$ rpki-client -vvf rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft File: _5APJL-aiYLZX4RHqnubtPesRjk.mft (raw, json) Hash identifier: qftoRIrQE6sTqABN+C6v+IlrQWDbo4P1r4osWbHMKaI= Subject key identifier: 9A:8F:39:7A:5C:36:EA:7D:8D:E2:70:30:FD:42:BA:63:32:BC:AA:4B Authority key identifier: FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39 Certificate issuer: /CN=A91221EF/serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639 Certificate serial: 0A6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft Manifest number: 0A5B Signing time: Tue 12 May 2026 19:43:35 +0000 Manifest this update: Tue 12 May 2026 19:43:35 +0000 Manifest next update: Tue 19 May 2026 19:43:35 +0000 Files and hashes: 1: _5APJL-aiYLZX4RHqnubtPesRjk.crl (hash: d/DhvmBUidAJb7uPwGQ/5PrsY3jeog8snM6SBfFQyIQ=) 2: D3037D06738E11ED8283FF53C4F9AE02.roa (hash: ayMh+xPpKV4MDa+xi4w8R4KTWxdFNv6TJ0EMYBEcXjk=) 3: D1A6B6D0738E11ED8283FF53C4F9AE02.roa (hash: 5L+qG7S9tkiI9oResfgYtFZwd1jvISkOSfCq4CpLueQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:43:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2671 (0xa6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91221EF, serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639 Validity Not Before: May 12 19:43:35 2026 GMT Not After : May 19 19:43:35 2026 GMT Subject: CN=6a0382e7-7ad5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:25:14:9f:04:9f:78:a1:61:51:bc:ed:a5:dc: 31:d2:a3:fb:19:62:80:08:fa:0a:a5:37:c6:6b:5d: 1a:ac:a0:26:bf:5b:74:35:85:43:8d:53:e8:29:77: 16:75:4c:0a:a3:5a:1d:a3:6f:44:02:2d:19:bb:a5: 30:47:b5:4a:81:13:26:a1:b0:a0:8d:f1:18:37:33: cc:16:19:aa:94:ce:69:ee:3c:7e:13:55:f7:55:c0: c3:7a:5c:50:dc:c0:21:87:88:7c:f8:a4:1b:fb:c6: f1:da:3a:83:78:d0:37:da:80:35:47:70:aa:6c:7a: fc:f6:4f:6b:dd:86:d4:93:de:fc:5d:b4:c8:22:f0: aa:07:df:ab:97:85:75:0e:7e:52:a7:52:d7:32:10: 7d:fe:f4:9b:1a:26:b7:ca:79:e6:7e:dd:f4:01:0a: 64:6e:f3:33:68:18:47:49:38:31:3d:97:cc:62:9e: 9b:e7:73:6a:da:e5:a2:63:d4:d4:3c:eb:40:9a:be: ce:c5:34:d2:08:5e:66:e2:ac:05:d9:71:eb:f6:1e: c1:25:52:38:f4:02:58:d5:e3:b1:70:f6:f2:da:99: 60:38:c3:74:8e:4e:30:46:c4:b2:bc:e5:2c:6a:39: 79:32:71:bd:da:67:bf:b9:d7:4f:3b:13:e6:4c:c5: f8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:8F:39:7A:5C:36:EA:7D:8D:E2:70:30:FD:42:BA:63:32:BC:AA:4B X509v3 Authority Key Identifier: keyid:FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:ce:73:7f:2f:8d:92:c8:09:42:67:b9:32:76:c5:b4:25:de: 9c:d4:76:86:27:5a:12:34:fe:87:7d:ab:8f:d3:80:8f:ab:e9: 8e:09:64:59:a0:d7:98:15:22:b4:82:a9:a1:56:ed:0e:ea:ea: d1:b6:52:ea:ff:a0:2d:bd:a8:95:d7:7c:57:28:6a:f6:23:ef: 07:be:a8:68:4c:84:05:02:19:c9:ca:ef:ea:03:9d:a0:c1:54: 43:14:a5:1c:2d:f2:c1:78:c0:ec:3f:65:37:88:1f:f8:13:f6: 7b:24:ca:d3:ee:3a:c6:6b:2b:02:26:ed:b3:9b:ab:16:aa:e1: 46:ba:79:ba:6b:78:15:28:ca:53:b2:0a:a4:8e:94:de:74:35: a0:70:38:79:09:82:18:3a:e2:17:81:cd:09:75:c8:f7:59:b6: aa:ae:32:55:e0:a7:9f:7a:a6:21:92:66:59:3e:db:1e:bb:f8: 25:1a:d9:2a:bb:38:c1:dc:79:3e:54:4e:62:e2:2f:a8:d0:98: 88:44:a3:75:5a:1a:a5:e9:da:32:61:60:99:5d:56:1c:53:79: 63:b6:75:a0:74:26:1f:53:0d:2e:17:e8:67:f2:1a:99:86:66: 3f:b7:34:d8:73:b0:3f:73:5d:6f:15:13:81:b1:b6:69:60:9c: 26:fe:1c:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIxRUYxMTAvBgNVBAUTKEZGOTAwRjI0QkY5QTg5ODJEOTVGODQ0N0FBN0I5QkI0 RjdBQzQ2MzkwHhcNMjYwNTEyMTk0MzM1WhcNMjYwNTE5MTk0MzM1WjAYMRYwFAYD VQQDEw02YTAzODJlNy03YWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0yUUnwSfeKFhUbztpdwx0qP7GWKACPoKpTfGa10arKAmv1t0NYVDjVPoKXcW dUwKo1odo29EAi0Zu6UwR7VKgRMmobCgjfEYNzPMFhmqlM5p7jx+E1X3VcDDelxQ 3MAhh4h8+KQb+8bx2jqDeNA32oA1R3CqbHr89k9r3YbUk978XbTIIvCqB9+rl4V1 Dn5Sp1LXMhB9/vSbGia3ynnmft30AQpkbvMzaBhHSTgxPZfMYp6b53Nq2uWiY9TU POtAmr7OxTTSCF5m4qwF2XHr9h7BJVI49AJY1eOxcPby2plgOMN0jk4wRsSyvOUs ajl5MnG92me/uddPOxPmTMX4LQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJqPOXpc Nup9jeJwMP1CumMyvKpLMB8GA1UdIwQYMBaAFP+QDyS/momC2V+ER6p7m7T3rEY5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjFFRi82RjJGRUJENjg5 MUYxMUVBODlCNjI3N0NDNEY5QUUwMi9fNUFQSkwtYWlZTFpYNFJIcW51YnRQZXNS amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL181QVBKTC1haVlMWlg0UkhxbnVidFBlc1Jqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjFFRi82RjJGRUJENjg5MUYxMUVBODlCNjI3N0NDNEY5QUUwMi9fNUFQSkwtYWlZ TFpYNFJIcW51YnRQZXNSamsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACM5zfy+NksgJQme5MnbFtCXenNR2hidaEjT+h32rj9OAj6vpjglkWaDXmBUi tIKpoVbtDurq0bZS6v+gLb2oldd8Vyhq9iPvB76oaEyEBQIZycrv6gOdoMFUQxSl HC3ywXjA7D9lN4gf+BP2eyTK0+46xmsrAibts5urFqrhRrp5umt4FSjKU7IKpI6U 3nQ1oHA4eQmCGDriF4HNCXXI91m2qq4yVeCnn3qmIZJmWT7bHrv4JRrZKrs4wdx5 PlROYuIvqNCYiESjdVoapenaMmFgmV1WHFN5Y7Z1oHQmH1MNLhfoZ/IamYZmP7c0 2HOwP3NdbxUTgbG2aWCcJv4ckw== -----END CERTIFICATE-----Generated at Wed May 13 05:41:41 2026 by rpki-client