$ rpki-client -vvf rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft File: lddEZYkqyDm6JHn6BHVqXjBfJjw.mft (raw, json) Hash identifier: YEa4+LMG8cvIZWtnlPmjmJFFSwsV81V4N64K0DFgDgk= Subject key identifier: 61:3D:A8:8D:96:5D:5D:D3:39:C7:2F:69:3A:E0:95:4B:A6:F6:C7:93 Authority key identifier: 95:D7:44:65:89:2A:C8:39:BA:24:79:FA:04:75:6A:5E:30:5F:26:3C Certificate issuer: /CN=A91557F2/serialNumber=95D74465892AC839BA2479FA04756A5E305F263C Certificate serial: 0209 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft Manifest number: 0209 Signing time: Tue 12 May 2026 21:34:35 +0000 Manifest this update: Tue 12 May 2026 21:34:35 +0000 Manifest next update: Tue 19 May 2026 21:34:35 +0000 Files and hashes: 1: lddEZYkqyDm6JHn6BHVqXjBfJjw.crl (hash: JPM21NZQMOCcPOLe9TZ7GQG73wCg/pDXhfVQIZwO1k4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.crl rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 21:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557F2, serialNumber=95D74465892AC839BA2479FA04756A5E305F263C Validity Not Before: May 12 21:34:35 2026 GMT Not After : May 19 21:34:35 2026 GMT Subject: CN=6a039ceb-8c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4b:27:d7:d5:53:e3:f2:ce:9b:b8:02:db:7d: 2c:31:c5:6c:27:51:89:33:cc:41:30:dc:21:fd:03: 1f:ac:5e:0b:ca:e0:17:57:7c:36:65:ce:30:7c:79: 3c:b7:67:28:32:16:11:16:81:1f:3d:9d:88:2f:2b: 20:76:a0:60:1f:e1:57:75:ea:06:13:88:c3:b4:1a: ba:43:7a:dc:38:e9:88:48:9a:f1:20:77:46:36:e4: 64:3d:2b:b1:d6:a1:76:7f:e9:8e:0c:c5:24:a8:6a: 87:8e:9b:cd:10:58:e8:4c:86:8e:85:89:09:0d:17: 2a:04:87:4a:d9:6e:fa:02:f4:fd:09:ca:e7:b6:1b: bb:11:84:5a:09:4e:12:c2:35:87:11:7c:23:5e:a5: a9:9d:fd:fa:2c:16:d6:e4:f0:c0:78:32:73:38:f2: 8b:f8:97:10:1f:32:84:f7:eb:ae:21:07:4a:4a:c0: fb:d2:44:61:c9:08:40:58:29:9c:fe:9b:68:7a:c3: 40:28:7c:01:8a:e9:06:52:0a:bf:ff:62:75:73:9f: df:37:9a:df:91:44:4d:b1:ee:01:00:ba:44:14:2f: 6c:58:33:2e:78:ea:30:51:d7:06:bd:d4:54:f1:2c: 67:b2:e5:2d:a2:94:93:a0:17:d1:9c:e7:8e:ff:b7: 94:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:3D:A8:8D:96:5D:5D:D3:39:C7:2F:69:3A:E0:95:4B:A6:F6:C7:93 X509v3 Authority Key Identifier: keyid:95:D7:44:65:89:2A:C8:39:BA:24:79:FA:04:75:6A:5E:30:5F:26:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:cd:23:8a:e0:92:ac:e2:7e:60:38:9d:9c:6f:03:99:a3:d3: 1c:1f:18:9f:b6:bf:59:c4:3f:2a:e8:39:35:ea:d5:f0:ac:7f: ef:97:8c:a2:fd:a6:52:50:14:ff:39:ba:0d:18:77:8a:98:0c: 90:47:08:46:26:50:4a:b2:ae:ed:33:8e:56:4d:5f:3d:7b:dd: c5:89:0f:44:88:8b:69:5e:a4:13:10:0b:51:d8:cc:87:ae:e2: 1b:80:74:a6:d5:7d:35:9b:d8:c8:e0:ce:f2:63:0a:04:8c:01: 34:92:0c:8a:70:78:f2:b4:a1:37:82:3a:0f:49:e3:1d:33:02: 7a:fd:72:82:29:64:99:f7:3a:d8:68:89:0a:b1:22:d7:7b:1b: a2:dd:11:fa:64:98:f5:8c:62:77:0a:79:c5:45:dd:b0:88:da: 1f:73:3b:55:6d:17:7f:55:ff:42:10:04:2c:0a:cb:b0:89:78: 7d:fc:29:96:b1:14:36:b5:a5:4d:3c:b3:65:52:d8:4a:d9:86: d6:4b:b7:69:4c:84:a0:ee:64:b4:e5:66:e4:4f:81:a3:29:49: 5b:d3:40:5b:f5:b6:8e:af:80:5c:26:cd:15:83:fa:b8:d5:e4: a4:e4:e6:a0:b4:6e:88:f4:48:19:4e:6a:1e:c2:0c:bd:ba:99: e7:ca:68:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3RjIxMTAvBgNVBAUTKDk1RDc0NDY1ODkyQUM4MzlCQTI0NzlGQTA0NzU2QTVF MzA1RjI2M0MwHhcNMjYwNTEyMjEzNDM1WhcNMjYwNTE5MjEzNDM1WjAYMRYwFAYD VQQDEw02YTAzOWNlYi04YzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Esn19VT4/LOm7gC230sMcVsJ1GJM8xBMNwh/QMfrF4LyuAXV3w2Zc4wfHk8 t2coMhYRFoEfPZ2ILysgdqBgH+FXdeoGE4jDtBq6Q3rcOOmISJrxIHdGNuRkPSux 1qF2f+mODMUkqGqHjpvNEFjoTIaOhYkJDRcqBIdK2W76AvT9Ccrnthu7EYRaCU4S wjWHEXwjXqWpnf36LBbW5PDAeDJzOPKL+JcQHzKE9+uuIQdKSsD70kRhyQhAWCmc /ptoesNAKHwBiukGUgq//2J1c5/fN5rfkURNse4BALpEFC9sWDMueOowUdcGvdRU 8SxnsuUtopSToBfRnOeO/7eUFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGE9qI2W XV3TOccvaTrglUum9seTMB8GA1UdIwQYMBaAFJXXRGWJKsg5uiR5+gR1al4wXyY8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdGMi9CRjI3RkQ0NjQy RTgxMUVFOUJCRTY0NkNDNEY5QUUwMi9sZGRFWllrcXlEbTZKSG42QkhWcVhqQmZK ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xkZEVaWWtxeURtNkpIbjZCSFZxWGpCZkpqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdGMi9CRjI3RkQ0NjQyRTgxMUVFOUJCRTY0NkNDNEY5QUUwMi9sZGRFWllrcXlE bTZKSG42QkhWcVhqQmZKancubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbc0jiuCSrOJ+YDidnG8DmaPTHB8Yn7a/WcQ/Kug5NerV8Kx/75eMov2mUlAU /zm6DRh3ipgMkEcIRiZQSrKu7TOOVk1fPXvdxYkPRIiLaV6kExALUdjMh67iG4B0 ptV9NZvYyODO8mMKBIwBNJIMinB48rShN4I6D0njHTMCev1ygilkmfc62GiJCrEi 13sbot0R+mSY9Yxidwp5xUXdsIjaH3M7VW0Xf1X/QhAELArLsIl4ffwplrEUNrWl TTyzZVLYStmG1ku3aUyEoO5ktOVm5E+BoylJW9NAW/W2jq+AXCbNFYP6uNXkpOTm oLRuiPRIGU5qHsIMvbqZ58po9g== -----END CERTIFICATE-----Generated at Wed May 13 19:04:10 2026 by rpki-client