$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft File: CBzlpnA274VGmQv1lMzWMoB0BR0.mft (raw, json) Hash identifier: GdR3+hwVKChBLLJ09kBjEh8pAsTihqOb+Qq08TnDt6M= Subject key identifier: B8:CC:28:2B:B9:75:0C:80:E3:DE:37:C9:7C:C0:01:8A:DF:0F:F9:96 Authority key identifier: 08:1C:E5:A6:70:36:EF:85:46:99:0B:F5:94:CC:D6:32:80:74:05:1D Certificate issuer: /CN=A91AB1F6/serialNumber=081CE5A67036EF8546990BF594CCD6328074051D Certificate serial: 0A29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft Manifest number: 0A1C Signing time: Tue 12 May 2026 19:50:50 +0000 Manifest this update: Tue 12 May 2026 19:50:50 +0000 Manifest next update: Tue 19 May 2026 19:50:50 +0000 Files and hashes: 1: CBzlpnA274VGmQv1lMzWMoB0BR0.crl (hash: cWcQ5K5WkSLlkpAod7xwRSumeH2x/Xmm9xxeYi9THl8=) 2: 59675AB20A4011F0AC302962C4F9AE02.roa (hash: 2Iz+yAVxYx71x7F/RxujD049uCoDIu8QgELmnr4mv9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.crl rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:50:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2601 (0xa29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB1F6, serialNumber=081CE5A67036EF8546990BF594CCD6328074051D Validity Not Before: May 12 19:50:50 2026 GMT Not After : May 19 19:50:50 2026 GMT Subject: CN=6a03849a-4374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a4:ea:5b:c8:05:19:43:8c:12:c8:44:d6:e2: 98:67:26:61:f3:cd:f3:26:1f:1c:c9:7c:6b:10:5f: 2d:d1:65:6c:37:75:83:cf:44:be:07:f3:c1:f0:74: 04:f4:7d:92:75:3f:62:63:b7:87:05:6d:14:4b:ee: 60:8c:75:8f:3c:b5:75:a1:be:3e:51:d1:e5:61:ba: 6f:c5:7d:85:d5:48:94:55:08:8b:3c:ea:0d:ea:4e: 9c:f5:1c:8d:d4:f4:b0:ad:14:23:39:90:61:b0:48: d2:8e:37:91:59:08:6c:b1:be:46:73:49:c0:da:1f: 6b:41:ac:36:cf:33:7e:4a:3f:2b:63:ba:05:7f:cb: de:6a:2b:b0:a7:9b:63:ab:ba:32:f1:7c:d0:96:78: c0:07:bb:bb:20:4d:d7:e8:c8:01:e5:5a:c9:06:37: 9e:df:a3:e9:4a:6a:9e:50:0a:b5:3c:0b:5c:da:10: 9a:9f:6e:54:4e:cc:2c:c5:87:c7:1f:37:df:68:9a: ad:ca:08:6b:8e:1c:8c:65:28:42:f9:94:eb:d1:99: e1:5b:3c:54:1b:84:45:43:1e:20:ad:fb:2b:40:1c: 5f:18:ab:d4:e7:e9:e7:3f:08:80:44:55:3f:db:ff: 3f:21:d9:83:c9:bc:1b:cd:1f:fc:91:04:3d:c0:81: bf:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:CC:28:2B:B9:75:0C:80:E3:DE:37:C9:7C:C0:01:8A:DF:0F:F9:96 X509v3 Authority Key Identifier: keyid:08:1C:E5:A6:70:36:EF:85:46:99:0B:F5:94:CC:D6:32:80:74:05:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:4d:4a:e6:b0:78:00:62:63:69:9c:0a:50:15:ad:7c:15:84: 23:e6:73:65:2b:e6:f4:bb:6a:df:68:8b:c0:57:c8:b7:cc:0e: a5:30:d8:3e:ac:a1:d6:01:53:9c:9c:4c:1e:6b:2f:4a:ca:ec: e0:0c:76:b2:e1:8f:05:4d:65:c9:79:1d:4b:cb:c3:82:27:aa: 1a:2e:90:31:15:3b:3b:96:58:ab:aa:d8:08:64:66:84:8c:5e: a7:08:66:a9:5d:56:59:d9:9e:91:3c:8e:b9:b0:66:81:a0:86: b6:5c:92:0b:72:29:14:5a:5a:40:a6:25:65:72:8c:df:18:a3: 18:dc:74:c3:ae:21:6c:c5:64:0e:3d:af:f5:3d:d5:53:3c:29: a9:5e:d4:02:b9:41:0e:eb:6d:9e:92:88:ef:c4:51:08:db:01: 05:b7:5f:e7:cd:e7:7d:16:f8:df:eb:b4:ca:b2:0e:8e:1c:99: 41:1c:db:11:73:53:19:ff:c1:e2:4b:c2:1e:66:ff:3d:65:8d: e0:e9:38:20:8b:86:3b:da:5c:ef:c7:61:3d:1f:0b:00:aa:d9: 68:2f:72:ab:18:13:93:5e:3f:00:b8:4f:09:57:eb:98:c1:f1: f6:ee:a7:f8:ef:57:70:07:e0:71:de:85:77:2f:09:5d:c8:02: 7d:d2:1e:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIxRjYxMTAvBgNVBAUTKDA4MUNFNUE2NzAzNkVGODU0Njk5MEJGNTk0Q0NENjMy ODA3NDA1MUQwHhcNMjYwNTEyMTk1MDUwWhcNMjYwNTE5MTk1MDUwWjAYMRYwFAYD VQQDEw02YTAzODQ5YS00Mzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsaTqW8gFGUOMEshE1uKYZyZh883zJh8cyXxrEF8t0WVsN3WDz0S+B/PB8HQE 9H2SdT9iY7eHBW0US+5gjHWPPLV1ob4+UdHlYbpvxX2F1UiUVQiLPOoN6k6c9RyN 1PSwrRQjOZBhsEjSjjeRWQhssb5Gc0nA2h9rQaw2zzN+Sj8rY7oFf8veaiuwp5tj q7oy8XzQlnjAB7u7IE3X6MgB5VrJBjee36PpSmqeUAq1PAtc2hCan25UTswsxYfH HzffaJqtyghrjhyMZShC+ZTr0ZnhWzxUG4RFQx4grfsrQBxfGKvU5+nnPwiARFU/ 2/8/IdmDybwbzR/8kQQ9wIG/0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLjMKCu5 dQyA4943yXzAAYrfD/mWMB8GA1UdIwQYMBaAFAgc5aZwNu+FRpkL9ZTM1jKAdAUd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjFGNi8wRjE0MDE1MDk0 QzkxMUVBQjFEQjYyN0NDNEY5QUUwMi9DQnpscG5BMjc0VkdtUXYxbE16V01vQjBC UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NCemxwbkEyNzRWR21RdjFsTXpXTW9CMEJSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjFGNi8wRjE0MDE1MDk0QzkxMUVBQjFEQjYyN0NDNEY5QUUwMi9DQnpscG5BMjc0 VkdtUXYxbE16V01vQjBCUjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkU1K5rB4AGJjaZwKUBWtfBWEI+ZzZSvm9Ltq32iLwFfIt8wOpTDYPqyh1gFT nJxMHmsvSsrs4Ax2suGPBU1lyXkdS8vDgieqGi6QMRU7O5ZYq6rYCGRmhIxepwhm qV1WWdmekTyOubBmgaCGtlySC3IpFFpaQKYlZXKM3xijGNx0w64hbMVkDj2v9T3V UzwpqV7UArlBDuttnpKI78RRCNsBBbdf583nfRb43+u0yrIOjhyZQRzbEXNTGf/B 4kvCHmb/PWWN4Ok4IIuGO9pc78dhPR8LAKrZaC9yqxgTk14/ALhPCVfrmMHx9u6n +O9XcAfgcd6Fdy8JXcgCfdIeIg== -----END CERTIFICATE-----Generated at Wed May 13 07:59:12 2026 by rpki-client