$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft File: iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft (raw, json) Hash identifier: nX6+ClCLmQOWWRIYClbB9QC7QJHX7QCMTlpw8d64/uc= Subject key identifier: 4D:28:1B:FA:70:A5:8D:AE:74:C6:9D:71:AC:44:32:53:23:81:03:68 Authority key identifier: 89:48:09:63:09:56:92:43:82:CC:39:D4:60:FA:47:64:B0:17:59:34 Certificate issuer: /CN=A91F2046/serialNumber=894809630956924382CC39D460FA4764B0175934 Certificate serial: 0CB6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft Manifest number: 0CAC Signing time: Wed 20 May 2026 18:31:40 +0000 Manifest this update: Wed 20 May 2026 18:31:40 +0000 Manifest next update: Wed 27 May 2026 18:31:40 +0000 Files and hashes: 1: iUgJYwlWkkOCzDnUYPpHZLAXWTQ.crl (hash: lmxpWem4jdL6HKq1mK2JPYbuVPkrV3+XK07XLqQHVLw=) 2: 0D2573FA173E11EA947B2976C4F9AE02.roa (hash: Sez/a2sgGSbWwvJeQPZUS5uIi1mmZfqNVL6dsISb/6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.crl rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:31:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3254 (0xcb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2046, serialNumber=894809630956924382CC39D460FA4764B0175934 Validity Not Before: May 20 18:31:40 2026 GMT Not After : May 27 18:31:40 2026 GMT Subject: CN=6a0dfe0c-9a62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1a:41:34:e3:c4:82:a3:3b:55:be:96:10:ab: 36:28:f2:17:ad:fd:f3:33:b5:16:fd:ca:25:1b:22: 63:09:3c:39:54:dd:46:98:2c:a6:58:16:39:bf:0c: 72:69:f4:cb:41:9c:ee:ac:01:96:d2:d0:5d:54:c6: d5:65:0c:66:a9:6e:f3:d2:5b:50:1f:94:75:f1:7e: c6:24:93:a8:36:18:05:82:a8:8c:60:9d:c7:c0:29: 6d:6c:97:97:db:58:f5:4c:0b:1d:0f:b9:dc:02:b6: c7:3c:a7:00:0b:a6:2e:85:3e:e9:7a:0b:19:d8:21: ff:20:28:3a:5c:ce:09:db:04:ab:db:35:c1:eb:0e: 57:78:4c:22:65:a2:d8:05:ab:9b:36:c3:8b:ad:06: 47:76:2c:8b:2e:93:f1:d6:c7:b0:1d:64:9a:d8:ab: 5d:8c:10:6d:86:76:3a:f8:d6:eb:c7:92:a8:5f:ec: f2:a3:61:cf:88:d2:cb:49:f3:78:77:7b:c3:d2:33: ab:86:c1:b3:e6:22:ce:70:82:65:00:ee:79:72:c1: 35:0c:1e:85:8b:be:e2:c3:34:11:ba:83:40:2a:b7: 6c:07:64:9a:47:98:09:e1:b6:c6:78:71:1f:b8:6c: d0:63:ff:2f:17:0c:45:d4:cd:88:ff:5b:bc:ed:19: 48:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:28:1B:FA:70:A5:8D:AE:74:C6:9D:71:AC:44:32:53:23:81:03:68 X509v3 Authority Key Identifier: keyid:89:48:09:63:09:56:92:43:82:CC:39:D4:60:FA:47:64:B0:17:59:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:f9:75:ad:e7:fa:e8:a7:ff:6b:85:c6:2f:98:d4:62:97:92: f2:a6:9e:e1:9c:e3:7a:7e:50:57:16:5c:54:6f:fe:67:40:35: 4d:84:5c:81:ae:c7:69:01:d1:0f:a6:bb:dd:b7:f5:25:c4:68: e5:a9:22:88:35:fb:8f:6a:26:27:81:1c:96:a8:52:f1:60:31: 24:3a:74:d4:70:ee:2d:91:d2:37:67:8e:5b:f9:be:2f:ff:6f: 4e:6b:f6:e3:36:cc:6b:ba:fc:c0:be:56:88:22:95:27:9f:6a: 9d:ba:01:c9:d1:e6:1f:91:a2:3f:a4:92:51:b8:db:41:af:2c: 70:04:91:dc:45:cd:87:99:74:7f:3c:21:ce:c5:81:a0:1a:7c: 72:bf:73:02:22:05:9c:72:d4:43:84:0a:19:0e:94:66:ab:3c: 7d:ae:3e:be:6c:f5:60:09:e2:d4:14:24:17:92:20:4c:c9:5d: 55:be:b8:c4:44:84:f0:28:30:db:c5:1a:40:5c:6b:50:8e:dd: 92:0a:7a:20:b3:ce:1b:6a:14:46:7e:23:66:c6:c4:da:9a:33: 40:25:75:ca:e5:5b:7e:ce:68:67:54:5c:38:14:5f:1f:8b:5d: 57:d1:e5:14:3d:4b:a4:c6:e2:eb:db:93:e4:7a:66:1c:80:19: 90:93:c1:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIwNDYxMTAvBgNVBAUTKDg5NDgwOTYzMDk1NjkyNDM4MkNDMzlENDYwRkE0NzY0 QjAxNzU5MzQwHhcNMjYwNTIwMTgzMTQwWhcNMjYwNTI3MTgzMTQwWjAYMRYwFAYD VQQDEw02YTBkZmUwYy05YTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBpBNOPEgqM7Vb6WEKs2KPIXrf3zM7UW/colGyJjCTw5VN1GmCymWBY5vwxy afTLQZzurAGW0tBdVMbVZQxmqW7z0ltQH5R18X7GJJOoNhgFgqiMYJ3HwCltbJeX 21j1TAsdD7ncArbHPKcAC6YuhT7pegsZ2CH/ICg6XM4J2wSr2zXB6w5XeEwiZaLY BaubNsOLrQZHdiyLLpPx1sewHWSa2KtdjBBthnY6+Nbrx5KoX+zyo2HPiNLLSfN4 d3vD0jOrhsGz5iLOcIJlAO55csE1DB6Fi77iwzQRuoNAKrdsB2SaR5gJ4bbGeHEf uGzQY/8vFwxF1M2I/1u87RlI6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE0oG/pw pY2udMadcaxEMlMjgQNoMB8GA1UdIwQYMBaAFIlICWMJVpJDgsw51GD6R2SwF1k0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjA0Ni8zRkIwMkFFMjE0 RDUxMUVBODEyNjQwMERDNEY5QUUwMi9pVWdKWXdsV2trT0N6RG5VWVBwSFpMQVhX VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lVZ0pZd2xXa2tPQ3pEblVZUHBIWkxBWFdUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjA0Ni8zRkIwMkFFMjE0RDUxMUVBODEyNjQwMERDNEY5QUUwMi9pVWdKWXdsV2tr T0N6RG5VWVBwSFpMQVhXVFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANvl1ref66Kf/a4XGL5jUYpeS8qae4Zzjen5QVxZcVG/+Z0A1TYRcga7HaQHR D6a73bf1JcRo5akiiDX7j2omJ4EclqhS8WAxJDp01HDuLZHSN2eOW/m+L/9vTmv2 4zbMa7r8wL5WiCKVJ59qnboBydHmH5GiP6SSUbjbQa8scASR3EXNh5l0fzwhzsWB oBp8cr9zAiIFnHLUQ4QKGQ6UZqs8fa4+vmz1YAni1BQkF5IgTMldVb64xESE8Cgw 28UaQFxrUI7dkgp6ILPOG2oURn4jZsbE2pozQCV1yuVbfs5oZ1RcOBRfH4tdV9Hl FD1LpMbi69uT5HpmHIAZkJPBdw== -----END CERTIFICATE-----Generated at Thu May 21 10:28:06 2026 by rpki-client