$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft File: K5XY2CKKiRR9gBk9l3DrUK7du2s.mft (raw, json) Hash identifier: ohQ1kih07imXmVGjIKxgUPVdCC3uSW2v5d5GjrhlCWk= Subject key identifier: 03:2E:85:EA:CF:DB:08:C5:F0:A0:6B:38:DC:84:19:DA:C5:08:E9:56 Authority key identifier: 2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B Certificate issuer: /CN=A91FF5A9/serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B Certificate serial: 177C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft Manifest number: 1763 Signing time: Wed 20 May 2026 16:34:40 +0000 Manifest this update: Wed 20 May 2026 16:34:40 +0000 Manifest next update: Wed 27 May 2026 16:34:40 +0000 Files and hashes: 1: K5XY2CKKiRR9gBk9l3DrUK7du2s.crl (hash: ZoPqUKj5y8XsMslk19rxF0/tsIta0Gz1acKqWIMAexA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 16:34:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6012 (0x177c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF5A9, serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B Validity Not Before: May 20 16:34:40 2026 GMT Not After : May 27 16:34:40 2026 GMT Subject: CN=6a0de2a0-df7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c1:10:d6:f0:66:ce:fb:6f:05:7d:c5:51:4f: 57:e2:ec:46:7a:58:32:57:e9:ba:03:0c:1f:30:77: ee:51:ce:cf:4a:be:83:a6:1d:25:cc:e6:4e:28:cc: ef:e5:75:cf:84:5e:86:6d:71:97:76:bb:8e:d9:ad: a4:16:26:fd:47:26:42:66:40:c9:9f:98:1c:93:2c: c2:70:26:a7:a9:28:0a:22:17:92:0c:da:d0:d0:3e: 92:39:bb:51:05:14:f0:11:70:74:52:87:84:6d:2b: 2e:54:50:06:b8:84:0b:40:83:c5:d7:c5:71:73:5a: 20:3c:d2:b2:37:aa:21:74:e9:64:5d:dc:dd:47:5d: c9:60:47:dc:2c:35:95:54:1d:04:f8:4f:38:39:f8: 11:28:10:d0:c3:0a:b7:02:8b:f5:2e:f6:d7:8c:a5: 69:9b:e3:67:6d:ee:91:d4:48:02:ff:91:f1:13:9e: 37:11:b8:24:a3:79:53:19:f5:53:60:91:5a:ab:d8: e9:2a:68:00:a0:81:15:84:70:59:5e:b9:e3:5b:26: 9d:03:df:63:eb:92:5a:fd:47:89:db:27:10:a8:70: b8:31:7f:78:8e:a2:5e:22:50:60:5f:da:40:ec:cb: d9:a3:8a:ac:c1:13:64:3c:d3:d4:a5:23:0e:b6:07: 45:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:2E:85:EA:CF:DB:08:C5:F0:A0:6B:38:DC:84:19:DA:C5:08:E9:56 X509v3 Authority Key Identifier: keyid:2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:53:d0:ef:b8:c8:93:c7:32:be:61:16:a2:06:41:09:d4:06: da:95:d9:85:7f:cb:da:bc:9c:74:35:48:8f:06:bf:70:d4:98: 32:e1:08:1b:6a:42:1f:2f:27:45:b4:bd:e2:dd:7a:cb:d4:75: b8:ef:9a:84:1f:88:54:0c:fd:1a:85:3e:b9:79:ac:a8:86:67: 53:52:b1:52:e9:99:53:ff:6b:49:cd:be:07:40:d6:4f:68:bf: 98:7f:3a:db:85:a1:17:92:78:7b:2c:db:4e:bb:10:08:c4:21: 97:b8:8b:58:a4:46:dc:48:5f:00:f6:1c:4d:50:b7:2a:1b:ef: e4:8f:73:4c:bb:b9:8d:47:98:a7:e3:b2:b7:f3:8a:48:de:40: ba:63:8a:98:89:d1:9e:e5:79:90:35:32:b5:0e:70:78:be:3a: 1e:7f:15:45:b9:d5:ed:10:92:9f:42:73:93:3c:93:91:61:5b: 11:5e:73:cc:4f:a9:8c:4e:72:ae:a3:07:9e:9d:8f:57:6b:f8: 97:a7:f6:58:08:70:19:cb:de:ae:ed:f4:05:65:38:22:4e:7f: db:12:81:43:07:23:f9:d9:da:4b:d1:21:e6:b8:69:6c:54:87: b8:27:7f:4c:2e:e1:b8:9d:c6:07:74:4d:09:12:26:08:a1:f1: e3:71:1a:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY1QTkxMTAvBgNVBAUTKDJCOTVEOEQ4MjI4QTg5MTQ3RDgwMTkzRDk3NzBFQjUw QUVEREJCNkIwHhcNMjYwNTIwMTYzNDQwWhcNMjYwNTI3MTYzNDQwWjAYMRYwFAYD VQQDEw02YTBkZTJhMC1kZjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcEQ1vBmzvtvBX3FUU9X4uxGelgyV+m6AwwfMHfuUc7PSr6Dph0lzOZOKMzv 5XXPhF6GbXGXdruO2a2kFib9RyZCZkDJn5gckyzCcCanqSgKIheSDNrQ0D6SObtR BRTwEXB0UoeEbSsuVFAGuIQLQIPF18Vxc1ogPNKyN6ohdOlkXdzdR13JYEfcLDWV VB0E+E84OfgRKBDQwwq3Aov1LvbXjKVpm+Nnbe6R1EgC/5HxE543Ebgko3lTGfVT YJFaq9jpKmgAoIEVhHBZXrnjWyadA99j65Ja/UeJ2ycQqHC4MX94jqJeIlBgX9pA 7MvZo4qswRNkPNPUpSMOtgdFhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAMuherP 2wjF8KBrONyEGdrFCOlWMB8GA1UdIwQYMBaAFCuV2NgiiokUfYAZPZdw61Cu3btr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVBOS8wMEI3MTUxQ0ZE MDgxMUU3QTQyOEZGMEZDNEY5QUUwMi9LNVhZMkNLS2lSUjlnQms5bDNEclVLN2R1 MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s1WFkyQ0tLaVJSOWdCazlsM0RyVUs3ZHUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjVBOS8wMEI3MTUxQ0ZEMDgxMUU3QTQyOEZGMEZDNEY5QUUwMi9LNVhZMkNLS2lS UjlnQms5bDNEclVLN2R1MnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoVPQ77jIk8cyvmEWogZBCdQG2pXZhX/L2rycdDVIjwa/cNSYMuEIG2pCHy8n RbS94t16y9R1uO+ahB+IVAz9GoU+uXmsqIZnU1KxUumZU/9rSc2+B0DWT2i/mH86 24WhF5J4eyzbTrsQCMQhl7iLWKRG3EhfAPYcTVC3Khvv5I9zTLu5jUeYp+Oyt/OK SN5AumOKmInRnuV5kDUytQ5weL46Hn8VRbnV7RCSn0JzkzyTkWFbEV5zzE+pjE5y rqMHnp2PV2v4l6f2WAhwGcveru30BWU4Ik5/2xKBQwcj+dnaS9Eh5rhpbFSHuCd/ TC7huJ3GB3RNCRImCKHx43Ea2g== -----END CERTIFICATE-----Generated at Thu May 21 10:37:44 2026 by rpki-client