$ rpki-client -vvf rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft File: 8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft (raw, json) Hash identifier: TkGI3LNh53RW/gSdA+EZ5ojwAhgp2tUVgCEkB3MwxKc= Subject key identifier: 12:26:F4:F3:99:EF:B7:E3:C1:62:29:20:20:04:B1:70:E4:1B:77:63 Authority key identifier: F2:4F:14:71:72:3A:64:E4:D5:70:DB:B0:D4:4C:82:43:05:42:62:66 Certificate issuer: /CN=A91958FF/serialNumber=F24F1471723A64E4D570DBB0D44C824305426266 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft Manifest number: 56 Signing time: Mon 11 May 2026 08:26:02 +0000 Manifest this update: Mon 11 May 2026 08:26:02 +0000 Manifest next update: Mon 18 May 2026 08:26:02 +0000 Files and hashes: 1: 8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl (hash: OH3/wUgEnEjzODEhvBx5m6unq2Xy2hcd8my+nAWaKmA=) 2: F0BA037C1D1A11F1B3DF5E87103D8C67.roa (hash: 9RLAoZXHDep7ikUMuUeuOPjnOmGwHrIkt6BqprZz7KA=) 3: F23251501D1A11F1B3DF5E87103D8C67.roa (hash: hgGzaQ1cBrypk5ytpqpU7GEjdnOL4DAirIqjQZnghOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91958FF, serialNumber=F24F1471723A64E4D570DBB0D44C824305426266 Validity Not Before: May 11 08:26:02 2026 GMT Not After : May 18 08:26:02 2026 GMT Subject: CN=6a01929a-5793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b1:99:4f:60:36:d8:25:ab:66:af:65:46:80: 95:22:ec:f1:2c:e4:49:63:4e:e3:70:11:58:a1:4a: 24:36:9c:35:33:56:43:f9:a1:81:aa:c6:db:e9:c1: 04:76:e1:39:fb:21:7c:63:c3:fc:88:7e:28:10:d4: aa:f0:ff:95:78:14:44:ab:f0:e5:8c:26:3f:79:53: 8c:99:3c:35:81:0b:6c:5e:d2:f0:6e:50:4e:71:04: 0e:1b:8a:19:25:90:f7:3c:52:28:d9:5b:a1:56:eb: 39:74:8e:d8:e8:a4:46:5c:62:a1:ba:2c:52:9d:4a: b2:de:1a:29:31:f7:94:fc:97:95:9f:4e:ff:93:bc: 39:16:7e:66:e7:f2:70:a5:6e:06:cd:7f:c7:6d:52: a1:d1:c8:8d:2a:32:34:91:fe:36:51:5c:ee:d0:1e: 06:b4:15:2d:82:80:a1:5b:22:59:b5:74:79:61:10: dd:b8:78:35:83:d1:37:e6:26:be:93:2f:cd:65:40: d6:ef:dd:7b:9b:bf:ab:79:c2:a3:72:c7:ab:53:3f: 6d:43:2f:6c:4c:fd:84:54:5c:25:18:57:37:50:c6: 79:62:2e:0f:82:5a:20:b1:2b:d3:7d:23:12:65:ca: fd:02:44:e9:90:a8:43:ad:6e:b8:cc:0f:35:79:de: c3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:26:F4:F3:99:EF:B7:E3:C1:62:29:20:20:04:B1:70:E4:1B:77:63 X509v3 Authority Key Identifier: keyid:F2:4F:14:71:72:3A:64:E4:D5:70:DB:B0:D4:4C:82:43:05:42:62:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91958FF/4E3CB6C0D71B11F09A148D259AD3641D/8k8UcXI6ZOTVcNuw1EyCQwVCYmY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:c3:a8:80:1b:a1:db:46:c7:f5:49:28:76:c3:d0:50:d6:90: c1:02:e5:9c:52:16:11:02:6e:36:84:b6:b5:4e:ad:f7:2c:70: 06:f4:2e:39:a1:65:12:c3:23:b1:1b:16:0d:12:25:9d:08:31: 35:b7:bd:38:7c:2b:63:98:4d:02:d6:cd:94:ea:f3:d4:5a:70: 66:34:62:ff:34:8c:2d:e2:9f:c9:d1:3e:2a:ba:8d:34:84:b0: 8e:08:d9:79:81:de:c2:4e:95:ca:3f:f3:97:76:be:84:67:a8: 24:84:9d:83:15:9a:51:59:f4:cc:5d:cf:ac:cb:fb:86:4c:9e: c3:e9:93:ca:5d:38:58:c7:df:1e:7d:4a:d9:b9:39:52:de:f6: 87:96:c6:85:02:9f:8d:48:80:be:be:a1:7d:47:48:19:28:e8: d8:88:68:1a:c0:ad:a2:76:b5:fd:8e:b0:83:0b:35:9c:4a:64: 50:46:2c:c1:1d:95:47:fd:8b:d7:0b:3e:e8:3a:3f:49:a6:64: 3a:c7:1f:e7:11:95:e9:32:71:73:8d:1f:ce:2a:9a:5c:c7:e1: 1e:0c:c9:f6:1b:9f:c5:37:ec:0b:50:23:87:a7:8b:5c:72:24: 05:60:b9:38:3e:13:9e:61:75:5e:a1:76:6d:a8:4a:93:16:79: 33:15:e3:70 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NThGRjExMC8GA1UEBRMoRjI0RjE0NzE3MjNBNjRFNEQ1NzBEQkIwRDQ0QzgyNDMw NTQyNjI2NjAeFw0yNjA1MTEwODI2MDJaFw0yNjA1MTgwODI2MDJaMBgxFjAUBgNV BAMTDTZhMDE5MjlhLTU3OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAsZlPYDbYJatmr2VGgJUi7PEs5EljTuNwEVihSiQ2nDUzVkP5oYGqxtvpwQR2 4Tn7IXxjw/yIfigQ1Krw/5V4FESr8OWMJj95U4yZPDWBC2xe0vBuUE5xBA4bihkl kPc8UijZW6FW6zl0jtjopEZcYqG6LFKdSrLeGikx95T8l5WfTv+TvDkWfmbn8nCl bgbNf8dtUqHRyI0qMjSR/jZRXO7QHga0FS2CgKFbIlm1dHlhEN24eDWD0TfmJr6T L81lQNbv3Xubv6t5wqNyx6tTP21DL2xM/YRUXCUYVzdQxnliLg+CWiCxK9N9IxJl yv0CROmQqEOtbrjMDzV53sNjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEib085nv t+PBYikgIASxcOQbd2MwHwYDVR0jBBgwFoAU8k8UcXI6ZOTVcNuw1EyCQwVCYmYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1OEZGLzRFM0NCNkMwRDcx QjExRjA5QTE0OEQyNTlBRDM2NDFELzhrOFVjWEk2Wk9UVmNOdXcxRXlDUXdWQ1lt WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOGs4VWNYSTZaT1RWY051dzFFeUNRd1ZDWW1ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1 OEZGLzRFM0NCNkMwRDcxQjExRjA5QTE0OEQyNTlBRDM2NDFELzhrOFVjWEk2Wk9U VmNOdXcxRXlDUXdWQ1ltWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBRw6iAG6HbRsf1SSh2w9BQ1pDBAuWcUhYRAm42hLa1Tq33LHAG9C45oWUSwyOx GxYNEiWdCDE1t704fCtjmE0C1s2U6vPUWnBmNGL/NIwt4p/J0T4quo00hLCOCNl5 gd7CTpXKP/OXdr6EZ6gkhJ2DFZpRWfTMXc+sy/uGTJ7D6ZPKXThYx98efUrZuTlS 3vaHlsaFAp+NSIC+vqF9R0gZKOjYiGgawK2idrX9jrCDCzWcSmRQRizBHZVH/YvX Cz7oOj9JpmQ6xx/nEZXpMnFzjR/OKppcx+EeDMn2G5/FN+wLUCOHp4tcciQFYLk4 PhOeYXVeoXZtqEqTFnkzFeNw -----END CERTIFICATE-----Generated at Wed May 13 09:58:22 2026 by rpki-client