$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.mft File: suPG96kEVKInRzewUsujXxn11aA.mft (raw, json) Hash identifier: bN+xBlG0RCg9KGpiSu46ZaM3TEoD57J0aaKEtAsiebg= Subject key identifier: 1B:98:43:B0:B6:26:76:33:87:E5:E5:C0:A5:A0:8A:C9:45:F3:0C:AF Authority key identifier: B2:E3:C6:F7:A9:04:54:A2:27:47:37:B0:52:CB:A3:5F:19:F5:D5:A0 Certificate issuer: /CN=A91BFDE1/serialNumber=B2E3C6F7A90454A2274737B052CBA35F19F5D5A0 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/suPG96kEVKInRzewUsujXxn11aA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.mft Manifest number: 29 Signing time: Wed 13 May 2026 08:57:04 +0000 Manifest this update: Wed 13 May 2026 08:57:03 +0000 Manifest next update: Wed 20 May 2026 08:57:03 +0000 Files and hashes: 1: suPG96kEVKInRzewUsujXxn11aA.crl (hash: PbJDk0YJYzqtvIS77l/ZgI3Sy7sL+LptIHbipwUm1bw=) 2: 000FAEF0187D11F19A5CAFE7383D8C67.roa (hash: segqNYyes6EIoWSsGy8Pu8WgYVh2x3RfT/RKs6A99TE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.crl rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/suPG96kEVKInRzewUsujXxn11aA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 08:57:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFDE1, serialNumber=B2E3C6F7A90454A2274737B052CBA35F19F5D5A0 Validity Not Before: May 13 08:57:03 2026 GMT Not After : May 20 08:57:03 2026 GMT Subject: CN=6a043ce0-58b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a4:df:d1:bb:47:7a:38:bf:56:3e:a7:62:be: a9:22:7f:2a:f9:04:cd:f1:7d:10:cc:e6:4f:63:de: 3c:a4:3b:71:87:8c:7b:ac:00:a7:69:ab:52:9a:f8: 9f:2c:3c:1c:ce:f6:a4:79:e1:4f:b7:a3:d2:2b:ae: 5a:73:98:d8:71:82:70:1a:2f:f1:f7:f1:8c:5f:c7: 23:f7:11:27:d3:30:a8:6b:6e:dd:b4:93:40:02:d7: a1:46:12:08:ce:a6:e5:2f:38:a4:b8:8c:57:c4:a8: 05:ce:dd:52:dd:e9:d3:85:21:e3:0f:c7:78:e6:79: 24:26:af:36:04:67:56:0c:70:7a:a7:96:60:c0:9f: e7:44:50:d1:39:3d:54:0b:17:66:90:9b:0e:d5:80: 8e:3b:c7:0f:9d:bb:1d:5b:39:1d:ac:8d:64:cf:d4: 50:4a:58:30:82:ed:58:76:36:1e:f9:e8:08:11:bd: 10:c9:b7:85:bb:d1:9c:bf:d5:8b:21:23:fa:34:43: d6:90:91:c7:63:3a:32:4e:a8:43:df:05:40:2f:13: 76:81:fa:7c:c1:de:cc:c3:91:e6:64:b6:f4:ad:97: a0:1c:25:a3:b1:14:e7:60:6e:db:42:ae:b8:af:28: e9:02:f3:e5:af:a9:f3:c7:e3:a6:47:d8:25:12:6e: 0e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:98:43:B0:B6:26:76:33:87:E5:E5:C0:A5:A0:8A:C9:45:F3:0C:AF X509v3 Authority Key Identifier: keyid:B2:E3:C6:F7:A9:04:54:A2:27:47:37:B0:52:CB:A3:5F:19:F5:D5:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/suPG96kEVKInRzewUsujXxn11aA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/0D731DB8185311F18E970ADC293D8C67/suPG96kEVKInRzewUsujXxn11aA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:fb:b8:29:16:28:58:b5:b7:e1:55:2b:f3:8b:d3:52:16:8a: 25:15:77:53:aa:e5:4a:19:37:bb:fd:7b:6c:2a:bd:e7:7f:36: 97:22:2a:cc:f6:fe:2b:7f:7f:77:5a:e2:a3:58:cd:a3:68:1a: 33:3e:42:e2:46:a0:ec:87:35:d7:c5:58:85:4f:f3:b2:1f:c9: 5b:8e:36:32:58:b3:8e:b1:0f:48:67:ad:a0:f5:96:50:2a:f1: ce:bf:5b:ce:9b:ad:41:c4:39:9a:a7:75:49:16:b6:4b:33:00: 4b:2d:4c:43:3e:28:1e:18:76:8c:3e:c8:17:71:72:82:38:e5: 6b:be:3d:c3:a9:ae:d6:8f:7a:a1:2b:63:d1:52:89:74:3e:5e: 7c:7a:bd:fc:e5:89:b6:dc:49:b3:81:4e:61:0d:6b:6d:c2:25: cc:08:7e:80:26:26:3b:84:f0:a4:c8:6d:d6:fd:a5:d8:b8:3f: d9:48:3a:d5:6d:86:98:f8:a3:77:b3:67:43:60:9f:e3:f5:ad: b2:74:11:a1:77:3b:14:43:ab:21:1f:b3:4d:22:02:71:07:15: 8c:19:1b:9a:72:2e:81:14:e8:15:a5:22:1d:eb:e2:01:2d:7f: 0d:d0:d0:99:fa:ff:f5:2e:0b:04:6b:53:44:1b:4c:9d:81:4e: 75:7f:30:bc -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RkRFMTExMC8GA1UEBRMoQjJFM0M2RjdBOTA0NTRBMjI3NDczN0IwNTJDQkEzNUYx OUY1RDVBMDAeFw0yNjA1MTMwODU3MDNaFw0yNjA1MjAwODU3MDNaMBgxFjAUBgNV BAMTDTZhMDQzY2UwLTU4YjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPpN/Ru0d6OL9WPqdivqkifyr5BM3xfRDM5k9j3jykO3GHjHusAKdpq1Ka+J8s PBzO9qR54U+3o9IrrlpzmNhxgnAaL/H38YxfxyP3ESfTMKhrbt20k0AC16FGEgjO puUvOKS4jFfEqAXO3VLd6dOFIeMPx3jmeSQmrzYEZ1YMcHqnlmDAn+dEUNE5PVQL F2aQmw7VgI47xw+dux1bOR2sjWTP1FBKWDCC7Vh2Nh756AgRvRDJt4W70Zy/1Ysh I/o0Q9aQkcdjOjJOqEPfBUAvE3aB+nzB3szDkeZktvStl6AcJaOxFOdgbttCrriv KOkC8+WvqfPH46ZH2CUSbg6NAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUG5hDsLYm djOH5eXApaCKyUXzDK8wHwYDVR0jBBgwFoAUsuPG96kEVKInRzewUsujXxn11aAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGREUxLzBENzMxREI4MTg1 MzExRjE4RTk3MEFEQzI5M0Q4QzY3L3N1UEc5NmtFVktJblJ6ZXdVc3VqWHhuMTFh QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc3VQRzk2a0VWS0luUnpld1VzdWpYeG4xMWFBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG REUxLzBENzMxREI4MTg1MzExRjE4RTk3MEFEQzI5M0Q4QzY3L3N1UEc5NmtFVktJ blJ6ZXdVc3VqWHhuMTFhQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAs+7gpFihYtbfhVSvzi9NSFoolFXdTquVKGTe7/XtsKr3nfzaXIirM9v4rf393 WuKjWM2jaBozPkLiRqDshzXXxViFT/OyH8lbjjYyWLOOsQ9IZ62g9ZZQKvHOv1vO m61BxDmap3VJFrZLMwBLLUxDPigeGHaMPsgXcXKCOOVrvj3Dqa7Wj3qhK2PRUol0 Pl58er385Ym23EmzgU5hDWttwiXMCH6AJiY7hPCkyG3W/aXYuD/ZSDrVbYaY+KN3 s2dDYJ/j9a2ydBGhdzsUQ6shH7NNIgJxBxWMGRuaci6BFOgVpSId6+IBLX8N0NCZ +v/1LgsEa1NEG0ydgU51fzC8 -----END CERTIFICATE-----Generated at Wed May 13 19:18:01 2026 by rpki-client