$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft File: rKpuJqXy3KoUzfyezI6c9oKaQCE.mft (raw, json) Hash identifier: qjOst0CfV7Bz6VPhJwEFlrxEHc4I1Q2levUvOQAAQGI= Subject key identifier: D2:AB:81:A0:55:E3:97:BD:57:7D:7E:9A:79:1B:E1:68:0A:6F:FC:A8 Authority key identifier: AC:AA:6E:26:A5:F2:DC:AA:14:CD:FC:9E:CC:8E:9C:F6:82:9A:40:21 Certificate issuer: /CN=A91AEF45/serialNumber=ACAA6E26A5F2DCAA14CDFC9ECC8E9CF6829A4021 Certificate serial: 044B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft Manifest number: 0444 Signing time: Wed 13 May 2026 00:22:04 +0000 Manifest this update: Wed 13 May 2026 00:22:04 +0000 Manifest next update: Wed 20 May 2026 00:22:04 +0000 Files and hashes: 1: rKpuJqXy3KoUzfyezI6c9oKaQCE.crl (hash: PGwY17G5+jBBjm3v+Y/kBtaGGsTd5lU56pFIvZ/3qAU=) 2: 1AE323249F2D11EC897FD30CC4F9AE02.roa (hash: KTSt+ZHRMgLJ8/R5wENqUSR1L1JAi9WdX/iu4I2PtVw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.crl rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 00:22:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1099 (0x44b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEF45, serialNumber=ACAA6E26A5F2DCAA14CDFC9ECC8E9CF6829A4021 Validity Not Before: May 13 00:22:04 2026 GMT Not After : May 20 00:22:04 2026 GMT Subject: CN=6a03c42c-67a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:70:db:2f:11:da:9f:e3:c0:80:24:ea:29:bc: a7:05:13:8f:ee:b1:56:7e:8e:28:c6:bb:fd:a5:09: d2:d1:a4:c3:ed:dd:de:18:7c:66:9c:a0:a8:ab:f3: 96:86:02:f5:dd:14:0f:37:74:5b:67:26:06:7c:1e: cb:f9:27:15:98:fa:54:9b:46:fc:80:4a:2f:76:00: e1:f9:49:7c:81:81:05:8b:52:bf:82:59:b7:01:e5: fa:f8:27:83:f6:53:04:fe:c4:d2:72:29:df:b2:6d: 9a:fa:69:8a:d4:4f:f1:f8:de:ec:5f:0d:fe:58:5c: 75:85:5f:db:3b:ae:6c:46:31:bb:76:4c:1d:03:e0: 35:f3:d6:a2:16:ec:97:2a:ac:14:d5:73:31:b4:3f: 66:64:2d:85:f3:99:52:65:c2:ed:fd:dc:72:38:eb: 3b:eb:96:25:cf:54:5d:48:38:23:ff:c6:f6:9b:a2: 8d:1f:04:2c:93:b1:a1:ae:bd:c9:61:e8:60:12:72: a2:c9:b8:58:0a:89:ff:15:e5:09:ae:1a:1c:ea:1e: 2c:5e:4a:c5:08:b1:3c:d7:51:4a:99:a7:10:01:f5: a0:8c:a4:66:c1:0c:bf:90:88:91:fd:a4:89:a4:21: 13:c2:28:1a:a2:5f:df:83:ed:cd:c0:5b:9c:1a:87: 81:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:AB:81:A0:55:E3:97:BD:57:7D:7E:9A:79:1B:E1:68:0A:6F:FC:A8 X509v3 Authority Key Identifier: keyid:AC:AA:6E:26:A5:F2:DC:AA:14:CD:FC:9E:CC:8E:9C:F6:82:9A:40:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:f4:0e:fe:e6:53:01:18:54:ee:6b:fa:88:b6:f7:2b:93:05: 91:09:4c:f0:11:12:56:b7:21:4b:54:5a:21:ca:6e:65:03:31: d0:87:e2:7c:89:96:a7:19:6f:7f:af:ab:01:08:d7:1d:69:97: 9d:1b:2b:2b:be:82:b7:61:84:77:7a:91:64:a4:f2:4d:07:2a: 80:17:9e:f8:81:df:3b:6e:ff:5c:d9:e1:ab:24:a6:25:a3:04: 26:d4:41:d9:ae:90:60:df:8e:76:fa:c9:18:e5:ab:2f:91:95: 20:0d:e6:09:c2:f7:1f:04:e2:85:6a:26:5f:ed:b5:bd:e2:a0: 49:fa:64:34:b6:c9:60:e4:7d:63:6a:15:1e:b1:e5:bf:bf:bf: 5b:f3:ef:b4:d0:7b:ed:88:95:26:c3:4b:42:88:27:5f:44:14: e1:14:ff:d3:d6:c0:af:8e:04:80:e5:ca:0a:6e:81:1e:a4:54: ed:b9:38:b3:5d:01:d1:b0:f6:06:52:94:cb:34:d5:64:16:99: 4b:0a:37:38:53:99:75:4a:93:8e:0c:08:a9:e1:fd:8a:b3:9c: a3:9b:9d:f0:50:6a:23:d2:a1:b7:f5:de:bb:54:38:d4:80:7e: 5f:27:af:da:87:ad:26:c6:dc:29:df:8f:89:8e:2d:1b:06:4a: fe:8b:35:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVGNDUxMTAvBgNVBAUTKEFDQUE2RTI2QTVGMkRDQUExNENERkM5RUNDOEU5Q0Y2 ODI5QTQwMjEwHhcNMjYwNTEzMDAyMjA0WhcNMjYwNTIwMDAyMjA0WjAYMRYwFAYD VQQDEw02YTAzYzQyYy02N2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlXDbLxHan+PAgCTqKbynBROP7rFWfo4oxrv9pQnS0aTD7d3eGHxmnKCoq/OW hgL13RQPN3RbZyYGfB7L+ScVmPpUm0b8gEovdgDh+Ul8gYEFi1K/glm3AeX6+CeD 9lME/sTScinfsm2a+mmK1E/x+N7sXw3+WFx1hV/bO65sRjG7dkwdA+A189aiFuyX KqwU1XMxtD9mZC2F85lSZcLt/dxyOOs765Ylz1RdSDgj/8b2m6KNHwQsk7Ghrr3J YehgEnKiybhYCon/FeUJrhoc6h4sXkrFCLE811FKmacQAfWgjKRmwQy/kIiR/aSJ pCETwigaol/fg+3NwFucGoeBxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNKrgaBV 45e9V31+mnkb4WgKb/yoMB8GA1UdIwQYMBaAFKyqbial8tyqFM38nsyOnPaCmkAh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUY0NS81RDhCOUI4MjlG MkExMUVDQTdDRkFEMEFDNEY5QUUwMi9yS3B1SnFYeTNLb1V6Znllekk2YzlvS2FR Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JLcHVKcVh5M0tvVXpmeWV6STZjOW9LYVFDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUY0NS81RDhCOUI4MjlGMkExMUVDQTdDRkFEMEFDNEY5QUUwMi9yS3B1SnFYeTNL b1V6Znllekk2YzlvS2FRQ0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAifQO/uZTARhU7mv6iLb3K5MFkQlM8BESVrchS1RaIcpuZQMx0IfifImWpxlv f6+rAQjXHWmXnRsrK76Ct2GEd3qRZKTyTQcqgBee+IHfO27/XNnhqySmJaMEJtRB 2a6QYN+OdvrJGOWrL5GVIA3mCcL3HwTihWomX+21veKgSfpkNLbJYOR9Y2oVHrHl v7+/W/PvtNB77YiVJsNLQognX0QU4RT/09bAr44EgOXKCm6BHqRU7bk4s10B0bD2 BlKUyzTVZBaZSwo3OFOZdUqTjgwIqeH9irOco5ud8FBqI9Kht/Xeu1Q41IB+Xyev 2oetJsbcKd+PiY4tGwZK/os1uA== -----END CERTIFICATE-----Generated at Wed May 13 11:40:56 2026 by rpki-client