$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E8B/6291764445B611EF8AB30A31C4F9AE02/nTwzrLEQPnH6H_PmAT6dwxEiafw.mft File: nTwzrLEQPnH6H_PmAT6dwxEiafw.mft (raw, json) Hash identifier: BBa5CMniR31SCwd5fsdyLYIdLqlm8lSqwEkJv/0gyKE= Subject key identifier: F6:88:53:40:5E:94:20:BD:85:4F:B5:72:1D:22:E6:28:03:07:40:BE Authority key identifier: 9D:3C:33:AC:B1:10:3E:71:FA:1F:F3:E6:01:3E:9D:C3:11:22:69:FC Certificate issuer: /CN=A91B1E8B/serialNumber=9D3C33ACB1103E71FA1FF3E6013E9DC3112269FC Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nTwzrLEQPnH6H_PmAT6dwxEiafw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E8B/6291764445B611EF8AB30A31C4F9AE02/nTwzrLEQPnH6H_PmAT6dwxEiafw.mft Manifest number: 0159 Signing time: Wed 13 May 2026 05:08:00 +0000 Manifest this update: Wed 13 May 2026 05:08:00 +0000 Manifest next update: Wed 20 May 2026 05:08:00 +0000 Files and hashes: 1: nTwzrLEQPnH6H_PmAT6dwxEiafw.crl (hash: 6aevH7yulRJgB0nrxaZ+TgxZb7Dm6LKFSfnA6pzWOto=) 2: DD76C09AB16711EFBD483568C4F9AE02.roa (hash: OJIwdILNcKxj0xX6Uj1lld3dWONiR8ZjcGc33mTU5vk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E8B/6291764445B611EF8AB30A31C4F9AE02/nTwzrLEQPnH6H_PmAT6dwxEiafw.crl rsync://rpki.apnic.net/member_repository/A91B1E8B/6291764445B611EF8AB30A31C4F9AE02/nTwzrLEQPnH6H_PmAT6dwxEiafw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nTwzrLEQPnH6H_PmAT6dwxEiafw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 05:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E8B, serialNumber=9D3C33ACB1103E71FA1FF3E6013E9DC3112269FC Validity Not Before: May 13 05:08:00 2026 GMT Not After : May 20 05:08:00 2026 GMT Subject: CN=6a040730-9381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f7:54:04:d5:57:6f:0e:0e:a6:cd:96:56:8d: 08:81:66:fa:77:3b:89:67:9d:da:47:b2:63:4f:e7: be:bd:56:7a:f1:49:f9:3b:ec:4a:f0:eb:54:15:9e: 3d:8b:fc:a0:2f:e3:f1:db:65:f8:01:5a:b5:90:9d: 0b:ec:60:ae:37:53:7a:df:a5:8d:a8:b6:1b:ab:a9: 1f:b4:d1:44:20:bc:23:9f:8b:91:12:d5:44:f0:3a: 28:82:6a:57:7a:9a:e2:fe:c1:ca:35:c2:b0:5b:9a: 48:37:26:f7:24:d1:2e:9a:17:0a:ab:28:84:44:c9: 6a:d1:c2:8d:4d:c0:5f:63:cc:b1:a1:2e:1b:76:cd: ae:a6:bc:1a:cb:ac:40:79:f4:eb:b0:67:d9:91:d7: f1:91:cc:e6:1e:50:64:cf:b4:57:d1:f2:b4:37:1a: 86:f6:ce:2e:1c:f2:7c:55:d1:2b:c3:70:69:4f:92: 0d:e8:ba:61:68:31:49:b9:ca:44:7d:13:4e:59:24: 13:fd:52:91:a1:f5:28:e1:c5:2b:b4:36:e4:0d:75: 87:42:56:ca:ac:0e:af:51:02:af:1e:9e:df:f4:a1: a4:df:d7:21:95:f8:c5:53:e9:d9:91:e9:32:99:23: a2:df:9e:24:25:f8:2f:b4:bd:04:63:9f:44:03:32: b0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:88:53:40:5E:94:20:BD:85:4F:B5:72:1D:22:E6:28:03:07:40:BE X509v3 Authority Key Identifier: keyid:9D:3C:33:AC:B1:10:3E:71:FA:1F:F3:E6:01:3E:9D:C3:11:22:69:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6291764445B611EF8AB30A31C4F9AE02/nTwzrLEQPnH6H_PmAT6dwxEiafw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nTwzrLEQPnH6H_PmAT6dwxEiafw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E8B/6291764445B611EF8AB30A31C4F9AE02/nTwzrLEQPnH6H_PmAT6dwxEiafw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:ce:5f:24:5e:93:b3:81:90:25:9f:91:98:1e:13:81:22:94: 2c:96:f3:70:8f:e5:34:3c:85:e0:a0:8b:87:9c:15:b0:eb:63: 53:96:fd:55:dc:08:7a:d4:58:2e:6a:b5:e3:0f:52:d7:7b:51: 1c:3e:e8:9e:13:29:56:59:b4:0c:a8:9b:f7:3e:62:78:46:5f: d7:65:8f:72:b9:26:3d:63:ca:83:f4:8b:f6:e8:77:73:5c:9e: ab:c0:6c:01:30:7a:29:24:07:35:89:55:f9:ef:3f:7d:a5:3c: 8f:d0:7d:0c:6a:91:b3:78:16:2c:9f:57:5b:fb:7d:52:6c:94: e7:73:8a:5a:5f:dc:75:78:74:ad:ef:ee:0f:3e:ad:0c:a0:46: 0a:2f:61:44:88:a3:69:23:62:aa:05:9c:0c:c1:af:f0:69:e7: ef:c9:bc:4a:e6:1c:7f:c3:82:f6:61:2e:ba:25:df:f5:1f:23: 74:3d:82:e8:f1:3b:b1:92:70:84:d5:71:90:5e:14:a9:83:64: 84:66:87:fe:eb:25:f0:6c:7e:1a:cf:30:80:a7:9f:6d:f0:50: 6a:42:39:cf:f6:83:6c:8c:07:85:26:a2:ad:82:83:7e:98:7a: b4:48:3c:f8:63:d9:ab:f2:b8:4c:9c:15:17:84:23:42:bd:67: a6:50:b1:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFFOEIxMTAvBgNVBAUTKDlEM0MzM0FDQjExMDNFNzFGQTFGRjNFNjAxM0U5REMz MTEyMjY5RkMwHhcNMjYwNTEzMDUwODAwWhcNMjYwNTIwMDUwODAwWjAYMRYwFAYD VQQDEw02YTA0MDczMC05MzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/dUBNVXbw4Ops2WVo0IgWb6dzuJZ53aR7JjT+e+vVZ68Un5O+xK8OtUFZ49 i/ygL+Px22X4AVq1kJ0L7GCuN1N636WNqLYbq6kftNFEILwjn4uREtVE8DoogmpX epri/sHKNcKwW5pINyb3JNEumhcKqyiERMlq0cKNTcBfY8yxoS4bds2uprway6xA efTrsGfZkdfxkczmHlBkz7RX0fK0NxqG9s4uHPJ8VdErw3BpT5IN6LphaDFJucpE fRNOWSQT/VKRofUo4cUrtDbkDXWHQlbKrA6vUQKvHp7f9KGk39chlfjFU+nZkeky mSOi354kJfgvtL0EY59EAzKwTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPaIU0Be lCC9hU+1ch0i5igDB0C+MB8GA1UdIwQYMBaAFJ08M6yxED5x+h/z5gE+ncMRImn8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUU4Qi82MjkxNzY0NDQ1 QjYxMUVGOEFCMzBBMzFDNEY5QUUwMi9uVHd6ckxFUVBuSDZIX1BtQVQ2ZHd4RWlh ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25Ud3pyTEVRUG5INkhfUG1BVDZkd3hFaWFmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUU4Qi82MjkxNzY0NDQ1QjYxMUVGOEFCMzBBMzFDNEY5QUUwMi9uVHd6ckxFUVBu SDZIX1BtQVQ2ZHd4RWlhZncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANM5fJF6Ts4GQJZ+RmB4TgSKULJbzcI/lNDyF4KCLh5wVsOtjU5b9VdwIetRY Lmq14w9S13tRHD7onhMpVlm0DKib9z5ieEZf12WPcrkmPWPKg/SL9uh3c1yeq8Bs ATB6KSQHNYlV+e8/faU8j9B9DGqRs3gWLJ9XW/t9UmyU53OKWl/cdXh0re/uDz6t DKBGCi9hRIijaSNiqgWcDMGv8Gnn78m8SuYcf8OC9mEuuiXf9R8jdD2C6PE7sZJw hNVxkF4UqYNkhGaH/usl8Gx+Gs8wgKefbfBQakI5z/aDbIwHhSairYKDfph6tEg8 +GPZq/K4TJwVF4QjQr1nplCx6g== -----END CERTIFICATE-----Generated at Wed May 13 14:26:28 2026 by rpki-client