$ rpki-client -vvf rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft File: Ut5nj6808fJ7_XLOdS9c1X6ME84.mft (raw, json) Hash identifier: 43NOqJdy3R2vmFUKcwNotcGv6FgZCK79VSRqoC3N+t4= Subject key identifier: 21:43:91:E8:B1:C4:AA:D4:20:C2:A7:00:C9:71:E2:52:84:6F:41:EE Authority key identifier: 52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE Certificate issuer: /CN=A91781C0/serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE Certificate serial: 0288 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft Manifest number: 027C Signing time: Mon 11 May 2026 01:58:02 +0000 Manifest this update: Mon 11 May 2026 01:58:02 +0000 Manifest next update: Mon 18 May 2026 01:58:02 +0000 Files and hashes: 1: Ut5nj6808fJ7_XLOdS9c1X6ME84.crl (hash: j7KORTodw4Zzq3GNv9nKtbeVbh78xEPihtsgz+Pb1V0=) 2: F69540BA810811ED9EA03683C4F9AE02.roa (hash: 1ls87L8wFBI3susqrdOibbBBgEFKgSyseB64cHDFqj4=) 3: F5D6B6B8810811ED9EA03683C4F9AE02.roa (hash: YhFFk2hbxX7ipWmiEtRtt5VM5YND4GHLWqHWN4WPPew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 01:58:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 648 (0x288) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91781C0, serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE Validity Not Before: May 11 01:58:02 2026 GMT Not After : May 18 01:58:02 2026 GMT Subject: CN=6a0137aa-a397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:0e:a7:3b:5d:c2:3a:fb:84:55:66:26:79:b0: fe:22:15:bc:bc:c5:d0:98:5a:13:7c:d0:e8:f2:54: 04:09:bd:b2:94:98:e0:64:b2:57:f8:52:3f:a7:97: 63:fa:87:c6:d2:9b:7a:9e:b3:94:f0:ed:32:d1:11: ba:1b:ee:93:34:2a:24:f7:9a:24:d1:ff:df:f7:da: e9:b6:d0:19:6c:d8:72:f5:94:c6:44:71:2d:e4:2a: 50:2e:8a:b4:67:4e:f6:e2:c3:f4:2a:74:1e:f3:70: b2:91:24:25:6c:77:61:e1:37:c1:07:b8:f3:05:a4: 93:6e:71:12:56:9c:c0:4f:9a:55:82:48:22:51:09: a9:f7:89:6e:f1:06:9a:e4:e6:9b:9a:56:ce:a2:6d: f3:e0:88:2a:33:1e:da:60:10:27:3c:a0:31:39:49: 05:ef:a4:f1:99:a7:90:b5:01:27:51:c9:ae:92:d4: 8c:21:59:aa:1b:e3:93:2d:ad:d5:51:b5:00:83:6b: 39:1d:9a:ae:8f:d6:21:72:11:33:de:64:a1:a5:72: 1d:b5:b7:e1:63:62:a0:57:45:5d:fe:c2:fa:d8:b0: ce:10:ef:28:83:d6:99:32:9e:54:81:a1:29:3d:a3: f8:8e:18:c5:6d:fd:97:43:a7:d6:02:91:ef:11:4a: d0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:43:91:E8:B1:C4:AA:D4:20:C2:A7:00:C9:71:E2:52:84:6F:41:EE X509v3 Authority Key Identifier: keyid:52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:06:87:46:0f:6c:06:91:a0:aa:c2:19:9a:9e:84:e5:7c:2b: 34:00:02:83:f6:d0:f9:a5:29:bc:6f:ee:d0:92:20:46:6d:eb: d2:0a:3b:df:71:35:d9:61:52:5f:94:ff:a1:16:95:a1:49:2d: 7a:77:4e:2a:d9:3d:ae:99:a9:86:24:aa:05:8a:dc:65:13:23: e8:1b:50:73:59:7b:38:83:08:45:3e:85:25:d2:b2:2d:c5:a2: 60:81:ec:9f:2b:4f:c9:dc:67:9a:0e:c3:60:2f:20:9f:ce:68: 11:f9:55:8e:c7:74:b8:8e:1d:61:1a:a6:65:51:36:75:cd:70: 92:5a:57:41:82:55:cf:73:e0:16:9e:fa:00:04:41:97:73:5e: f8:33:d7:57:cc:af:db:eb:ac:c8:dc:5d:a9:fa:7b:d5:97:7f: eb:ad:f0:72:a0:79:f3:32:9a:f7:3d:63:7e:42:da:01:1d:3e: 15:60:e8:c3:20:51:6c:27:6d:34:4e:25:1b:d1:b1:50:a9:be: 00:5f:0f:00:08:09:e5:8c:77:8c:ed:5f:4e:3d:bd:52:78:9a: 85:23:67:1c:61:7e:fd:d8:06:56:e1:50:ee:5d:69:59:70:8c: bb:d4:69:20:2a:4c:6a:4c:97:2b:ad:9d:07:e8:6f:eb:87:d8: 0b:ca:f5:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzgxQzAxMTAvBgNVBAUTKDUyREU2NzhGQUYzNEYxRjI3QkZENzJDRTc1MkY1Q0Q1 N0U4QzEzQ0UwHhcNMjYwNTExMDE1ODAyWhcNMjYwNTE4MDE1ODAyWjAYMRYwFAYD VQQDEw02YTAxMzdhYS1hMzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8w6nO13COvuEVWYmebD+IhW8vMXQmFoTfNDo8lQECb2ylJjgZLJX+FI/p5dj +ofG0pt6nrOU8O0y0RG6G+6TNCok95ok0f/f99rpttAZbNhy9ZTGRHEt5CpQLoq0 Z0724sP0KnQe83CykSQlbHdh4TfBB7jzBaSTbnESVpzAT5pVgkgiUQmp94lu8Qaa 5OabmlbOom3z4IgqMx7aYBAnPKAxOUkF76TxmaeQtQEnUcmuktSMIVmqG+OTLa3V UbUAg2s5HZquj9YhchEz3mShpXIdtbfhY2KgV0Vd/sL62LDOEO8og9aZMp5UgaEp PaP4jhjFbf2XQ6fWApHvEUrQjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCFDkeix xKrUIMKnAMlx4lKEb0HuMB8GA1UdIwQYMBaAFFLeZ4+vNPHye/1yznUvXNV+jBPO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODFDMC8yRjI4OUVENjgx MDQxMUVEQkVDNjUwODdDNEY5QUUwMi9VdDVuajY4MDhmSjdfWExPZFM5YzFYNk1F ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V0NW5qNjgwOGZKN19YTE9kUzljMVg2TUU4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODFDMC8yRjI4OUVENjgxMDQxMUVEQkVDNjUwODdDNEY5QUUwMi9VdDVuajY4MDhm SjdfWExPZFM5YzFYNk1FODQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATAaHRg9sBpGgqsIZmp6E5XwrNAACg/bQ+aUpvG/u0JIgRm3r0go733E12WFS X5T/oRaVoUktendOKtk9rpmphiSqBYrcZRMj6BtQc1l7OIMIRT6FJdKyLcWiYIHs nytPydxnmg7DYC8gn85oEflVjsd0uI4dYRqmZVE2dc1wklpXQYJVz3PgFp76AARB l3Ne+DPXV8yv2+usyNxdqfp71Zd/663wcqB58zKa9z1jfkLaAR0+FWDowyBRbCdt NE4lG9GxUKm+AF8PAAgJ5Yx3jO1fTj29UniahSNnHGF+/dgGVuFQ7l1pWXCMu9Rp ICpMakyXK62dB+hv64fYC8r10g== -----END CERTIFICATE-----Generated at Wed May 13 03:36:16 2026 by rpki-client