$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft File: yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft (raw, json) Hash identifier: 2XOzxe1j+G/8mhI6H3v0QWqO7OI6Osbrarj/4i49Pq4= Subject key identifier: 20:AA:25:2D:CA:98:20:D2:B9:5A:CD:B7:C6:7D:1D:19:AB:C7:24:06 Authority key identifier: CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A Certificate issuer: /CN=A91B4357/serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A Certificate serial: 055D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft Manifest number: 052F Signing time: Tue 12 May 2026 23:38:42 +0000 Manifest this update: Tue 12 May 2026 23:38:41 +0000 Manifest next update: Tue 19 May 2026 23:38:41 +0000 Files and hashes: 1: yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl (hash: iLVJ7Ya61V+Jlv18JSKZYPxsmns347/OC+gdJisHlyI=) 2: FB03729A370111F1AC489D14BF833773.roa (hash: AU9dHXjHqTNme6QysdUZa4PCsHy+4a87mRqErQXJ6iA=) 3: 346A2B4045AE11ECB857890EC4F9AE02.roa (hash: YheXK0UgGEB7Z/3VeNqFrG7TEedt8nnqAV/x4ZuFjYw=) 4: 35A2418C45AE11ECB857890EC4F9AE02.roa (hash: 1S4BYpNOabN3d/LnYoJIPgaMIRT82AJo33zkA94dJ9s=) 5: 52B98FDA46AF11ECB113AA4BC4F9AE02.roa (hash: xY/esRTHmVcSEnmni9qKfYB8APe7aNUaqGzW5UYshQs=) 6: 351AC73E45AE11ECB857890EC4F9AE02.roa (hash: 1fMszEVclnRMOM/POK57IbuTqKPaZ6i1HdvWDw7RSC4=) 7: 9896BA2EB6DE11EC8DB17172C4F9AE02.roa (hash: dG9p093s1Ue0rrA4RBzIOjl2As439gOH8sz6VM6eiUQ=) 8: FC94057A370111F1AC489D14BF833773.roa (hash: JZJalDSQr/IoFea9NxLBWN3ZOZ/DgJ84ZBHO9Nd0bsM=) 9: FBB1514E370111F1AC489D14BF833773.roa (hash: ZkDSUGhIzcmjSgjRJZ9cZlXr5/YHk19HP0IIMCiijuA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 23:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1373 (0x55d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4357, serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A Validity Not Before: May 12 23:38:41 2026 GMT Not After : May 19 23:38:41 2026 GMT Subject: CN=6a03ba02-ceff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:18:74:3e:ad:6b:5e:45:0b:a6:ac:82:c1:e0: c7:56:43:27:b0:c8:68:ec:2b:ed:7e:bb:36:27:12: a0:c2:5d:a9:db:ba:7c:f7:b9:b3:26:a8:09:59:05: 6e:37:92:f2:19:12:0a:fe:f5:2e:71:33:76:eb:bb: ea:7d:bc:ea:be:b7:fa:5b:a6:5d:93:14:d0:29:cb: 4d:67:48:a7:db:63:2b:1e:56:e8:a6:17:30:e6:9b: ba:88:cc:60:6c:5b:39:ce:46:1e:9e:13:82:11:83: d4:19:ce:7b:36:2c:dd:12:0a:75:21:e2:da:13:c3: ec:49:c9:5d:fc:11:7f:3c:f2:34:5a:34:b4:0e:4b: 7d:12:be:7b:9d:c6:c9:af:19:68:0a:03:b3:41:be: cb:94:3a:b8:12:be:9c:69:0d:b0:f7:48:1e:3d:0b: 4c:69:dd:c9:34:4c:62:43:43:da:de:c8:db:35:fd: af:f2:f1:b4:9b:f0:4f:be:2f:08:3c:82:86:c0:e5: 12:62:5c:d1:ed:96:f8:c6:d1:1e:9f:39:ce:fc:31: a9:1e:aa:11:f9:41:57:ea:a5:0f:f5:4c:03:86:a7: d8:09:ab:65:0d:95:1a:a4:ba:31:77:8d:9c:fa:de: 56:d1:8e:ad:0e:1f:82:10:92:48:2e:9f:2a:24:dc: af:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:AA:25:2D:CA:98:20:D2:B9:5A:CD:B7:C6:7D:1D:19:AB:C7:24:06 X509v3 Authority Key Identifier: keyid:CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:f5:e3:4a:d1:f0:ba:d1:e9:33:60:8f:77:58:5b:e7:aa:71: c9:40:8a:f9:19:cb:1c:e6:78:36:9e:86:7a:39:28:1b:2c:1f: c9:22:77:65:65:a3:41:57:ca:8c:72:9b:74:51:4b:8c:37:15: ab:38:d3:27:db:80:8c:6a:77:ab:0a:e2:42:1f:45:46:9f:b0: c3:f4:69:9d:03:d9:41:18:55:a0:88:9f:30:74:40:c5:6d:fe: 15:3c:d4:38:59:cc:f8:8a:c0:ce:d9:d3:df:b8:1e:a3:9a:9a: 81:b9:80:57:07:de:4d:9c:54:e2:bc:0e:79:0a:02:42:8d:4b: 90:f5:5f:fc:d8:a0:05:b7:1d:73:01:dd:01:41:95:fd:4a:dd: f7:3c:36:4b:43:78:dc:ce:f6:8a:04:d7:8e:73:4a:fc:3c:15: 7e:53:81:ed:40:ca:51:0d:35:99:e7:7d:83:ad:bf:1f:c1:4b: 84:ef:27:e2:8d:06:c9:09:ab:da:59:19:a2:fc:b7:ec:13:8e: 55:92:7b:bd:14:2d:51:fc:3d:c6:29:b5:1f:6b:65:ee:d8:a0: ce:b4:f4:d7:17:5a:d4:b3:98:36:8c:35:31:04:c5:87:5a:da: 33:71:43:fe:78:aa:81:ae:35:96:14:c2:2f:53:b0:9e:f6:18: 86:1e:0e:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzNTcxMTAvBgNVBAUTKENCMTY1NjgxMUQwODQ1Nzk5M0U4RDgxQjlGOTc5OERB RDYxNjk3MUEwHhcNMjYwNTEyMjMzODQxWhcNMjYwNTE5MjMzODQxWjAYMRYwFAYD VQQDEw02YTAzYmEwMi1jZWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Rh0Pq1rXkULpqyCweDHVkMnsMho7Cvtfrs2JxKgwl2p27p897mzJqgJWQVu N5LyGRIK/vUucTN267vqfbzqvrf6W6ZdkxTQKctNZ0in22MrHlbophcw5pu6iMxg bFs5zkYenhOCEYPUGc57NizdEgp1IeLaE8PsScld/BF/PPI0WjS0Dkt9Er57ncbJ rxloCgOzQb7LlDq4Er6caQ2w90gePQtMad3JNExiQ0Pa3sjbNf2v8vG0m/BPvi8I PIKGwOUSYlzR7Zb4xtEenznO/DGpHqoR+UFX6qUP9UwDhqfYCatlDZUapLoxd42c +t5W0Y6tDh+CEJJILp8qJNyvAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCCqJS3K mCDSuVrNt8Z9HRmrxyQGMB8GA1UdIwQYMBaAFMsWVoEdCEV5k+jYG5+XmNrWFpca MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDM1Ny9CODRCMTBFQzQ1 QTgxMUVDOEIxNDA1NThDNEY5QUUwMi95eFpXZ1IwSVJYbVQ2TmdibjVlWTJ0WVds eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l4WldnUjBJUlhtVDZOZ2JuNWVZMnRZV2x4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDM1Ny9CODRCMTBFQzQ1QTgxMUVDOEIxNDA1NThDNEY5QUUwMi95eFpXZ1IwSVJY bVQ2TmdibjVlWTJ0WVdseG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs/XjStHwutHpM2CPd1hb56pxyUCK+RnLHOZ4Np6GejkoGywfySJ3ZWWjQVfK jHKbdFFLjDcVqzjTJ9uAjGp3qwriQh9FRp+ww/RpnQPZQRhVoIifMHRAxW3+FTzU OFnM+IrAztnT37geo5qagbmAVwfeTZxU4rwOeQoCQo1LkPVf/NigBbcdcwHdAUGV /Urd9zw2S0N43M72igTXjnNK/DwVflOB7UDKUQ01med9g62/H8FLhO8n4o0GyQmr 2lkZovy37BOOVZJ7vRQtUfw9xim1H2tl7tigzrT01xda1LOYNow1MQTFh1raM3FD /niqga41lhTCL1OwnvYYhh4OFA== -----END CERTIFICATE-----Generated at Wed May 13 11:49:13 2026 by rpki-client