$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft File: tksRCOmO7If7awwovgFkXHCLSsU.mft (raw, json) Hash identifier: bDkBfabrofwmCEnP5JOEhoBM7H2h8sopQUzG36pAqtY= Subject key identifier: 31:FF:1D:9D:68:01:48:84:26:17:F4:5E:2E:97:CA:AE:19:69:C1:12 Authority key identifier: B6:4B:11:08:E9:8E:EC:87:FB:6B:0C:28:BE:01:64:5C:70:8B:4A:C5 Certificate issuer: /CN=A91BAE17/serialNumber=B64B1108E98EEC87FB6B0C28BE01645C708B4AC5 Certificate serial: 2A12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft Manifest number: 29FA Signing time: Tue 12 May 2026 15:35:31 +0000 Manifest this update: Tue 12 May 2026 15:35:30 +0000 Manifest next update: Tue 19 May 2026 15:35:30 +0000 Files and hashes: 1: tksRCOmO7If7awwovgFkXHCLSsU.crl (hash: hEX4TWfTqQpo/PjWxyVwqlntdr+MNQxsSdDjYISfj7g=) 2: 98845C5C54EC11E791C3F825C4F9AE02.roa (hash: EtduFqwWmltWsbxhdyqETTLdxGQaxld6Ct3ig7z5qNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.crl rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 15:35:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10770 (0x2a12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAE17, serialNumber=B64B1108E98EEC87FB6B0C28BE01645C708B4AC5 Validity Not Before: May 12 15:35:30 2026 GMT Not After : May 19 15:35:30 2026 GMT Subject: CN=6a0348c2-691f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:62:61:33:a7:19:e6:86:dd:62:b6:e9:60:88: be:71:55:95:58:22:41:b1:ab:8e:78:64:0a:64:fc: 5d:2d:1a:7b:3e:f4:c6:c5:6a:36:1b:73:3f:98:7c: 5e:3f:e4:53:cc:24:1f:41:2d:41:8e:2c:aa:6c:48: d4:1d:3f:75:cb:90:ef:2e:d5:7c:f1:eb:ce:a2:5f: 55:f4:6e:ce:d1:9c:d1:36:12:28:7f:19:27:88:ee: c7:c4:61:a0:3f:ac:b4:a5:71:d6:cb:a6:f7:35:2b: 3d:54:3b:e1:5f:2c:15:cc:1c:a8:cd:1f:f8:bf:9d: 66:39:c8:ed:df:72:09:16:1e:94:56:82:2f:da:89: 32:91:33:7b:c0:ec:aa:09:c5:8d:b0:4c:22:f0:44: 28:3f:2a:64:7a:2c:fb:6e:86:5e:7c:64:c8:8f:f3: 0c:1f:a9:63:97:1e:d0:e3:e6:e9:a3:a2:2e:51:9c: 76:ea:64:33:4a:d5:d8:c5:12:f2:5a:d5:e4:35:35: 89:b9:a8:ca:7f:1d:b9:f0:a3:99:95:09:ea:c3:33: 64:07:6e:90:b0:77:e9:b3:b2:f6:f0:9a:ea:6b:da: 65:6c:9b:a6:08:68:5e:41:ef:a2:64:b0:de:f6:10: b7:e7:a2:8f:37:48:82:10:d3:9c:af:15:b7:94:bb: 4d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FF:1D:9D:68:01:48:84:26:17:F4:5E:2E:97:CA:AE:19:69:C1:12 X509v3 Authority Key Identifier: keyid:B6:4B:11:08:E9:8E:EC:87:FB:6B:0C:28:BE:01:64:5C:70:8B:4A:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tksRCOmO7If7awwovgFkXHCLSsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE17/445EE09458BD11E49383AB76C4F9AE02/tksRCOmO7If7awwovgFkXHCLSsU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:96:8a:12:4a:80:9b:5c:6b:15:22:82:05:69:da:ba:43:46: bd:d8:ed:2a:a3:06:d6:ad:18:50:92:ec:29:3e:6a:48:8c:47: 08:68:b9:2e:30:d4:92:bb:9d:66:86:4e:e1:e3:9b:d4:95:ff: be:33:96:50:b2:f8:19:9a:a9:dd:e2:13:fd:c8:64:06:c3:c7: 6e:8e:25:17:1d:43:3b:6e:05:0e:89:60:51:16:f1:8c:8a:e2: f6:2a:f6:09:72:4e:e5:1b:98:da:0e:bc:af:a9:9b:3e:a5:e9: df:4b:2b:af:f4:8a:5a:18:36:df:d7:a5:41:e9:94:ef:86:14: 30:dc:16:2f:09:15:34:63:96:ea:f1:4c:81:f1:a7:17:cd:2c: ce:24:b9:f1:00:18:b4:24:7e:0b:0e:ad:82:c2:67:51:1b:64: 18:11:76:db:ed:d5:54:80:c5:5a:e7:a6:12:1e:82:51:ea:68: d5:a0:cc:65:a6:80:65:c0:78:ea:10:5f:3f:04:fd:e9:fe:4e: 74:b9:ce:0d:49:36:8f:47:c2:a8:f4:a6:59:db:ff:fb:47:5c: ac:8e:c5:57:f9:b0:87:78:99:2e:7f:52:50:b5:3f:e2:dd:25: 23:b8:d6:20:fa:4e:55:76:55:89:89:ce:97:75:03:a7:aa:c2: a3:85:ce:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFMTcxMTAvBgNVBAUTKEI2NEIxMTA4RTk4RUVDODdGQjZCMEMyOEJFMDE2NDVD NzA4QjRBQzUwHhcNMjYwNTEyMTUzNTMwWhcNMjYwNTE5MTUzNTMwWjAYMRYwFAYD VQQDEw02YTAzNDhjMi02OTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GJhM6cZ5obdYrbpYIi+cVWVWCJBsauOeGQKZPxdLRp7PvTGxWo2G3M/mHxe P+RTzCQfQS1BjiyqbEjUHT91y5DvLtV88evOol9V9G7O0ZzRNhIofxkniO7HxGGg P6y0pXHWy6b3NSs9VDvhXywVzByozR/4v51mOcjt33IJFh6UVoIv2okykTN7wOyq CcWNsEwi8EQoPypkeiz7boZefGTIj/MMH6ljlx7Q4+bpo6IuUZx26mQzStXYxRLy WtXkNTWJuajKfx258KOZlQnqwzNkB26QsHfps7L28Jrqa9plbJumCGheQe+iZLDe 9hC356KPN0iCENOcrxW3lLtNCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDH/HZ1o AUiEJhf0Xi6Xyq4ZacESMB8GA1UdIwQYMBaAFLZLEQjpjuyH+2sMKL4BZFxwi0rF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUUxNy80NDVFRTA5NDU4 QkQxMUU0OTM4M0FCNzZDNEY5QUUwMi90a3NSQ09tTzdJZjdhd3dvdmdGa1hIQ0xT c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rrc1JDT21PN0lmN2F3d292Z0ZrWEhDTFNzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUUxNy80NDVFRTA5NDU4QkQxMUU0OTM4M0FCNzZDNEY5QUUwMi90a3NSQ09tTzdJ Zjdhd3dvdmdGa1hIQ0xTc1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXZaKEkqAm1xrFSKCBWnaukNGvdjtKqMG1q0YUJLsKT5qSIxHCGi5LjDUkrud ZoZO4eOb1JX/vjOWULL4GZqp3eIT/chkBsPHbo4lFx1DO24FDolgURbxjIri9ir2 CXJO5RuY2g68r6mbPqXp30srr/SKWhg239elQemU74YUMNwWLwkVNGOW6vFMgfGn F80sziS58QAYtCR+Cw6tgsJnURtkGBF22+3VVIDFWuemEh6CUepo1aDMZaaAZcB4 6hBfPwT96f5OdLnODUk2j0fCqPSmWdv/+0dcrI7FV/mwh3iZLn9SULU/4t0lI7jW IPpOVXZViYnOl3UDp6rCo4XOig== -----END CERTIFICATE-----Generated at Wed May 13 05:49:12 2026 by rpki-client