$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft File: AShwXWnFHg4rB4rtuZiR5_GbTR8.mft (raw, json) Hash identifier: kfn8XIhiForlTCamfEbwUE90BFofoLGr+mu7zWkk+Vk= Subject key identifier: 2E:BC:94:FC:C9:E1:BB:E6:F2:EB:44:1B:CE:7D:81:67:35:2D:D7:CA Authority key identifier: 01:28:70:5D:69:C5:1E:0E:2B:07:8A:ED:B9:98:91:E7:F1:9B:4D:1F Certificate issuer: /CN=A91C0C0B/serialNumber=0128705D69C51E0E2B078AEDB99891E7F19B4D1F Certificate serial: 0C61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft Manifest number: 0C35 Signing time: Tue 12 May 2026 18:49:06 +0000 Manifest this update: Tue 12 May 2026 18:49:05 +0000 Manifest next update: Tue 19 May 2026 18:49:05 +0000 Files and hashes: 1: AShwXWnFHg4rB4rtuZiR5_GbTR8.crl (hash: V+MQt7JzVJddflHUS/ae0qpkOsY0YuHMkota8AunUvc=) 2: E85B23282DF211EAA63F5D60C4F9AE02.roa (hash: EuY5ohXxwCb20yL/oZ+Bf40RR9HQ+u8RzxEp5n6p+No=) 3: 71E30CDCC4ED11EAA1C5766AC4F9AE02.roa (hash: 7N0LlMCapbNJ9KXikjeWXJKbiREpp9frRRVKC1Mylhc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.crl rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:49:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3169 (0xc61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0C0B, serialNumber=0128705D69C51E0E2B078AEDB99891E7F19B4D1F Validity Not Before: May 12 18:49:05 2026 GMT Not After : May 19 18:49:05 2026 GMT Subject: CN=6a037621-67e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6d:90:f7:8f:8a:28:04:ae:90:55:a7:a2:cc: 1e:f6:f4:db:89:a3:a5:5a:dd:e1:77:9c:1c:ab:f0: e6:5f:62:95:f4:c8:9c:26:a6:21:08:24:d6:a7:0e: 5e:fc:85:dc:1f:e4:c9:fd:c0:7c:fb:e8:5e:8a:08: 44:11:a3:ec:13:0e:f7:87:e5:93:5e:91:e5:13:f8: cc:79:41:f3:e4:0e:88:17:47:d8:7f:2e:2f:da:48: 48:07:90:b7:8c:72:d4:1e:1c:91:f3:a1:04:87:88: f3:16:2f:69:a8:4f:1e:5a:25:e6:70:a0:12:6c:b3: 63:1f:26:77:90:27:7d:64:9d:3d:14:20:8f:97:a3: 6e:6f:f1:66:8f:d1:82:6f:15:14:3c:63:a9:f0:ad: 15:4d:07:f0:41:0b:61:a5:89:30:50:f9:80:d0:06: e7:7b:f8:17:0f:53:79:d7:ac:4b:dc:f6:dc:d9:db: 33:de:75:0a:d0:cd:02:fd:ad:ff:41:12:04:95:09: fe:7f:98:68:3c:68:13:8a:9f:96:61:fe:78:47:c3: 39:fa:0d:79:c5:f0:13:4d:c9:30:19:04:56:77:b3: a5:ba:a3:9b:0e:56:3c:08:1d:ec:b5:1a:da:dc:1b: bc:e1:06:ea:25:e1:75:67:ca:03:6a:bf:6e:9d:63: da:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:BC:94:FC:C9:E1:BB:E6:F2:EB:44:1B:CE:7D:81:67:35:2D:D7:CA X509v3 Authority Key Identifier: keyid:01:28:70:5D:69:C5:1E:0E:2B:07:8A:ED:B9:98:91:E7:F1:9B:4D:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AShwXWnFHg4rB4rtuZiR5_GbTR8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C0B/4459448C2C6A11EA9CECBF4AC4F9AE02/AShwXWnFHg4rB4rtuZiR5_GbTR8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:62:2d:a3:91:2d:b2:a9:c9:39:1e:24:d5:7f:f0:11:7b:aa: a5:2c:b4:53:58:92:3e:13:53:9e:4d:ce:f3:4f:45:a8:e8:69: 71:aa:c1:f6:95:d7:87:f6:6c:5e:26:ae:d6:af:e0:14:b0:aa: f5:27:a6:63:34:6a:d0:63:a6:6c:cc:8e:90:00:e2:da:75:1a: a9:99:5d:21:13:bd:91:90:77:3b:43:39:97:b7:a0:58:47:5f: 37:20:b3:63:de:f8:b6:88:24:08:5b:8a:92:53:d4:ea:e2:f6: ff:7b:d9:6b:05:d2:80:01:23:25:ba:17:cc:89:8c:1d:cf:ed: 33:2a:1e:ff:cb:9c:2d:28:98:2a:d4:0e:98:33:42:86:3b:3a: df:19:61:07:34:a1:c6:8f:fe:19:ad:99:f5:ea:05:a3:b4:96: 4c:47:5b:ab:b5:e7:0f:ac:6d:91:15:3b:2f:fe:87:c7:de:6a: 71:45:2d:5f:f3:9e:f3:e9:f2:43:0a:0b:fe:d8:6f:17:13:a5: 22:d2:74:9e:1d:14:34:3e:8e:da:75:fa:5b:66:34:27:79:09: df:52:79:25:e2:aa:c6:15:a7:a7:56:6c:22:a8:9d:54:a9:0a: d0:c8:2d:24:6b:8c:d0:c1:cf:bc:30:a6:23:d3:30:19:7f:a8: 2e:8a:b5:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDMEIxMTAvBgNVBAUTKDAxMjg3MDVENjlDNTFFMEUyQjA3OEFFREI5OTg5MUU3 RjE5QjREMUYwHhcNMjYwNTEyMTg0OTA1WhcNMjYwNTE5MTg0OTA1WjAYMRYwFAYD VQQDEw02YTAzNzYyMS02N2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq22Q94+KKASukFWnoswe9vTbiaOlWt3hd5wcq/DmX2KV9MicJqYhCCTWpw5e /IXcH+TJ/cB8++heighEEaPsEw73h+WTXpHlE/jMeUHz5A6IF0fYfy4v2khIB5C3 jHLUHhyR86EEh4jzFi9pqE8eWiXmcKASbLNjHyZ3kCd9ZJ09FCCPl6Nub/Fmj9GC bxUUPGOp8K0VTQfwQQthpYkwUPmA0Abne/gXD1N516xL3Pbc2dsz3nUK0M0C/a3/ QRIElQn+f5hoPGgTip+WYf54R8M5+g15xfATTckwGQRWd7OluqObDlY8CB3stRra 3Bu84QbqJeF1Z8oDar9unWPa7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC68lPzJ 4bvm8utEG859gWc1LdfKMB8GA1UdIwQYMBaAFAEocF1pxR4OKweK7bmYkefxm00f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEMwQi80NDU5NDQ4QzJD NkExMUVBOUNFQ0JGNEFDNEY5QUUwMi9BU2h3WFduRkhnNHJCNHJ0dVppUjVfR2JU UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FTaHdYV25GSGc0ckI0cnR1WmlSNV9HYlRSOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEMwQi80NDU5NDQ4QzJDNkExMUVBOUNFQ0JGNEFDNEY5QUUwMi9BU2h3WFduRkhn NHJCNHJ0dVppUjVfR2JUUjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUGIto5EtsqnJOR4k1X/wEXuqpSy0U1iSPhNTnk3O809FqOhpcarB9pXXh/Zs Xiau1q/gFLCq9SemYzRq0GOmbMyOkADi2nUaqZldIRO9kZB3O0M5l7egWEdfNyCz Y974togkCFuKklPU6uL2/3vZawXSgAEjJboXzImMHc/tMyoe/8ucLSiYKtQOmDNC hjs63xlhBzShxo/+Ga2Z9eoFo7SWTEdbq7XnD6xtkRU7L/6Hx95qcUUtX/Oe8+ny QwoL/thvFxOlItJ0nh0UND6O2nX6W2Y0J3kJ31J5JeKqxhWnp1ZsIqidVKkK0Mgt JGuM0MHPvDCmI9MwGX+oLoq1og== -----END CERTIFICATE-----Generated at Wed May 13 05:19:54 2026 by rpki-client