$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft File: TnVPewjIAAZ84HEJetOUaJDao2U.mft (raw, json) Hash identifier: lK13uykwDckXTjjeZUX2GGUHxD04SMKTinxqFozc24o= Subject key identifier: 44:0E:DC:93:E1:C3:7B:63:CF:42:99:88:07:4F:85:5C:EF:90:31:91 Authority key identifier: 4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65 Certificate issuer: /CN=A91F4B3F/serialNumber=4E754F7B08C800067CE071097AD3946890DAA365 Certificate serial: 0200 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft Manifest number: 01FA Signing time: Thu 21 May 2026 03:13:18 +0000 Manifest this update: Thu 21 May 2026 03:13:18 +0000 Manifest next update: Thu 28 May 2026 03:13:18 +0000 Files and hashes: 1: TnVPewjIAAZ84HEJetOUaJDao2U.crl (hash: SuwRhsLr6lXWKBRr2jtgvmjdspSh4rz9MJa+/+oc9PE=) 2: D875D57EF30611EEAFFC0C66C4F9AE02.roa (hash: dLUeKe6QaZ4GPKIE3nlD7SGlABym7P6qS+9RNwN3OQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 03:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4B3F, serialNumber=4E754F7B08C800067CE071097AD3946890DAA365 Validity Not Before: May 21 03:13:18 2026 GMT Not After : May 28 03:13:18 2026 GMT Subject: CN=6a0e784e-f9f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c6:87:eb:ed:36:7f:c7:53:ea:79:11:ad:75: bf:55:e2:36:a1:f6:51:18:ea:c2:e6:42:bd:ae:80: c3:79:e4:31:30:7e:a2:8d:83:1b:48:89:3a:7b:0e: 6b:b6:06:9e:24:cd:ff:75:bc:e8:a2:9f:50:a8:d3: af:a6:93:ee:38:e5:a5:68:31:32:b0:ef:a4:89:9c: 08:69:67:b7:10:53:5c:a5:04:19:9d:08:e3:e9:a6: 01:26:bc:93:f4:b5:2f:92:64:d4:7a:f2:52:91:29: dd:99:92:c3:a4:da:19:b9:27:b5:43:64:1b:1b:61: ea:fe:ce:7d:62:37:fa:f8:db:06:32:e2:5c:d2:46: f1:64:57:74:0f:20:b2:a7:85:60:71:42:9f:d6:a6: 23:e8:0e:ee:e3:6d:76:a4:7e:d6:fd:e5:03:42:5b: 81:7b:01:6f:a7:7b:c5:a0:68:a5:b6:35:c1:39:6a: e2:65:57:bd:b3:4c:bc:e1:53:11:9f:7b:ea:4c:21: 9f:e9:1a:bb:70:99:1b:42:4c:0c:68:4c:f8:71:36: 84:7d:b0:47:27:a3:a5:9f:38:6c:b7:96:c5:72:73: 04:03:38:20:82:10:4f:c1:5e:f7:04:be:38:bb:8e: 68:ac:10:74:a7:cb:2d:91:0d:1a:5e:7a:8d:a2:8c: 99:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:0E:DC:93:E1:C3:7B:63:CF:42:99:88:07:4F:85:5C:EF:90:31:91 X509v3 Authority Key Identifier: keyid:4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:47:0e:c1:c8:0c:59:6a:65:35:82:5f:f3:7d:33:17:33:6d: 1f:4f:3e:1d:e5:1b:9f:19:d5:fa:eb:6e:a8:3c:ec:f5:28:7b: b7:6a:f2:8c:0e:e5:af:56:4a:a7:3e:d9:cb:44:87:5c:a2:c6: ac:a6:00:86:b4:e8:f5:99:af:d3:31:29:40:55:6c:fb:d4:a5: 67:5f:7d:9d:b9:1f:bc:ed:2b:be:ac:d5:bc:3c:1e:68:03:4d: 9a:6e:27:ed:ac:39:e6:c0:69:0b:c7:9e:ec:01:33:f7:78:44: 32:81:63:2d:80:cc:73:aa:3f:ff:cb:17:01:2e:44:1c:cc:eb: 44:46:65:d7:28:7f:e9:55:76:8b:0b:f8:6f:eb:39:2c:7e:0d: e9:0e:ad:07:be:b2:a8:75:5e:e7:a3:ad:12:de:35:3b:6d:2e: 4f:32:c2:ae:09:cb:89:30:82:31:47:24:fc:22:a9:9e:e0:0f: 80:af:26:8d:6f:e8:2d:bb:d0:09:2e:fe:4d:08:b8:a3:53:3e: 61:6c:46:ad:b4:6a:43:c6:60:b0:ce:25:d9:e6:59:a1:ca:bf: e3:66:11:03:5e:22:08:b0:8c:68:65:01:9c:04:4b:9c:c3:cd: dc:c0:bb:7f:10:c6:61:30:78:6a:e7:f3:51:b6:cf:5a:29:08: 1e:55:be:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCM0YxMTAvBgNVBAUTKDRFNzU0RjdCMDhDODAwMDY3Q0UwNzEwOTdBRDM5NDY4 OTBEQUEzNjUwHhcNMjYwNTIxMDMxMzE4WhcNMjYwNTI4MDMxMzE4WjAYMRYwFAYD VQQDEw02YTBlNzg0ZS1mOWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA38aH6+02f8dT6nkRrXW/VeI2ofZRGOrC5kK9roDDeeQxMH6ijYMbSIk6ew5r tgaeJM3/dbzoop9QqNOvppPuOOWlaDEysO+kiZwIaWe3EFNcpQQZnQjj6aYBJryT 9LUvkmTUevJSkSndmZLDpNoZuSe1Q2QbG2Hq/s59Yjf6+NsGMuJc0kbxZFd0DyCy p4VgcUKf1qYj6A7u4212pH7W/eUDQluBewFvp3vFoGiltjXBOWriZVe9s0y84VMR n3vqTCGf6Rq7cJkbQkwMaEz4cTaEfbBHJ6Olnzhst5bFcnMEAzggghBPwV73BL44 u45orBB0p8stkQ0aXnqNooyZbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEQO3JPh w3tjz0KZiAdPhVzvkDGRMB8GA1UdIwQYMBaAFE51T3sIyAAGfOBxCXrTlGiQ2qNl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIzRi8xQ0RGODdFNDUx NjAxMUVFQjBBNTgyNkFDNEY5QUUwMi9UblZQZXdqSUFBWjg0SEVKZXRPVWFKRGFv MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RuVlBld2pJQUFaODRIRUpldE9VYUpEYW8yVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEIzRi8xQ0RGODdFNDUxNjAxMUVFQjBBNTgyNkFDNEY5QUUwMi9UblZQZXdqSUFB Wjg0SEVKZXRPVWFKRGFvMlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMEcOwcgMWWplNYJf830zFzNtH08+HeUbnxnV+utuqDzs9Sh7t2ryjA7lr1ZK pz7Zy0SHXKLGrKYAhrTo9Zmv0zEpQFVs+9SlZ199nbkfvO0rvqzVvDweaANNmm4n 7aw55sBpC8ee7AEz93hEMoFjLYDMc6o//8sXAS5EHMzrREZl1yh/6VV2iwv4b+s5 LH4N6Q6tB76yqHVe56OtEt41O20uTzLCrgnLiTCCMUck/CKpnuAPgK8mjW/oLbvQ CS7+TQi4o1M+YWxGrbRqQ8ZgsM4l2eZZocq/42YRA14iCLCMaGUBnARLnMPN3MC7 fxDGYTB4aufzUbbPWikIHlW+vQ== -----END CERTIFICATE-----Generated at Thu May 21 10:14:01 2026 by rpki-client