$ rpki-client -vvf rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft File: 4lmIZ0880loTYNf-lTpYTxqvq8c.mft (raw, json) Hash identifier: M2YbnvAu8eFWf2tmRz+4DDiHVfkEQ9xNxfk4I30SiOg= Subject key identifier: C5:91:CC:BE:40:3C:44:7B:FF:B8:C7:20:42:6D:3F:C6:1F:21:9B:85 Authority key identifier: E2:59:88:67:4F:3C:D2:5A:13:60:D7:FE:95:3A:58:4F:1A:AF:AB:C7 Certificate issuer: /CN=A91B296A/serialNumber=E25988674F3CD25A1360D7FE953A584F1AAFABC7 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft Manifest number: 16 Signing time: Mon 11 May 2026 09:13:57 +0000 Manifest this update: Mon 11 May 2026 09:13:56 +0000 Manifest next update: Mon 18 May 2026 09:13:56 +0000 Files and hashes: 1: 4lmIZ0880loTYNf-lTpYTxqvq8c.crl (hash: z3uaDmIh8V90b0pgafC6viEADzcOguD6xIgDOo7pJPY=) 2: F685154E343511F194D2A58293833773.roa (hash: gqBjSjVoyBRxofp8a9jrvox3u68qYGspZzJrkr23A5k=) 3: F8C00164383D11F19F938D80A4833773.roa (hash: JA9a2tMNHCe2mcsEqThoattlGfh1KZXTRBAODQIj2BE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.crl rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 09:13:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B296A, serialNumber=E25988674F3CD25A1360D7FE953A584F1AAFABC7 Validity Not Before: May 11 09:13:56 2026 GMT Not After : May 18 09:13:56 2026 GMT Subject: CN=6a019dd5-4e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:07:3e:41:61:80:3f:cf:13:f8:8e:33:ff:89: e7:87:82:a0:1f:44:a1:6d:8e:76:24:27:ea:79:d3: 99:1f:c5:7c:d1:41:e7:4e:6d:ab:99:d3:57:73:96: 72:06:64:0b:f6:2c:16:9d:34:b1:a9:f0:7e:25:1c: 65:07:81:e3:5d:39:ad:32:6b:9c:56:21:32:0f:9a: fb:9c:b4:1b:ca:b7:ec:c2:83:84:b7:96:25:d8:1e: c7:48:1c:36:0d:be:54:79:01:3b:47:7d:28:a1:c1: 5e:2f:3d:2a:29:f0:35:f3:11:a9:f6:9f:47:2a:db: 7e:af:e7:81:b6:a3:ff:d1:02:9d:ed:d3:ac:c6:6d: 9f:20:fd:5f:31:de:28:59:3e:c7:d6:9a:a9:6d:25: dd:23:a6:77:be:ff:10:39:32:01:89:af:4f:75:20: 60:dd:af:29:ce:60:d6:3a:c4:eb:48:0c:f5:be:b3: 17:6a:4b:c5:3e:06:dd:69:a2:0b:2f:fc:26:2e:1d: 6b:11:de:cd:23:02:00:71:f3:88:be:99:17:3a:48: c5:a6:f0:3a:2e:43:cb:01:64:44:fc:f4:26:5f:b9: c5:ec:dc:ec:76:ee:26:a6:42:47:f2:43:6a:6c:52: 0b:d9:13:52:09:0f:69:b2:09:35:a0:5f:46:d1:15: 82:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:91:CC:BE:40:3C:44:7B:FF:B8:C7:20:42:6D:3F:C6:1F:21:9B:85 X509v3 Authority Key Identifier: keyid:E2:59:88:67:4F:3C:D2:5A:13:60:D7:FE:95:3A:58:4F:1A:AF:AB:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:c6:fc:7c:34:dc:05:b6:88:2e:95:ee:a4:36:62:a1:21:d8: 94:87:11:17:0d:1e:63:c1:99:78:b6:35:b6:22:97:18:11:35: 45:c2:b2:0b:55:86:d3:d4:cf:a1:b7:f7:f8:e7:2f:0a:72:e6: 94:fd:26:b4:ee:0f:87:36:83:54:97:63:ce:cb:37:6d:9c:56: 2c:d8:1c:65:0a:2b:43:1f:3e:f5:36:6f:04:e4:04:3c:b0:71: 58:eb:fc:6c:f8:17:c9:e8:5b:fd:2e:fa:b7:b9:7b:97:af:80: 92:1d:d2:50:51:25:cc:b8:fa:93:9e:5f:08:35:05:6d:89:2d: d0:f8:98:b3:63:8e:e3:35:3a:9a:74:0b:f2:7e:b1:a3:c4:d4: b8:eb:06:f3:96:5f:7a:5f:7b:8d:6b:80:a0:23:a7:b3:c7:de: 4b:0e:ad:9d:fb:ce:92:42:2f:56:90:7a:d1:0d:7a:d1:25:e0: 0d:7a:f3:9f:aa:c2:4e:32:92:94:65:a3:a4:fe:7c:9c:48:97: ed:90:b4:88:9c:7b:c5:8a:03:8c:f9:6d:33:23:d2:5b:6e:19: 4d:a3:e0:7c:49:b5:0e:ca:80:79:90:b5:c8:e7:9a:f4:6b:b0: ea:21:07:4a:19:c8:ab:85:d1:b5:ae:4d:26:f7:40:71:91:6f: f0:3b:05:79 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC Mjk2QTExMC8GA1UEBRMoRTI1OTg4Njc0RjNDRDI1QTEzNjBEN0ZFOTUzQTU4NEYx QUFGQUJDNzAeFw0yNjA1MTEwOTEzNTZaFw0yNjA1MTgwOTEzNTZaMBgxFjAUBgNV BAMTDTZhMDE5ZGQ1LTRlMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIBz5BYYA/zxP4jjP/ieeHgqAfRKFtjnYkJ+p505kfxXzRQedObauZ01dzlnIG ZAv2LBadNLGp8H4lHGUHgeNdOa0ya5xWITIPmvuctBvKt+zCg4S3liXYHsdIHDYN vlR5ATtHfSihwV4vPSop8DXzEan2n0cq236v54G2o//RAp3t06zGbZ8g/V8x3ihZ PsfWmqltJd0jpne+/xA5MgGJr091IGDdrynOYNY6xOtIDPW+sxdqS8U+Bt1pogsv /CYuHWsR3s0jAgBx84i+mRc6SMWm8DouQ8sBZET89CZfucXs3Ox27iamQkfyQ2ps UgvZE1IJD2myCTWgX0bRFYLpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUxZHMvkA8 RHv/uMcgQm0/xh8hm4UwHwYDVR0jBBgwFoAU4lmIZ0880loTYNf+lTpYTxqvq8cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyOTZBL0FBREVCNzMwMzQz NTExRjE4MjkxODIxMjkzODMzNzczLzRsbUlaMDg4MGxvVFlOZi1sVHBZVHhxdnE4 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNGxtSVowODgwbG9UWU5mLWxUcFlUeHF2cThjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy OTZBL0FBREVCNzMwMzQzNTExRjE4MjkxODIxMjkzODMzNzczLzRsbUlaMDg4MGxv VFlOZi1sVHBZVHhxdnE4Yy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQACxvx8NNwFtogule6kNmKhIdiUhxEXDR5jwZl4tjW2IpcYETVFwrILVYbT1M+h t/f45y8KcuaU/Sa07g+HNoNUl2POyzdtnFYs2BxlCitDHz71Nm8E5AQ8sHFY6/xs +BfJ6Fv9Lvq3uXuXr4CSHdJQUSXMuPqTnl8INQVtiS3Q+JizY47jNTqadAvyfrGj xNS46wbzll96X3uNa4CgI6ezx95LDq2d+86SQi9WkHrRDXrRJeANevOfqsJOMpKU ZaOk/nycSJftkLSInHvFigOM+W0zI9JbbhlNo+B8SbUOyoB5kLXI55r0a7DqIQdK GcirhdG1rk0m90BxkW/wOwV5 -----END CERTIFICATE-----Generated at Wed May 13 10:07:15 2026 by rpki-client