$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft File: RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft (raw, json) Hash identifier: w38y6HQ2UOjxN/f+cIAWZyV9+LYkrGA7Y/SqRvfoHU0= Subject key identifier: 2D:BA:4E:E5:99:23:3B:A4:18:B4:FB:69:4D:92:3A:52:41:03:B8:6E Authority key identifier: 44:F8:D1:53:B7:7B:09:2B:11:ED:F0:0A:93:E4:BB:64:09:1C:24:47 Certificate issuer: /CN=A91F3C11/serialNumber=44F8D153B77B092B11EDF00A93E4BB64091C2447 Certificate serial: 0A3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft Manifest number: 0A3D Signing time: Wed 20 May 2026 14:59:41 +0000 Manifest this update: Wed 20 May 2026 14:59:41 +0000 Manifest next update: Wed 27 May 2026 14:59:41 +0000 Files and hashes: 1: RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl (hash: NzILTGpK7VoerwdicQxSBUaoNojwgeetGnxIitnAMX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 14:59:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2621 (0xa3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3C11, serialNumber=44F8D153B77B092B11EDF00A93E4BB64091C2447 Validity Not Before: May 20 14:59:41 2026 GMT Not After : May 27 14:59:41 2026 GMT Subject: CN=6a0dcc5d-77d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:65:1d:d8:c0:f8:5d:8a:be:c9:5c:96:d0:da: a8:e0:9c:16:d6:71:95:b7:68:86:30:c6:af:03:8a: 02:98:cd:ff:33:3c:57:6d:5e:1a:14:2c:b5:fa:8a: 6f:8e:e9:cf:32:03:c6:03:39:ec:8c:7a:af:35:58: e5:e7:f6:f9:53:d6:92:c1:2d:42:9d:5e:d9:c9:1f: 4f:83:23:89:57:77:a3:b1:65:74:85:e1:3b:fb:d2: 3d:ea:9e:90:71:60:27:a2:d5:f2:a7:55:41:19:c9: ab:ea:9b:0f:2a:6f:94:77:cd:5f:ab:ac:0c:45:c1: f1:b0:45:36:1f:8a:28:ef:e4:64:c4:1e:90:1a:9d: a5:7c:ac:82:af:48:64:15:2a:29:5b:96:06:50:75: bc:b9:7b:9b:41:de:7a:b0:9f:3d:1c:0a:2f:45:0a: b2:9c:98:94:7d:87:b9:74:b5:d0:25:bc:12:45:94: 28:cb:2b:86:31:0b:35:b8:c3:81:cf:4b:59:03:dc: 10:67:37:00:7f:63:68:86:72:23:f2:c0:25:b1:b1: 8f:3b:ad:9c:fa:7a:e4:b8:85:19:65:69:67:48:50: 06:c6:e6:5b:24:70:65:33:b0:74:1c:26:b8:6a:bc: 0b:8c:37:58:e8:95:30:83:7a:a5:95:23:94:f7:09: ff:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:BA:4E:E5:99:23:3B:A4:18:B4:FB:69:4D:92:3A:52:41:03:B8:6E X509v3 Authority Key Identifier: keyid:44:F8:D1:53:B7:7B:09:2B:11:ED:F0:0A:93:E4:BB:64:09:1C:24:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:3c:92:19:21:40:a9:78:76:51:95:3e:e1:fe:ab:f5:2c:05: 40:6d:c0:82:fc:8a:51:52:75:3c:5b:0a:ad:bf:12:70:ea:b3: 31:01:0e:73:aa:d0:05:1c:31:75:05:01:5e:5b:9a:78:ed:c0: 8d:7f:3f:0d:a9:7a:25:45:6c:f0:c5:79:a0:b1:b7:9d:3f:c8: 1f:c1:a2:d3:e0:a4:90:ef:ed:a8:34:68:94:f4:c8:72:27:72: 06:ae:8a:bd:d4:a1:e7:e5:4d:ec:8c:3a:e4:87:26:a9:e7:d1: 57:30:32:db:8c:17:67:0a:a3:19:2d:85:08:20:2d:80:8c:ea: b6:d3:cd:fa:55:af:f9:02:50:0c:cf:14:ab:24:f4:6d:7e:cd: ca:d4:ca:0c:ea:72:ae:eb:1f:c3:df:61:be:6b:a1:cb:ff:0b: 80:f4:11:41:54:dc:0b:42:6c:c2:f8:8f:8f:9d:b1:c4:c5:a5: c9:1a:2d:79:f0:14:3d:3f:ca:65:49:e4:c6:2a:77:dd:f2:fe: 73:f7:9c:04:85:19:46:d1:51:83:66:0f:56:13:04:5c:95:ae: 81:44:87:a7:50:63:ff:3a:74:7a:fa:40:c9:b2:ea:8f:81:47: 69:56:13:b4:1d:3f:91:c3:f1:a1:f9:65:3f:af:38:b9:9b:2a: 03:40:36:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNDMTExMTAvBgNVBAUTKDQ0RjhEMTUzQjc3QjA5MkIxMUVERjAwQTkzRTRCQjY0 MDkxQzI0NDcwHhcNMjYwNTIwMTQ1OTQxWhcNMjYwNTI3MTQ1OTQxWjAYMRYwFAYD VQQDEw02YTBkY2M1ZC03N2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmUd2MD4XYq+yVyW0Nqo4JwW1nGVt2iGMMavA4oCmM3/MzxXbV4aFCy1+opv junPMgPGAznsjHqvNVjl5/b5U9aSwS1CnV7ZyR9PgyOJV3ejsWV0heE7+9I96p6Q cWAnotXyp1VBGcmr6psPKm+Ud81fq6wMRcHxsEU2H4oo7+RkxB6QGp2lfKyCr0hk FSopW5YGUHW8uXubQd56sJ89HAovRQqynJiUfYe5dLXQJbwSRZQoyyuGMQs1uMOB z0tZA9wQZzcAf2NohnIj8sAlsbGPO62c+nrkuIUZZWlnSFAGxuZbJHBlM7B0HCa4 arwLjDdY6JUwg3qllSOU9wn/KwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC26TuWZ IzukGLT7aU2SOlJBA7huMB8GA1UdIwQYMBaAFET40VO3ewkrEe3wCpPku2QJHCRH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0MxMS81MTk4RkI5NjhG N0IxMUVBOUFDQjdFN0ZDNEY5QUUwMi9SUGpSVTdkN0NTc1I3ZkFLay1TN1pBa2NK RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JQalJVN2Q3Q1NzUjdmQUtrLVM3WkFrY0pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0MxMS81MTk4RkI5NjhGN0IxMUVBOUFDQjdFN0ZDNEY5QUUwMi9SUGpSVTdkN0NT c1I3ZkFLay1TN1pBa2NKRWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAITySGSFAqXh2UZU+4f6r9SwFQG3AgvyKUVJ1PFsKrb8ScOqzMQEOc6rQBRwx dQUBXluaeO3AjX8/Dal6JUVs8MV5oLG3nT/IH8Gi0+CkkO/tqDRolPTIcidyBq6K vdSh5+VN7Iw65IcmqefRVzAy24wXZwqjGS2FCCAtgIzqttPN+lWv+QJQDM8UqyT0 bX7NytTKDOpyrusfw99hvmuhy/8LgPQRQVTcC0JswviPj52xxMWlyRotefAUPT/K ZUnkxip33fL+c/ecBIUZRtFRg2YPVhMEXJWugUSHp1Bj/zp0evpAybLqj4FHaVYT tB0/kcPxofllP684uZsqA0A22A== -----END CERTIFICATE-----Generated at Thu May 21 10:14:51 2026 by rpki-client