$ rpki-client -vvf rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft File: bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft (raw, json) Hash identifier: 8/o40uFOZVckLeYZOFxjZjOvAllMYSicCPm2YgQ74UQ= Subject key identifier: B8:98:06:1F:38:6B:7F:56:E3:2D:B2:7B:6F:3D:0F:5B:FA:A7:26:92 Authority key identifier: 6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 Certificate issuer: /CN=A91A546E/serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420 Certificate serial: 09EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft Manifest number: 099E Signing time: Tue 12 May 2026 20:09:24 +0000 Manifest this update: Tue 12 May 2026 20:09:23 +0000 Manifest next update: Tue 19 May 2026 20:09:23 +0000 Files and hashes: 1: bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl (hash: 8PzGi9lfFFaBAk8m7gkpSNFbl13AVZPjaFTtopjVByo=) 2: F2A462E66B6C11F0B453B656C4F9AE02.roa (hash: HMcEW/S22FGTvhiPakps8LsqQxXUXp8fWhqX+TVm2Vw=) 3: CCBF0CF6B55911EC9256FE19C4F9AE02.roa (hash: xihXskffyMmX6uPdr43LH17SKnUp1mNtBqH6MhLI3sk=) 4: 88252000B55C11ECA9565039C4F9AE02.roa (hash: vpFh2/2Ww8n4gYMHhWBePvd1Fheir2EOHQAoooMfRBo=) 5: 50805C5C6CF911F0A63D4C65C4F9AE02.roa (hash: 7GoPVvNzOxqz0b0bUBa7Sq4uOYDaYVX7ArTVXs9QZv4=) 6: 1A8C65506B6E11F0AEECA858C4F9AE02.roa (hash: NpbVQQRWWoFXTrGdsKM32fOCA5zAVZsblj+8rYIeUc4=) 7: CC3B5938B55911EC9256FE19C4F9AE02.roa (hash: lyIUpVCXgqLP2olWGXoY8duGQEhruwus1GboROWSH00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:09:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2538 (0x9ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A546E, serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420 Validity Not Before: May 12 20:09:23 2026 GMT Not After : May 19 20:09:23 2026 GMT Subject: CN=6a0388f3-4a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b8:ac:2d:fa:12:80:6d:0b:b5:44:23:a4:ea: ac:7f:56:91:22:0c:e9:42:01:a6:c8:24:84:30:d7: 37:92:df:c0:f4:11:20:94:d7:64:d6:47:57:6e:26: a7:9f:3a:71:4c:b1:ea:51:ab:6c:26:0d:e4:65:8e: b4:fc:2a:a0:f1:4d:d1:69:1c:d9:38:32:cf:df:29: 04:f3:69:25:06:3d:d8:8e:af:40:ff:a0:e5:95:77: 6f:27:d3:00:96:dd:87:83:a9:a1:42:15:db:97:cc: 51:b8:d5:12:9a:c0:a5:4a:2e:f7:7b:c4:f6:f3:13: a5:f3:c4:b8:15:f3:9c:00:26:fc:05:71:1b:43:d2: e0:f8:bf:76:7a:6a:01:92:fc:db:10:03:ba:57:d2: 02:9a:aa:9f:20:3d:24:5a:6d:fd:82:8e:8a:da:cd: 03:33:9b:ad:03:f6:de:09:2d:1c:54:ac:51:27:06: 80:81:e0:0e:71:f3:e5:ea:b7:05:74:85:62:dc:de: d6:ad:3a:3e:15:07:53:19:bd:47:fd:89:b1:f5:37: a2:1e:44:98:d6:b1:a0:f9:b6:bb:a2:a1:0f:dc:dd: 28:47:d4:54:3b:7e:e2:c9:bc:3c:a8:69:7a:f8:2f: 63:00:fb:e6:12:78:c2:9b:5a:64:9b:5c:a0:5d:f4: dd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:98:06:1F:38:6B:7F:56:E3:2D:B2:7B:6F:3D:0F:5B:FA:A7:26:92 X509v3 Authority Key Identifier: keyid:6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:92:04:83:7c:2f:38:b2:31:91:26:56:30:91:30:42:7d:bd: f1:52:31:3b:27:b9:b6:3c:05:4b:60:6c:64:5a:38:15:a8:ea: 97:34:99:d7:a4:c6:b5:04:af:82:85:a0:20:77:c8:c4:72:49: 4c:c6:67:52:b5:22:a1:aa:c8:6e:c7:e1:9f:8f:d5:b3:ea:96: 75:72:b3:57:fe:cf:8f:7d:c4:ae:a2:65:fc:ca:52:30:36:9d: d6:81:a6:01:6f:33:b5:77:a5:ac:50:22:a5:cb:9e:6a:30:49: 69:35:52:01:9b:db:ef:84:ed:f9:77:50:c0:49:09:5c:2f:70: 6c:60:27:42:82:dd:97:74:c8:9c:88:1f:60:4f:1d:e4:56:d5: d4:77:fe:9e:21:58:f1:f2:b6:f0:b5:59:e7:6f:d0:d5:54:4c: ad:1c:9f:ec:61:ba:57:15:76:58:1c:78:9b:36:78:8b:01:34: 2a:30:66:1d:97:48:9d:35:ac:0d:ce:06:c8:1b:79:fb:20:3a: 96:79:da:0a:62:98:ee:20:a1:d7:f1:40:3a:6b:b3:63:6f:24: f4:98:55:38:44:fe:a5:c5:e8:ea:76:41:13:23:f9:9c:16:1d: e3:6b:ea:01:a7:a1:a7:cd:7d:76:fa:fb:d0:4e:c3:56:27:99: dd:d3:48:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0NkUxMTAvBgNVBAUTKDZDNUE1ODlGOTI0Q0U5QkVEMUZEODlGNUFGRjYzMEM5 Mjc1NzQ0MjAwHhcNMjYwNTEyMjAwOTIzWhcNMjYwNTE5MjAwOTIzWjAYMRYwFAYD VQQDEw02YTAzODhmMy00YTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7isLfoSgG0LtUQjpOqsf1aRIgzpQgGmyCSEMNc3kt/A9BEglNdk1kdXbian nzpxTLHqUatsJg3kZY60/Cqg8U3RaRzZODLP3ykE82klBj3Yjq9A/6DllXdvJ9MA lt2Hg6mhQhXbl8xRuNUSmsClSi73e8T28xOl88S4FfOcACb8BXEbQ9Lg+L92emoB kvzbEAO6V9ICmqqfID0kWm39go6K2s0DM5utA/beCS0cVKxRJwaAgeAOcfPl6rcF dIVi3N7WrTo+FQdTGb1H/Ymx9TeiHkSY1rGg+ba7oqEP3N0oR9RUO37iybw8qGl6 +C9jAPvmEnjCm1pkm1ygXfTdOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLiYBh84 a39W4y2ye289D1v6pyaSMB8GA1UdIwQYMBaAFGxaWJ+STOm+0f2J9a/2MMknV0Qg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTQ2RS8wQ0Q0MURBOEI3 NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZiN1JfWW4xcl9Zd3lTZFhS Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JGcFluNUpNNmI3Ul9ZbjFyX1l3eVNkWFJDQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTQ2RS8wQ0Q0MURBOEI3NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZi N1JfWW4xcl9Zd3lTZFhSQ0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhpIEg3wvOLIxkSZWMJEwQn298VIxOye5tjwFS2BsZFo4FajqlzSZ16TGtQSv goWgIHfIxHJJTMZnUrUioarIbsfhn4/Vs+qWdXKzV/7Pj33ErqJl/MpSMDad1oGm AW8ztXelrFAipcueajBJaTVSAZvb74Tt+XdQwEkJXC9wbGAnQoLdl3TInIgfYE8d 5FbV1Hf+niFY8fK28LVZ52/Q1VRMrRyf7GG6VxV2WBx4mzZ4iwE0KjBmHZdInTWs Dc4GyBt5+yA6lnnaCmKY7iCh1/FAOmuzY28k9JhVOET+pcXo6nZBEyP5nBYd42vq Aaehp819dvr70E7DVieZ3dNIpQ== -----END CERTIFICATE-----Generated at Wed May 13 05:49:14 2026 by rpki-client