$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft File: _lDDhdnrGeLvoU-jWtpb3qW0VtM.mft (raw, json) Hash identifier: //aUcBSGhgumyR4k0uuSGpwBMbU6c+/4dQwcdyikzS0= Subject key identifier: 47:45:E8:2C:C1:D4:28:90:44:66:53:72:5B:9C:5D:40:FA:15:08:06 Authority key identifier: FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3 Certificate issuer: /CN=A91F17B1/serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3 Certificate serial: 064B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft Manifest number: 061E Signing time: Wed 20 May 2026 23:01:38 +0000 Manifest this update: Wed 20 May 2026 23:01:38 +0000 Manifest next update: Wed 27 May 2026 23:01:38 +0000 Files and hashes: 1: _lDDhdnrGeLvoU-jWtpb3qW0VtM.crl (hash: VYpYThg3/BPDiMIsPIGJ2nUQLgpnilYM+hfZ8ZLxfHU=) 2: 65DFCD4A884D11EE8423C486C4F9AE02.roa (hash: bH1L9ZSWpulV/YHi19WJkDCesjZJBYuj3hbuB5QanKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 23:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1611 (0x64b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17B1, serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3 Validity Not Before: May 20 23:01:38 2026 GMT Not After : May 27 23:01:38 2026 GMT Subject: CN=6a0e3d52-a991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:dd:fb:9b:58:81:ca:13:3f:c0:37:fe:b9:ee: 0c:c8:af:e0:ed:9f:66:13:4f:e2:40:ec:f5:c0:7f: 1a:8a:f8:9d:13:8c:ef:54:31:f6:10:c9:8f:7d:1c: bb:e2:26:c2:85:82:f2:a7:e5:74:0f:a0:5f:61:fb: 74:cd:4a:58:ae:ba:6e:77:8d:c2:60:46:77:b9:39: 41:d6:59:6e:22:80:e8:d7:ec:8e:af:42:7d:94:f5: ae:eb:de:15:a1:d4:84:0a:dc:10:9a:26:fa:38:00: 46:10:4b:78:41:91:5b:80:3d:4a:c9:48:d2:26:69: 3e:72:b0:54:c6:19:8e:bf:82:3e:12:27:8c:d9:b7: 1b:eb:0c:72:20:c3:7c:0f:4a:55:1d:53:56:8c:ba: 2e:ba:eb:0e:71:9b:3d:12:1b:b4:b1:42:f6:4b:b8: 40:6c:7b:24:a9:59:19:0a:ce:39:13:56:89:ce:c8: 7e:67:24:1d:0f:a8:7d:7e:11:4c:c6:f6:64:30:74: eb:32:e9:2f:fb:6d:40:96:85:39:20:bf:f1:93:50: 31:a0:d2:c2:0a:db:62:9e:4a:ff:7f:7d:b4:95:1c: 24:1d:a9:33:d6:b4:c1:76:60:97:c0:ea:0a:d5:3c: 69:3c:de:cd:b2:28:74:39:b1:5b:a1:9e:e9:2f:9b: 37:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:45:E8:2C:C1:D4:28:90:44:66:53:72:5B:9C:5D:40:FA:15:08:06 X509v3 Authority Key Identifier: keyid:FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:34:ed:ec:2b:ac:fe:71:2f:d0:94:35:fc:d7:ca:2c:1b:9b: 37:0f:df:2d:40:b5:2e:f1:75:8f:e0:75:64:46:29:a5:8d:d3: 9b:9a:e9:b3:a1:8b:f7:6b:9c:5c:50:a5:fc:a5:43:01:43:94: f1:7d:c8:87:72:9e:b3:14:ac:8b:17:5a:f7:f2:49:ca:03:91: ca:45:5a:84:85:db:af:f8:c8:68:92:cc:d6:b2:0a:31:fe:f3: 31:85:ca:77:0e:ae:46:70:35:8d:64:58:43:32:cf:04:ab:46: 5f:e8:af:9f:ce:9d:60:4d:b9:9a:01:97:e0:a5:46:9e:22:ae: 13:ff:5f:03:22:75:a9:c1:f4:3f:e7:e8:da:92:20:9e:b2:2f: 83:25:75:8f:ce:62:a7:72:01:fa:2b:7b:d9:9c:57:e9:e5:ea: 9e:9b:b0:d2:3e:10:28:e0:41:58:5b:18:37:0a:ed:2e:b8:5b: 8b:3c:75:5d:3c:72:91:9f:2d:10:a7:81:b7:b3:f2:d8:de:ee: cf:3d:72:b1:37:04:03:34:cd:4a:c4:52:39:e9:bb:68:6e:d9: 47:bf:e1:15:b4:ea:a8:7f:92:91:3d:86:d0:31:d6:8f:4b:72: 42:05:40:27:ec:44:55:52:9c:70:46:cd:e2:3c:ea:51:97:fe: 8f:40:6d:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QjExMTAvBgNVBAUTKEZFNTBDMzg1RDlFQjE5RTJFRkExNEZBMzVBREE1QkRF QTVCNDU2RDMwHhcNMjYwNTIwMjMwMTM4WhcNMjYwNTI3MjMwMTM4WjAYMRYwFAYD VQQDEw02YTBlM2Q1Mi1hOTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj937m1iByhM/wDf+ue4MyK/g7Z9mE0/iQOz1wH8aividE4zvVDH2EMmPfRy7 4ibChYLyp+V0D6BfYft0zUpYrrpud43CYEZ3uTlB1lluIoDo1+yOr0J9lPWu694V odSECtwQmib6OABGEEt4QZFbgD1KyUjSJmk+crBUxhmOv4I+EieM2bcb6wxyIMN8 D0pVHVNWjLouuusOcZs9Ehu0sUL2S7hAbHskqVkZCs45E1aJzsh+ZyQdD6h9fhFM xvZkMHTrMukv+21AloU5IL/xk1AxoNLCCttinkr/f320lRwkHakz1rTBdmCXwOoK 1TxpPN7Nsih0ObFboZ7pL5s3FQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEdF6CzB 1CiQRGZTclucXUD6FQgGMB8GA1UdIwQYMBaAFP5Qw4XZ6xni76FPo1raW96ltFbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdCMS82NkU0RTRGNkZC NDAxMUVCQkFCMERBM0JDNEY5QUUwMi9fbEREaGRuckdlTHZvVS1qV3RwYjNxVzBW dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19sRERoZG5yR2VMdm9VLWpXdHBiM3FXMFZ0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTdCMS82NkU0RTRGNkZCNDAxMUVCQkFCMERBM0JDNEY5QUUwMi9fbEREaGRuckdl THZvVS1qV3RwYjNxVzBWdE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEDTt7Cus/nEv0JQ1/NfKLBubNw/fLUC1LvF1j+B1ZEYppY3Tm5rps6GL92uc XFCl/KVDAUOU8X3Ih3KesxSsixda9/JJygORykVahIXbr/jIaJLM1rIKMf7zMYXK dw6uRnA1jWRYQzLPBKtGX+ivn86dYE25mgGX4KVGniKuE/9fAyJ1qcH0P+fo2pIg nrIvgyV1j85ip3IB+it72ZxX6eXqnpuw0j4QKOBBWFsYNwrtLrhbizx1XTxykZ8t EKeBt7Py2N7uzz1ysTcEAzTNSsRSOem7aG7ZR7/hFbTqqH+SkT2G0DHWj0tyQgVA J+xEVVKccEbN4jzqUZf+j0Bt6Q== -----END CERTIFICATE-----Generated at Thu May 21 09:36:39 2026 by rpki-client