$ rpki-client -vvf rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft File: 42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft (raw, json) Hash identifier: 4dgssyeSBoJqxJzOjugY3auCvMDEi4dmniz42nRlHLw= Subject key identifier: F2:0D:9F:67:CE:C5:66:7F:22:0A:FE:0E:AD:48:68:FD:0C:EB:0E:BD Authority key identifier: E3:69:29:0F:D7:19:E3:E4:98:7D:71:9A:73:B1:EC:77:AA:AF:49:B6 Certificate issuer: /CN=A91418C7/serialNumber=E369290FD719E3E4987D719A73B1EC77AAAF49B6 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft Manifest number: E5 Signing time: Mon 11 May 2026 06:38:58 +0000 Manifest this update: Mon 11 May 2026 06:38:58 +0000 Manifest next update: Mon 18 May 2026 06:38:58 +0000 Files and hashes: 1: 42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl (hash: Oxy3+ih3WlrWf1Zz2zdRIkgdg6QTeQyI+pwuIgi7SNM=) 2: CDD0BE9EF99111EF945B6751C4F9AE02.roa (hash: pelY/uHx6kDkE6LCBISkdm7PFKfU0bUQR1oP68K+NMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 06:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91418C7, serialNumber=E369290FD719E3E4987D719A73B1EC77AAAF49B6 Validity Not Before: May 11 06:38:58 2026 GMT Not After : May 18 06:38:58 2026 GMT Subject: CN=6a017982-88c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e8:1f:60:1a:65:ed:39:25:ea:b3:e1:86:e5: 6c:f1:18:36:70:c9:cf:71:7a:71:14:a9:33:79:6f: 24:19:a5:74:c2:7b:8f:77:67:81:b4:55:69:20:3d: b7:c7:b4:3a:19:1a:1f:83:2f:91:42:7f:91:15:ea: 78:e3:b5:34:88:3f:97:01:6a:2f:c2:4e:28:fb:b2: b4:aa:8b:dc:4f:89:ca:de:a3:b3:db:c6:58:ae:99: 47:83:cd:9d:9b:1c:a5:70:86:ad:28:22:ed:1d:f8: 3a:1a:96:ce:f7:3e:ca:11:e2:0e:94:de:e9:29:70: 43:95:c0:d7:bd:9c:96:2c:6b:06:4e:73:33:c6:cd: 3a:f8:c6:51:51:f7:e9:45:23:e8:65:36:b6:92:a3: 6a:77:9d:82:00:28:ea:7c:7c:68:3b:ca:b5:d1:5c: 1c:7f:21:8c:a9:64:64:82:6e:2b:e4:36:37:61:9a: 0b:87:cf:69:ba:e1:95:a0:84:34:d6:ef:2f:38:6f: d4:f6:cf:8b:42:58:0f:1c:ff:c5:32:72:57:90:24: 76:53:0c:c6:bc:c8:b3:f8:e8:71:73:2b:f4:d8:47: 87:07:4f:c3:28:94:b2:10:87:fe:c3:5d:05:0e:4a: 42:8c:31:35:df:c6:7d:60:5e:3f:12:30:4c:e9:d0: c2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:0D:9F:67:CE:C5:66:7F:22:0A:FE:0E:AD:48:68:FD:0C:EB:0E:BD X509v3 Authority Key Identifier: keyid:E3:69:29:0F:D7:19:E3:E4:98:7D:71:9A:73:B1:EC:77:AA:AF:49:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:cd:0b:2c:3d:3b:fe:cc:79:63:87:6d:18:6e:91:de:0d:45: 97:0b:4a:62:f0:92:a0:5c:79:a3:5b:f1:3c:1d:e7:bc:4b:7a: 8e:ae:ba:5e:40:89:83:a8:f6:e8:ab:f0:90:87:fc:96:e9:4a: 3b:f9:c5:5c:ac:c4:0e:0b:52:3d:bc:6d:6e:55:9a:c4:68:a7: 8b:92:a8:0c:e3:ae:a0:e6:a9:ce:d1:a9:b2:73:b4:6a:22:1a: 49:8f:c7:cc:9b:62:e2:51:0a:8e:9f:21:16:79:26:da:ad:1a: e4:d6:f6:dd:e6:02:63:2a:5e:c2:36:8f:9a:3f:8e:4b:77:03: 1e:94:68:50:5b:a8:56:d9:5b:59:58:c2:8a:0f:6d:d4:41:69: 59:41:c7:7d:42:53:d5:2b:79:0f:67:3d:b9:79:30:c5:e2:30: 76:e4:94:59:0d:1b:b6:26:3b:71:a9:03:b2:bb:be:10:9e:0c: 98:da:f1:c1:3e:8a:43:c2:12:da:52:72:03:1f:da:ca:ba:57: 67:a3:10:64:2b:28:e8:14:32:d4:89:57:0d:0e:b7:51:ff:d5: 1c:d3:d3:e6:be:3b:77:20:e1:3d:4a:66:c6:e7:1f:08:23:ff: 20:22:9e:fe:c4:f5:94:86:c2:68:59:8d:93:e9:a5:78:f1:7d: e6:17:ba:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE4QzcxMTAvBgNVBAUTKEUzNjkyOTBGRDcxOUUzRTQ5ODdENzE5QTczQjFFQzc3 QUFBRjQ5QjYwHhcNMjYwNTExMDYzODU4WhcNMjYwNTE4MDYzODU4WjAYMRYwFAYD VQQDEw02YTAxNzk4Mi04OGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwugfYBpl7Tkl6rPhhuVs8Rg2cMnPcXpxFKkzeW8kGaV0wnuPd2eBtFVpID23 x7Q6GRofgy+RQn+RFep447U0iD+XAWovwk4o+7K0qovcT4nK3qOz28ZYrplHg82d mxylcIatKCLtHfg6GpbO9z7KEeIOlN7pKXBDlcDXvZyWLGsGTnMzxs06+MZRUffp RSPoZTa2kqNqd52CACjqfHxoO8q10VwcfyGMqWRkgm4r5DY3YZoLh89puuGVoIQ0 1u8vOG/U9s+LQlgPHP/FMnJXkCR2UwzGvMiz+Ohxcyv02EeHB0/DKJSyEIf+w10F DkpCjDE138Z9YF4/EjBM6dDCDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPINn2fO xWZ/Igr+Dq1IaP0M6w69MB8GA1UdIwQYMBaAFONpKQ/XGePkmH1xmnOx7Heqr0m2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MThDNy9GOTMwMDFCNkY4 Q0YxMUVGODJEOEQ1MkJDNEY5QUUwMi80MmtwRDljWjQtU1lmWEdhYzdIc2Q2cXZT YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQya3BEOWNaNC1TWWZYR2FjN0hzZDZxdlNiWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MThDNy9GOTMwMDFCNkY4Q0YxMUVGODJEOEQ1MkJDNEY5QUUwMi80MmtwRDljWjQt U1lmWEdhYzdIc2Q2cXZTYlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl80LLD07/sx5Y4dtGG6R3g1FlwtKYvCSoFx5o1vxPB3nvEt6jq66XkCJg6j2 6KvwkIf8lulKO/nFXKzEDgtSPbxtblWaxGini5KoDOOuoOapztGpsnO0aiIaSY/H zJti4lEKjp8hFnkm2q0a5Nb23eYCYypewjaPmj+OS3cDHpRoUFuoVtlbWVjCig9t 1EFpWUHHfUJT1St5D2c9uXkwxeIwduSUWQ0btiY7cakDsru+EJ4MmNrxwT6KQ8IS 2lJyAx/ayrpXZ6MQZCso6BQy1IlXDQ63Uf/VHNPT5r47dyDhPUpmxucfCCP/ICKe /sT1lIbCaFmNk+mlePF95he6BA== -----END CERTIFICATE-----Generated at Wed May 13 04:01:19 2026 by rpki-client