$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft File: o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft (raw, json) Hash identifier: BPa7UCu0xEzXr9/kG3/KXh2IfDS7Xbra6tozKQJx2LQ= Subject key identifier: 28:D2:5C:FE:95:53:97:9E:28:3C:3F:B6:01:0A:A3:B7:9B:E4:34:60 Authority key identifier: A3:8D:48:7B:D5:D9:A8:A8:94:80:27:4F:E6:F7:C0:61:C6:24:BC:C0 Certificate issuer: /CN=A91FEF3B/serialNumber=A38D487BD5D9A8A89480274FE6F7C061C624BCC0 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft Manifest number: EE Signing time: Thu 21 May 2026 06:27:49 +0000 Manifest this update: Thu 21 May 2026 06:27:48 +0000 Manifest next update: Thu 28 May 2026 06:27:48 +0000 Files and hashes: 1: o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl (hash: iG1o40JOr36JrgKRsA3bkJGDgiz7/XnlWEAE2ujWNkQ=) 2: 10800248E9C711EFA1589312C4F9AE02.roa (hash: VpW1ss/FISZUa4YxltnTH36k8qN9hgV+vDjB+vqrTUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 06:27:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEF3B, serialNumber=A38D487BD5D9A8A89480274FE6F7C061C624BCC0 Validity Not Before: May 21 06:27:48 2026 GMT Not After : May 28 06:27:48 2026 GMT Subject: CN=6a0ea5e4-c4d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7a:e8:25:c2:3e:14:5b:74:fa:f3:be:47:2e: b4:6b:a2:5b:7f:b4:6d:8e:61:f8:56:bd:6c:2e:f3: 65:8c:ac:a0:a0:be:ea:64:74:15:4e:02:6a:da:d1: 4f:5e:51:a3:10:86:f1:bc:de:b1:7b:c4:fe:e9:d6: 2e:1d:e7:a0:33:60:67:94:31:05:ad:27:d7:5a:b6: 1a:20:e2:88:cb:39:ba:fa:9b:3a:39:5d:0f:c0:70: 70:34:a9:d4:de:8b:0e:38:74:e2:f6:88:3f:b7:91: 5f:61:52:dc:56:a3:de:28:b7:81:79:b1:d4:b5:a7: 5f:e7:1b:bc:e2:d8:03:eb:7a:3c:8d:6c:19:4c:d7: 6e:19:56:9a:1c:a6:41:7e:3f:7d:84:7a:e3:95:7c: b3:15:dd:79:0f:17:b9:03:32:f0:94:e4:67:c2:82: 05:58:30:af:4f:d2:bf:de:7e:51:56:cc:8c:8e:16: 93:91:78:38:5e:a3:d3:7e:bb:66:24:ca:34:dd:7e: 9c:bc:57:cd:39:90:c0:0a:3a:6d:8d:f8:eb:9c:ee: 47:74:5f:b4:61:dd:2c:ef:8b:a3:94:83:dd:d9:d0: a8:06:2d:dd:c3:00:78:93:9e:ee:28:ac:18:ed:06: b9:2d:61:f2:97:ca:5c:99:f5:a4:3c:52:23:fb:17: b3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D2:5C:FE:95:53:97:9E:28:3C:3F:B6:01:0A:A3:B7:9B:E4:34:60 X509v3 Authority Key Identifier: keyid:A3:8D:48:7B:D5:D9:A8:A8:94:80:27:4F:E6:F7:C0:61:C6:24:BC:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:eb:ac:d5:63:75:89:d1:9e:e9:e3:c9:60:d8:9d:e5:63:ef: db:67:19:ea:a5:31:eb:d3:11:d7:60:37:4e:2e:fc:25:70:6f: 71:86:fd:a8:e1:c5:23:28:51:92:8d:8c:73:7f:6c:ab:77:d3: c6:c1:9f:5f:4d:c2:66:d8:f6:12:27:b0:e2:6c:a2:30:25:0f: 3d:0e:b5:79:52:16:39:65:41:0f:39:f6:b5:6b:22:6a:5d:4a: 65:86:7d:26:2e:2a:af:62:fe:01:94:79:28:63:cf:e2:7c:c1: b2:54:26:aa:91:0b:de:ff:38:ee:90:5f:0a:57:14:52:6e:3c: d8:fd:ac:d9:e0:bf:3d:fc:6d:d5:8e:54:73:0b:18:07:67:62: 05:35:01:ea:3c:8f:6b:e2:3b:28:7a:46:28:6c:65:5b:8a:db: 8e:d1:1f:fa:db:84:c0:18:a0:77:66:1e:32:0e:b3:72:ca:8b: 88:3a:b2:2d:92:03:22:16:5f:bf:d3:e2:c8:47:81:dc:64:be: dc:21:cc:3c:5d:67:85:3b:72:09:a3:91:f0:b5:2c:90:bb:cc: 06:f7:d7:f1:dd:27:29:86:e5:92:1b:e3:82:b0:f1:d4:17:08: ab:79:4c:70:4a:11:84:e5:62:b4:25:70:3f:6c:4f:f9:92:e2: 50:cb:32:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVGM0IxMTAvBgNVBAUTKEEzOEQ0ODdCRDVEOUE4QTg5NDgwMjc0RkU2RjdDMDYx QzYyNEJDQzAwHhcNMjYwNTIxMDYyNzQ4WhcNMjYwNTI4MDYyNzQ4WjAYMRYwFAYD VQQDEw02YTBlYTVlNC1jNGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3roJcI+FFt0+vO+Ry60a6Jbf7RtjmH4Vr1sLvNljKygoL7qZHQVTgJq2tFP XlGjEIbxvN6xe8T+6dYuHeegM2BnlDEFrSfXWrYaIOKIyzm6+ps6OV0PwHBwNKnU 3osOOHTi9og/t5FfYVLcVqPeKLeBebHUtadf5xu84tgD63o8jWwZTNduGVaaHKZB fj99hHrjlXyzFd15Dxe5AzLwlORnwoIFWDCvT9K/3n5RVsyMjhaTkXg4XqPTfrtm JMo03X6cvFfNOZDACjptjfjrnO5HdF+0Yd0s74ujlIPd2dCoBi3dwwB4k57uKKwY 7Qa5LWHyl8pcmfWkPFIj+xezmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCjSXP6V U5eeKDw/tgEKo7eb5DRgMB8GA1UdIwQYMBaAFKONSHvV2aiolIAnT+b3wGHGJLzA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUYzQi9BQzc2MjIwMEU5 QzYxMUVGOUZBMTc3MTFDNEY5QUUwMi9vNDFJZTlYWnFLaVVnQ2RQNXZmQVljWWt2 TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL280MUllOVhacUtpVWdDZFA1dmZBWWNZa3ZNQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUYzQi9BQzc2MjIwMEU5QzYxMUVGOUZBMTc3MTFDNEY5QUUwMi9vNDFJZTlYWnFL aVVnQ2RQNXZmQVljWWt2TUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADuus1WN1idGe6ePJYNid5WPv22cZ6qUx69MR12A3Ti78JXBvcYb9qOHFIyhR ko2Mc39sq3fTxsGfX03CZtj2Eiew4myiMCUPPQ61eVIWOWVBDzn2tWsial1KZYZ9 Ji4qr2L+AZR5KGPP4nzBslQmqpEL3v847pBfClcUUm482P2s2eC/Pfxt1Y5UcwsY B2diBTUB6jyPa+I7KHpGKGxlW4rbjtEf+tuEwBigd2YeMg6zcsqLiDqyLZIDIhZf v9PiyEeB3GS+3CHMPF1nhTtyCaOR8LUskLvMBvfX8d0nKYblkhvjgrDx1BcIq3lM cEoRhOVitCVwP2xP+ZLiUMsyBg== -----END CERTIFICATE-----Generated at Thu May 21 10:54:08 2026 by rpki-client