$ rpki-client -vvf rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft File: Th_fBBxL3f1RF0jkuYPctGJbmoA.mft (raw, json) Hash identifier: qS457HEkfKLRUekcLsc4gMxipQq8Wr1BgOnuy6t/KjE= Subject key identifier: 71:07:50:2B:E8:08:E8:04:A6:5B:7A:F7:79:56:8B:5C:0D:CC:29:E1 Authority key identifier: 4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80 Certificate issuer: /CN=A91827F2/serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80 Certificate serial: 02A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft Manifest number: 029D Signing time: Mon 11 May 2026 01:38:53 +0000 Manifest this update: Mon 11 May 2026 01:38:53 +0000 Manifest next update: Mon 18 May 2026 01:38:53 +0000 Files and hashes: 1: Th_fBBxL3f1RF0jkuYPctGJbmoA.crl (hash: DMq/uXKx5ZsFX/yoPlaUS/Mj1xqCIrMCYkUDhP1w4x0=) 2: 3CCE23342EF211EE8BE1AB1DC4F9AE02.roa (hash: oSOPa5PXvIuggnUAWdjwD208QEjv6p1RYpA0Azk+9ms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 01:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 676 (0x2a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91827F2, serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80 Validity Not Before: May 11 01:38:53 2026 GMT Not After : May 18 01:38:53 2026 GMT Subject: CN=6a01332d-5567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:77:9b:b1:88:0f:95:93:ed:f3:3e:f5:92:64: 56:16:93:1f:e3:41:7b:ad:d3:56:eb:83:9b:c8:6b: 4b:a1:d6:54:9e:d4:3d:df:04:6e:d2:59:fc:e6:b9: 75:e6:9b:b9:fd:69:22:b2:44:4a:e4:2c:7a:4a:d2: fa:9d:bc:6e:7d:dc:0d:aa:f3:6b:1e:af:2d:f0:ca: 59:5f:c0:b1:a7:10:98:e4:69:37:1e:d8:84:63:79: c6:22:db:e9:32:d3:5f:d7:8b:2f:1f:74:aa:2f:1c: 14:02:c3:0d:24:78:21:39:42:36:5b:91:8d:3a:0e: 26:d1:38:07:48:c6:ac:7e:af:14:43:ab:29:e1:a7: 19:a9:5a:16:85:99:b7:67:5b:43:3b:d5:bf:5b:71: a0:97:2c:cb:bb:59:d4:8c:1d:06:5d:af:92:fb:6a: b5:2a:54:07:2d:bf:0c:ce:90:5d:78:a5:79:3d:2c: 56:46:4c:ac:5c:ba:04:c9:1e:8b:71:fe:08:50:d1: bb:59:ba:46:7d:9d:06:01:9c:1c:fb:c3:2c:ae:14: ca:be:60:1a:8d:53:e7:69:64:57:4c:14:75:e9:96: e3:80:8d:90:32:b7:8d:2e:69:ad:25:0f:bb:39:0f: 32:62:5e:57:87:4a:85:19:ff:92:11:50:4b:86:13: 5e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:07:50:2B:E8:08:E8:04:A6:5B:7A:F7:79:56:8B:5C:0D:CC:29:E1 X509v3 Authority Key Identifier: keyid:4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:05:d5:9d:ba:de:b4:e4:98:1c:e1:5b:b6:5d:4a:59:1b:48: 3b:25:3c:41:81:ff:b4:e8:43:24:ed:b0:89:86:af:fa:e9:2f: a5:db:70:4b:42:74:bf:bd:cd:45:b8:d3:db:a1:ad:02:cc:5d: ba:55:54:48:e5:ca:85:83:45:42:69:af:86:df:cf:09:a3:d0: fc:7b:0c:60:68:55:80:91:a1:25:71:ec:ee:60:56:0b:ee:29: ab:fa:1f:e0:3e:0e:ff:60:a6:00:96:b1:fd:34:70:5a:f6:8a: 82:cc:90:8c:fd:ec:ad:3f:d2:42:8a:94:b0:da:08:12:54:7f: dc:34:2f:79:fb:e8:02:bd:b0:24:68:92:36:ac:06:fb:ba:f1: 9b:0b:e1:ab:cb:04:30:5a:e0:ee:1f:47:40:3e:e6:30:e1:4e: 91:da:09:0c:c6:65:72:9c:51:45:a2:64:96:c9:72:e3:d9:e0: 23:ab:fb:83:77:ff:98:82:4e:0c:c2:89:d3:52:1b:01:e8:86: a3:4b:b0:28:18:81:01:60:b5:0f:0f:77:79:28:cb:42:ca:9a: 22:ad:7c:71:05:43:fd:ab:c3:25:38:cd:c0:79:97:4e:a2:d0: 9e:db:52:a7:fa:ce:09:c5:4c:9e:dc:d1:4f:30:5e:c0:9c:97: c3:ea:32:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI3RjIxMTAvBgNVBAUTKDRFMUZERjA0MUM0QkRERkQ1MTE3NDhFNEI5ODNEQ0I0 NjI1QjlBODAwHhcNMjYwNTExMDEzODUzWhcNMjYwNTE4MDEzODUzWjAYMRYwFAYD VQQDEw02YTAxMzMyZC01NTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnebsYgPlZPt8z71kmRWFpMf40F7rdNW64ObyGtLodZUntQ93wRu0ln85rl1 5pu5/WkiskRK5Cx6StL6nbxufdwNqvNrHq8t8MpZX8CxpxCY5Gk3HtiEY3nGItvp MtNf14svH3SqLxwUAsMNJHghOUI2W5GNOg4m0TgHSMasfq8UQ6sp4acZqVoWhZm3 Z1tDO9W/W3GglyzLu1nUjB0GXa+S+2q1KlQHLb8MzpBdeKV5PSxWRkysXLoEyR6L cf4IUNG7WbpGfZ0GAZwc+8MsrhTKvmAajVPnaWRXTBR16ZbjgI2QMreNLmmtJQ+7 OQ8yYl5Xh0qFGf+SEVBLhhNehwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHEHUCvo COgEplt693lWi1wNzCnhMB8GA1UdIwQYMBaAFE4f3wQcS939URdI5LmD3LRiW5qA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjdGMi82N0VDNjQzODUz OUExMUVEOEZFM0Y3MUZDNEY5QUUwMi9UaF9mQkJ4TDNmMVJGMGprdVlQY3RHSmJt b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoX2ZCQnhMM2YxUkYwamt1WVBjdEdKYm1vQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjdGMi82N0VDNjQzODUzOUExMUVEOEZFM0Y3MUZDNEY5QUUwMi9UaF9mQkJ4TDNm MVJGMGprdVlQY3RHSmJtb0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjwXVnbretOSYHOFbtl1KWRtIOyU8QYH/tOhDJO2wiYav+ukvpdtwS0J0v73N RbjT26GtAsxdulVUSOXKhYNFQmmvht/PCaPQ/HsMYGhVgJGhJXHs7mBWC+4pq/of 4D4O/2CmAJax/TRwWvaKgsyQjP3srT/SQoqUsNoIElR/3DQvefvoAr2wJGiSNqwG +7rxmwvhq8sEMFrg7h9HQD7mMOFOkdoJDMZlcpxRRaJklsly49ngI6v7g3f/mIJO DMKJ01IbAeiGo0uwKBiBAWC1Dw93eSjLQsqaIq18cQVD/avDJTjNwHmXTqLQnttS p/rOCcVMntzRTzBewJyXw+oyvQ== -----END CERTIFICATE-----Generated at Wed May 13 01:18:49 2026 by rpki-client