$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft File: -pTeOQiOw4pStpInmkLEr_tbc7E.mft (raw, json) Hash identifier: oxVMnb0ukJ+KjSRNwjWi91jjod1O1gUgA3flAJZmy8Q= Subject key identifier: A8:9E:12:81:C1:A8:5F:C3:13:7C:9D:0B:E4:5A:0C:CE:2E:A8:4F:D0 Authority key identifier: FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1 Certificate issuer: /CN=A91FEE70/serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1 Certificate serial: 0CFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft Manifest number: 0CE2 Signing time: Wed 20 May 2026 18:22:12 +0000 Manifest this update: Wed 20 May 2026 18:22:12 +0000 Manifest next update: Wed 27 May 2026 18:22:12 +0000 Files and hashes: 1: -pTeOQiOw4pStpInmkLEr_tbc7E.crl (hash: dp5mWar9tBxRyn2y82rSieG0k1aeUWCo1GdUPXpBqn4=) 2: 33B6385E09E911EAA0C05451C4F9AE02.roa (hash: APn+F9xRovOSeD45jGA8svXtlMxctUkywPcao3lKdl4=) 3: B69D3A2A8AA711EB876EF84BC4F9AE02.roa (hash: liqudEt944TPxlO6q13NxIFzhm26td/UszwH+GlqOU0=) 4: B74426C88AA711EB876EF84BC4F9AE02.roa (hash: JgU3uHMLD1/j7W/OT0+XPxyyEVVhRjsVefR9u0vp7DA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:22:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3323 (0xcfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEE70, serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1 Validity Not Before: May 20 18:22:12 2026 GMT Not After : May 27 18:22:12 2026 GMT Subject: CN=6a0dfbd4-643f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:58:f4:78:46:1d:58:9a:ef:7f:90:36:55:41: 30:da:55:de:29:ae:5b:36:5a:3f:62:2a:86:17:18: 5e:e2:6b:0a:3b:08:5f:86:d7:ff:0a:32:ab:21:7b: ee:ca:e1:fb:39:33:cb:2e:31:76:1b:c9:51:72:3b: bb:e3:82:3a:90:5d:ad:40:7c:d4:b0:c6:4a:ca:ff: e5:d3:2c:6f:85:3a:19:ab:bc:0b:2b:32:7a:ca:45: 04:5f:7e:3b:9e:5f:a2:db:e8:06:ec:09:ba:c6:7b: 70:99:d8:8d:4f:58:53:7e:39:9d:36:81:fb:ee:35: e0:c5:df:36:c9:04:a5:fc:b6:95:8b:e2:5f:36:7d: 82:64:77:15:97:26:cb:1a:83:17:ec:8b:0f:83:a5: 9b:78:99:7a:27:81:30:e1:23:25:be:df:82:92:79: 64:7d:92:d0:4a:94:c1:c5:a0:c4:12:29:44:f7:2a: 49:2a:16:1f:03:86:01:3b:4a:28:ed:b5:0c:17:3e: 1e:9c:22:58:6d:6f:08:3d:61:9d:2c:a8:95:df:77: 59:76:94:e7:62:0f:be:38:30:5e:88:d4:f2:36:98: 2f:f6:65:72:5e:45:ae:4f:34:73:c9:13:2c:ab:a3: f6:18:64:33:70:c5:28:25:76:82:e5:f4:f9:bf:a3: 55:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:9E:12:81:C1:A8:5F:C3:13:7C:9D:0B:E4:5A:0C:CE:2E:A8:4F:D0 X509v3 Authority Key Identifier: keyid:FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:84:27:a2:4c:13:10:70:4e:95:2e:72:71:e6:64:f4:22:13: 93:5b:01:20:51:f9:68:9d:ab:d8:72:64:ff:73:ee:57:37:17: a9:e1:56:bd:56:0a:a3:c6:5c:55:57:a3:a1:5d:7a:b0:55:43: 6d:d2:e2:ef:42:eb:07:84:98:23:8e:dd:7d:4c:a8:24:0d:04: c5:cc:67:e3:33:71:cf:8f:69:52:60:ca:54:d7:29:de:fb:b3: 72:47:a4:7b:47:78:f1:36:ed:37:b9:9d:4c:bb:ff:26:69:d1: 64:17:fd:49:4c:0a:e4:82:d9:be:3e:18:1d:d6:c8:7f:94:df: 44:ef:0f:f4:f6:7b:50:b7:ec:84:0a:6f:0e:04:84:2e:76:f6: e6:13:86:b0:a0:60:75:fd:ea:f9:5d:e8:9f:14:d3:5a:a7:46: 39:01:10:61:56:8b:9d:d5:62:5b:05:6d:d4:62:0f:27:d7:00: d3:4a:53:d2:5e:bb:a0:b7:0a:88:24:f1:11:36:a4:0b:3b:13: d7:bc:b2:4a:88:3e:a7:92:77:e4:ba:d7:58:27:2d:27:3e:58: 94:de:54:7b:a2:db:ac:53:36:91:d9:6a:21:b0:87:a2:48:9f: f5:e7:d1:a4:4c:a1:6e:13:43:9a:c6:08:ed:f5:35:1e:5f:6f: 10:1a:18:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVFNzAxMTAvBgNVBAUTKEZBOTRERTM5MDg4RUMzOEE1MkI2OTIyNzlBNDJDNEFG RkI1QjczQjEwHhcNMjYwNTIwMTgyMjEyWhcNMjYwNTI3MTgyMjEyWjAYMRYwFAYD VQQDEw02YTBkZmJkNC02NDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Fj0eEYdWJrvf5A2VUEw2lXeKa5bNlo/YiqGFxhe4msKOwhfhtf/CjKrIXvu yuH7OTPLLjF2G8lRcju744I6kF2tQHzUsMZKyv/l0yxvhToZq7wLKzJ6ykUEX347 nl+i2+gG7Am6xntwmdiNT1hTfjmdNoH77jXgxd82yQSl/LaVi+JfNn2CZHcVlybL GoMX7IsPg6WbeJl6J4Ew4SMlvt+CknlkfZLQSpTBxaDEEilE9ypJKhYfA4YBO0oo 7bUMFz4enCJYbW8IPWGdLKiV33dZdpTnYg++ODBeiNTyNpgv9mVyXkWuTzRzyRMs q6P2GGQzcMUoJXaC5fT5v6NVvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKieEoHB qF/DE3ydC+RaDM4uqE/QMB8GA1UdIwQYMBaAFPqU3jkIjsOKUraSJ5pCxK/7W3Ox MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUU3MC8wOTEwRDFBMDA5 RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0cFN0cElubWtMRXJfdGJj N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1wVGVPUWlPdzRwU3RwSW5ta0xFcl90YmM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUU3MC8wOTEwRDFBMDA5RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0 cFN0cElubWtMRXJfdGJjN0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD4QnokwTEHBOlS5yceZk9CITk1sBIFH5aJ2r2HJk/3PuVzcXqeFWvVYKo8Zc VVejoV16sFVDbdLi70LrB4SYI47dfUyoJA0Excxn4zNxz49pUmDKVNcp3vuzckek e0d48TbtN7mdTLv/JmnRZBf9SUwK5ILZvj4YHdbIf5TfRO8P9PZ7ULfshApvDgSE Lnb25hOGsKBgdf3q+V3onxTTWqdGOQEQYVaLndViWwVt1GIPJ9cA00pT0l67oLcK iCTxETakCzsT17yySog+p5J35LrXWCctJz5YlN5Ue6LbrFM2kdlqIbCHokif9efR pEyhbhNDmsYI7fU1Hl9vEBoYZw== -----END CERTIFICATE-----Generated at Fri May 22 15:07:31 2026 by rpki-client