$ rpki-client -vvf rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft File: fBMe4KgLg01I0X1pZVpbx75mi2o.mft (raw, json) Hash identifier: vHt5SrCB2Lsa3Kt4auR6/2hrjuJmWUD5KfugIGkDczU= Subject key identifier: 0A:05:2B:42:AC:C4:6C:A6:5A:34:2F:41:2D:EC:F8:89:53:82:80:B6 Authority key identifier: 7C:13:1E:E0:A8:0B:83:4D:48:D1:7D:69:65:5A:5B:C7:BE:66:8B:6A Certificate issuer: /CN=A91637DD/serialNumber=7C131EE0A80B834D48D17D69655A5BC7BE668B6A Certificate serial: 0509 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft Manifest number: 04FA Signing time: Tue 12 May 2026 23:52:25 +0000 Manifest this update: Tue 12 May 2026 23:52:25 +0000 Manifest next update: Tue 19 May 2026 23:52:25 +0000 Files and hashes: 1: fBMe4KgLg01I0X1pZVpbx75mi2o.crl (hash: oZCUiAMQJeS7iTt2guac9eXCHGjgqrsKTrSV1Wrx7I4=) 2: CA95FB0EA1E611EDABFD7D7FC4F9AE02.roa (hash: HsF8gy96J2wsoICfYmcwznwixkV1OQ/RoRjC/SmAq8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.crl rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 23:52:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1289 (0x509) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91637DD, serialNumber=7C131EE0A80B834D48D17D69655A5BC7BE668B6A Validity Not Before: May 12 23:52:25 2026 GMT Not After : May 19 23:52:25 2026 GMT Subject: CN=6a03bd39-9c7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:01:0d:24:3b:df:d6:0b:f3:01:22:cc:b1:2e: 4f:f5:c7:1b:5a:7c:60:d0:93:15:39:e0:c6:7f:b7: 7e:b4:9b:60:d9:05:f9:67:78:36:49:fd:cf:94:ae: 5e:38:38:f6:a9:19:69:16:af:58:9d:2e:ef:5a:69: 02:bb:30:f8:de:51:53:cc:22:0d:07:e4:5c:5a:2b: 95:cc:bf:7e:a4:b4:55:2f:fb:01:dc:a4:a6:11:5a: ce:ab:79:2a:7a:53:e0:8a:c9:75:b6:67:74:96:1e: 28:7b:69:18:fd:75:af:4a:0d:1b:cf:a3:d7:5a:6a: 41:26:81:27:69:54:e9:74:8f:a7:90:fe:d3:9f:95: 87:59:59:c0:59:17:6e:83:6d:7a:c7:71:be:88:a0: 52:6a:c2:d4:c0:53:65:e1:b4:47:3f:c7:ff:0a:ee: 96:8c:20:1c:d8:60:ff:be:2a:16:f6:0f:f5:73:e4: 2d:d8:5a:f2:c7:42:ef:98:db:b8:87:15:79:64:94: cc:79:80:c1:62:ba:dd:7c:f9:d3:ce:26:54:6b:65: 43:1c:94:40:30:f1:94:a2:ae:23:ce:82:f2:9d:3d: 21:91:b4:88:26:77:35:54:a4:bf:e5:32:90:7e:4d: 7d:07:42:fc:b8:e0:95:03:fd:30:df:60:6c:b1:f6: a0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:05:2B:42:AC:C4:6C:A6:5A:34:2F:41:2D:EC:F8:89:53:82:80:B6 X509v3 Authority Key Identifier: keyid:7C:13:1E:E0:A8:0B:83:4D:48:D1:7D:69:65:5A:5B:C7:BE:66:8B:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:49:60:30:dd:ae:83:d6:31:b9:dd:f3:a7:c1:23:47:e1:61: c8:be:16:e5:ae:68:88:1d:92:b8:d6:44:b5:15:e5:de:2d:ab: 73:f5:e5:05:15:d1:51:c1:49:7d:4a:69:01:49:cb:8d:21:1d: 2b:22:95:53:67:ad:0c:63:00:59:21:9e:f7:5d:a1:0c:e2:05: 0e:a9:ed:1f:42:2d:ed:02:ae:6b:3d:93:2e:c6:fd:26:f4:88: 9f:f4:41:ae:b7:b0:fb:a4:2d:89:ce:b6:ec:bf:02:68:77:4d: 67:d4:09:98:b5:1d:b4:e7:bf:4e:a7:34:ff:b9:6a:f2:cb:c6: 4b:33:01:c1:22:12:aa:65:8e:61:72:ef:46:fb:73:e8:23:8a: 99:5e:9d:de:b4:c9:7b:c5:d0:c0:93:a2:b7:6d:89:06:37:26: d7:0c:72:a8:88:eb:1a:d5:1b:f6:35:c8:8d:d2:14:b5:4f:01: 86:a3:58:09:36:79:28:a2:df:34:29:5c:50:8d:77:d3:16:b1: bc:72:89:f7:1a:7d:a3:cd:be:20:c5:64:f4:25:dc:08:e0:d2: c1:99:da:8d:86:89:05:f2:8a:52:a1:bd:ed:28:80:9b:23:e8: 87:db:72:55:7c:1c:4f:7e:bd:ad:f6:3b:30:40:e9:b1:af:91: 88:ae:d6:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM3REQxMTAvBgNVBAUTKDdDMTMxRUUwQTgwQjgzNEQ0OEQxN0Q2OTY1NUE1QkM3 QkU2NjhCNkEwHhcNMjYwNTEyMjM1MjI1WhcNMjYwNTE5MjM1MjI1WjAYMRYwFAYD VQQDEw02YTAzYmQzOS05YzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3QENJDvf1gvzASLMsS5P9ccbWnxg0JMVOeDGf7d+tJtg2QX5Z3g2Sf3PlK5e ODj2qRlpFq9YnS7vWmkCuzD43lFTzCINB+RcWiuVzL9+pLRVL/sB3KSmEVrOq3kq elPgisl1tmd0lh4oe2kY/XWvSg0bz6PXWmpBJoEnaVTpdI+nkP7Tn5WHWVnAWRdu g216x3G+iKBSasLUwFNl4bRHP8f/Cu6WjCAc2GD/vioW9g/1c+Qt2Fryx0LvmNu4 hxV5ZJTMeYDBYrrdfPnTziZUa2VDHJRAMPGUoq4jzoLynT0hkbSIJnc1VKS/5TKQ fk19B0L8uOCVA/0w32BssfagQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAoFK0Ks xGymWjQvQS3s+IlTgoC2MB8GA1UdIwQYMBaAFHwTHuCoC4NNSNF9aWVaW8e+Zotq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzdERC9ERTU5RjYwMjVF NzMxMUVDOEJFNENDNEVDNEY5QUUwMi9mQk1lNEtnTGcwMUkwWDFwWlZwYng3NW1p Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZCTWU0S2dMZzAxSTBYMXBaVnBieDc1bWkyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzdERC9ERTU5RjYwMjVFNzMxMUVDOEJFNENDNEVDNEY5QUUwMi9mQk1lNEtnTGcw MUkwWDFwWlZwYng3NW1pMm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf0lgMN2ug9Yxud3zp8EjR+FhyL4W5a5oiB2SuNZEtRXl3i2rc/XlBRXRUcFJ fUppAUnLjSEdKyKVU2etDGMAWSGe912hDOIFDqntH0It7QKuaz2TLsb9JvSIn/RB rrew+6Qtic627L8CaHdNZ9QJmLUdtOe/Tqc0/7lq8svGSzMBwSISqmWOYXLvRvtz 6COKmV6d3rTJe8XQwJOit22JBjcm1wxyqIjrGtUb9jXIjdIUtU8BhqNYCTZ5KKLf NClcUI130xaxvHKJ9xp9o82+IMVk9CXcCODSwZnajYaJBfKKUqG97SiAmyPoh9ty VXwcT369rfY7MEDpsa+RiK7Wvg== -----END CERTIFICATE-----Generated at Wed May 13 05:41:41 2026 by rpki-client