$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft File: C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft (raw, json) Hash identifier: N4pYdX8UzjZRKN5PA5mayX1hcnssnEoEuovzn0UEVcA= Subject key identifier: 44:14:6D:C7:2E:A5:BF:20:5D:5E:A0:C8:53:EE:E1:73:8C:38:17:94 Authority key identifier: 0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45 Certificate issuer: /CN=A91B43F4/serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45 Certificate serial: 2567 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft Manifest number: 254F Signing time: Tue 12 May 2026 15:45:22 +0000 Manifest this update: Tue 12 May 2026 15:45:21 +0000 Manifest next update: Tue 19 May 2026 15:45:21 +0000 Files and hashes: 1: C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl (hash: RN//QcSYx0wPSZol8ktrqoYfkw0CViqQxqeZYMjuVec=) 2: EBC23D9A041E11ECA959B779C4F9AE02.roa (hash: kNgeshEQoMHZ0sW+i2npHyw2h62/78Or0q6kxwJMwVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 15:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9575 (0x2567) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43F4, serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45 Validity Not Before: May 12 15:45:21 2026 GMT Not After : May 19 15:45:21 2026 GMT Subject: CN=6a034b11-ed58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cf:50:6f:32:06:bd:9d:d8:29:9c:dd:f4:87: 55:b3:27:64:82:1b:4f:eb:c8:cd:bc:20:29:76:04: c1:a5:6d:f6:53:48:e9:0e:eb:28:95:71:b1:b2:c1: 0b:04:9f:4b:75:2d:06:03:2a:65:26:cc:b0:0f:b6: 4c:3d:81:f4:af:8b:25:f6:ae:c7:fa:5b:52:2e:9e: 72:15:83:84:49:a5:36:5c:70:ed:aa:fb:92:7d:f5: bd:51:b1:d5:70:c5:d0:82:41:b9:ee:2c:f2:45:b6: 15:f8:21:c4:b7:fe:22:be:74:9b:11:f0:f3:14:46: 1e:49:2e:b6:1d:60:98:1a:70:fb:97:90:b7:f8:d9: f1:15:de:43:4d:32:2b:21:73:44:92:de:51:89:ba: 92:7b:ed:a1:c4:22:99:5b:e0:34:22:e8:ba:2c:98: 77:08:d0:a0:e1:ea:a8:51:de:24:1d:20:28:c6:e1: 27:41:bf:fd:f9:b1:ed:31:de:41:9e:84:9b:ca:68: d4:f9:c1:e5:dc:bf:19:37:9e:c0:b3:64:f0:0a:26: fb:3a:65:7c:0e:cd:1d:e3:20:bb:41:6b:7e:16:3c: a1:86:f2:76:43:2c:07:af:17:00:e0:83:98:ab:5c: 9a:c7:a7:af:90:67:45:2f:2c:ad:09:87:7e:a5:da: 85:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:14:6D:C7:2E:A5:BF:20:5D:5E:A0:C8:53:EE:E1:73:8C:38:17:94 X509v3 Authority Key Identifier: keyid:0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ae:7c:6b:42:cb:80:fa:7f:74:50:d3:12:59:7a:57:d1:4c: 51:97:15:a0:b4:a6:a4:c5:1a:8f:26:d6:9f:6f:77:bb:77:e1: e5:e6:8a:bb:a3:71:6d:90:a4:a5:c0:14:72:7f:77:da:d0:03: ba:16:ad:d2:d8:74:89:40:73:33:24:1d:d4:66:d2:aa:e5:a2: c2:d4:f4:6a:db:b7:74:3f:38:75:cf:7f:69:b1:30:f1:16:eb: b2:74:07:4b:29:af:d9:ff:a4:c6:cd:da:c0:ae:8b:f6:a7:9b: 7d:3b:51:a5:15:74:67:b3:94:91:78:0e:cc:19:13:d9:05:a9: 9f:b5:28:85:f2:c1:f5:4f:85:ea:13:73:cf:16:77:0d:30:96: e7:c0:57:73:eb:1c:85:6d:00:1d:3f:d4:7a:b4:13:74:b7:76: b7:52:2b:e5:09:7b:03:ed:12:14:b2:51:28:c6:b3:cd:87:09: e1:e0:a3:7e:49:8a:bf:2f:94:d2:0a:af:70:aa:a3:b2:75:41: 70:d8:e3:7d:f8:54:e9:8b:27:43:9d:58:e5:40:10:c6:56:0f: 18:e0:ee:c2:5c:db:b4:95:3a:47:db:5e:62:29:c8:09:cc:00: 02:02:c9:67:3a:d5:44:40:06:b3:a9:d7:0d:56:b8:c7:24:cc: c2:ed:80:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRjQxMTAvBgNVBAUTKDBCNjNFNjNBNUZBM0IyRTNDQ0I5OTMwRThGNkM4Q0VD QzI0NThCNDUwHhcNMjYwNTEyMTU0NTIxWhcNMjYwNTE5MTU0NTIxWjAYMRYwFAYD VQQDEw02YTAzNGIxMS1lZDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr89QbzIGvZ3YKZzd9IdVsydkghtP68jNvCApdgTBpW32U0jpDusolXGxssEL BJ9LdS0GAyplJsywD7ZMPYH0r4sl9q7H+ltSLp5yFYOESaU2XHDtqvuSffW9UbHV cMXQgkG57izyRbYV+CHEt/4ivnSbEfDzFEYeSS62HWCYGnD7l5C3+NnxFd5DTTIr IXNEkt5RibqSe+2hxCKZW+A0Iui6LJh3CNCg4eqoUd4kHSAoxuEnQb/9+bHtMd5B noSbymjU+cHl3L8ZN57As2TwCib7OmV8Ds0d4yC7QWt+FjyhhvJ2QywHrxcA4IOY q1yax6evkGdFLyytCYd+pdqFcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEQUbccu pb8gXV6gyFPu4XOMOBeUMB8GA1UdIwQYMBaAFAtj5jpfo7LjzLmTDo9sjOzCRYtF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNGNC8xN0FDMkE3MDQx OUMxMUU1ODM1RkQxODNDNEY5QUUwMi9DMlBtT2wtanN1UE11Wk1PajJ5TTdNSkZp MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyUG1PbC1qc3VQTXVaTU9qMnlNN01KRmkwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNGNC8xN0FDMkE3MDQxOUMxMUU1ODM1RkQxODNDNEY5QUUwMi9DMlBtT2wtanN1 UE11Wk1PajJ5TTdNSkZpMFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX658a0LLgPp/dFDTEll6V9FMUZcVoLSmpMUajybWn293u3fh5eaKu6NxbZCk pcAUcn932tADuhat0th0iUBzMyQd1GbSquWiwtT0atu3dD84dc9/abEw8RbrsnQH Symv2f+kxs3awK6L9qebfTtRpRV0Z7OUkXgOzBkT2QWpn7UohfLB9U+F6hNzzxZ3 DTCW58BXc+schW0AHT/UerQTdLd2t1Ir5Ql7A+0SFLJRKMazzYcJ4eCjfkmKvy+U 0gqvcKqjsnVBcNjjffhU6YsnQ51Y5UAQxlYPGODuwlzbtJU6R9teYinICcwAAgLJ ZzrVREAGs6nXDVa4xyTMwu2AlA== -----END CERTIFICATE-----Generated at Wed May 13 03:08:18 2026 by rpki-client