$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft File: 5Otd-leSQpC7j-xFuZd_xsf2-jc.mft (raw, json) Hash identifier: JM4GOvAFj/Br0Ipqcz8V91ub8oOguQq9qn/CiLo/li0= Subject key identifier: E6:93:55:75:CD:2A:83:48:DF:45:AE:BE:96:AE:73:48:2A:00:B1:DB Authority key identifier: E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 Certificate issuer: /CN=A91A8B0B/serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Certificate serial: 0D46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft Manifest number: 0D30 Signing time: Tue 12 May 2026 18:06:54 +0000 Manifest this update: Tue 12 May 2026 18:06:53 +0000 Manifest next update: Tue 19 May 2026 18:06:53 +0000 Files and hashes: 1: 5Otd-leSQpC7j-xFuZd_xsf2-jc.crl (hash: 9je10G9Bc3z0ae6dpsxHqoK3AJxx3wnrHOXHMNn2kxc=) 2: EA17F65E6C6711ECB7C0925AC4F9AE02.roa (hash: RLirzJKQKFo2gpkEC+bkcfbZ/amz+vvvs7CLn8xZhc8=) 3: 5842DDF0FCE511E9BFA4B27AC4F9AE02.roa (hash: eljEAlMkKKscvcS1ohJrK9p2ggCusjEVdiGi3d1+CNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:06:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3398 (0xd46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8B0B, serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Validity Not Before: May 12 18:06:53 2026 GMT Not After : May 19 18:06:53 2026 GMT Subject: CN=6a036c3e-f90b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3d:10:81:10:28:c6:79:b8:89:fb:bf:fb:e7: 3e:25:6e:34:68:99:8c:e9:ec:e9:57:f1:92:a0:2f: c6:e5:e2:45:15:34:8f:23:52:88:61:6d:c7:b4:b8: 35:31:a6:99:f1:53:0e:c8:fa:87:43:0d:38:ce:07: 21:e4:7a:32:95:91:72:80:04:ed:66:0d:6a:a3:5a: 68:7c:5e:7b:51:6d:cb:38:97:a9:26:97:9a:c5:c3: f0:c7:97:80:34:29:b6:8c:69:50:e5:df:87:94:cc: c3:bb:6e:43:31:ad:28:b9:18:57:af:53:9d:c0:e1: 7a:4e:d8:24:cb:98:8b:92:a9:4a:00:cb:7f:71:20: 3a:e5:41:7f:58:38:b2:4e:10:74:d9:01:43:5b:1b: 29:94:e9:73:7c:e6:d4:e6:97:ea:d1:b0:03:26:e5: 99:d9:0e:0b:1c:9f:a4:65:35:1d:6a:0a:b5:a2:cf: 47:2c:03:cf:0a:ce:fa:fa:2a:30:f5:50:df:01:2b: 42:bb:aa:7e:dc:d7:84:37:04:b0:84:02:f7:f5:c8: 88:43:41:e3:9d:b3:a1:86:1c:2b:8f:55:3f:35:8c: 8b:bb:62:b2:11:89:df:36:2f:da:7c:fb:f9:eb:f5: f0:56:79:f5:0f:6d:54:99:0f:8c:64:96:0b:08:07: f3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:93:55:75:CD:2A:83:48:DF:45:AE:BE:96:AE:73:48:2A:00:B1:DB X509v3 Authority Key Identifier: keyid:E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a5:87:0a:4f:9d:3b:5e:88:60:29:43:ac:39:3c:db:30:bf: 70:84:6a:0f:ff:0b:ba:9a:43:f3:11:d9:b9:25:40:72:31:33: 0d:9c:ae:b7:ef:18:3d:8b:42:07:5d:85:12:02:a2:e6:d8:cd: 08:ff:a5:e4:7b:2c:55:f5:39:53:ca:f3:3c:61:6f:c0:db:51: ed:d0:d6:9a:e2:3e:f4:43:dd:71:e3:8a:12:df:d6:9c:18:36: c9:28:85:82:ff:d2:e0:2d:98:2a:27:9a:15:f9:74:a8:99:23: 70:11:ea:74:fe:92:75:72:31:75:3c:ac:7e:5f:17:d5:d9:7a: 76:07:e1:5c:5d:c6:54:64:e7:74:22:c3:ec:d1:d7:d6:40:4c: bc:df:4a:41:a9:9b:23:2b:88:7c:0e:96:2d:09:e6:ee:e7:de: 1b:4a:d4:63:af:57:be:dd:ba:b1:e9:68:0f:9b:e3:be:bf:9e: 2b:b0:6e:52:26:3e:24:f1:e1:86:79:98:b6:9a:fd:c2:be:a8: a0:0c:62:9b:68:89:0c:79:ce:0e:66:3e:06:49:f0:21:78:92: 97:95:44:18:ab:cd:f9:0d:21:bd:b9:13:dd:b8:c6:90:71:b3: e9:50:ec:d8:94:9a:71:e3:3b:e9:89:e0:3d:03:b7:ca:c1:35: 5d:62:c0:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThCMEIxMTAvBgNVBAUTKEU0RUI1REZBNTc5MjQyOTBCQjhGRUM0NUI5OTc3RkM2 QzdGNkZBMzcwHhcNMjYwNTEyMTgwNjUzWhcNMjYwNTE5MTgwNjUzWjAYMRYwFAYD VQQDEw02YTAzNmMzZS1mOTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsT0QgRAoxnm4ifu/++c+JW40aJmM6ezpV/GSoC/G5eJFFTSPI1KIYW3HtLg1 MaaZ8VMOyPqHQw04zgch5HoylZFygATtZg1qo1pofF57UW3LOJepJpeaxcPwx5eA NCm2jGlQ5d+HlMzDu25DMa0ouRhXr1OdwOF6Ttgky5iLkqlKAMt/cSA65UF/WDiy ThB02QFDWxsplOlzfObU5pfq0bADJuWZ2Q4LHJ+kZTUdagq1os9HLAPPCs76+iow 9VDfAStCu6p+3NeENwSwhAL39ciIQ0HjnbOhhhwrj1U/NYyLu2KyEYnfNi/afPv5 6/XwVnn1D21UmQ+MZJYLCAfzAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOaTVXXN KoNI30Wuvpauc0gqALHbMB8GA1UdIwQYMBaAFOTrXfpXkkKQu4/sRbmXf8bH9vo3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEIwQi81QUVCNUVCMkZD QzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1FwQzdqLXhGdVpkX3hzZjIt amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPdGQtbGVTUXBDN2oteEZ1WmRfeHNmMi1qYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEIwQi81QUVCNUVCMkZDQzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1Fw QzdqLXhGdVpkX3hzZjItamMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnaWHCk+dO16IYClDrDk82zC/cIRqD/8LuppD8xHZuSVAcjEzDZyut+8YPYtC B12FEgKi5tjNCP+l5HssVfU5U8rzPGFvwNtR7dDWmuI+9EPdceOKEt/WnBg2ySiF gv/S4C2YKieaFfl0qJkjcBHqdP6SdXIxdTysfl8X1dl6dgfhXF3GVGTndCLD7NHX 1kBMvN9KQambIyuIfA6WLQnm7ufeG0rUY69Xvt26seloD5vjvr+eK7BuUiY+JPHh hnmYtpr9wr6ooAxim2iJDHnODmY+BknwIXiSl5VEGKvN+Q0hvbkT3bjGkHGz6VDs 2JSaceM76YngPQO3ysE1XWLA2w== -----END CERTIFICATE-----Generated at Wed May 13 08:59:22 2026 by rpki-client