$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft File: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft (raw, json) Hash identifier: GeX5eEowLSROBlG/pOjq0s6SFDdhB415mXIi2StyRxE= Subject key identifier: 7E:04:A2:AF:1B:B1:F3:8D:6B:2A:EC:09:01:3A:13:9A:92:DE:B1:30 Authority key identifier: D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B Certificate issuer: /CN=A91A5A57/serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft Manifest number: 014B Signing time: Mon 11 May 2026 05:14:33 +0000 Manifest this update: Mon 11 May 2026 05:14:33 +0000 Manifest next update: Mon 18 May 2026 05:14:33 +0000 Files and hashes: 1: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl (hash: AE36EV3z0SsnSqQ74d5YlyXWjNq6jrcR9wfmPAR+oWU=) 2: F6382C7A56EC11EF85879C50C4F9AE02.roa (hash: shtxP/SBAQ2iT3UezvldJfibekIWgVIPJ+ZajU+8AuA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 05:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5A57, serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B Validity Not Before: May 11 05:14:33 2026 GMT Not After : May 18 05:14:33 2026 GMT Subject: CN=6a0165b9-dee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9e:88:d8:31:46:ea:59:5b:af:2c:0b:2c:d9: a3:c5:ee:0c:b8:33:62:ee:bd:01:13:06:c8:b8:81: da:e7:9d:ff:fe:93:2b:a0:49:58:7e:b3:74:c2:ca: 73:74:8b:97:f0:98:1a:cf:81:6d:2e:31:80:2c:9b: 60:27:99:7e:6a:60:6b:fe:e9:a8:90:64:41:27:55: 5f:18:8d:4f:24:90:d3:08:74:7c:e4:f0:2d:b4:9f: 0b:4c:d6:1a:8f:a2:93:14:73:cb:24:20:7a:0c:c7: 6a:a6:58:cd:d5:b3:29:15:af:f0:99:e3:60:50:80: 69:dd:3f:93:1c:48:48:fe:4c:1b:06:0f:4a:d0:1d: 6b:98:44:0d:6f:fe:a2:7f:3f:a6:38:b1:10:72:57: 2a:0a:73:46:a2:38:e0:20:08:02:d1:06:44:62:fd: 97:8d:88:16:78:9a:50:6d:f8:a5:74:92:84:d6:8d: 71:c7:f4:c1:03:cf:17:9e:d8:a8:de:34:5b:4d:5a: 39:f5:97:d1:68:6c:b2:1a:fb:c2:92:68:92:f2:70: 8e:94:fa:62:b3:7e:ae:44:fc:2b:bd:13:bb:15:8e: e5:04:00:eb:c4:35:f9:8d:31:aa:82:98:60:4f:f7: 59:20:03:00:e5:0b:36:dd:ce:dd:83:16:0a:f5:0f: fd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:04:A2:AF:1B:B1:F3:8D:6B:2A:EC:09:01:3A:13:9A:92:DE:B1:30 X509v3 Authority Key Identifier: keyid:D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:ea:c3:98:0c:e2:15:c7:8e:52:2b:e9:46:a9:1c:df:fd:60: ba:41:c0:d8:73:13:f9:3f:69:d2:9a:76:bd:1a:8b:0a:6a:3d: 3d:80:67:97:2f:e3:c1:e2:b4:cc:ff:a5:9e:16:12:04:a3:f7: 1e:1b:a8:05:22:64:17:eb:76:8c:c3:5d:1c:ae:a0:35:1b:77: 0c:74:5c:e5:66:43:20:e0:d1:55:ee:93:44:7f:54:ef:ff:5a: 21:10:e2:c0:7b:98:28:a1:fd:e3:35:74:6e:c0:77:46:49:9b: bd:0b:69:e2:85:d2:dc:7e:5a:7a:da:00:d7:6b:ef:ec:f0:70: dc:74:fc:1f:09:2c:9a:e4:b3:f1:ba:b6:29:89:6e:d7:e4:50: 43:36:a0:7d:f0:e0:42:93:2e:88:a6:9f:38:09:d6:d1:92:04: 0b:34:65:7e:24:01:b7:77:c9:7d:13:eb:26:a3:da:ca:33:da: df:7d:36:58:07:d0:c5:9a:ad:a7:fc:14:0e:1d:fa:ed:66:07: 73:7a:95:ab:88:69:63:c9:d1:2e:a4:a9:b7:ed:71:8e:24:2d: 88:7e:7f:99:72:a7:e4:01:17:85:0c:54:fa:68:b0:ea:45:15: 21:56:3e:5b:8d:7e:8a:81:bf:c9:51:c3:6e:50:ee:c7:3f:80: 9e:c7:0b:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVBNTcxMTAvBgNVBAUTKEQ5QzVEODJBQkQzMEZERDIwRkE5Q0FGM0QxRUQ4NjdE QjA3Njk1NkIwHhcNMjYwNTExMDUxNDMzWhcNMjYwNTE4MDUxNDMzWjAYMRYwFAYD VQQDEw02YTAxNjViOS1kZWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx56I2DFG6llbrywLLNmjxe4MuDNi7r0BEwbIuIHa553//pMroElYfrN0wspz dIuX8Jgaz4FtLjGALJtgJ5l+amBr/umokGRBJ1VfGI1PJJDTCHR85PAttJ8LTNYa j6KTFHPLJCB6DMdqpljN1bMpFa/wmeNgUIBp3T+THEhI/kwbBg9K0B1rmEQNb/6i fz+mOLEQclcqCnNGojjgIAgC0QZEYv2XjYgWeJpQbfildJKE1o1xx/TBA88Xntio 3jRbTVo59ZfRaGyyGvvCkmiS8nCOlPpis36uRPwrvRO7FY7lBADrxDX5jTGqgphg T/dZIAMA5Qs23c7dgxYK9Q/9wwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH4Eoq8b sfONayrsCQE6E5qS3rEwMB8GA1UdIwQYMBaAFNnF2Cq9MP3SD6nK89Hthn2wdpVr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUE1Ny82RTc0ODMxMDU2 RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi8yY1hZS3Iwd19kSVBxY3J6MGUyR2ZiQjJs V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJjWFlLcjB3X2RJUHFjcnowZTJHZmJCMmxXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUE1Ny82RTc0ODMxMDU2RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi8yY1hZS3Iwd19k SVBxY3J6MGUyR2ZiQjJsV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAturDmAziFceOUivpRqkc3/1gukHA2HMT+T9p0pp2vRqLCmo9PYBnly/jweK0 zP+lnhYSBKP3HhuoBSJkF+t2jMNdHK6gNRt3DHRc5WZDIODRVe6TRH9U7/9aIRDi wHuYKKH94zV0bsB3RkmbvQtp4oXS3H5aetoA12vv7PBw3HT8HwksmuSz8bq2KYlu 1+RQQzagffDgQpMuiKafOAnW0ZIECzRlfiQBt3fJfRPrJqPayjPa3302WAfQxZqt p/wUDh367WYHc3qVq4hpY8nRLqSpt+1xjiQtiH5/mXKn5AEXhQxU+miw6kUVIVY+ W41+ioG/yVHDblDuxz+AnscLxg== -----END CERTIFICATE-----Generated at Wed May 13 04:01:48 2026 by rpki-client