$ rpki-client -vvf rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft File: CBKglmLws-NPK1pRwz6OknA-Q2k.mft (raw, json) Hash identifier: mWS5d5NZnGHysaMQWl8r1sUd9XEAOBK1ysXSlBuzw/g= Subject key identifier: E3:43:A6:AD:DE:AC:7D:F9:EB:EE:D9:2F:22:CF:64:6F:AE:01:75:C0 Authority key identifier: 08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69 Certificate issuer: /CN=A91547EC/serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369 Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft Manifest number: 83 Signing time: Mon 11 May 2026 07:46:38 +0000 Manifest this update: Mon 11 May 2026 07:46:38 +0000 Manifest next update: Mon 18 May 2026 07:46:38 +0000 Files and hashes: 1: CBKglmLws-NPK1pRwz6OknA-Q2k.crl (hash: /MimygNfKsZOg+yaVDCtnrlXLsF6PtC4ZGgWMhpFI+w=) 2: 7CB1102487DD11F0A89FB377C4F9AE02.roa (hash: LJuHTr9dIvZYkAmMksiQJJP2qElg6VwwLMqlMwzQK3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 07:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91547EC, serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369 Validity Not Before: May 11 07:46:38 2026 GMT Not After : May 18 07:46:38 2026 GMT Subject: CN=6a01895e-1f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:94:3f:fe:c5:51:1a:a6:01:a6:33:df:9f:b7: 59:3f:3b:55:ba:0f:a0:d5:92:ce:8f:21:ce:b4:34: bb:21:a3:14:5d:7c:f0:df:33:63:05:c5:38:3e:fc: 67:af:38:a9:e2:a2:20:7c:34:11:27:a2:9e:9e:b1: a5:45:d2:9b:80:e8:4f:67:9b:43:69:c7:b0:cb:48: 10:86:08:62:82:73:ce:43:dc:93:7b:fb:aa:62:2e: e8:9a:13:25:d0:a3:3c:94:0b:19:ca:39:a9:30:34: c2:60:82:68:20:9f:34:46:b9:ce:be:7b:14:b3:c4: 58:54:0d:f5:53:09:1a:9e:c1:52:26:7c:b4:06:e9: 8a:50:bc:73:96:c5:3b:0c:7b:7b:ae:ce:25:fb:00: 4b:de:5a:40:76:5f:fb:bb:88:ff:f9:ea:95:61:18: 53:5c:90:79:c6:e8:9a:5b:35:02:fb:ec:cf:8c:3f: 95:8d:99:d4:26:9d:e8:c6:b2:c7:a7:f1:05:f6:e3: cd:34:34:c7:5e:ef:f3:d0:01:05:47:4b:2b:a2:ba: a9:99:7d:55:aa:3f:6b:7e:29:ed:52:25:72:0b:f7: 54:95:f2:f4:57:c1:a9:43:3e:3b:70:1a:10:74:f7: ee:97:1b:1a:54:0b:e3:5d:e6:7a:ae:94:41:95:cb: 87:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:43:A6:AD:DE:AC:7D:F9:EB:EE:D9:2F:22:CF:64:6F:AE:01:75:C0 X509v3 Authority Key Identifier: keyid:08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:f8:82:fd:6f:48:87:34:29:fc:6c:06:52:c6:a3:f4:ce:3e: 4a:2c:5d:72:0c:48:1b:f2:23:48:0f:fd:1e:30:c9:d8:9a:95: 65:90:e3:c3:ae:b4:83:b3:5d:23:40:df:6b:7b:f4:3a:5b:59: 3d:3e:30:f3:e6:a8:2c:ce:57:e8:8d:02:5e:6f:9b:5d:3b:0b: a7:ea:29:b7:aa:0a:15:8e:69:d1:1e:38:52:54:5b:11:e2:74: 96:5c:8f:49:c0:30:0e:bf:3e:b3:4b:78:c2:81:d7:5f:9f:85: f4:18:e2:cd:4d:f1:4f:07:74:a0:97:00:2b:70:61:af:43:98: 1b:1a:8e:2f:89:5d:9a:3d:d8:b1:b1:bd:a9:2a:bf:f5:e0:30: de:c5:76:f7:15:9c:b6:0c:29:46:b5:c0:db:7f:aa:19:25:de: 76:68:3f:cf:4e:fc:b6:18:c2:8b:88:17:4a:ac:3d:9a:cc:7f: a2:80:22:ac:bd:f9:a8:bf:df:e5:d7:68:9a:51:4e:c7:9a:29: 24:89:ae:14:fc:5c:df:73:4c:e7:41:a9:d6:fb:91:5d:22:ad: 91:98:ed:0a:fd:cb:3a:05:6e:a2:ab:b0:34:a8:f6:7b:81:e7: 6a:bc:f9:ea:a8:4d:a1:23:33:6a:31:46:00:2d:9b:f4:fc:69: 59:88:be:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ3RUMxMTAvBgNVBAUTKDA4MTJBMDk2NjJGMEIzRTM0RjJCNUE1MUMzM0U4RTky NzAzRTQzNjkwHhcNMjYwNTExMDc0NjM4WhcNMjYwNTE4MDc0NjM4WjAYMRYwFAYD VQQDEw02YTAxODk1ZS0xZjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZQ//sVRGqYBpjPfn7dZPztVug+g1ZLOjyHOtDS7IaMUXXzw3zNjBcU4Pvxn rzip4qIgfDQRJ6KenrGlRdKbgOhPZ5tDacewy0gQhghignPOQ9yTe/uqYi7omhMl 0KM8lAsZyjmpMDTCYIJoIJ80RrnOvnsUs8RYVA31UwkansFSJny0BumKULxzlsU7 DHt7rs4l+wBL3lpAdl/7u4j/+eqVYRhTXJB5xuiaWzUC++zPjD+VjZnUJp3oxrLH p/EF9uPNNDTHXu/z0AEFR0srorqpmX1Vqj9rfintUiVyC/dUlfL0V8GpQz47cBoQ dPfulxsaVAvjXeZ6rpRBlcuH8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFONDpq3e rH356+7ZLyLPZG+uAXXAMB8GA1UdIwQYMBaAFAgSoJZi8LPjTytaUcM+jpJwPkNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDdFQy8yNTYzNTdDODg3 REQxMUYwQjc0Q0ZFNzZDNEY5QUUwMi9DQktnbG1Md3MtTlBLMXBSd3o2T2tuQS1R MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NCS2dsbUx3cy1OUEsxcFJ3ejZPa25BLVEyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDdFQy8yNTYzNTdDODg3REQxMUYwQjc0Q0ZFNzZDNEY5QUUwMi9DQktnbG1Md3Mt TlBLMXBSd3o2T2tuQS1RMmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiviC/W9IhzQp/GwGUsaj9M4+SixdcgxIG/IjSA/9HjDJ2JqVZZDjw660g7Nd I0Dfa3v0OltZPT4w8+aoLM5X6I0CXm+bXTsLp+opt6oKFY5p0R44UlRbEeJ0llyP ScAwDr8+s0t4woHXX5+F9BjizU3xTwd0oJcAK3Bhr0OYGxqOL4ldmj3YsbG9qSq/ 9eAw3sV29xWctgwpRrXA23+qGSXedmg/z078thjCi4gXSqw9msx/ooAirL35qL/f 5ddomlFOx5opJImuFPxc33NM50Gp1vuRXSKtkZjtCv3LOgVuoquwNKj2e4Hnarz5 6qhNoSMzajFGAC2b9PxpWYi+UQ== -----END CERTIFICATE-----Generated at Wed May 13 03:04:57 2026 by rpki-client