$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft File: 2kcELjdqlHP8Dt_IRFc53RMorg4.mft (raw, json) Hash identifier: nXqBWsZRSgw+jBokVRFYpjm/RP5Es1cGpAi7ApQKa9Y= Subject key identifier: 39:D6:ED:7D:F8:F4:BE:F5:63:64:AB:4C:1D:17:F4:96:A5:3C:5D:46 Authority key identifier: DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E Certificate issuer: /CN=A9191DF4/serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Certificate serial: 0EC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft Manifest number: 0EA5 Signing time: Tue 12 May 2026 17:45:52 +0000 Manifest this update: Tue 12 May 2026 17:45:52 +0000 Manifest next update: Tue 19 May 2026 17:45:52 +0000 Files and hashes: 1: 2kcELjdqlHP8Dt_IRFc53RMorg4.crl (hash: 6dqhUBdTPmA8PfNPyvhotvPyv6UX0PPme3BH4p5nE4E=) 2: B922DB22E84211EA918B8F09C4F9AE02.roa (hash: LfIFl6rYWrXVoxcyn0clPS9g9F++NUROBoNirluuY6Y=) 3: B5D4A156598B11EC82C8685CC4F9AE02.roa (hash: DFvUjSl+6A6klX7hNwdfn4zHvZwMt+wqIU2vy92vesE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:45:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3776 (0xec0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DF4, serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Validity Not Before: May 12 17:45:52 2026 GMT Not After : May 19 17:45:52 2026 GMT Subject: CN=6a036750-5949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:35:8f:7b:89:fa:c4:70:04:6f:a9:d1:6d:00: 8b:4c:96:84:01:c6:bb:27:3b:e8:3c:b0:c5:28:5f: 42:c6:49:e4:93:a3:0b:cc:8b:7a:18:3b:55:d5:61: c9:cb:48:25:dc:e6:c7:50:12:4e:82:e5:91:53:a0: da:42:93:bb:1a:c5:e5:27:f1:67:41:f5:35:82:1e: 83:e5:3e:82:5c:01:35:f4:30:24:5b:3b:04:10:4c: 40:6d:9d:2e:f1:45:71:a4:8f:98:59:67:9f:1e:fe: f2:3b:b1:be:15:7c:3a:ee:c6:de:a9:7a:bd:68:7f: 96:14:87:bd:52:1a:7b:6a:49:e0:37:8b:1c:55:5a: 39:27:7e:c9:45:b4:d1:83:e6:3a:7b:07:29:34:80: f8:e5:01:93:2b:86:73:43:00:40:71:28:9e:ab:5c: af:1b:b0:29:c1:1e:ae:9e:87:c6:d1:28:18:21:fa: f9:43:bd:8a:8a:d4:3a:a2:30:c1:d4:49:e2:71:0a: e4:10:1d:5f:1f:01:b9:db:be:d7:a5:cc:7e:72:af: b0:eb:f7:0e:a3:fe:60:7d:33:df:ef:c9:7a:25:7b: 0f:51:7a:f1:55:e5:0d:82:d2:95:11:87:d6:78:f7: b7:b9:09:fd:9e:9f:6e:bc:7f:4a:f6:88:e0:32:bf: f5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D6:ED:7D:F8:F4:BE:F5:63:64:AB:4C:1D:17:F4:96:A5:3C:5D:46 X509v3 Authority Key Identifier: keyid:DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:02:85:ac:4b:fc:c1:c6:1c:17:ab:fc:26:0c:9c:ff:8a:35: 86:68:a5:61:3f:c5:56:cd:f4:c8:a3:de:3e:c8:19:95:d2:2b: 1d:30:c3:c7:fb:c4:fb:f0:c5:8f:0e:45:c2:cb:43:71:83:e4: 2c:cf:69:aa:9b:d1:8f:f8:9a:8e:5d:6e:9a:ea:d5:78:7c:84: b6:f8:02:30:c1:42:f8:a0:20:1c:c7:88:8d:73:13:c0:36:1b: eb:f8:46:11:a5:59:5d:45:7e:c9:2b:de:c1:05:de:74:d1:38: bc:86:c2:c5:8f:07:2a:d2:52:66:e2:2a:9e:7e:9a:eb:2b:1d: 50:90:18:1a:1f:26:73:30:04:ef:04:3f:07:3f:18:91:cf:64: e9:46:f3:67:0e:df:d1:07:08:a7:5a:1e:14:c1:bb:13:ea:75: 20:64:49:79:55:9d:22:09:84:11:cf:4b:9b:9c:bc:cb:fa:84: dd:18:a1:87:c1:97:03:82:da:f9:41:cb:85:1c:fe:dc:0e:74: 6f:66:99:43:14:06:a6:e4:03:78:90:27:83:a4:03:e6:3d:6e: f8:5d:d4:8a:37:c2:a9:78:7a:17:9a:bd:f5:91:6a:1b:e7:54: 9b:7f:e4:51:62:8b:e5:86:16:f9:25:4a:10:80:8d:24:0e:29: b0:6f:57:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFERjQxMTAvBgNVBAUTKERBNDcwNDJFMzc2QTk0NzNGQzBFREZDODQ0NTczOURE MTMyOEFFMEUwHhcNMjYwNTEyMTc0NTUyWhcNMjYwNTE5MTc0NTUyWjAYMRYwFAYD VQQDEw02YTAzNjc1MC01OTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnDWPe4n6xHAEb6nRbQCLTJaEAca7JzvoPLDFKF9Cxknkk6MLzIt6GDtV1WHJ y0gl3ObHUBJOguWRU6DaQpO7GsXlJ/FnQfU1gh6D5T6CXAE19DAkWzsEEExAbZ0u 8UVxpI+YWWefHv7yO7G+FXw67sbeqXq9aH+WFIe9Uhp7akngN4scVVo5J37JRbTR g+Y6ewcpNID45QGTK4ZzQwBAcSieq1yvG7ApwR6unofG0SgYIfr5Q72KitQ6ojDB 1EnicQrkEB1fHwG5277Xpcx+cq+w6/cOo/5gfTPf78l6JXsPUXrxVeUNgtKVEYfW ePe3uQn9np9uvH9K9ojgMr/1kQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDnW7X34 9L71Y2SrTB0X9JalPF1GMB8GA1UdIwQYMBaAFNpHBC43apRz/A7fyERXOd0TKK4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MURGNC9GNDFEMUMxOEIz OEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxIUDhEdF9JUkZjNTNSTW9y ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrY0VMamRxbEhQOER0X0lSRmM1M1JNb3JnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MURGNC9GNDFEMUMxOEIzOEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxI UDhEdF9JUkZjNTNSTW9yZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALAKFrEv8wcYcF6v8Jgyc/4o1hmilYT/FVs30yKPePsgZldIrHTDDx/vE+/DF jw5FwstDcYPkLM9pqpvRj/iajl1umurVeHyEtvgCMMFC+KAgHMeIjXMTwDYb6/hG EaVZXUV+ySvewQXedNE4vIbCxY8HKtJSZuIqnn6a6ysdUJAYGh8mczAE7wQ/Bz8Y kc9k6UbzZw7f0QcIp1oeFMG7E+p1IGRJeVWdIgmEEc9Lm5y8y/qE3Rihh8GXA4La +UHLhRz+3A50b2aZQxQGpuQDeJAng6QD5j1u+F3UijfCqXh6F5q99ZFqG+dUm3/k UWKL5YYW+SVKEICNJA4psG9Xdw== -----END CERTIFICATE-----Generated at Wed May 13 00:30:19 2026 by rpki-client