$ rpki-client -vvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft File: d1_lofYadAjf7tR_FEfjRk2lCyo.mft (raw, json) Hash identifier: N7kRQ8YxdW3hw4wGIjDfbO0vwAJCDroD58e3tk9DE5Y= Subject key identifier: 39:51:82:73:45:41:F5:67:7C:34:DA:BE:9F:94:BA:47:EF:E7:8C:F3 Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A Certificate issuer: /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A Certificate serial: 0503 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft Manifest number: 04C5 Signing time: Tue 12 May 2026 23:59:01 +0000 Manifest this update: Tue 12 May 2026 23:59:01 +0000 Manifest next update: Tue 19 May 2026 23:59:01 +0000 Files and hashes: 1: d1_lofYadAjf7tR_FEfjRk2lCyo.crl (hash: sMo3eaHDE8Vv/G/DWD0f7qCuDKmXiB7fObYvG8WhCrc=) 2: 5879949ADE9B11EC9AE23269C4F9AE02.roa (hash: mdyDpI7YmoUcuIMuxi6wkeIY7XAJvlplT7aCIokh1+s=) 3: 57B53F64DE9B11EC9AE23269C4F9AE02.roa (hash: YBgWSZPd12SzkSv6+Yvkd/eLTpeiObJO+DoAErrQY6Q=) 4: 59230714DE9B11EC9AE23269C4F9AE02.roa (hash: RpVDZMT+Nv0Axr1oqRBB0G9hqkFqlnTO9St/IWj3aAQ=) 5: 5B17230CDE9B11EC9AE23269C4F9AE02.roa (hash: epvnNXqY0NKQ5ppRcRBfLXB95BUJnWRwELFme7G+FAQ=) 6: DEE5E3C49F0511EC9DA80B77C4F9AE02.roa (hash: AXOdS8FamXWGpVb8dVSV9L7c5bFjLM5GeduJrKDw4hE=) 7: 59D82E00DE9B11EC9AE23269C4F9AE02.roa (hash: E0If5HXOtdFlh/a2uN5bsvDoD3Zc0q3mzSBVdzz2GG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 23:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1283 (0x503) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91398A3, serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A Validity Not Before: May 12 23:59:01 2026 GMT Not After : May 19 23:59:01 2026 GMT Subject: CN=6a03bec5-e0ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:08:cb:58:8c:99:ab:aa:fe:66:db:55:15:2c: 4b:62:3e:87:7f:2a:cc:46:a5:ac:d9:bc:97:ed:e4: 3d:3b:6e:1f:7d:d1:22:ee:d0:29:9c:03:62:1a:56: bd:4b:9d:8a:ff:6e:5f:e4:5c:9f:21:fc:c5:e3:d4: 7b:f5:fd:65:04:a9:4d:d5:c8:5f:a6:72:2d:2b:c6: 0a:d9:34:c0:d5:9b:82:05:8a:cc:72:fc:ad:08:d9: 77:83:f7:eb:54:8e:f0:a7:07:65:86:6f:20:2d:b1: 68:02:82:fb:08:53:bf:97:e4:66:c3:10:2e:8c:7d: 6d:79:b8:dc:21:bd:05:be:51:df:be:67:c9:5b:61: 02:cb:c7:44:40:5d:f2:02:42:31:ce:9b:3c:a8:f8: 97:73:7c:50:e2:54:d4:d4:a4:b4:81:be:ea:3a:e5: 47:62:a7:67:94:84:b9:a7:c1:54:04:8b:d1:d2:6e: 3c:2a:be:9a:b9:ce:2c:9e:6d:8c:98:56:72:09:01: ef:95:51:ef:75:a0:30:1c:13:0c:52:4c:91:67:9b: 79:f6:98:a4:22:f7:51:8f:00:ed:9e:62:61:bd:6c: 91:7a:3a:c1:c1:0f:c8:a6:67:75:0e:b2:7f:f9:02: 2d:ef:a0:a0:2e:b2:da:86:e8:bc:a5:4d:ae:f8:6e: d1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:51:82:73:45:41:F5:67:7C:34:DA:BE:9F:94:BA:47:EF:E7:8C:F3 X509v3 Authority Key Identifier: keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:4a:5f:0c:9b:71:2b:50:f1:4a:84:30:38:55:e3:fb:fe:30: 31:69:14:bc:75:65:a1:a3:c0:40:ad:0e:28:80:51:53:2b:82: b8:5a:a0:e2:f6:21:0e:e3:53:61:74:4d:69:d1:86:71:e8:fd: 86:67:69:45:69:5d:0c:ac:dd:6d:8d:41:56:f9:bc:d0:f8:9d: 46:84:19:dd:e4:79:58:50:71:4b:e3:8b:ce:3b:12:65:1b:73: 2d:4c:a0:22:d0:d5:92:55:d2:a4:2a:ce:2e:54:31:72:e7:af: 80:91:a3:72:f1:3c:e9:20:11:cd:a9:73:7b:82:6a:bf:50:35: ff:14:29:df:7d:68:fb:b5:cc:cc:bb:ce:9f:12:8c:0b:09:b7: 95:72:7b:ef:d7:17:d8:29:da:c6:2e:80:25:a2:06:6f:b5:40: d6:59:27:39:e3:c3:67:c9:23:91:aa:98:87:09:a5:e3:45:58: 9b:d6:90:c2:f1:1d:5d:66:cb:2d:ab:5b:44:14:65:48:05:f7: 83:f3:a2:06:f5:7e:73:28:33:e7:a5:71:a5:1e:f7:d4:76:f8: e9:d2:c7:25:5b:53:a9:7d:77:8f:71:44:81:dd:a6:09:7d:3f: 83:7a:e4:e0:84:55:d7:49:88:8e:ae:1c:46:d9:06:bf:a2:ac: df:41:c4:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk4QTMxMTAvBgNVBAUTKDc3NUZFNUExRjYxQTc0MDhERkVFRDQ3RjE0NDdFMzQ2 NERBNTBCMkEwHhcNMjYwNTEyMjM1OTAxWhcNMjYwNTE5MjM1OTAxWjAYMRYwFAYD VQQDEw02YTAzYmVjNS1lMGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgjLWIyZq6r+ZttVFSxLYj6HfyrMRqWs2byX7eQ9O24ffdEi7tApnANiGla9 S52K/25f5FyfIfzF49R79f1lBKlN1chfpnItK8YK2TTA1ZuCBYrMcvytCNl3g/fr VI7wpwdlhm8gLbFoAoL7CFO/l+RmwxAujH1tebjcIb0FvlHfvmfJW2ECy8dEQF3y AkIxzps8qPiXc3xQ4lTU1KS0gb7qOuVHYqdnlIS5p8FUBIvR0m48Kr6auc4snm2M mFZyCQHvlVHvdaAwHBMMUkyRZ5t59pikIvdRjwDtnmJhvWyRejrBwQ/Ipmd1DrJ/ +QIt76CgLrLahui8pU2u+G7RqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDlRgnNF QfVnfDTavp+Uukfv54zzMB8GA1UdIwQYMBaAFHdf5aH2GnQI3+7UfxRH40ZNpQsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOThBMy9FMjE5QjYxQzcx MTMxMUVDQkMzMDg5MTlDNEY5QUUwMi9kMV9sb2ZZYWRBamY3dFJfRkVmalJrMmxD eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QxX2xvZllhZEFqZjd0Ul9GRWZqUmsybEN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OThBMy9FMjE5QjYxQzcxMTMxMUVDQkMzMDg5MTlDNEY5QUUwMi9kMV9sb2ZZYWRB amY3dFJfRkVmalJrMmxDeW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAukpfDJtxK1DxSoQwOFXj+/4wMWkUvHVloaPAQK0OKIBRUyuCuFqg4vYhDuNT YXRNadGGcej9hmdpRWldDKzdbY1BVvm80PidRoQZ3eR5WFBxS+OLzjsSZRtzLUyg ItDVklXSpCrOLlQxcuevgJGjcvE86SARzalze4Jqv1A1/xQp331o+7XMzLvOnxKM Cwm3lXJ779cX2Cnaxi6AJaIGb7VA1lknOePDZ8kjkaqYhwml40VYm9aQwvEdXWbL LatbRBRlSAX3g/OiBvV+cygz56VxpR731Hb46dLHJVtTqX13j3FEgd2mCX0/g3rk 4IRV10mIjq4cRtkGv6Ks30HEgQ== -----END CERTIFICATE-----Generated at Wed May 13 06:13:09 2026 by rpki-client