$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft File: tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft (raw, json) Hash identifier: M76ocZ0MQbNJzc54qBlpE1geH6bOt3MLlZI1EQchSsU= Subject key identifier: D1:75:FE:04:9A:32:DB:87:8F:B7:85:59:CC:BE:E8:13:28:21:FC:92 Authority key identifier: B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE Certificate issuer: /CN=A91FD38A/serialNumber=B620A9C4963766CC3C58060694922E9F678811DE Certificate serial: 0D0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft Manifest number: 0CFC Signing time: Wed 20 May 2026 18:16:06 +0000 Manifest this update: Wed 20 May 2026 18:16:05 +0000 Manifest next update: Wed 27 May 2026 18:16:05 +0000 Files and hashes: 1: tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl (hash: P/yzc57/cS1daSpVVkInNm1r32smDEluCrkM5iuRg3Q=) 2: AA5D86B2381311EA998E103FC4F9AE02.roa (hash: 1fv3/pXl5lcDYoLzTz47KptyfQ/fj025AndBgH7ATRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:16:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3340 (0xd0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD38A, serialNumber=B620A9C4963766CC3C58060694922E9F678811DE Validity Not Before: May 20 18:16:05 2026 GMT Not After : May 27 18:16:05 2026 GMT Subject: CN=6a0dfa66-271a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:88:42:2c:8f:c2:88:5a:5c:be:e7:91:c0:a3: ee:c1:60:c6:47:5d:15:47:46:6c:3b:82:c5:58:a6: c9:a9:b7:35:27:65:66:19:4e:88:a7:6d:0b:62:f5: 68:f0:55:fb:3a:06:e9:a6:da:91:ac:c0:81:bc:f4: 69:f9:62:27:4c:d3:9a:db:44:fd:62:d6:ea:e1:9f: 0e:69:82:ce:47:c3:b5:56:4b:6e:9d:d1:ba:0f:e4: a3:13:16:19:af:44:b3:ff:7d:05:06:07:85:3a:18: 21:a5:2e:5c:86:38:fb:fe:df:6a:28:2d:f2:d4:6b: 0d:35:6d:ec:74:7e:a7:14:7a:1b:0a:f4:6d:c1:6c: 55:4d:6b:58:c2:f4:c6:98:23:91:23:4b:44:f1:fd: b7:3a:ef:e8:20:14:7f:82:57:27:79:f1:67:57:bd: 58:de:f7:12:5d:8c:74:0b:dd:4f:ad:4f:be:3c:3f: f1:dd:67:07:60:af:8b:26:81:56:6b:b5:db:33:36: 73:50:a7:03:6a:60:83:e4:eb:f0:8c:3f:ad:08:86: a8:51:09:1b:65:cb:ca:cb:d5:7f:da:11:d6:b4:17: fb:78:ca:8d:8b:5a:52:c2:08:2b:9c:e1:ac:3f:cc: 85:44:05:59:c5:fd:da:08:10:5a:31:13:61:40:fc: 67:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:75:FE:04:9A:32:DB:87:8F:B7:85:59:CC:BE:E8:13:28:21:FC:92 X509v3 Authority Key Identifier: keyid:B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:0a:4f:a5:56:90:e7:3b:50:4b:49:39:a2:d7:06:ca:ee:4a: df:34:e9:82:68:92:13:6c:4b:e6:89:54:a0:9a:b8:f3:ae:7c: 7d:17:f1:51:86:84:41:fd:af:98:2a:fb:51:ca:08:7b:e9:ec: b3:6c:08:4d:5d:4a:8d:68:f5:cb:23:62:e1:fd:e3:cd:56:99: 25:12:ca:6c:54:9a:3e:e7:64:88:78:36:a5:5d:de:6c:8c:1d: fc:78:29:27:ad:4d:80:60:48:5b:98:27:c5:06:c0:90:e0:31: 98:de:c7:85:d8:9c:9c:b4:6d:72:78:34:2d:8b:6c:bb:d3:0d: a1:4d:de:c0:11:7e:c3:e0:53:46:f2:21:5b:53:5b:cd:5e:92: 08:dd:dc:98:54:d5:b0:3e:27:ce:94:c4:a6:31:89:c4:0a:d5: 5e:5b:db:c7:44:9b:e3:ea:ae:a2:d4:1b:1d:8f:63:97:b1:cc: ec:0e:ac:fc:34:5a:d8:c0:bd:44:92:46:4c:2e:a5:a3:98:9d: 7b:6c:a4:61:00:58:0e:3e:92:c9:97:59:8e:4c:28:d9:0d:c5: 40:95:0e:78:ad:53:7b:f3:f1:7b:4f:65:2b:32:39:9a:28:34: 31:f8:07:4b:db:b5:b2:b1:60:59:b6:13:3e:07:0b:a5:7b:a8: 09:2c:ab:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQzOEExMTAvBgNVBAUTKEI2MjBBOUM0OTYzNzY2Q0MzQzU4MDYwNjk0OTIyRTlG Njc4ODExREUwHhcNMjYwNTIwMTgxNjA1WhcNMjYwNTI3MTgxNjA1WjAYMRYwFAYD VQQDEw02YTBkZmE2Ni0yNzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYhCLI/CiFpcvueRwKPuwWDGR10VR0ZsO4LFWKbJqbc1J2VmGU6Ip20LYvVo 8FX7OgbpptqRrMCBvPRp+WInTNOa20T9Ytbq4Z8OaYLOR8O1VktundG6D+SjExYZ r0Sz/30FBgeFOhghpS5chjj7/t9qKC3y1GsNNW3sdH6nFHobCvRtwWxVTWtYwvTG mCORI0tE8f23Ou/oIBR/glcnefFnV71Y3vcSXYx0C91PrU++PD/x3WcHYK+LJoFW a7XbMzZzUKcDamCD5OvwjD+tCIaoUQkbZcvKy9V/2hHWtBf7eMqNi1pSwggrnOGs P8yFRAVZxf3aCBBaMRNhQPxn1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNF1/gSa MtuHj7eFWcy+6BMoIfySMB8GA1UdIwQYMBaAFLYgqcSWN2bMPFgGBpSSLp9niBHe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDM4QS85QUVGMTdCRTA1 RjQxMUVBODg2QTNDMjNDNEY5QUUwMi90aUNweEpZM1pzdzhXQVlHbEpJdW4yZUlF ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpQ3B4SlkzWnN3OFdBWUdsSkl1bjJlSUVkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDM4QS85QUVGMTdCRTA1RjQxMUVBODg2QTNDMjNDNEY5QUUwMi90aUNweEpZM1pz dzhXQVlHbEpJdW4yZUlFZDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlApPpVaQ5ztQS0k5otcGyu5K3zTpgmiSE2xL5olUoJq48658fRfxUYaEQf2v mCr7UcoIe+nss2wITV1KjWj1yyNi4f3jzVaZJRLKbFSaPudkiHg2pV3ebIwd/Hgp J61NgGBIW5gnxQbAkOAxmN7HhdicnLRtcng0LYtsu9MNoU3ewBF+w+BTRvIhW1Nb zV6SCN3cmFTVsD4nzpTEpjGJxArVXlvbx0Sb4+quotQbHY9jl7HM7A6s/DRa2MC9 RJJGTC6lo5ide2ykYQBYDj6SyZdZjkwo2Q3FQJUOeK1Te/Pxe09lKzI5mig0MfgH S9u1srFgWbYTPgcLpXuoCSyrVA== -----END CERTIFICATE-----Generated at Thu May 21 09:38:15 2026 by rpki-client