$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft File: crVJ4D_3UKU5edANyx2mRLtSrKw.mft (raw, json) Hash identifier: 8RUrC5HcJPuYjY9QIsg1+BvTcMbjzS1vSBPtmZkUrPg= Subject key identifier: 33:5E:89:F9:CF:65:DA:97:6D:65:57:6F:BA:AB:19:1A:DF:9E:E6:80 Authority key identifier: 72:B5:49:E0:3F:F7:50:A5:39:79:D0:0D:CB:1D:A6:44:BB:52:AC:AC Certificate issuer: /CN=A91BFDE1/serialNumber=72B549E03FF750A53979D00DCB1DA644BB52ACAC Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/crVJ4D_3UKU5edANyx2mRLtSrKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft Manifest number: 28 Signing time: Wed 13 May 2026 08:57:01 +0000 Manifest this update: Wed 13 May 2026 08:57:01 +0000 Manifest next update: Wed 20 May 2026 08:57:01 +0000 Files and hashes: 1: crVJ4D_3UKU5edANyx2mRLtSrKw.crl (hash: oncHCBfu5ZGCATxJCjQFheaaGDoOJ7qzqCL6+WLAlps=) 2: 00B077D6187D11F19A5CAFE7383D8C67.roa (hash: mW9wCzHROG2faL3zV7IIUqQz5qp+XENd/4NuYNOgCwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.crl rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/crVJ4D_3UKU5edANyx2mRLtSrKw.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFDE1, serialNumber=72B549E03FF750A53979D00DCB1DA644BB52ACAC Validity Not Before: May 13 08:57:01 2026 GMT Not After : May 20 08:57:01 2026 GMT Subject: CN=6a043cdd-b6c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9a:ab:2d:2b:ee:5b:97:26:51:9a:fb:85:c5: 03:69:f6:fa:4d:94:28:2f:2a:d2:76:f5:e3:b4:c3: 84:3f:3a:0f:92:73:90:e9:f0:1a:d5:bd:05:7e:09: be:51:b6:92:f3:74:91:5a:43:b3:a1:98:9c:24:9c: 5c:cf:f5:13:f8:d7:1b:ca:71:6a:ee:01:c6:1d:28: 7a:9e:b9:06:07:70:c6:24:43:bc:f5:97:09:f9:ac: 72:25:ed:72:95:41:b4:52:71:43:dd:59:d7:ce:24: af:3e:6c:9f:20:7e:d2:c5:36:62:bc:83:a0:21:5f: d5:fb:1e:e4:3e:37:1a:3b:95:27:f9:b8:88:02:e9: 58:61:24:18:5e:ca:4b:b0:d7:95:55:d6:c6:dc:b7: ed:82:47:f0:ff:d5:d6:69:82:ed:88:42:d3:e4:b6: 77:e5:6d:e5:59:78:ea:1a:cf:1f:7c:70:9a:62:2c: db:17:8e:3d:20:6d:6c:ec:2c:ec:fb:c8:ba:e4:2a: 0a:2f:8d:1f:02:0f:f3:01:7d:80:ea:88:1a:48:e0: f4:38:1b:a9:b1:ce:c1:9b:a7:77:66:85:c0:36:64: 61:82:e4:4f:fc:82:56:9c:1f:0f:99:a9:8a:8b:82: a6:c8:66:5b:c6:c5:d3:b2:db:d5:e1:d3:b5:36:1c: df:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5E:89:F9:CF:65:DA:97:6D:65:57:6F:BA:AB:19:1A:DF:9E:E6:80 X509v3 Authority Key Identifier: keyid:72:B5:49:E0:3F:F7:50:A5:39:79:D0:0D:CB:1D:A6:44:BB:52:AC:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/crVJ4D_3UKU5edANyx2mRLtSrKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:dc:c2:e2:6b:6c:d2:39:35:e5:53:00:c9:b0:97:72:1e:53: b3:0b:71:bd:b3:c8:0e:8a:6c:51:76:2c:c4:f0:69:1c:bd:88: 74:fe:3a:67:32:12:63:27:8c:c7:58:c9:ad:ec:d7:76:3b:d3: 29:2c:a5:0d:79:4c:2a:5f:eb:7f:6b:5c:8b:24:59:ba:e9:a2: 67:3a:bb:85:c2:f9:5f:2d:26:2c:b0:0c:8b:d8:94:14:eb:64: cc:da:9e:0d:48:14:1e:27:18:26:6f:cd:da:45:67:cc:76:26: 4d:99:65:dd:ab:d4:62:be:62:85:5e:b3:c9:1f:82:a7:a7:11: 4d:bb:75:51:12:75:9d:05:32:6c:81:12:c6:75:77:b2:4a:4d: 0f:af:d0:30:0a:e6:e4:ea:59:04:0b:c1:2e:24:4f:49:9a:35: 83:1e:9e:e8:b1:5d:0a:48:71:33:2a:40:dd:45:34:0a:56:90: d8:c3:64:81:e9:7b:91:37:5e:9f:af:87:ef:ea:bb:85:19:25: 77:83:3b:51:1a:1b:ee:00:2a:03:31:42:33:ec:07:4d:8f:31: 9f:01:52:85:63:8a:27:66:64:69:a0:0b:10:d3:41:00:fc:2f: e3:de:6c:fb:70:ed:2d:e3:f1:96:96:9e:6f:7c:8e:01:ef:c5: ac:12:8e:d1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RkRFMTExMC8GA1UEBRMoNzJCNTQ5RTAzRkY3NTBBNTM5NzlEMDBEQ0IxREE2NDRC QjUyQUNBQzAeFw0yNjA1MTMwODU3MDFaFw0yNjA1MjAwODU3MDFaMBgxFjAUBgNV BAMTDTZhMDQzY2RkLWI2YzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDomqstK+5blyZRmvuFxQNp9vpNlCgvKtJ29eO0w4Q/Og+Sc5Dp8BrVvQV+Cb5R tpLzdJFaQ7OhmJwknFzP9RP41xvKcWruAcYdKHqeuQYHcMYkQ7z1lwn5rHIl7XKV QbRScUPdWdfOJK8+bJ8gftLFNmK8g6AhX9X7HuQ+Nxo7lSf5uIgC6VhhJBheykuw 15VV1sbct+2CR/D/1dZpgu2IQtPktnflbeVZeOoazx98cJpiLNsXjj0gbWzsLOz7 yLrkKgovjR8CD/MBfYDqiBpI4PQ4G6mxzsGbp3dmhcA2ZGGC5E/8glacHw+ZqYqL gqbIZlvGxdOy29Xh07U2HN8FAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUM16J+c9l 2pdtZVdvuqsZGt+e5oAwHwYDVR0jBBgwFoAUcrVJ4D/3UKU5edANyx2mRLtSrKww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGREUxLzI4MzEwMENBMTg1 MzExRjE4RTk3MEFEQzI5M0Q4QzY3L2NyVko0RF8zVUtVNWVkQU55eDJtUkx0U3JL dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvY3JWSjREXzNVS1U1ZWRBTnl4Mm1STHRTckt3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG REUxLzI4MzEwMENBMTg1MzExRjE4RTk3MEFEQzI5M0Q4QzY3L2NyVko0RF8zVUtV NWVkQU55eDJtUkx0U3JLdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCC3MLia2zSOTXlUwDJsJdyHlOzC3G9s8gOimxRdizE8GkcvYh0/jpnMhJjJ4zH WMmt7Nd2O9MpLKUNeUwqX+t/a1yLJFm66aJnOruFwvlfLSYssAyL2JQU62TM2p4N SBQeJxgmb83aRWfMdiZNmWXdq9RivmKFXrPJH4KnpxFNu3VREnWdBTJsgRLGdXey Sk0Pr9AwCubk6lkEC8EuJE9JmjWDHp7osV0KSHEzKkDdRTQKVpDYw2SB6XuRN16f r4fv6ruFGSV3gztRGhvuACoDMUIz7AdNjzGfAVKFY4onZmRpoAsQ00EA/C/j3mz7 cO0t4/GWlp5vfI4B78WsEo7R -----END CERTIFICATE-----Generated at Wed May 13 16:22:24 2026 by rpki-client