$ rpki-client -vvf rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft File: rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft (raw, json) Hash identifier: s2PYhbW61P1qpq8B4FyQqQKTlQbyRHd8Nl9+XKyIPAU= Subject key identifier: 2B:87:AC:48:06:D0:82:B8:57:80:6D:FB:90:63:26:E4:9A:98:90:48 Authority key identifier: AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F Certificate issuer: /CN=A91A83B4/serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F Certificate serial: 04B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft Manifest number: 04A1 Signing time: Wed 13 May 2026 00:07:46 +0000 Manifest this update: Wed 13 May 2026 00:07:46 +0000 Manifest next update: Wed 20 May 2026 00:07:46 +0000 Files and hashes: 1: rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl (hash: 7QUZu8e4cbjxLIjVr9QXvlFcPFvb9er/hmA6qIUgZc8=) 2: 2E82E686569E11F08015BC34C4F9AE02.roa (hash: uBxr7p6TwpA9INGB4KedC2EYtx+upfxJFxMsenv5Y3Q=) 3: E37002DA5EEC11F08928266FC4F9AE02.roa (hash: 2HGFVACffkGhDeLHJzK3N3Q2oFmACWhF8TcKRliN94o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 00:07:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1204 (0x4b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A83B4, serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F Validity Not Before: May 13 00:07:46 2026 GMT Not After : May 20 00:07:46 2026 GMT Subject: CN=6a03c0d2-ba0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b4:2f:9a:55:cc:3c:29:0b:95:b9:88:fd:62: 85:c1:c5:e5:7f:3a:5c:45:c0:ca:a9:90:08:8d:55: 1a:81:9e:b2:07:68:14:55:ca:da:04:46:56:1c:f6: 33:63:df:0d:99:1e:5c:61:60:b9:af:ac:71:b5:8f: 9d:c0:2e:f1:9e:09:2a:e1:24:a2:4a:f9:6f:e8:f6: bc:ef:38:bb:ce:0f:9e:d3:26:ed:5a:9e:d8:8b:03: 7e:a8:6b:8c:05:86:a1:c1:12:c4:8c:5c:3c:12:b7: 90:1b:4a:90:be:19:5c:d8:dd:eb:c2:ea:99:d0:58: 45:5b:f8:cd:68:19:8c:d6:fe:83:f3:81:8c:44:79: 15:e5:72:de:a6:3c:db:67:c0:32:e5:1b:cc:84:f3: 6b:ff:64:dd:bc:5d:03:f0:7e:ce:55:ef:64:a1:89: 1e:87:bc:6a:f3:19:80:5e:ea:3b:2d:cb:b7:a2:38: c6:53:7c:4d:f3:0e:8e:2f:ae:47:90:72:40:1c:13: fc:1c:66:38:84:91:cb:b6:ce:c9:1c:c9:67:d4:39: dd:a5:ce:13:e3:68:dc:b8:21:f3:da:23:b6:08:9e: 82:ae:b5:a1:79:d7:4d:59:bb:0b:46:e8:d8:80:93: fa:c2:b7:e9:58:30:db:50:95:26:c4:ce:29:c6:6a: 5e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:87:AC:48:06:D0:82:B8:57:80:6D:FB:90:63:26:E4:9A:98:90:48 X509v3 Authority Key Identifier: keyid:AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:44:fd:08:22:0d:8c:37:19:89:13:3d:7e:30:18:d2:64:3a: ae:60:eb:20:c8:1b:3f:18:8d:6c:c6:2e:19:af:5d:34:9e:6f: 95:0b:0e:53:2f:85:dc:62:9c:ea:02:c4:45:75:cd:d3:2a:fd: 87:21:58:c2:36:ad:fa:fa:3b:04:c2:b9:4e:e3:c3:bb:b3:ab: 93:89:e1:2c:38:7e:cb:f1:d1:49:59:39:87:d9:22:b2:68:63: c0:13:13:58:a0:31:cc:42:3d:f4:44:f4:7b:e9:60:8f:a3:92: 1a:ff:23:b9:fd:f0:b4:49:8a:e1:4a:a9:d9:aa:34:aa:83:13: c0:02:3e:7f:72:6e:1b:74:97:d6:66:03:37:f1:43:8d:bb:1d: ee:3e:6f:34:04:5e:85:a3:89:74:93:2b:28:30:18:b6:57:da: f2:3c:65:4f:63:c1:7f:67:fa:79:ff:32:7f:d2:86:49:5a:b8: be:66:23:c6:15:d6:ac:e9:95:e7:2b:3c:2a:8f:db:88:12:ea: 90:a9:42:2a:e0:25:52:72:65:19:c4:29:cd:82:b7:c3:6c:df: 28:b0:65:f6:06:4e:5a:48:3d:1b:44:9a:0e:98:bd:7d:ba:bd: 2f:e4:b0:12:ba:93:2f:63:a8:5d:1b:e9:95:d9:af:45:19:59: ac:cf:76:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgzQjQxMTAvBgNVBAUTKEFFQjgzOUNDQkZBRDVCRDk4QTdBMERBOTA1M0JDMjcy NkYyNjkwNEYwHhcNMjYwNTEzMDAwNzQ2WhcNMjYwNTIwMDAwNzQ2WjAYMRYwFAYD VQQDEw02YTAzYzBkMi1iYTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrQvmlXMPCkLlbmI/WKFwcXlfzpcRcDKqZAIjVUagZ6yB2gUVcraBEZWHPYz Y98NmR5cYWC5r6xxtY+dwC7xngkq4SSiSvlv6Pa87zi7zg+e0ybtWp7YiwN+qGuM BYahwRLEjFw8EreQG0qQvhlc2N3rwuqZ0FhFW/jNaBmM1v6D84GMRHkV5XLepjzb Z8Ay5RvMhPNr/2TdvF0D8H7OVe9koYkeh7xq8xmAXuo7Lcu3ojjGU3xN8w6OL65H kHJAHBP8HGY4hJHLts7JHMln1Dndpc4T42jcuCHz2iO2CJ6CrrWheddNWbsLRujY gJP6wrfpWDDbUJUmxM4pxmpeuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCuHrEgG 0IK4V4Bt+5BjJuSamJBIMB8GA1UdIwQYMBaAFK64Ocy/rVvZinoNqQU7wnJvJpBP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODNCNC9FNzlFRDQ5MDgz RjcxMUVDQTQ3QTYyNjVDNEY5QUUwMi9ycmc1ekwtdFc5bUtlZzJwQlR2Q2NtOG1r RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JyZzV6TC10VzltS2VnMnBCVHZDY204bWtFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODNCNC9FNzlFRDQ5MDgzRjcxMUVDQTQ3QTYyNjVDNEY5QUUwMi9ycmc1ekwtdFc5 bUtlZzJwQlR2Q2NtOG1rRTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARUT9CCINjDcZiRM9fjAY0mQ6rmDrIMgbPxiNbMYuGa9dNJ5vlQsOUy+F3GKc 6gLERXXN0yr9hyFYwjat+vo7BMK5TuPDu7Ork4nhLDh+y/HRSVk5h9kismhjwBMT WKAxzEI99ET0e+lgj6OSGv8juf3wtEmK4Uqp2ao0qoMTwAI+f3JuG3SX1mYDN/FD jbsd7j5vNARehaOJdJMrKDAYtlfa8jxlT2PBf2f6ef8yf9KGSVq4vmYjxhXWrOmV 5ys8Ko/biBLqkKlCKuAlUnJlGcQpzYK3w2zfKLBl9gZOWkg9G0SaDpi9fbq9L+Sw ErqTL2OoXRvpldmvRRlZrM92NA== -----END CERTIFICATE-----Generated at Wed May 13 09:29:47 2026 by rpki-client