$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.mft File: 1Wz2TW3K-RDHsSyJshA4B3RrpuE.mft (raw, json) Hash identifier: NgsZRDH2Y7RezbxcdfBsXD90yl/dmddX5Z6zPYO8nxQ= Subject key identifier: C6:48:08:6F:C6:7E:D3:3E:18:79:A6:1B:EA:CF:CB:35:E3:67:66:F6 Authority key identifier: D5:6C:F6:4D:6D:CA:F9:10:C7:B1:2C:89:B2:10:38:07:74:6B:A6:E1 Certificate issuer: /CN=A91FBC9F/serialNumber=D56CF64D6DCAF910C7B12C89B2103807746BA6E1 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Wz2TW3K-RDHsSyJshA4B3RrpuE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.mft Manifest number: 36 Signing time: Tue 19 May 2026 08:33:12 +0000 Manifest this update: Tue 19 May 2026 08:33:12 +0000 Manifest next update: Tue 26 May 2026 08:33:12 +0000 Files and hashes: 1: 1Wz2TW3K-RDHsSyJshA4B3RrpuE.crl (hash: DS3t7tZxr/Ut5WV92tqR2LRhIYP/qV3Bp26D9xPtKdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.crl rsync://rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Wz2TW3K-RDHsSyJshA4B3RrpuE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:33:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBC9F, serialNumber=D56CF64D6DCAF910C7B12C89B2103807746BA6E1 Validity Not Before: May 19 08:33:12 2026 GMT Not After : May 26 08:33:12 2026 GMT Subject: CN=6a0c2048-4c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:86:97:ca:c0:f9:15:2c:10:6a:3d:41:6c:52: 8c:2e:4e:bf:5c:c4:fa:e9:60:aa:3e:b3:26:7b:0a: 75:ac:26:2a:14:75:14:b6:05:62:e6:e3:1e:1a:05: b8:5d:c9:2f:4e:70:13:3b:a2:77:10:62:2b:98:1f: 17:7c:8f:53:f7:32:ed:47:c8:cc:0b:c3:e1:46:da: 4d:18:2e:9a:61:e5:01:7e:b7:dc:4a:9d:e0:e5:0f: 63:0d:b2:83:ef:98:b3:50:64:02:17:c1:5e:a4:c9: c9:bf:e9:a4:e3:fc:79:57:95:0a:2b:b7:66:29:12: 9a:b3:c8:fe:86:48:51:ff:ad:28:26:db:5c:68:38: e1:a1:99:4f:a0:ff:49:bb:00:59:36:87:ea:d8:ca: 68:09:62:72:08:b6:79:a1:6b:90:9c:55:c6:f5:5a: 5d:2e:69:ff:bc:f1:e5:d3:61:8d:9f:d7:6c:38:8a: 49:db:7f:ae:87:d6:c3:81:2b:c5:3d:0a:4d:62:21: 82:3c:3d:80:3f:af:37:67:7d:36:e5:e5:40:3d:50: 6c:44:6d:c0:26:63:8b:4a:5f:4e:e0:0d:94:ae:76: b7:b9:06:99:ff:d8:58:9f:69:83:3d:c3:06:bb:9e: b2:5f:5e:35:3f:55:2f:cd:1c:37:99:65:2f:73:85: 53:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:48:08:6F:C6:7E:D3:3E:18:79:A6:1B:EA:CF:CB:35:E3:67:66:F6 X509v3 Authority Key Identifier: keyid:D5:6C:F6:4D:6D:CA:F9:10:C7:B1:2C:89:B2:10:38:07:74:6B:A6:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Wz2TW3K-RDHsSyJshA4B3RrpuE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:02:05:83:84:ef:cd:54:48:02:72:4e:80:bc:f0:18:c3:b5: e4:60:b1:14:a1:d9:af:a8:da:a4:10:16:32:03:bb:a6:aa:9f: 98:c3:5e:6a:35:95:a1:7c:90:df:ea:96:d3:ca:89:b6:54:33: 62:9e:be:e2:5d:64:fb:2b:68:79:61:1b:e5:00:48:85:c7:db: 7d:00:58:88:87:f1:ed:5c:50:47:76:74:c1:6d:5a:c8:10:36: 66:44:a0:43:6b:94:25:d3:31:e9:6d:87:ea:f5:1b:02:3c:fc: 57:a1:aa:3c:62:ab:dc:58:04:47:ef:57:f2:9f:4e:c9:3a:0c: 0e:1f:bb:63:9e:d0:e6:cb:32:e0:15:06:63:fe:9a:51:57:0f: ee:ec:22:df:02:b0:8a:7d:e5:f9:21:9b:b4:fd:ef:70:b4:92: 84:cc:88:ae:b6:c4:18:6c:72:92:df:53:a7:1e:dd:3a:0e:31: d9:b3:ac:fa:59:55:99:25:1d:67:60:95:d3:ae:12:65:8d:47: f4:3c:ac:e2:37:b1:00:c2:11:12:ae:12:34:85:63:08:a6:e1: b4:b9:cc:fe:ec:5d:39:69:ea:0e:af:cc:e2:6f:52:86:db:57: fc:b2:f7:e5:52:96:70:19:a9:79:aa:d9:2d:dd:25:62:52:96: 15:48:81:90 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QkM5RjExMC8GA1UEBRMoRDU2Q0Y2NEQ2RENBRjkxMEM3QjEyQzg5QjIxMDM4MDc3 NDZCQTZFMTAeFw0yNjA1MTkwODMzMTJaFw0yNjA1MjYwODMzMTJaMBgxFjAUBgNV BAMTDTZhMGMyMDQ4LTRjOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9hpfKwPkVLBBqPUFsUowuTr9cxPrpYKo+syZ7CnWsJioUdRS2BWLm4x4aBbhd yS9OcBM7oncQYiuYHxd8j1P3Mu1HyMwLw+FG2k0YLpph5QF+t9xKneDlD2MNsoPv mLNQZAIXwV6kycm/6aTj/HlXlQort2YpEpqzyP6GSFH/rSgm21xoOOGhmU+g/0m7 AFk2h+rYymgJYnIItnmha5CcVcb1Wl0uaf+88eXTYY2f12w4iknbf66H1sOBK8U9 Ck1iIYI8PYA/rzdnfTbl5UA9UGxEbcAmY4tKX07gDZSudre5Bpn/2FifaYM9wwa7 nrJfXjU/VS/NHDeZZS9zhVNPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUxkgIb8Z+ 0z4YeaYb6s/LNeNnZvYwHwYDVR0jBBgwFoAU1Wz2TW3K+RDHsSyJshA4B3RrpuEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCQzlGLzY1NTk0QzlDMEQ4 MDExRjE5MjBCM0EwRTI0M0Q4QzY3LzFXejJUVzNLLVJESHNTeUpzaEE0QjNScnB1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMVd6MlRXM0stUkRIc1N5SnNoQTRCM1JycHVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC QzlGLzY1NTk0QzlDMEQ4MDExRjE5MjBCM0EwRTI0M0Q4QzY3LzFXejJUVzNLLVJE SHNTeUpzaEE0QjNScnB1RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCAAgWDhO/NVEgCck6AvPAYw7XkYLEUodmvqNqkEBYyA7umqp+Yw15qNZWhfJDf 6pbTyom2VDNinr7iXWT7K2h5YRvlAEiFx9t9AFiIh/HtXFBHdnTBbVrIEDZmRKBD a5Ql0zHpbYfq9RsCPPxXoao8YqvcWARH71fyn07JOgwOH7tjntDmyzLgFQZj/ppR Vw/u7CLfArCKfeX5IZu0/e9wtJKEzIiutsQYbHKS31OnHt06DjHZs6z6WVWZJR1n YJXTrhJljUf0PKziN7EAwhESrhI0hWMIpuG0ucz+7F05aeoOr8zib1KG21f8svfl UpZwGal5qtkt3SViUpYVSIGQ -----END CERTIFICATE-----Generated at Thu May 21 10:20:21 2026 by rpki-client