$ rpki-client -vvf rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft File: rBnGa8SzHOuTC6auDW63R7EKtgY.mft (raw, json) Hash identifier: U32nQhywwjRV+qWJCxCt54ay7iy8yF4bmkDYloTP/G8= Subject key identifier: 60:54:7A:2E:CE:A5:8E:8E:37:FE:8D:86:A3:44:23:10:B6:4F:AB:2E Authority key identifier: AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06 Certificate issuer: /CN=A9141E28/serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606 Certificate serial: 3541 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft Manifest number: 3541 Signing time: Tue 12 May 2026 14:41:34 +0000 Manifest this update: Tue 12 May 2026 14:41:33 +0000 Manifest next update: Tue 19 May 2026 14:41:33 +0000 Files and hashes: 1: rBnGa8SzHOuTC6auDW63R7EKtgY.crl (hash: GiJhfa2nz7QclRxsOpO2nl7hxJsxIBVSJ6BXd6pQkkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13633 (0x3541) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141E28, serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606 Validity Not Before: May 12 14:41:33 2026 GMT Not After : May 19 14:41:33 2026 GMT Subject: CN=6a033c1d-5ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:49:a7:bb:56:a6:46:69:46:52:11:2d:19:1e: b6:8a:53:80:ad:1f:37:b0:ed:41:5e:10:0d:7f:09: c6:f7:f3:75:ff:29:cf:75:ce:56:fb:3b:94:b6:f9: 9d:34:b5:8c:ab:a1:d5:ba:55:30:c2:87:e9:1b:5b: 23:8b:69:34:22:41:0d:25:43:6e:12:ea:99:d5:93: 72:53:79:8b:67:9e:fa:aa:25:a2:50:36:f9:01:c1: ca:d5:ee:de:16:fa:e0:0f:ca:f1:66:a0:0f:15:c6: 0d:e7:a0:b5:56:d5:1c:61:ac:0c:d7:98:29:2d:8a: 6e:ad:cc:87:4c:3c:80:63:9d:a1:27:42:ea:12:8e: 5c:19:58:f0:9b:87:86:4c:4b:56:0c:c3:e1:04:23: d0:c3:55:26:4e:06:a8:e6:44:f1:9c:8b:1d:88:f4: 71:f1:cb:48:45:e0:d2:2f:cb:28:d9:fa:94:29:da: b8:e4:0b:b4:c0:13:94:cb:86:ad:d0:01:c7:66:5f: 2a:f9:24:6c:03:6e:05:a9:bb:c9:52:3b:91:c4:28: aa:59:b1:f1:bc:84:6c:e4:b2:af:7b:20:3b:57:ef: e9:de:37:4d:20:b7:1c:ec:01:f8:9b:c1:bd:a8:bd: 35:2c:82:f8:27:4b:7e:7e:60:fb:3b:d3:00:25:60: 2b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:54:7A:2E:CE:A5:8E:8E:37:FE:8D:86:A3:44:23:10:B6:4F:AB:2E X509v3 Authority Key Identifier: keyid:AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:28:db:23:89:fa:23:6f:97:e7:87:36:b7:e2:70:9e:6b:01: 02:1d:7f:0d:7e:cf:a0:4c:24:85:7d:9f:08:19:0f:05:dc:01: 08:b5:94:de:25:ba:ce:a8:61:1b:61:4d:bf:a2:88:0c:ed:eb: a7:b7:af:3d:fe:b8:20:b9:f9:e8:b6:d7:96:14:98:93:17:70: 09:c8:b9:6c:65:d1:e0:d8:40:48:e0:f5:74:7f:2a:12:f5:6b: 48:cd:a6:43:d9:9b:b0:fe:47:13:a3:16:b5:e6:bf:f7:fa:18: dc:11:8b:3b:40:98:eb:e3:d6:60:e4:c4:16:1e:2e:b2:e3:13: 10:47:bc:c4:a8:46:44:6f:d4:df:7f:2e:c2:13:28:e3:f4:64: 32:7d:3e:fa:d8:64:84:35:00:38:19:9b:ca:58:d2:84:63:6c: 13:77:94:62:0e:fd:1b:57:fd:b7:2b:13:7d:c0:1b:94:24:9d: 90:61:d1:31:6e:0e:62:27:8d:6e:43:22:6e:ff:21:b8:36:ba: 50:da:e1:15:69:73:98:4b:df:d8:d2:c0:7a:b2:3f:94:29:19: c3:e3:34:10:96:e5:80:b3:1e:12:85:a6:80:c5:bb:59:cc:a2: f3:fe:de:0c:1d:3d:fe:47:49:06:dc:0b:76:c8:e6:74:10:f6: 99:95:62:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFFMjgxMTAvBgNVBAUTKEFDMTlDNjZCQzRCMzFDRUI5MzBCQTZBRTBENkVCNzQ3 QjEwQUI2MDYwHhcNMjYwNTEyMTQ0MTMzWhcNMjYwNTE5MTQ0MTMzWjAYMRYwFAYD VQQDEw02YTAzM2MxZC01YWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA20mnu1amRmlGUhEtGR62ilOArR83sO1BXhANfwnG9/N1/ynPdc5W+zuUtvmd NLWMq6HVulUwwofpG1sji2k0IkENJUNuEuqZ1ZNyU3mLZ576qiWiUDb5AcHK1e7e FvrgD8rxZqAPFcYN56C1VtUcYawM15gpLYpurcyHTDyAY52hJ0LqEo5cGVjwm4eG TEtWDMPhBCPQw1UmTgao5kTxnIsdiPRx8ctIReDSL8so2fqUKdq45Au0wBOUy4at 0AHHZl8q+SRsA24FqbvJUjuRxCiqWbHxvIRs5LKveyA7V+/p3jdNILcc7AH4m8G9 qL01LIL4J0t+fmD7O9MAJWArywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGBUei7O pY6ON/6NhqNEIxC2T6suMB8GA1UdIwQYMBaAFKwZxmvEsxzrkwumrg1ut0exCrYG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUUyOC84NDU4QjkxMDFE OEYxMUUyQUIwM0EyRUUwOEIwMkNEMi9yQm5HYThTekhPdVRDNmF1RFc2M1I3RUt0 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JCbkdhOFN6SE91VEM2YXVEVzYzUjdFS3RnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUUyOC84NDU4QjkxMDFEOEYxMUUyQUIwM0EyRUUwOEIwMkNEMi9yQm5HYThTekhP dVRDNmF1RFc2M1I3RUt0Z1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJijbI4n6I2+X54c2t+JwnmsBAh1/DX7PoEwkhX2fCBkPBdwBCLWU3iW6zqhh G2FNv6KIDO3rp7evPf64ILn56LbXlhSYkxdwCci5bGXR4NhASOD1dH8qEvVrSM2m Q9mbsP5HE6MWtea/9/oY3BGLO0CY6+PWYOTEFh4usuMTEEe8xKhGRG/U338uwhMo 4/RkMn0++thkhDUAOBmbyljShGNsE3eUYg79G1f9tysTfcAblCSdkGHRMW4OYieN bkMibv8huDa6UNrhFWlzmEvf2NLAerI/lCkZw+M0EJblgLMeEoWmgMW7Wcyi8/7e DB09/kdJBtwLdsjmdBD2mZViuA== -----END CERTIFICATE-----Generated at Wed May 13 07:22:48 2026 by rpki-client