$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft File: _CT1OQdHh-zqsAwkJgbCvWiBmg0.mft (raw, json) Hash identifier: V9LsAXHlCfgI9OD3lUEmu7UqjXDakFfFCOMjQX8q69I= Subject key identifier: B1:82:0C:AB:91:E8:99:1C:CA:96:6E:55:07:7E:76:57:DF:48:28:D7 Authority key identifier: FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D Certificate issuer: /CN=A91A9CBB/serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft Manifest number: D4 Signing time: Wed 13 May 2026 06:55:33 +0000 Manifest this update: Wed 13 May 2026 06:55:32 +0000 Manifest next update: Wed 20 May 2026 06:55:32 +0000 Files and hashes: 1: _CT1OQdHh-zqsAwkJgbCvWiBmg0.crl (hash: ZmY9vLe5vS9ECLcmRnZmqufvnFm2mBMl8eaUqUHUfOA=) 2: 1C1628BE2D9E11F1B1FA5F5A88EE528E.roa (hash: AdqbKoLvsHyKD6HghcgCeYloGvI0ehL1LADbVK02jZo=) 3: 1DA281C82D9E11F1B1FA5F5A88EE528E.roa (hash: gMJWlgng2lgevvc5aZJ8BLiTHzTn0UTcScrCCSp3b7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 06:55:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CBB, serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Validity Not Before: May 13 06:55:32 2026 GMT Not After : May 20 06:55:32 2026 GMT Subject: CN=6a042064-e8d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ab:93:3b:3d:2b:6b:23:84:ee:c9:a7:ce:4d: 74:f0:35:99:b5:45:f4:a9:47:c5:c0:23:1f:77:da: 82:28:7c:03:0d:14:f3:ec:3b:3d:fa:00:6e:b2:e3: 6e:bb:43:c5:88:d5:be:8b:43:22:bc:00:49:d6:5e: ee:f3:15:98:df:37:15:6f:f0:01:0a:6f:05:bf:53: 3d:ae:d4:44:e1:06:d1:25:3f:16:fc:0f:30:26:ea: 4d:36:c8:b7:a8:a8:6a:4e:82:f9:03:57:5c:cd:0d: 77:15:df:63:08:51:f5:85:42:17:53:fc:4f:5d:98: 32:44:40:e2:36:b0:71:8a:38:c7:19:ea:b3:0d:fa: f2:34:2e:f7:39:68:9c:15:0c:f6:a6:4a:8f:d2:08: 3b:37:4f:b1:2a:b6:2c:68:89:28:c8:f6:41:50:f1: 52:f0:f7:40:5b:73:28:9d:34:53:ec:4f:3c:fc:95: a4:00:89:51:52:5b:d1:5d:22:ea:ae:05:21:3d:6c: 48:f4:3b:a7:0f:cb:53:7f:a3:7a:22:08:69:4f:af: fe:72:be:7b:d8:ae:12:28:2c:1d:88:6c:24:65:b8: a4:b9:ea:03:9f:14:82:ed:28:e0:ff:ff:fe:23:02: 97:b7:ef:53:71:06:80:32:7d:eb:8e:cd:1f:05:9e: 73:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:82:0C:AB:91:E8:99:1C:CA:96:6E:55:07:7E:76:57:DF:48:28:D7 X509v3 Authority Key Identifier: keyid:FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:8b:bb:9b:ae:2b:b1:07:93:a8:f9:31:d5:4e:41:21:df:bd: f5:9f:69:ba:1a:b4:b1:9e:42:b5:ad:b9:25:61:ec:b6:0c:0b: ef:4b:7c:94:33:fd:d7:0d:ff:a1:3b:86:72:44:c1:d4:d9:15: 09:60:e2:b7:30:fd:41:82:eb:49:b2:14:b6:2c:b0:c2:56:a0: e5:3e:d2:77:9e:5c:d2:d1:9d:b3:5b:d8:d0:98:08:75:bb:32: 14:6d:78:9b:34:8f:7c:34:2a:9e:b6:fb:0c:ce:71:a9:21:85: 6d:ea:92:da:c5:4f:0f:7e:b2:0d:bf:58:d1:1f:5f:ba:f3:a8: 0c:ae:30:a7:45:a9:e0:8a:77:a6:5f:1c:98:b0:53:45:6b:ea: 23:20:3a:bd:57:a3:44:25:69:dc:8c:ce:dc:a5:c7:f7:ab:c4: b3:47:b2:67:76:89:3d:7f:72:f8:09:65:ff:ef:dc:84:69:4b: 9d:77:0f:57:5c:a6:2d:09:7a:13:d3:ae:1d:54:e0:86:12:26: 90:6b:2a:1a:39:86:a5:0d:45:71:14:88:8b:6e:40:73:b6:50: 3a:ab:77:6a:41:cd:58:d8:aa:c8:75:bb:c6:65:4b:e2:0c:1c: 45:ea:d6:97:7a:9d:41:ff:e9:7e:85:b2:fc:99:4a:0e:71:fb: 7f:f6:a7:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlDQkIxMTAvBgNVBAUTKEZDMjRGNTM5MDc0Nzg3RUNFQUIwMEMyNDI2MDZDMkJE Njg4MTlBMEQwHhcNMjYwNTEzMDY1NTMyWhcNMjYwNTIwMDY1NTMyWjAYMRYwFAYD VQQDEw02YTA0MjA2NC1lOGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4quTOz0rayOE7smnzk108DWZtUX0qUfFwCMfd9qCKHwDDRTz7Ds9+gBusuNu u0PFiNW+i0MivABJ1l7u8xWY3zcVb/ABCm8Fv1M9rtRE4QbRJT8W/A8wJupNNsi3 qKhqToL5A1dczQ13Fd9jCFH1hUIXU/xPXZgyREDiNrBxijjHGeqzDfryNC73OWic FQz2pkqP0gg7N0+xKrYsaIkoyPZBUPFS8PdAW3MonTRT7E88/JWkAIlRUlvRXSLq rgUhPWxI9DunD8tTf6N6IghpT6/+cr572K4SKCwdiGwkZbikueoDnxSC7Sjg///+ IwKXt+9TcQaAMn3rjs0fBZ5zWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLGCDKuR 6JkcypZuVQd+dlffSCjXMB8GA1UdIwQYMBaAFPwk9TkHR4fs6rAMJCYGwr1ogZoN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUNCQi9ENTNCRDE0NjE1 QjExMUYwQTI3NzRBMDlDNEY5QUUwMi9fQ1QxT1FkSGgtenFzQXdrSmdiQ3ZXaUJt ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19DVDFPUWRIaC16cXNBd2tKZ2JDdldpQm1nMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUNCQi9ENTNCRDE0NjE1QjExMUYwQTI3NzRBMDlDNEY5QUUwMi9fQ1QxT1FkSGgt enFzQXdrSmdiQ3ZXaUJtZzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATou7m64rsQeTqPkx1U5BId+99Z9puhq0sZ5Cta25JWHstgwL70t8lDP91w3/ oTuGckTB1NkVCWDitzD9QYLrSbIUtiywwlag5T7Sd55c0tGds1vY0JgIdbsyFG14 mzSPfDQqnrb7DM5xqSGFbeqS2sVPD36yDb9Y0R9fuvOoDK4wp0Wp4Ip3pl8cmLBT RWvqIyA6vVejRCVp3IzO3KXH96vEs0eyZ3aJPX9y+All/+/chGlLnXcPV1ymLQl6 E9OuHVTghhImkGsqGjmGpQ1FcRSIi25Ac7ZQOqt3akHNWNiqyHW7xmVL4gwcRerW l3qdQf/pfoWy/JlKDnH7f/anvA== -----END CERTIFICATE-----Generated at Wed May 13 11:05:17 2026 by rpki-client