$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft File: _I1R2lNSEj3a5jdlZPjVaB2ksxw.mft (raw, json) Hash identifier: pyswD5B9GmP/cj41fVa+c3ymqx3Ow0TdRA0cr35Fjmo= Subject key identifier: 2A:5F:BF:3D:03:88:55:CB:5F:28:B6:E2:D5:29:9A:C3:5B:FE:B5:5A Authority key identifier: FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C Certificate issuer: /CN=A91FCB3B/serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C Certificate serial: 0214 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft Manifest number: 020E Signing time: Thu 21 May 2026 03:00:59 +0000 Manifest this update: Thu 21 May 2026 03:00:58 +0000 Manifest next update: Thu 28 May 2026 03:00:58 +0000 Files and hashes: 1: _I1R2lNSEj3a5jdlZPjVaB2ksxw.crl (hash: sH4D+bWkHfgw0hjIz8a0s97+LcVoGisdqgayGGueomk=) 2: C9763EB431D811EE89285A41C4F9AE02.roa (hash: 615JmX9cruG++rabOl7xOJVJY/bjLhdXzPxbybiBquw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 03:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCB3B, serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C Validity Not Before: May 21 03:00:58 2026 GMT Not After : May 28 03:00:58 2026 GMT Subject: CN=6a0e756b-5791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f8:7e:f1:d8:08:11:53:5e:c8:1f:f4:a8:6a: 99:3a:3f:47:3b:19:f0:46:d7:6a:6a:e9:10:8d:29: c9:45:59:28:e2:b8:82:fd:17:fb:64:24:3e:ec:48: 09:e3:28:0a:cb:10:cf:5e:18:54:4d:16:37:b7:9c: 48:22:18:22:23:ff:f4:d6:d9:c4:c1:cb:74:cd:5c: 90:d7:d6:6f:55:71:14:1e:ee:75:3b:4d:1f:cf:99: b6:94:1a:14:58:26:d6:30:b7:76:10:6a:cd:d7:1d: 99:3b:14:29:aa:02:8b:b3:86:c3:19:10:6c:d9:e2: 67:e7:24:c4:23:ca:48:17:42:99:a1:93:7d:ec:2c: 88:06:73:8f:98:00:01:2b:6e:94:f4:52:a7:bd:fe: b0:44:67:44:0b:3d:31:a8:b3:aa:f4:6a:a4:ef:e0: 10:6f:26:92:39:f6:68:4b:fb:dc:8c:be:32:5d:23: 00:97:9b:43:2e:a0:50:ca:40:a8:59:85:93:36:c4: 94:2a:35:74:07:b0:08:e4:c7:70:b8:f7:43:08:5a: a3:0d:0f:63:8d:f2:02:29:8d:86:f2:c8:90:1c:cf: ed:87:12:03:c3:22:30:f4:76:64:3e:a0:4a:24:86: 8f:2b:3a:92:80:a8:65:8e:e3:3a:66:d4:09:4b:a7: 97:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:5F:BF:3D:03:88:55:CB:5F:28:B6:E2:D5:29:9A:C3:5B:FE:B5:5A X509v3 Authority Key Identifier: keyid:FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:aa:78:5c:5f:7d:4b:72:37:33:46:9e:e4:35:3b:d5:0b:b5: 4c:92:de:e6:8e:f0:0e:10:37:2d:71:d3:99:27:a3:69:d5:c3: d9:6d:90:07:fe:2e:d2:6b:5f:75:f6:0c:d8:b8:2c:7c:c3:7d: b1:e1:f7:99:43:92:a8:11:53:65:ef:2d:f2:52:7e:90:8a:12: 4b:16:27:71:13:43:d2:76:84:f4:47:b4:26:a1:70:ec:f9:5d: da:40:17:73:d8:3d:96:88:7d:89:57:71:49:48:3f:05:79:c2: db:30:bc:1a:a1:cb:71:61:b6:5a:e5:01:43:6f:45:76:6d:31: 5c:48:b0:d1:79:69:b5:1a:1f:69:86:96:32:32:59:ed:83:78: 24:e0:c0:56:02:a2:8c:8a:00:50:80:7f:b4:8b:9e:cd:2b:49: 6f:82:b5:52:b2:13:0e:9d:8c:41:6e:76:76:16:e6:31:c9:e4: ce:f9:56:2e:6c:ed:3f:82:f3:ce:84:44:c0:dc:88:5e:c4:c5: b2:ee:1b:ae:f1:fc:13:c1:df:29:ab:71:0b:d4:8b:b0:d0:a8: 9b:24:d6:1b:57:a3:af:c7:3f:bc:e1:90:d5:e9:b9:50:74:e9: 60:7c:30:bd:4f:01:a9:bd:c2:4b:53:20:d9:d2:1a:aa:59:d3: 8c:af:94:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNCM0IxMTAvBgNVBAUTKEZDOEQ1MURBNTM1MjEyM0REQUU2Mzc2NTY0RjhENTY4 MURBNEIzMUMwHhcNMjYwNTIxMDMwMDU4WhcNMjYwNTI4MDMwMDU4WjAYMRYwFAYD VQQDEw02YTBlNzU2Yi01NzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPh+8dgIEVNeyB/0qGqZOj9HOxnwRtdqaukQjSnJRVko4riC/Rf7ZCQ+7EgJ 4ygKyxDPXhhUTRY3t5xIIhgiI//01tnEwct0zVyQ19ZvVXEUHu51O00fz5m2lBoU WCbWMLd2EGrN1x2ZOxQpqgKLs4bDGRBs2eJn5yTEI8pIF0KZoZN97CyIBnOPmAAB K26U9FKnvf6wRGdECz0xqLOq9Gqk7+AQbyaSOfZoS/vcjL4yXSMAl5tDLqBQykCo WYWTNsSUKjV0B7AI5MdwuPdDCFqjDQ9jjfICKY2G8siQHM/thxIDwyIw9HZkPqBK JIaPKzqSgKhljuM6ZtQJS6eX7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCpfvz0D iFXLXyi24tUpmsNb/rVaMB8GA1UdIwQYMBaAFPyNUdpTUhI92uY3ZWT41WgdpLMc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0IzQi84NjI5QzQzMjMx RDgxMUVFOEJFOUM0NDBDNEY5QUUwMi9fSTFSMmxOU0VqM2E1amRsWlBqVmFCMmtz eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19JMVIybE5TRWozYTVqZGxaUGpWYUIya3N4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0IzQi84NjI5QzQzMjMxRDgxMUVFOEJFOUM0NDBDNEY5QUUwMi9fSTFSMmxOU0Vq M2E1amRsWlBqVmFCMmtzeHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPKp4XF99S3I3M0ae5DU71Qu1TJLe5o7wDhA3LXHTmSejadXD2W2QB/4u0mtf dfYM2LgsfMN9seH3mUOSqBFTZe8t8lJ+kIoSSxYncRND0naE9Ee0JqFw7Pld2kAX c9g9loh9iVdxSUg/BXnC2zC8GqHLcWG2WuUBQ29Fdm0xXEiw0XlptRofaYaWMjJZ 7YN4JODAVgKijIoAUIB/tIuezStJb4K1UrITDp2MQW52dhbmMcnkzvlWLmztP4Lz zoREwNyIXsTFsu4brvH8E8HfKatxC9SLsNComyTWG1ejr8c/vOGQ1em5UHTpYHww vU8Bqb3CS1Mg2dIaqlnTjK+U3A== -----END CERTIFICATE-----Generated at Thu May 21 10:52:25 2026 by rpki-client