$ rpki-client -vvf rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.mft File: TS0NULyRom4hHzg_UCqz1w0C3HA.mft (raw, json) Hash identifier: 1U6dHD9CrTUh6jHiHM/pi3uyBPPT1dkli/fypNLUVXQ= Subject key identifier: 9B:00:DF:EC:AC:1C:7B:59:A6:2D:9C:AB:17:C8:05:01:E0:E5:C3:ED Authority key identifier: 4D:2D:0D:50:BC:91:A2:6E:21:1F:38:3F:50:2A:B3:D7:0D:02:DC:70 Certificate issuer: /CN=A91406FF/serialNumber=4D2D0D50BC91A26E211F383F502AB3D70D02DC70 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TS0NULyRom4hHzg_UCqz1w0C3HA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.mft Manifest number: 2A Signing time: Wed 13 May 2026 08:53:54 +0000 Manifest this update: Wed 13 May 2026 08:53:53 +0000 Manifest next update: Wed 20 May 2026 08:53:53 +0000 Files and hashes: 1: TS0NULyRom4hHzg_UCqz1w0C3HA.crl (hash: DVzJCCHLbQsJK5xkIrr+YNsFrjRIqQlquHrK4Tx6HRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.crl rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TS0NULyRom4hHzg_UCqz1w0C3HA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 08:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406FF, serialNumber=4D2D0D50BC91A26E211F383F502AB3D70D02DC70 Validity Not Before: May 13 08:53:53 2026 GMT Not After : May 20 08:53:53 2026 GMT Subject: CN=6a043c21-ca1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:82:9b:c8:20:50:e0:8f:bc:ba:1c:fb:57:5c: df:2b:d0:57:9e:29:10:75:40:7d:83:03:49:3a:96: 05:27:ad:37:e7:71:7d:05:5b:95:1e:d4:6a:91:54: 8e:c6:9f:8f:9a:88:73:84:43:91:25:12:96:e6:34: 78:40:de:7e:0b:c2:2b:b2:80:85:57:58:c5:6c:d5: d5:29:e6:ba:32:19:c3:91:b9:81:c1:74:5c:1a:9c: 5b:e4:f1:33:4e:5a:0f:1e:b7:c3:69:af:f2:f9:06: 8a:ad:e2:b0:39:a2:56:a1:4e:1c:78:76:9c:08:64: 16:62:c4:cb:a2:3f:20:d2:75:ec:1e:e6:59:8a:0e: 77:91:74:2c:0a:50:8a:cc:9e:fb:a3:9b:b1:98:0d: 10:43:2a:1e:fd:df:47:0d:56:ea:00:a8:15:60:51: 6b:23:45:c4:d3:60:da:7e:2a:bf:b3:50:fc:0b:d2: 1f:15:80:36:87:9d:ef:03:c8:b0:93:03:94:28:a3: 3d:e7:5b:93:c4:d3:5f:db:85:1e:5c:98:db:21:7a: 39:3e:6c:f6:68:0e:23:da:b1:39:f9:71:51:1a:dd: e1:68:37:b5:bd:d3:53:33:81:34:74:a7:28:e7:fe: 4e:41:5a:81:15:11:e7:8f:15:ae:01:57:ba:7a:f2: 2c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:00:DF:EC:AC:1C:7B:59:A6:2D:9C:AB:17:C8:05:01:E0:E5:C3:ED X509v3 Authority Key Identifier: keyid:4D:2D:0D:50:BC:91:A2:6E:21:1F:38:3F:50:2A:B3:D7:0D:02:DC:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TS0NULyRom4hHzg_UCqz1w0C3HA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406FF/1D71060A11FD11F1A466363C133D8C67/TS0NULyRom4hHzg_UCqz1w0C3HA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b6:1a:4d:0e:3f:30:89:a6:cc:c2:79:0c:08:43:33:84:09: 14:c6:68:8f:3a:41:56:08:8e:32:27:3c:e0:26:05:a6:32:82: 1a:21:0f:8c:5a:6d:0a:91:b9:d2:d7:fc:4b:fa:f1:ac:db:91: b3:b6:f4:e7:e6:d2:9b:50:63:a5:e4:a6:36:0d:75:df:c0:74: 98:d6:c2:79:01:ee:e4:69:e0:6c:ff:10:b0:a0:ae:f4:26:44: 45:aa:f4:f4:16:81:12:55:d7:f1:37:a8:e2:e3:d9:5b:01:43: e1:3d:89:0b:cc:98:9c:f4:e5:29:27:33:7c:09:59:bd:35:93: 80:70:97:63:6d:75:f8:ba:78:3f:4a:56:3e:6d:cf:02:6a:4d: 4d:f2:38:cf:3e:d2:1a:bc:92:58:16:9f:12:c2:8a:0a:c1:17: 32:73:29:e2:b3:00:8d:d6:ea:35:d2:dd:d0:9d:46:96:02:e5: 1f:b8:a1:91:e9:f8:8b:0a:a4:f6:68:cd:b6:58:a4:58:06:7f: 56:a8:ef:a9:fe:d8:65:30:93:aa:04:9a:d2:61:48:58:c1:d8: cf:52:f0:17:8e:c0:f8:27:22:27:f8:27:37:91:2e:dd:c1:e7: 18:66:a9:78:ac:42:7a:2b:83:f8:95:86:a4:f4:28:14:b4:33: 0f:02:38:c7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MDZGRjExMC8GA1UEBRMoNEQyRDBENTBCQzkxQTI2RTIxMUYzODNGNTAyQUIzRDcw RDAyREM3MDAeFw0yNjA1MTMwODUzNTNaFw0yNjA1MjAwODUzNTNaMBgxFjAUBgNV BAMTDTZhMDQzYzIxLWNhMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDegpvIIFDgj7y6HPtXXN8r0FeeKRB1QH2DA0k6lgUnrTfncX0FW5Ue1GqRVI7G n4+aiHOEQ5ElEpbmNHhA3n4LwiuygIVXWMVs1dUp5royGcORuYHBdFwanFvk8TNO Wg8et8Npr/L5Boqt4rA5olahThx4dpwIZBZixMuiPyDSdewe5lmKDneRdCwKUIrM nvujm7GYDRBDKh7930cNVuoAqBVgUWsjRcTTYNp+Kr+zUPwL0h8VgDaHne8DyLCT A5Qooz3nW5PE01/bhR5cmNshejk+bPZoDiPasTn5cVEa3eFoN7W901MzgTR0pyjn /k5BWoEVEeePFa4BV7p68iwJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUmwDf7Kwc e1mmLZyrF8gFAeDlw+0wHwYDVR0jBBgwFoAUTS0NULyRom4hHzg/UCqz1w0C3HAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQwNkZGLzFENzEwNjBBMTFG RDExRjFBNDY2MzYzQzEzM0Q4QzY3L1RTME5VTHlSb200aEh6Z19VQ3F6MXcwQzNI QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVFMwTlVMeVJvbTRoSHpnX1VDcXoxdzBDM0hBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQw NkZGLzFENzEwNjBBMTFGRDExRjFBNDY2MzYzQzEzM0Q4QzY3L1RTME5VTHlSb200 aEh6Z19VQ3F6MXcwQzNIQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB8thpNDj8wiabMwnkMCEMzhAkUxmiPOkFWCI4yJzzgJgWmMoIaIQ+MWm0KkbnS 1/xL+vGs25GztvTn5tKbUGOl5KY2DXXfwHSY1sJ5Ae7kaeBs/xCwoK70JkRFqvT0 FoESVdfxN6ji49lbAUPhPYkLzJic9OUpJzN8CVm9NZOAcJdjbXX4ung/SlY+bc8C ak1N8jjPPtIavJJYFp8SwooKwRcycyniswCN1uo10t3QnUaWAuUfuKGR6fiLCqT2 aM22WKRYBn9WqO+p/thlMJOqBJrSYUhYwdjPUvAXjsD4JyIn+Cc3kS7dwecYZql4 rEJ6K4P4lYak9CgUtDMPAjjH -----END CERTIFICATE-----Generated at Wed May 13 12:10:18 2026 by rpki-client