$ rpki-client -vvf rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft File: MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft (raw, json) Hash identifier: 2tiFuE7/zIMR0BgLIjwzLHjp6fgzRlFHNhhtOwg6xss= Subject key identifier: EE:DD:6A:91:BF:A9:54:D6:79:FF:32:9B:86:9A:55:43:AE:88:70:08 Authority key identifier: 31:B3:D9:04:57:D1:FD:F8:3C:35:74:CB:D1:7F:C2:8B:2C:DD:56:EF Certificate issuer: /CN=A91222CD/serialNumber=31B3D90457D1FDF83C3574CBD17FC28B2CDD56EF Certificate serial: 1BE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft Manifest number: 1BDF Signing time: Tue 12 May 2026 16:14:29 +0000 Manifest this update: Tue 12 May 2026 16:14:29 +0000 Manifest next update: Tue 19 May 2026 16:14:29 +0000 Files and hashes: 1: MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl (hash: t0ZeuGLZh7t6wUzv2Ou9LNasmKqociAxtLX8xEGq3IE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 16:14:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7136 (0x1be0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91222CD, serialNumber=31B3D90457D1FDF83C3574CBD17FC28B2CDD56EF Validity Not Before: May 12 16:14:29 2026 GMT Not After : May 19 16:14:29 2026 GMT Subject: CN=6a0351e5-884a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f2:3b:4c:9c:ac:2a:76:51:1f:c7:08:84:03: 44:6e:be:ee:c9:1e:4f:1f:2c:f9:e2:d7:4a:79:47: 93:45:75:6e:b4:89:ca:ff:e8:c7:a7:8d:3c:1d:50: 0d:7d:49:2a:8b:d8:03:20:9b:57:51:be:50:27:b4: 14:07:d8:93:9b:1b:6e:c3:82:70:3b:af:59:d7:96: d4:58:40:3e:15:0d:16:45:05:d1:97:bb:38:46:8e: ca:29:26:9f:ec:76:4c:6e:3a:5d:00:f7:3b:19:3b: e7:eb:2e:c5:63:12:49:f0:69:df:5f:e8:aa:03:aa: e4:25:1b:91:88:74:8d:6a:f5:be:f5:68:da:35:64: 40:18:61:79:15:25:f8:c9:3c:f3:01:e0:f0:7f:8c: 79:da:c3:a5:cc:d0:bc:6e:fb:32:bb:4a:1f:da:58: 09:53:78:38:c8:1e:aa:b3:1e:38:db:93:65:55:10: 63:32:6c:a5:3d:1d:42:f9:f9:d7:ff:c0:fb:82:08: fe:1e:a1:b6:aa:78:f1:14:a6:c3:79:4a:b9:2f:f8: f5:d0:72:8f:32:6b:3e:36:0a:ea:02:d2:68:c9:11: 85:ea:f9:3e:71:e2:b6:1f:b5:2a:1c:38:29:1a:0c: 70:33:27:08:cd:19:d5:dc:0a:c3:cd:37:6d:be:f0: b9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:DD:6A:91:BF:A9:54:D6:79:FF:32:9B:86:9A:55:43:AE:88:70:08 X509v3 Authority Key Identifier: keyid:31:B3:D9:04:57:D1:FD:F8:3C:35:74:CB:D1:7F:C2:8B:2C:DD:56:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:af:aa:f6:40:cd:03:74:86:0e:6c:cc:df:7e:13:df:5c:1c: 1d:57:9b:20:7c:e4:99:20:92:b6:68:ec:bb:9d:d0:22:4d:48: 2b:4d:af:63:b8:2f:08:e8:b9:11:fb:ff:3d:41:6e:78:35:1f: 94:53:1c:52:bf:2f:3d:1b:dc:cf:c2:9b:c8:4c:e7:34:71:80: 4e:29:fd:95:dd:9a:70:f8:4c:20:a9:3a:c2:27:61:38:1d:00: 87:81:41:1f:a5:f1:42:7b:30:2b:d2:19:55:ab:dd:42:f9:55: b1:9e:79:e7:cd:fc:20:fb:47:e0:2c:56:bf:b5:0b:b3:72:0a: 63:2b:2c:57:77:75:02:59:d1:02:d0:9d:25:4c:9d:a7:69:47: 4d:1c:e0:85:61:bf:be:97:1b:72:a8:4f:96:c1:23:06:ed:6c: 66:1a:e9:c4:6f:5a:fc:09:63:f1:cd:70:e0:53:ef:47:37:69: 80:d6:30:b1:6b:85:ac:19:f9:a2:fc:9d:aa:2c:47:63:8f:99: 5c:dc:41:f3:db:9d:e0:1e:b2:89:fa:2d:f3:96:df:f9:30:e2: 7d:13:e4:58:c8:ae:82:e5:ab:42:4f:8d:20:b9:1b:49:4c:1a: d5:c1:89:3c:97:42:12:26:dd:57:08:3a:96:dd:b6:2f:f7:96: 62:e2:8f:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIyQ0QxMTAvBgNVBAUTKDMxQjNEOTA0NTdEMUZERjgzQzM1NzRDQkQxN0ZDMjhC MkNERDU2RUYwHhcNMjYwNTEyMTYxNDI5WhcNMjYwNTE5MTYxNDI5WjAYMRYwFAYD VQQDEw02YTAzNTFlNS04ODRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/I7TJysKnZRH8cIhANEbr7uyR5PHyz54tdKeUeTRXVutInK/+jHp408HVAN fUkqi9gDIJtXUb5QJ7QUB9iTmxtuw4JwO69Z15bUWEA+FQ0WRQXRl7s4Ro7KKSaf 7HZMbjpdAPc7GTvn6y7FYxJJ8GnfX+iqA6rkJRuRiHSNavW+9WjaNWRAGGF5FSX4 yTzzAeDwf4x52sOlzNC8bvsyu0of2lgJU3g4yB6qsx4425NlVRBjMmylPR1C+fnX /8D7ggj+HqG2qnjxFKbDeUq5L/j10HKPMms+NgrqAtJoyRGF6vk+ceK2H7UqHDgp GgxwMycIzRnV3ArDzTdtvvC5/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO7dapG/ qVTWef8ym4aaVUOuiHAIMB8GA1UdIwQYMBaAFDGz2QRX0f34PDV0y9F/woss3Vbv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjJDRC83RTMxMTVDODE2 NUExMUU3QjI3RjlCNDZDNEY5QUUwMi9NYlBaQkZmUl9mZzhOWFRMMFhfQ2l5emRW dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01iUFpCRmZSX2ZnOE5YVEwwWF9DaXl6ZFZ1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjJDRC83RTMxMTVDODE2NUExMUU3QjI3RjlCNDZDNEY5QUUwMi9NYlBaQkZmUl9m ZzhOWFRMMFhfQ2l5emRWdTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkK+q9kDNA3SGDmzM334T31wcHVebIHzkmSCStmjsu53QIk1IK02vY7gvCOi5 Efv/PUFueDUflFMcUr8vPRvcz8KbyEznNHGATin9ld2acPhMIKk6widhOB0Ah4FB H6XxQnswK9IZVavdQvlVsZ555838IPtH4CxWv7ULs3IKYyssV3d1AlnRAtCdJUyd p2lHTRzghWG/vpcbcqhPlsEjBu1sZhrpxG9a/Alj8c1w4FPvRzdpgNYwsWuFrBn5 ovydqixHY4+ZXNxB89ud4B6yifot85bf+TDifRPkWMiuguWrQk+NILkbSUwa1cGJ PJdCEibdVwg6lt22L/eWYuKPQw== -----END CERTIFICATE-----Generated at Wed May 13 04:45:37 2026 by rpki-client