$ rpki-client -vvf rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft File: 23LIuvHa9pOYGFLuAyIwMF7ICRA.mft (raw, json) Hash identifier: cl6IygXAv9RLIcbNCVxfM84QMcJsedGpvhZYeJN6HoQ= Subject key identifier: 71:54:1E:7A:E5:0D:65:85:CE:C7:2F:8D:1D:FA:B2:44:05:A0:F8:2F Authority key identifier: DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10 Certificate issuer: /CN=A91B289C/serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910 Certificate serial: 0952 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft Manifest number: 0949 Signing time: Tue 12 May 2026 20:13:20 +0000 Manifest this update: Tue 12 May 2026 20:13:20 +0000 Manifest next update: Tue 19 May 2026 20:13:20 +0000 Files and hashes: 1: 23LIuvHa9pOYGFLuAyIwMF7ICRA.crl (hash: +SYX1Fd4sobW3jb3mLolsFWs0WBYkuiaPQna8jvtGwU=) 2: E6F3687CBCE711EAACD6466CC4F9AE02.roa (hash: AJajG2Lmw5CKAEEdhqoEdtkkiOQieReMgo4pezqlWDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:13:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2386 (0x952) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B289C, serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910 Validity Not Before: May 12 20:13:20 2026 GMT Not After : May 19 20:13:20 2026 GMT Subject: CN=6a0389e0-db75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f2:86:34:63:c6:0c:ff:b0:45:7b:a7:e7:98: d0:a5:72:18:10:75:e4:89:eb:51:d8:1e:f7:33:db: 47:d1:9a:72:2b:bb:66:19:19:d4:ed:0c:06:85:02: 1f:da:e1:ac:62:ed:66:67:e3:8e:df:21:85:bc:fd: ae:3d:ec:e0:43:c4:35:1d:51:82:a8:ea:ad:19:cd: 23:6c:45:92:b4:c2:8f:30:86:8f:8f:22:e1:37:e7: 65:ea:53:4c:11:97:3a:33:a8:59:46:72:ce:e2:90: 82:b7:fa:ab:fc:17:b3:97:f8:6e:9c:a5:ef:5e:15: ae:1a:01:aa:5b:42:a2:fb:5c:66:d1:e0:72:9d:52: 73:d2:7c:2f:c8:02:18:12:fd:52:bd:c2:39:75:31: 98:e7:1a:3b:68:e5:0b:ec:1e:4a:03:94:9c:4a:9b: c2:91:c7:a6:d6:c1:ab:35:ed:88:fe:13:1b:98:9d: 09:16:46:1d:6c:62:47:05:8c:f3:6f:69:6f:74:e1: b4:52:25:fc:ea:45:1b:86:04:5b:6d:11:52:19:2b: f1:d1:b8:50:2e:1e:21:fa:d4:17:62:11:30:ff:63: c7:7a:71:bc:ee:e7:68:7d:53:c6:16:56:c6:36:5a: 0c:40:90:be:10:56:17:1b:70:ab:0e:ec:1e:d0:f1: 1a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:54:1E:7A:E5:0D:65:85:CE:C7:2F:8D:1D:FA:B2:44:05:A0:F8:2F X509v3 Authority Key Identifier: keyid:DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:bd:aa:57:ea:37:3c:a1:db:6d:a3:6c:22:5e:34:7b:b2:2d: b4:8f:2f:22:6f:d6:db:ea:ca:ff:57:4b:d6:87:48:b4:9e:f9: 5a:ce:d3:d4:ce:0b:47:cc:c4:aa:fa:d5:c0:03:cb:a6:46:c2: 1e:05:71:44:4f:a4:c1:03:e2:fc:b7:ec:bd:71:18:60:bf:95: 4f:7b:fc:1f:f8:b9:dd:c0:22:3c:e0:27:c1:0a:f6:ec:ea:6e: 06:23:bd:b3:a4:dc:18:2e:37:a1:5b:86:e1:94:58:f4:37:8c: 1d:83:27:ba:fa:0f:63:9c:81:5e:80:86:1e:da:82:e2:d5:18: 21:ef:fe:5c:80:51:18:d4:82:b8:20:f2:4e:87:20:90:b2:98: ea:ff:c7:75:c1:db:df:65:2b:cb:22:2d:bc:ac:d3:86:13:d1: d1:bd:ee:d8:82:54:13:2f:42:ee:89:1f:7a:27:0d:fd:65:95: 17:e1:aa:99:51:d6:70:65:82:f3:b2:fc:18:b7:6b:0f:de:67: 40:ef:da:34:93:51:b7:e7:f8:36:2e:3e:58:df:96:7b:9e:27: 0f:fe:ee:51:b7:72:c7:6c:73:f3:06:30:3b:ef:83:9f:cb:15: d4:c7:96:ba:69:9f:62:0e:3d:09:d9:ba:74:47:d9:20:3f:71: 67:f5:7e:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI4OUMxMTAvBgNVBAUTKERCNzJDOEJBRjFEQUY2OTM5ODE4NTJFRTAzMjIzMDMw NUVDODA5MTAwHhcNMjYwNTEyMjAxMzIwWhcNMjYwNTE5MjAxMzIwWjAYMRYwFAYD VQQDEw02YTAzODllMC1kYjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPKGNGPGDP+wRXun55jQpXIYEHXkietR2B73M9tH0ZpyK7tmGRnU7QwGhQIf 2uGsYu1mZ+OO3yGFvP2uPezgQ8Q1HVGCqOqtGc0jbEWStMKPMIaPjyLhN+dl6lNM EZc6M6hZRnLO4pCCt/qr/Bezl/hunKXvXhWuGgGqW0Ki+1xm0eBynVJz0nwvyAIY Ev1SvcI5dTGY5xo7aOUL7B5KA5ScSpvCkcem1sGrNe2I/hMbmJ0JFkYdbGJHBYzz b2lvdOG0UiX86kUbhgRbbRFSGSvx0bhQLh4h+tQXYhEw/2PHenG87udofVPGFlbG NloMQJC+EFYXG3CrDuwe0PEaoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHFUHnrl DWWFzscvjR36skQFoPgvMB8GA1UdIwQYMBaAFNtyyLrx2vaTmBhS7gMiMDBeyAkQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjg5Qy8zQUIxRTJEQ0JD RTcxMUVBQkU5NzJDNkNDNEY5QUUwMi8yM0xJdXZIYTlwT1lHRkx1QXlJd01GN0lD UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIzTEl1dkhhOXBPWUdGTHVBeUl3TUY3SUNSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Mjg5Qy8zQUIxRTJEQ0JDRTcxMUVBQkU5NzJDNkNDNEY5QUUwMi8yM0xJdXZIYTlw T1lHRkx1QXlJd01GN0lDUkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiL2qV+o3PKHbbaNsIl40e7IttI8vIm/W2+rK/1dL1odItJ75Ws7T1M4LR8zE qvrVwAPLpkbCHgVxRE+kwQPi/LfsvXEYYL+VT3v8H/i53cAiPOAnwQr27OpuBiO9 s6TcGC43oVuG4ZRY9DeMHYMnuvoPY5yBXoCGHtqC4tUYIe/+XIBRGNSCuCDyTocg kLKY6v/HdcHb32UryyItvKzThhPR0b3u2IJUEy9C7okfeicN/WWVF+GqmVHWcGWC 87L8GLdrD95nQO/aNJNRt+f4Ni4+WN+We54nD/7uUbdyx2xz8wYwO++Dn8sV1MeW ummfYg49Cdm6dEfZID9xZ/V+pQ== -----END CERTIFICATE-----Generated at Wed May 13 09:35:02 2026 by rpki-client