$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft File: TUBtTrGE1mpOLekA_Ux66lyccVk.mft (raw, json) Hash identifier: GGwvqYxsvlKAgFea6u+d4fM43VLEXdj3q13TR0VGYTI= Subject key identifier: F2:39:26:13:B9:27:41:AF:1A:20:55:43:1F:A6:2E:6E:2D:09:F6:3E Authority key identifier: 4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59 Certificate issuer: /CN=A91C05E4/serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159 Certificate serial: 022C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft Manifest number: 0226 Signing time: Wed 13 May 2026 02:46:58 +0000 Manifest this update: Wed 13 May 2026 02:46:57 +0000 Manifest next update: Wed 20 May 2026 02:46:57 +0000 Files and hashes: 1: TUBtTrGE1mpOLekA_Ux66lyccVk.crl (hash: k69Iyc7l/N5SVd6ovCLrhQpTL9cCwWzrUKCkyfiEf7E=) 2: 91BD6980054A11EEAC0B1484C4F9AE02.roa (hash: LTD30aegM2n/FIPS7PJPfAtlPCR/CQg1h9hsg7fN65E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 556 (0x22c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C05E4, serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159 Validity Not Before: May 13 02:46:57 2026 GMT Not After : May 20 02:46:57 2026 GMT Subject: CN=6a03e621-e240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8a:78:a1:43:c6:5c:40:2a:c4:6e:f1:39:57: 92:02:a9:2a:8d:74:4b:34:b4:55:0f:2b:09:ba:7f: 76:e0:61:ed:22:0c:a0:c9:1e:ef:0d:94:13:4b:81: a9:82:46:d8:fd:34:f6:0f:b6:57:74:b4:d7:de:96: 9e:31:d1:75:80:a9:fc:23:82:f5:f9:ec:b1:5e:62: fb:79:97:ac:d4:5a:b6:ec:57:46:33:a4:7e:0f:5a: 7e:d3:09:43:4e:ef:7f:b9:06:8a:93:2a:b5:27:81: 94:5f:9e:ab:85:13:cf:8f:a5:2d:3c:c0:ff:d2:65: 45:aa:cd:7e:25:7b:f5:72:87:4f:4f:ca:c0:c8:05: 4a:c3:89:fc:51:c2:60:43:c5:fb:80:75:54:ef:a7: 1c:62:39:e8:dd:c9:01:dc:48:42:cc:17:ca:ce:8f: c9:f3:99:3a:4c:05:19:03:80:15:75:66:c2:b7:15: 20:ef:28:40:52:0b:32:ae:fa:2b:fc:70:96:1c:43: 8f:96:fb:f9:45:aa:5c:f1:d1:18:00:18:69:6f:32: 22:7f:87:c9:b0:da:9d:64:6d:7a:8e:d3:ae:bc:2d: 33:14:8f:56:79:d1:5e:42:cd:45:c1:81:d0:f4:57: a8:0a:dc:7b:0d:3a:0b:4e:a6:09:da:e0:36:e3:ee: a4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:39:26:13:B9:27:41:AF:1A:20:55:43:1F:A6:2E:6E:2D:09:F6:3E X509v3 Authority Key Identifier: keyid:4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:4b:a7:b9:b9:89:17:ee:57:c7:06:4c:02:71:81:f6:31:15: 4a:24:9d:14:89:97:c6:8a:53:f2:d9:4c:37:36:f6:b4:c5:ad: 9d:58:24:4c:1b:bd:76:59:9b:fa:b3:90:77:a0:e8:33:04:a8: ca:fd:32:88:28:6a:ca:8d:da:89:69:68:de:c4:7c:74:1c:14: 01:cc:18:f1:27:69:7d:6e:0c:4d:32:ae:6d:15:96:c6:d7:b2: 34:3f:26:e4:fa:c2:1f:8e:ff:dc:9e:af:70:f2:26:97:1e:e9: a1:38:f4:29:b1:96:fd:85:ed:b3:bd:31:17:2f:31:c3:08:80: 03:ad:e3:f3:bf:0f:5f:ee:c2:2e:da:c3:9e:b8:02:1f:dd:ce: ba:7a:f2:67:98:45:3b:94:b7:c2:c9:81:19:3e:19:f6:9f:13: 56:f4:36:51:d8:99:29:2e:39:48:2d:be:fe:f5:8a:31:82:5d: b9:67:43:30:a4:51:97:75:65:2a:2f:97:37:c8:ba:2d:e8:dc: 08:4a:b4:75:75:4b:8a:f9:bf:de:7e:15:a4:68:e7:2a:d6:75: da:b6:68:3d:13:06:f5:f8:87:c2:5d:a9:d7:7d:8d:b2:86:06: 27:da:b0:4c:a2:f5:6b:97:69:15:99:4f:34:b4:74:8d:0b:46: f4:81:9c:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA1RTQxMTAvBgNVBAUTKDRENDA2RDRFQjE4NEQ2NkE0RTJERTkwMEZENEM3QUVB NUM5QzcxNTkwHhcNMjYwNTEzMDI0NjU3WhcNMjYwNTIwMDI0NjU3WjAYMRYwFAYD VQQDEw02YTAzZTYyMS1lMjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYp4oUPGXEAqxG7xOVeSAqkqjXRLNLRVDysJun924GHtIgygyR7vDZQTS4Gp gkbY/TT2D7ZXdLTX3paeMdF1gKn8I4L1+eyxXmL7eZes1Fq27FdGM6R+D1p+0wlD Tu9/uQaKkyq1J4GUX56rhRPPj6UtPMD/0mVFqs1+JXv1codPT8rAyAVKw4n8UcJg Q8X7gHVU76ccYjno3ckB3EhCzBfKzo/J85k6TAUZA4AVdWbCtxUg7yhAUgsyrvor /HCWHEOPlvv5Rapc8dEYABhpbzIif4fJsNqdZG16jtOuvC0zFI9WedFeQs1FwYHQ 9FeoCtx7DToLTqYJ2uA24+6k2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPI5JhO5 J0GvGiBVQx+mLm4tCfY+MB8GA1UdIwQYMBaAFE1AbU6xhNZqTi3pAP1MeupcnHFZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDVFNC83OEE0RDQ0NjA1 NDYxMUVFOTVFRDdBODNDNEY5QUUwMi9UVUJ0VHJHRTFtcE9MZWtBX1V4NjZseWNj VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RVQnRUckdFMW1wT0xla0FfVXg2Nmx5Y2NWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDVFNC83OEE0RDQ0NjA1NDYxMUVFOTVFRDdBODNDNEY5QUUwMi9UVUJ0VHJHRTFt cE9MZWtBX1V4NjZseWNjVmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZEunubmJF+5XxwZMAnGB9jEVSiSdFImXxopT8tlMNzb2tMWtnVgkTBu9dlmb +rOQd6DoMwSoyv0yiChqyo3aiWlo3sR8dBwUAcwY8SdpfW4MTTKubRWWxteyND8m 5PrCH47/3J6vcPImlx7poTj0KbGW/YXts70xFy8xwwiAA63j878PX+7CLtrDnrgC H93OunryZ5hFO5S3wsmBGT4Z9p8TVvQ2UdiZKS45SC2+/vWKMYJduWdDMKRRl3Vl Ki+XN8i6LejcCEq0dXVLivm/3n4VpGjnKtZ12rZoPRMG9fiHwl2p132NsoYGJ9qw TKL1a5dpFZlPNLR0jQtG9IGcPQ== -----END CERTIFICATE-----Generated at Wed May 13 13:14:22 2026 by rpki-client