$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft File: p4emPknujsb5dRFgfxt8Ww3xFk4.mft (raw, json) Hash identifier: YCRyHoPw1PI+hIPducWscZuTyG4hV98dt5N7ih4bZIw= Subject key identifier: 52:4F:0F:43:6A:74:95:4B:E1:39:7B:AA:03:81:3B:9B:90:E7:18:A5 Authority key identifier: A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E Certificate issuer: /CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E Certificate serial: 0A8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft Manifest number: 0A78 Signing time: Tue 12 May 2026 19:38:33 +0000 Manifest this update: Tue 12 May 2026 19:38:33 +0000 Manifest next update: Tue 19 May 2026 19:38:33 +0000 Files and hashes: 1: p4emPknujsb5dRFgfxt8Ww3xFk4.crl (hash: Csl7DKco8mXfc0g4bfOS6bqSLHSnIk2hpAS9Uku2Rj0=) 2: B13B2E5A5B5D11EEADF5C61CC4F9AE02.roa (hash: 5dWM1aBFZBre348MozCE9BHGCcZ6AZ6XEKKZComnpY4=) 3: CFDF8B8A5B5D11EE967F161DC4F9AE02.roa (hash: vIQ6ijY/P5ugAhg4/kXnIXxgsJTlmnXdecL34fGC5qg=) 4: 305312F67CA011F098F1673CC4F9AE02.roa (hash: oSLf+ALvc0axyKMKORxabRkQ2yd+wi5i1pJe4n2LdQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:38:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2699 (0xa8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0A6C, serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E Validity Not Before: May 12 19:38:33 2026 GMT Not After : May 19 19:38:33 2026 GMT Subject: CN=6a0381b9-7bca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2b:ab:b8:13:7f:a0:8c:b9:fc:32:60:1a:06: 89:cb:08:30:fc:4b:b1:f5:0d:d6:85:c5:87:8c:9c: cd:ea:5e:80:86:4d:83:29:c2:ff:37:74:bb:11:f0: ea:77:5c:fa:01:e6:6d:ac:c8:4a:6b:22:aa:aa:34: b7:0b:a7:7a:a9:37:da:97:ca:69:06:d0:4e:d5:06: 37:5c:5a:78:9f:5d:e2:94:2f:d8:5d:db:ee:a9:1c: 1a:ec:5e:04:50:64:b2:ad:c3:98:1f:40:09:2b:7c: 7e:2a:20:5c:c1:72:69:ed:70:09:17:05:0c:05:1d: d8:63:6b:ca:aa:10:16:71:30:14:db:db:e3:0c:a1: 6b:93:12:e5:fd:f7:66:19:b1:1a:08:1d:22:0b:87: 1c:37:60:95:f9:26:52:de:9a:80:b4:79:57:2a:3d: 5a:de:63:b1:ae:14:90:54:a7:13:85:f9:db:73:ca: 5b:8a:fa:b1:22:a1:36:6d:55:8f:b6:2d:0f:a7:3a: d0:3c:b9:1c:b7:ef:e9:00:34:ea:fd:89:84:dc:ad: 7e:38:f2:c2:00:9f:1e:04:ce:98:be:1f:c3:8c:f1: ae:36:55:f6:1b:21:6c:dc:10:13:85:0f:c1:79:35: d6:59:c3:35:36:b3:fd:0e:82:21:a7:a3:80:86:75: 4f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:4F:0F:43:6A:74:95:4B:E1:39:7B:AA:03:81:3B:9B:90:E7:18:A5 X509v3 Authority Key Identifier: keyid:A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:48:8e:32:73:6a:66:ad:4c:a3:d3:14:d2:38:a2:3e:93:8c: 50:88:5d:d8:e4:c0:f5:46:df:21:74:97:63:98:7a:93:b1:7d: 02:6e:2f:04:b1:66:98:09:ef:45:6d:43:5a:24:9e:8d:96:de: 89:27:aa:15:11:1a:51:fd:41:9d:bb:f8:97:95:27:91:e4:f1: e1:37:0c:d2:f4:4e:f2:74:1d:f0:b9:45:47:96:b4:80:ba:7c: aa:38:69:7a:82:21:f9:0f:e8:9d:73:e2:06:b5:35:2e:4c:2c: 8d:ae:2b:68:b7:84:ec:4f:c7:ba:15:db:8d:4a:a5:44:c5:40: 98:d8:e0:9d:33:5d:89:0c:2d:71:9b:ad:9b:ce:11:a3:4a:57: bf:e8:46:6a:40:24:f6:59:d8:a0:a8:11:cc:60:ab:ee:4a:a5: b8:8f:be:8b:17:b8:7f:e5:29:6d:1a:46:ca:0b:d3:87:33:2f: a0:19:79:e8:a6:78:15:92:2e:9a:20:8c:5a:2c:5d:96:62:04: c9:49:7c:d2:53:87:6e:7d:6c:5d:91:e8:69:af:29:c2:99:d7: 1c:38:dc:a2:bb:c3:49:fc:b1:f2:b6:c8:f0:bf:2c:a9:85:a2: 09:4e:b0:25:39:e4:9d:00:df:83:14:4f:73:aa:84:51:c7:e3: 42:ba:ac:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBBNkMxMTAvBgNVBAUTKEE3ODdBNjNFNDlFRThFQzZGOTc1MTE2MDdGMUI3QzVC MERGMTE2NEUwHhcNMjYwNTEyMTkzODMzWhcNMjYwNTE5MTkzODMzWjAYMRYwFAYD VQQDEw02YTAzODFiOS03YmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1iuruBN/oIy5/DJgGgaJywgw/Eux9Q3WhcWHjJzN6l6Ahk2DKcL/N3S7EfDq d1z6AeZtrMhKayKqqjS3C6d6qTfal8ppBtBO1QY3XFp4n13ilC/YXdvuqRwa7F4E UGSyrcOYH0AJK3x+KiBcwXJp7XAJFwUMBR3YY2vKqhAWcTAU29vjDKFrkxLl/fdm GbEaCB0iC4ccN2CV+SZS3pqAtHlXKj1a3mOxrhSQVKcThfnbc8pbivqxIqE2bVWP ti0PpzrQPLkct+/pADTq/YmE3K1+OPLCAJ8eBM6Yvh/DjPGuNlX2GyFs3BAThQ/B eTXWWcM1NrP9DoIhp6OAhnVPWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFJPD0Nq dJVL4Tl7qgOBO5uQ5xilMB8GA1UdIwQYMBaAFKeHpj5J7o7G+XURYH8bfFsN8RZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEE2Qy9COTE2RjM4ODgy QzIxMUVBOUE1MTQ2MzlDNEY5QUUwMi9wNGVtUGtudWpzYjVkUkZnZnh0OFd3M3hG azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A0ZW1Qa251anNiNWRSRmdmeHQ4V3czeEZrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEE2Qy9COTE2RjM4ODgyQzIxMUVBOUE1MTQ2MzlDNEY5QUUwMi9wNGVtUGtudWpz YjVkUkZnZnh0OFd3M3hGazQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAkiOMnNqZq1Mo9MU0jiiPpOMUIhd2OTA9UbfIXSXY5h6k7F9Am4vBLFmmAnv RW1DWiSejZbeiSeqFREaUf1Bnbv4l5UnkeTx4TcM0vRO8nQd8LlFR5a0gLp8qjhp eoIh+Q/onXPiBrU1Lkwsja4raLeE7E/HuhXbjUqlRMVAmNjgnTNdiQwtcZutm84R o0pXv+hGakAk9lnYoKgRzGCr7kqluI++ixe4f+UpbRpGygvThzMvoBl56KZ4FZIu miCMWixdlmIEyUl80lOHbn1sXZHoaa8pwpnXHDjcorvDSfyx8rbI8L8sqYWiCU6w JTnknQDfgxRPc6qEUcfjQrqsnw== -----END CERTIFICATE-----Generated at Wed May 13 02:17:24 2026 by rpki-client