$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft File: vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft (raw, json) Hash identifier: E+wZzrptcJ6SZY8AQv3BVmCD/YjZEhI6EGzmbPNfKIA= Subject key identifier: 65:E5:6F:EA:FB:39:7D:63:F7:B2:95:8A:E8:55:86:A6:36:CF:71:31 Authority key identifier: BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F Certificate issuer: /CN=A91F4957/serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F Certificate serial: 022E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft Manifest number: 021F Signing time: Thu 21 May 2026 02:51:17 +0000 Manifest this update: Thu 21 May 2026 02:51:17 +0000 Manifest next update: Thu 28 May 2026 02:51:17 +0000 Files and hashes: 1: vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl (hash: mnfkerr5RLkuALCbFBjUt94H+EucDzCRh8ouuNX+D6E=) 2: F0237E941B1911EE9DFF2942C4F9AE02.roa (hash: gVdmkqx6NMYmCIMvMpCuqPA5iFz+9mSl4sfjYVVq1bo=) 3: 60B707FA1AEA11EE92BEA24CC4F9AE02.roa (hash: bix+YU13i+NYX1fy3wJhfyH3DvlL1GPid8lFNptHhAQ=) 4: 4231A1AA1B1711EEA5566A23C4F9AE02.roa (hash: f29LIF15y9c4pRVyaia3pQoiL6xkSmloi7OnCo+ktB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:51:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 558 (0x22e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4957, serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F Validity Not Before: May 21 02:51:17 2026 GMT Not After : May 28 02:51:17 2026 GMT Subject: CN=6a0e7325-c08b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:06:f6:ea:fb:7b:da:08:3a:a7:5e:75:e6:8e: 15:1f:31:9e:10:7f:1c:7d:86:29:76:89:ad:f3:33: 3a:0a:24:f0:6e:e5:64:7a:62:3e:fa:d1:32:68:2d: 47:18:84:51:c8:a8:e8:4c:29:8e:fd:98:f1:48:69: b1:69:50:18:1a:66:6f:00:a4:58:90:ed:01:27:36: 98:f9:d2:17:35:54:bd:93:ae:c5:06:e9:19:d3:0e: 9a:9f:25:b2:e6:aa:76:41:f7:da:69:ff:d5:4f:dd: 7f:65:e0:76:92:25:63:bd:b9:a5:3b:8f:d6:04:75: 96:34:95:18:dd:20:82:e4:87:08:25:96:91:fa:dd: 85:5b:0b:6c:91:2b:08:90:60:01:ba:4f:53:77:d1: d8:ad:86:ee:9d:5b:06:1a:3d:b6:9c:ec:27:1a:69: 9b:bd:44:ab:4f:8b:f9:71:fc:9b:ba:95:96:66:c7: 54:6e:bf:1b:34:15:34:3e:61:63:b1:b8:fc:5c:f8: 52:57:8b:9e:6f:83:74:fc:62:59:dd:6a:73:4d:b9: 03:d9:4e:44:7b:0e:24:dd:45:1a:21:b4:00:34:6b: 75:75:1b:a3:32:24:33:b4:1a:0e:dc:e0:e2:26:dd: d0:68:d1:a1:0f:60:d2:52:12:34:b6:66:67:61:b3: f1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E5:6F:EA:FB:39:7D:63:F7:B2:95:8A:E8:55:86:A6:36:CF:71:31 X509v3 Authority Key Identifier: keyid:BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:f0:62:d2:31:26:42:04:3f:ec:c9:24:94:1e:6c:14:0a:de: cb:ec:69:0e:9b:00:3d:70:29:ca:c8:3a:f8:a0:1f:33:b2:c9: 10:7e:eb:32:f6:e8:59:cf:95:43:36:14:71:44:75:12:9c:f0: bf:ef:ec:d6:21:99:e9:36:3e:f1:b0:09:01:54:2c:cb:27:4a: f7:64:fc:f2:57:2c:b3:8c:aa:e9:1c:b6:bd:22:23:63:b8:f5: fd:65:8c:50:0b:6f:ae:07:82:4f:ad:d4:e4:f1:b5:9c:73:4d: a5:e1:6d:6c:38:76:6b:fc:f5:b6:9a:c0:30:0c:cd:31:72:99: 46:d4:e9:2e:0a:df:9a:c6:4d:ea:81:03:bf:02:e0:07:2c:be: 73:a9:8b:71:2f:a8:ad:7d:43:c2:c5:c0:78:39:07:b4:b4:b1: c1:5c:82:31:2d:15:92:54:33:37:9f:d1:f1:87:65:c2:c2:62: 42:db:2b:9f:1f:db:ed:c2:b7:2e:b4:9a:f3:22:1a:f2:30:98: ed:a3:18:ba:29:d2:f5:1c:83:ab:79:18:a6:13:06:39:23:42: 5d:09:a3:8c:f6:c0:43:fb:58:e9:77:13:96:7e:f5:e5:46:b7: 20:32:b9:6f:e2:82:c1:36:76:93:d7:b9:8c:93:0b:44:cf:ea: 44:f5:68:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ5NTcxMTAvBgNVBAUTKEJGMkQxQjM5RDNDMkU5QUUwQUE4RkFCOTRCQUM1NDBD QzUyNjUyNEYwHhcNMjYwNTIxMDI1MTE3WhcNMjYwNTI4MDI1MTE3WjAYMRYwFAYD VQQDEw02YTBlNzMyNS1jMDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAb26vt72gg6p1515o4VHzGeEH8cfYYpdomt8zM6CiTwbuVkemI++tEyaC1H GIRRyKjoTCmO/ZjxSGmxaVAYGmZvAKRYkO0BJzaY+dIXNVS9k67FBukZ0w6anyWy 5qp2Qffaaf/VT91/ZeB2kiVjvbmlO4/WBHWWNJUY3SCC5IcIJZaR+t2FWwtskSsI kGABuk9Td9HYrYbunVsGGj22nOwnGmmbvUSrT4v5cfybupWWZsdUbr8bNBU0PmFj sbj8XPhSV4ueb4N0/GJZ3WpzTbkD2U5Eew4k3UUaIbQANGt1dRujMiQztBoO3ODi Jt3QaNGhD2DSUhI0tmZnYbPxLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGXlb+r7 OX1j97KViuhVhqY2z3ExMB8GA1UdIwQYMBaAFL8tGznTwumuCqj6uUusVAzFJlJP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDk1Ny81NzFCMjIxMDFB RTcxMUVFOERENEI5NDlDNEY5QUUwMi92eTBiT2RQQzZhNEtxUHE1UzZ4VURNVW1V azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z5MGJPZFBDNmE0S3FQcTVTNnhVRE1VbVVrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDk1Ny81NzFCMjIxMDFBRTcxMUVFOERENEI5NDlDNEY5QUUwMi92eTBiT2RQQzZh NEtxUHE1UzZ4VURNVW1VazgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgfBi0jEmQgQ/7MkklB5sFArey+xpDpsAPXApysg6+KAfM7LJEH7rMvboWc+V QzYUcUR1Epzwv+/s1iGZ6TY+8bAJAVQsyydK92T88lcss4yq6Ry2vSIjY7j1/WWM UAtvrgeCT63U5PG1nHNNpeFtbDh2a/z1tprAMAzNMXKZRtTpLgrfmsZN6oEDvwLg Byy+c6mLcS+orX1DwsXAeDkHtLSxwVyCMS0VklQzN5/R8YdlwsJiQtsrnx/b7cK3 LrSa8yIa8jCY7aMYuinS9RyDq3kYphMGOSNCXQmjjPbAQ/tY6XcTln715Ua3IDK5 b+KCwTZ2k9e5jJMLRM/qRPVoIA== -----END CERTIFICATE-----Generated at Thu May 21 10:52:51 2026 by rpki-client