:3e:e1:a7:f7:e3:59:f9: 57:fe:6a:44:0a:90:af:a0:2a:92:6b:a5:73:30:26:4c:e6:17: 24:6e:d0:c3:cd:e6:e8:b4:8e:e2:26:35:0b:38:a2:f3:6e:c5: bb:66:7a:ee:fd:a8:ad:a3:68:a3:7c:62:76:d3:89:bf:c0:57: 22:a4:51:05:93:3d:15:2a:9c:b8:14:6e:98:e0:fb:85:88:fc: 33:41:d5:ab:35:76:1f:7c:6b:e2:9e:da:1f:a3:98:f1:34:74: f9:ed:e5:f1:14:8e:70:81:f8:13:ca:14:e6:75:a5:52:32:7b: bd:d4:04:37:d4:3f:af:1d:eb:b2:3c:75:46:f4:a3:dd:97:16: 5f:7e:e1:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE0NDYxMTAvBgNVBAUTKEI1RDMzQTdBMzJBNTA4MkQzMzZCNkIwNUI3OTY1RjMw NzQ3MEEyNzYwHhcNMjYwNTA1MDAzNjEyWhcNMjYwNTEyMDAzNjEyWjAYMRYwFAYD VQQDEw02OWY5M2I3ZC00OWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3G6pSmITH0OofnU0TzlEly2UxwRKvdJG2RJy2YiiHHVyhR9RNNHyjf5ewFP+ 2mQl6GEtlmy/ScUwPktNGdiZ6Y0LKcit5Tg/52PEJmbnhsyn3hXddijwcUxPbQcJ 7cnMBXvaaZykeXIrtpwOGFEK8+fg0lzqmUolhU0aJqaOFSBWAtTZgHBl6S3qa217 uxRLlhsNojKFHb2+prHX7a4JbEmoHWwNkLGXZzQE4+MDelypl8JBIWL9sB2xyoza 5w9W3ePnhH9XgnWtxMU7k0vFWDRFdvocviMGWTGgnsI8q4ew7zUdN/tLqCF7BLa3 ZkghIeWZOPmV6z5auSvAgN82bwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKnOAqUZ n1VI4Ewq7lZS4i6eNH/NMB8GA1UdIwQYMBaAFLXTOnoypQgtM2trBbeWXzB0cKJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ0Ni8yQTFGRjU2RUM1 MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbENDMHphMnNGdDVaZk1IUndv blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RkTTZlaktsQ0MwemEyc0Z0NVpmTUhSd29uWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTQ0Ni8yQTFGRjU2RUM1MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbEND MHphMnNGdDVaZk1IUndvblkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAShnNkDuKnWf+9whNzAXhQ7XVPydiUzXZRHmwCvT2U7YYTtPEQVOQcNeR7FPy moGbKpZCz1UZkmFFzWZsCzZkk58+uPIVMdsZ9nUMQfYaw5fXKp2Z8nABNAEkAZ8v 9B7WgPKL4favm4q2mKiLcVyM4zA25vfAaho+4af341n5V/5qRAqQr6AqkmulczAm TOYXJG7Qw83m6LSO4iY1Czii827Fu2Z67v2oraNoo3xidtOJv8BXIqRRBZM9FSqc uBRumOD7hYj8M0HVqzV2H3xr4p7aH6OY8TR0+e3l8RSOcIH4E8oU5nWlUjJ7vdQE N9Q/rx3rsjx1RvSj3ZcWX37hjA== -----END CERTIFICATE-----Generated at Tue May 5 20:11:13 2026 by rpki-client