$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft File: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft (raw, json) Hash identifier: EITx7x60F4yHwsynRXWvIiNrozOoVWHgnK4SZg5VT5k= Subject key identifier: 27:56:84:8D:A8:9A:DB:E1:24:2A:ED:79:02:53:38:A6:14:05:E4:CC Authority key identifier: BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D Certificate issuer: /CN=A91862F9/serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D Certificate serial: 021E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft Manifest number: 020D Signing time: Wed 13 May 2026 03:08:46 +0000 Manifest this update: Wed 13 May 2026 03:08:46 +0000 Manifest next update: Wed 20 May 2026 03:08:46 +0000 Files and hashes: 1: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl (hash: czYwgiA9QxBcfTMcnSnIte705yT1bKaOFqxi1np+BDs=) 2: 46E49D1CE79811EEA89C5E56C4F9AE02.roa (hash: ZP+Fsk2FtcDycpwS+m0D9syGyr7ezG1ogPe4OjBVvG4=) 3: EF15AC2A9EB611F09A08B07EC4F9AE02.roa (hash: 85UD2/db2JNfOGlb39R7ySUL/Ipyzf/y8vjlGn3oMtE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 03:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862F9, serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D Validity Not Before: May 13 03:08:46 2026 GMT Not After : May 20 03:08:46 2026 GMT Subject: CN=6a03eb3e-7247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:07:51:87:50:38:78:37:53:73:ba:c3:68:e1: b3:e9:c7:27:0b:a1:42:da:50:17:25:67:01:8f:f1: 6e:62:87:bf:75:76:47:c1:c2:cf:aa:77:f4:b5:77: b0:a9:fc:de:a5:a4:8a:4f:a7:f3:25:4c:45:97:a9: 11:f5:44:06:75:ca:f2:21:e4:52:23:fb:97:3f:a6: 3f:c4:6f:19:61:9b:15:f6:88:42:62:58:a4:2d:d2: 49:80:a3:a2:3a:5b:78:e5:7f:70:f0:b2:5d:73:ba: c3:4f:4a:62:0a:c9:55:00:a3:df:a7:96:b4:b5:47: ac:66:1f:2f:62:6b:b9:90:d1:0a:0e:8f:d7:1e:52: 76:b7:1d:cb:ba:44:fd:ae:2e:15:54:a9:77:23:9f: 51:4b:56:8c:fb:f6:5b:9d:fd:73:98:0b:be:f1:26: 23:ec:18:83:60:76:2c:0d:18:ce:e7:e4:e9:a4:f9: 9a:e4:c7:5c:ba:a5:1a:b5:4a:ac:12:9c:73:2b:20: 2a:82:30:08:cb:68:9c:11:81:a7:44:ee:ba:ee:a4: c0:bd:82:13:05:98:33:c4:96:a2:d9:28:ca:56:ef: 18:c3:4c:a5:df:18:52:d0:6d:63:8c:85:13:d0:b8: a2:f8:f2:5c:74:9a:75:97:47:d9:49:f8:c6:bb:2e: 01:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:56:84:8D:A8:9A:DB:E1:24:2A:ED:79:02:53:38:A6:14:05:E4:CC X509v3 Authority Key Identifier: keyid:BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:ed:5e:b4:f2:6b:0c:df:96:b2:32:c3:bb:e5:8e:60:5a:f9: 85:5b:6e:d7:e1:75:05:da:d7:74:b0:12:16:1d:5d:1d:79:c3: 52:eb:6b:de:f9:e9:0b:4d:0a:4a:01:7b:2f:f9:b5:b6:f0:1d: fb:79:fd:ad:7a:f8:c9:60:63:fd:98:7f:38:ee:a7:5c:88:b0: 78:41:5c:52:60:1b:78:70:0b:5e:e5:74:d5:c8:0d:51:bc:98: 3e:fa:dd:0f:22:c8:d7:db:ca:fc:4d:6b:d8:12:fc:11:83:76: b9:ef:31:dd:ba:41:a0:83:8f:cb:ae:c8:92:57:1d:00:a9:a8: e2:89:dd:72:24:5b:8f:37:5a:69:11:c0:ac:e8:0f:36:b2:cd: b4:c5:91:e8:a5:1f:a8:3d:8a:57:40:4d:13:03:b4:13:03:48: 76:47:e8:5f:e4:f0:5b:27:75:eb:73:41:98:f6:3f:11:92:60: b2:a9:35:80:01:6f:e5:e3:83:a5:00:63:f7:8f:93:cf:b1:b9: 9c:c9:b4:03:83:1c:3e:71:a8:ef:02:c9:b7:ee:16:2d:18:0b: c7:16:51:4e:50:c7:06:36:85:82:67:cf:e3:c5:39:19:f2:3c: 01:c3:b1:38:98:5a:f3:d8:7a:13:57:6e:85:5c:8b:5b:cf:bd: cf:b8:29:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyRjkxMTAvBgNVBAUTKEJFNjM0MUE3Q0MwQ0EwRjZDMUExNUUwNDY2RUM3MTU1 QjgyODNDOUQwHhcNMjYwNTEzMDMwODQ2WhcNMjYwNTIwMDMwODQ2WjAYMRYwFAYD VQQDEw02YTAzZWIzZS03MjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmwdRh1A4eDdTc7rDaOGz6ccnC6FC2lAXJWcBj/FuYoe/dXZHwcLPqnf0tXew qfzepaSKT6fzJUxFl6kR9UQGdcryIeRSI/uXP6Y/xG8ZYZsV9ohCYlikLdJJgKOi Olt45X9w8LJdc7rDT0piCslVAKPfp5a0tUesZh8vYmu5kNEKDo/XHlJ2tx3LukT9 ri4VVKl3I59RS1aM+/Zbnf1zmAu+8SYj7BiDYHYsDRjO5+TppPma5MdcuqUatUqs EpxzKyAqgjAIy2icEYGnRO667qTAvYITBZgzxJai2SjKVu8Yw0yl3xhS0G1jjIUT 0Lii+PJcdJp1l0fZSfjGuy4BawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCdWhI2o mtvhJCrteQJTOKYUBeTMMB8GA1UdIwQYMBaAFL5jQafMDKD2waFeBGbscVW4KDyd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjJGOS80RTYwOUE3MjNC N0QxMUVFOTY1NkZDNjRDNEY5QUUwMi92bU5CcDh3TW9QYkJvVjRFWnV4eFZiZ29Q SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZtTkJwOHdNb1BiQm9WNEVadXh4VmJnb1BKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjJGOS80RTYwOUE3MjNCN0QxMUVFOTY1NkZDNjRDNEY5QUUwMi92bU5CcDh3TW9Q YkJvVjRFWnV4eFZiZ29QSjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE+1etPJrDN+WsjLDu+WOYFr5hVtu1+F1BdrXdLASFh1dHXnDUutr3vnpC00K SgF7L/m1tvAd+3n9rXr4yWBj/Zh/OO6nXIiweEFcUmAbeHALXuV01cgNUbyYPvrd DyLI19vK/E1r2BL8EYN2ue8x3bpBoIOPy67IklcdAKmo4ondciRbjzdaaRHArOgP NrLNtMWR6KUfqD2KV0BNEwO0EwNIdkfoX+TwWyd163NBmPY/EZJgsqk1gAFv5eOD pQBj94+Tz7G5nMm0A4McPnGo7wLJt+4WLRgLxxZRTlDHBjaFgmfP48U5GfI8AcOx OJha89h6E1duhVyLW8+9z7gpoA== -----END CERTIFICATE-----Generated at Wed May 13 08:59:31 2026 by rpki-client