$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft File: pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft (raw, json) Hash identifier: UOENrq9mLEAhVKDJAQ3WstvBdsbIdGewFLr/WqawNJU= Subject key identifier: AF:56:20:D3:3D:19:06:FE:E7:B8:9E:7D:4C:F9:12:03:46:75:A7:BE Authority key identifier: A5:D9:C6:A6:F9:67:5B:91:CE:54:D1:15:F8:8C:94:10:F1:8F:90:FE Certificate issuer: /CN=A91FC9FE/serialNumber=A5D9C6A6F9675B91CE54D115F88C9410F18F90FE Certificate serial: 023B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdnGpvlnW5HOVNEV-IyUEPGPkP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft Manifest number: 0230 Signing time: Thu 21 May 2026 02:40:45 +0000 Manifest this update: Thu 21 May 2026 02:40:45 +0000 Manifest next update: Thu 28 May 2026 02:40:45 +0000 Files and hashes: 1: pdnGpvlnW5HOVNEV-IyUEPGPkP4.crl (hash: jv7GZB1h+ZivVON8Ug3axhhtQrfjxhybt0lz2KulJqg=) 2: C5CD32AAE5DC11EE867C6F21C4F9AE02.roa (hash: aTa0Ex+ed/6RoAGLJRjFgmZUYz8uz7xIClALbDUey8s=) 3: C6AA9D48E5DC11EE867C6F21C4F9AE02.roa (hash: hO6PbUNEUDYDx8q2G2jC3TNcZMOAduJffHd5z5YsA5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.crl rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdnGpvlnW5HOVNEV-IyUEPGPkP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:40:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 571 (0x23b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC9FE, serialNumber=A5D9C6A6F9675B91CE54D115F88C9410F18F90FE Validity Not Before: May 21 02:40:45 2026 GMT Not After : May 28 02:40:45 2026 GMT Subject: CN=6a0e70ad-fd93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:95:6e:af:3d:e4:5c:8d:8f:e6:c0:6a:06:f3: db:57:f5:99:b0:a9:da:20:c8:e9:54:8f:62:c4:00: 5e:81:eb:59:d5:fb:11:0d:63:34:81:b2:2f:ad:14: 86:d2:0c:b0:64:eb:c0:25:da:be:fb:6f:d5:e8:03: cc:1d:0c:1d:3b:4b:7f:b6:f8:51:53:de:a0:b0:82: f1:f4:bb:d5:5e:33:75:17:10:bc:a1:8d:dd:be:72: 68:ab:a8:43:7c:5a:32:74:7b:80:ce:0a:77:20:e2: 41:8f:74:6b:e7:ff:ce:20:e9:4e:df:fe:de:6f:01: fb:8c:3a:26:90:a1:d2:00:40:ab:0b:e6:4c:8d:44: 02:c8:ef:46:d2:c7:d0:03:8b:e5:41:c2:50:99:5c: 24:f4:e6:1f:ee:d8:00:30:36:c0:29:1c:45:7d:3d: a6:9a:76:21:b5:6a:3d:1a:c9:79:11:54:50:4e:6b: 65:67:8f:ea:f0:22:28:ea:29:8b:15:55:05:79:d5: 1c:b3:90:57:80:37:5d:91:02:a2:f1:8e:8f:3e:c5: ce:39:c4:9d:f1:ce:a2:70:07:cd:d1:4c:06:a1:69: db:f6:62:17:63:9e:7e:16:3a:54:ce:ce:2d:bd:c3: e7:26:c5:b0:e2:c0:75:7d:b1:3e:63:71:5f:ed:d4: d3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:56:20:D3:3D:19:06:FE:E7:B8:9E:7D:4C:F9:12:03:46:75:A7:BE X509v3 Authority Key Identifier: keyid:A5:D9:C6:A6:F9:67:5B:91:CE:54:D1:15:F8:8C:94:10:F1:8F:90:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdnGpvlnW5HOVNEV-IyUEPGPkP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC9FE/53CB690CFDE211ED9D2D1F68C4F9AE02/pdnGpvlnW5HOVNEV-IyUEPGPkP4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:55:33:23:34:2b:fe:f2:4b:83:a5:3a:31:7a:1a:87:0c:85: ad:d0:6d:a7:ea:33:7f:48:29:0e:88:50:ca:61:f6:3e:df:d9: 1b:52:0f:00:c9:61:4c:8a:c5:bf:de:db:a3:f5:54:ab:cd:1d: aa:6a:ff:0d:c9:ed:97:23:83:52:d0:ad:c8:43:57:22:c0:2a: d9:88:56:28:98:a3:a4:5b:29:29:0d:1b:3d:f2:88:cd:b4:65: 30:ad:4b:40:79:07:bb:90:c7:47:d4:25:b3:c3:cc:b0:94:9b: a4:47:ba:2f:9c:44:07:59:50:b7:b0:57:71:eb:5f:69:b2:85: 3f:a0:6f:f1:95:74:38:f2:ac:ec:6f:5c:41:ec:be:b6:2f:14: 60:08:98:a5:fd:66:ad:b1:86:54:d4:89:ad:79:27:6b:98:01: e7:94:72:97:15:62:97:4a:ca:2e:18:f0:2c:22:2b:40:be:fa: ee:1d:4f:d1:c5:e0:40:78:a6:6c:87:ab:0b:e8:bc:93:ef:ea: c1:9e:b7:2c:78:15:f4:a5:22:90:2c:89:84:6c:47:cb:6c:d2: 43:ba:d3:8f:2b:27:9b:41:07:1f:25:10:59:41:a8:7a:b6:73: 3f:34:ae:87:c3:b4:ce:90:c6:16:2a:51:3a:10:35:fb:47:8e: 3f:8e:8a:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM5RkUxMTAvBgNVBAUTKEE1RDlDNkE2Rjk2NzVCOTFDRTU0RDExNUY4OEM5NDEw RjE4RjkwRkUwHhcNMjYwNTIxMDI0MDQ1WhcNMjYwNTI4MDI0MDQ1WjAYMRYwFAYD VQQDEw02YTBlNzBhZC1mZDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJVurz3kXI2P5sBqBvPbV/WZsKnaIMjpVI9ixABegetZ1fsRDWM0gbIvrRSG 0gywZOvAJdq++2/V6APMHQwdO0t/tvhRU96gsILx9LvVXjN1FxC8oY3dvnJoq6hD fFoydHuAzgp3IOJBj3Rr5//OIOlO3/7ebwH7jDomkKHSAECrC+ZMjUQCyO9G0sfQ A4vlQcJQmVwk9OYf7tgAMDbAKRxFfT2mmnYhtWo9Gsl5EVRQTmtlZ4/q8CIo6imL FVUFedUcs5BXgDddkQKi8Y6PPsXOOcSd8c6icAfN0UwGoWnb9mIXY55+FjpUzs4t vcPnJsWw4sB1fbE+Y3Ff7dTT5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK9WINM9 GQb+57iefUz5EgNGdae+MB8GA1UdIwQYMBaAFKXZxqb5Z1uRzlTRFfiMlBDxj5D+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzlGRS81M0NCNjkwQ0ZE RTIxMUVEOUQyRDFGNjhDNEY5QUUwMi9wZG5HcHZsblc1SE9WTkVWLUl5VUVQR1Br UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BkbkdwdmxuVzVIT1ZORVYtSXlVRVBHUGtQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzlGRS81M0NCNjkwQ0ZERTIxMUVEOUQyRDFGNjhDNEY5QUUwMi9wZG5HcHZsblc1 SE9WTkVWLUl5VUVQR1BrUDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiVUzIzQr/vJLg6U6MXoahwyFrdBtp+ozf0gpDohQymH2Pt/ZG1IPAMlhTIrF v97bo/VUq80dqmr/DcntlyODUtCtyENXIsAq2YhWKJijpFspKQ0bPfKIzbRlMK1L QHkHu5DHR9Qls8PMsJSbpEe6L5xEB1lQt7BXcetfabKFP6Bv8ZV0OPKs7G9cQey+ ti8UYAiYpf1mrbGGVNSJrXkna5gB55RylxVil0rKLhjwLCIrQL767h1P0cXgQHim bIerC+i8k+/qwZ63LHgV9KUikCyJhGxHy2zSQ7rTjysnm0EHHyUQWUGoerZzPzSu h8O0zpDGFipROhA1+0eOP46Kzw== -----END CERTIFICATE-----Generated at Thu May 21 10:18:05 2026 by rpki-client