$ rpki-client -vvf rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft File: _0KzQ2BElUaW_-CLDuGXXGxbjW0.mft (raw, json) Hash identifier: 2dLJPCly0ZkyvpQNHG34PMKzTy5gW+9Rmwq0x4OUMJY= Subject key identifier: 11:D4:68:7B:60:C0:DB:A7:15:AE:73:F0:61:6A:E9:CB:DA:7A:2B:C2 Authority key identifier: FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D Certificate issuer: /CN=A91864A7/serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D Certificate serial: 026C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft Manifest number: 0259 Signing time: Mon 11 May 2026 02:22:17 +0000 Manifest this update: Mon 11 May 2026 02:22:17 +0000 Manifest next update: Mon 18 May 2026 02:22:17 +0000 Files and hashes: 1: _0KzQ2BElUaW_-CLDuGXXGxbjW0.crl (hash: Smf95ZIxwM/fL2o4OA9D4EbeiYBGzp7Ez54Vd1RXr1s=) 2: D62511F6C41D11F08D2E621EC4F9AE02.roa (hash: HAQPkYTVEHvUCCvstD3cbGBNAUP4hbxEWfa91gL9q2w=) 3: B34D1A26F6C811EEBC4BE00BC4F9AE02.roa (hash: VvVjYiDQeO0/Kuu5dNnxQmNtzBeDEDxanFTxX0efrwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 02:22:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 620 (0x26c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91864A7, serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D Validity Not Before: May 11 02:22:17 2026 GMT Not After : May 18 02:22:17 2026 GMT Subject: CN=6a013d59-e452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:55:b7:a2:8d:28:fc:6c:33:d2:c0:5e:b1:c3: 0c:5a:7f:df:a4:16:71:b8:99:14:78:22:dd:8d:06: ed:bd:2d:9f:cd:02:80:3b:c7:9b:f8:ff:04:c5:06: 1c:a6:ba:fa:c8:62:4b:37:49:11:56:5a:32:af:64: af:b1:45:5a:11:db:d9:6d:c4:84:41:4c:41:f7:2c: 7a:03:5d:ec:21:11:5b:9d:90:31:f2:3f:95:7f:94: 64:4b:5d:9d:90:06:de:84:de:9a:99:3e:ee:a2:25: 0b:54:57:03:1c:ed:cd:96:e1:c9:18:f1:18:0a:dc: 69:a3:e6:bc:20:a5:42:b6:97:46:5b:ab:3b:84:a1: cd:8b:33:b6:9b:17:59:9c:9e:0a:c0:bb:9b:fc:dd: 19:a8:5c:9d:42:19:b0:5b:8b:2e:28:f4:29:6a:e2: c9:dd:d6:ab:ba:ed:7d:1c:c6:06:ed:6a:4d:d8:35: 8e:95:c8:15:ea:24:de:21:0f:71:7e:82:5f:bb:9e: 37:02:3c:0b:88:32:85:a8:8b:ee:39:30:e6:2a:ba: 33:d2:d9:8c:2c:ef:ba:97:82:e1:03:7c:5a:02:13: f5:0a:62:95:2e:79:ed:aa:ad:e5:1c:a6:ba:bc:c9: 36:c7:89:7a:da:2d:57:4f:f6:10:8d:87:5e:1a:a9: e5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D4:68:7B:60:C0:DB:A7:15:AE:73:F0:61:6A:E9:CB:DA:7A:2B:C2 X509v3 Authority Key Identifier: keyid:FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:a2:07:81:bf:a3:2a:1a:a9:af:e7:75:ea:2d:4f:b8:c6:40: cb:80:df:c2:e4:f3:66:ab:e8:c6:a8:d6:56:e4:0f:86:66:fd: 98:eb:fd:f1:74:13:9e:a1:07:e2:78:65:49:0a:5e:39:c7:87: 09:1e:55:1c:a9:42:70:0e:d3:8a:b5:e3:55:21:56:4f:1c:dc: c9:53:04:6b:f6:7f:83:da:8f:f7:87:3a:51:79:7b:38:ef:4f: 07:45:d1:8d:1d:1d:38:02:92:b2:ae:d5:01:24:39:78:76:02: 81:79:d9:7d:ea:1f:b8:b7:56:b7:ff:19:35:e2:ff:42:d9:86: d3:c4:1b:0b:df:03:c4:d6:07:d5:6c:17:11:a6:40:c2:b5:65: 61:10:41:af:9b:4c:b4:cf:c2:35:97:e9:23:85:05:fa:3d:d5: ce:e2:47:98:1f:aa:9b:51:b5:bd:3b:4d:3a:dc:c3:78:e8:86: 56:03:69:bc:d2:71:58:28:72:a3:24:85:7f:4e:30:c8:18:ad: 68:bd:fe:c4:06:4f:67:8e:5d:77:d3:5f:ec:9b:c4:d3:21:4d: 80:58:21:2d:cf:14:6b:a2:99:66:ac:39:46:a4:e7:8a:72:4f: 53:9e:21:d8:64:e4:92:f3:85:07:9a:8e:d9:05:2a:11:ba:65: 95:59:85:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY0QTcxMTAvBgNVBAUTKEZGNDJCMzQzNjA0NDk1NDY5NkZGRTA4QjBFRTE5NzVD NkM1QjhENkQwHhcNMjYwNTExMDIyMjE3WhcNMjYwNTE4MDIyMjE3WjAYMRYwFAYD VQQDEw02YTAxM2Q1OS1lNDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21W3oo0o/Gwz0sBescMMWn/fpBZxuJkUeCLdjQbtvS2fzQKAO8eb+P8ExQYc prr6yGJLN0kRVloyr2SvsUVaEdvZbcSEQUxB9yx6A13sIRFbnZAx8j+Vf5RkS12d kAbehN6amT7uoiULVFcDHO3NluHJGPEYCtxpo+a8IKVCtpdGW6s7hKHNizO2mxdZ nJ4KwLub/N0ZqFydQhmwW4suKPQpauLJ3daruu19HMYG7WpN2DWOlcgV6iTeIQ9x foJfu543AjwLiDKFqIvuOTDmKroz0tmMLO+6l4LhA3xaAhP1CmKVLnntqq3lHKa6 vMk2x4l62i1XT/YQjYdeGqnlDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBHUaHtg wNunFa5z8GFq6cvaeivCMB8GA1UdIwQYMBaAFP9Cs0NgRJVGlv/giw7hl1xsW41t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjRBNy9DODA1NUZENkM5 MjUxMUVEODA5MzYxNDlDNEY5QUUwMi9fMEt6UTJCRWxVYVdfLUNMRHVHWFhHeGJq VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wS3pRMkJFbFVhV18tQ0xEdUdYWEd4YmpXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjRBNy9DODA1NUZENkM5MjUxMUVEODA5MzYxNDlDNEY5QUUwMi9fMEt6UTJCRWxV YVdfLUNMRHVHWFhHeGJqVzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUqIHgb+jKhqpr+d16i1PuMZAy4DfwuTzZqvoxqjWVuQPhmb9mOv98XQTnqEH 4nhlSQpeOceHCR5VHKlCcA7TirXjVSFWTxzcyVMEa/Z/g9qP94c6UXl7OO9PB0XR jR0dOAKSsq7VASQ5eHYCgXnZfeofuLdWt/8ZNeL/QtmG08QbC98DxNYH1WwXEaZA wrVlYRBBr5tMtM/CNZfpI4UF+j3VzuJHmB+qm1G1vTtNOtzDeOiGVgNpvNJxWChy oySFf04wyBitaL3+xAZPZ45dd9Nf7JvE0yFNgFghLc8Ua6KZZqw5RqTninJPU54h 2GTkkvOFB5qO2QUqEbpllVmF6A== -----END CERTIFICATE-----Generated at Wed May 13 05:34:05 2026 by rpki-client