$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft File: 5CANRK2dbstocvZTqVhD-yfYR6Q.mft (raw, json) Hash identifier: b8m6BLDgSVRJGeZPS1taX7SRPja1XAFy3YSuxaPIFys= Subject key identifier: 1B:74:BF:FA:CE:D3:87:46:2F:94:30:0B:33:26:6E:8B:9F:B8:16:85 Authority key identifier: E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 Certificate issuer: /CN=A91C0D37/serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Certificate serial: 0201 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft Manifest number: 01F6 Signing time: Mon 11 May 2026 03:16:23 +0000 Manifest this update: Mon 11 May 2026 03:16:22 +0000 Manifest next update: Mon 18 May 2026 03:16:22 +0000 Files and hashes: 1: 5CANRK2dbstocvZTqVhD-yfYR6Q.crl (hash: 8TeHO44VB+nptCB4+EAO1dX3zXQUT4x8CIQ7YDg+qn4=) 2: 0099AE56536911EE8594503BC4F9AE02.roa (hash: A3g1MvapK720MR4guCb5ZHynm0vdBJ498DzGR8wq4fU=) 3: C7C45DD643F611EF84151D6FC4F9AE02.roa (hash: eCz90crmLyyT4eJR0NDAlMlvL0AfXIIanbDH55qxfQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 03:16:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 513 (0x201) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37, serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Validity Not Before: May 11 03:16:22 2026 GMT Not After : May 18 03:16:22 2026 GMT Subject: CN=6a014a07-8ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ef:c8:98:e5:6a:76:a3:3a:21:ce:71:2e:46: f7:bb:35:7c:c0:dd:5d:70:47:a3:d5:f9:58:6f:f2: 5f:79:35:1d:bd:01:9a:7c:54:37:bb:ab:27:44:cc: c5:2e:39:9c:66:c0:d6:dc:4b:c7:b1:e9:12:26:c2: 3b:e3:cc:30:a5:6e:b1:18:ba:ca:86:4b:20:93:59: e2:d1:ef:4c:54:6b:82:56:3a:33:a1:d0:b5:44:73: a2:8f:64:cf:90:63:c4:76:5e:17:43:4c:e5:65:8f: 6f:b2:92:cc:cd:39:3f:03:23:aa:00:0e:cd:6e:a4: 95:e8:c6:8f:c9:6e:84:9d:aa:8c:2c:5d:36:4c:f5: 9e:fe:46:cf:7d:e9:94:44:cd:23:da:23:2d:a0:03: 68:0d:b0:2d:3c:c6:03:22:cf:6a:46:54:8d:f6:8f: 3c:e3:3e:ef:62:39:53:57:76:1c:fd:04:d6:1d:69: 8d:b9:f9:ef:93:06:f2:1f:ce:7f:4c:33:fa:ad:0e: ba:a3:dd:e1:92:05:be:ef:b7:aa:a1:81:d3:65:87: c6:1d:62:d5:7e:1c:5f:93:0a:67:d1:c4:98:04:b0: 77:7e:3c:a0:64:eb:94:af:a7:51:69:80:80:42:ae: 84:4f:28:3b:59:99:9a:ee:e0:1f:c6:2a:f3:dc:60: bb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:74:BF:FA:CE:D3:87:46:2F:94:30:0B:33:26:6E:8B:9F:B8:16:85 X509v3 Authority Key Identifier: keyid:E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:08:1c:d8:da:a2:7d:07:df:fd:82:91:5b:c8:6b:d6:5d:f7: 9c:77:4e:3c:8f:1d:53:da:22:ac:2c:34:6a:81:e9:19:e0:8a: d0:92:8f:a1:69:a5:18:f8:6c:03:75:84:15:fb:79:a1:15:69: a2:ad:c2:ef:02:42:4d:31:44:e1:28:c2:8b:87:ab:ab:08:cd: 2a:28:71:dd:59:a2:40:df:a6:da:ea:91:da:a0:6f:23:9f:c4: ad:9d:1a:23:21:e5:b7:f5:32:38:52:c3:fe:2c:63:a6:20:04: 0b:c4:6a:fd:2d:62:fb:e7:24:48:9b:83:82:f6:ca:f7:2f:0a: 25:9b:cf:f2:49:d4:17:b3:40:27:68:fb:21:b0:41:b5:1b:14: 39:17:02:8d:6f:c2:1e:e0:6f:ec:7c:b7:76:34:7f:14:2c:5a: 61:17:f2:2d:3e:67:23:3a:27:c0:6f:a5:56:4c:70:e9:16:0f: cd:f1:c1:48:c2:1f:ce:70:20:1e:3c:4e:55:39:2b:e0:fc:cf: 70:ac:93:0d:f0:f3:d0:55:3b:cd:dd:47:94:f4:bf:7d:f4:9b: f9:4b:17:5f:73:f7:c3:71:09:49:fa:fc:f6:d2:89:a9:01:e1: 05:bc:d7:cb:3a:c7:55:90:17:03:e5:00:73:3f:52:74:5a:31: 0f:de:43:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKEU0MjAwRDQ0QUQ5RDZFQ0I2ODcyRjY1M0E5NTg0M0ZC MjdEODQ3QTQwHhcNMjYwNTExMDMxNjIyWhcNMjYwNTE4MDMxNjIyWjAYMRYwFAYD VQQDEw02YTAxNGEwNy04ZmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhO/ImOVqdqM6Ic5xLkb3uzV8wN1dcEej1flYb/JfeTUdvQGafFQ3u6snRMzF LjmcZsDW3EvHsekSJsI748wwpW6xGLrKhksgk1ni0e9MVGuCVjozodC1RHOij2TP kGPEdl4XQ0zlZY9vspLMzTk/AyOqAA7NbqSV6MaPyW6EnaqMLF02TPWe/kbPfemU RM0j2iMtoANoDbAtPMYDIs9qRlSN9o884z7vYjlTV3Yc/QTWHWmNufnvkwbyH85/ TDP6rQ66o93hkgW+77eqoYHTZYfGHWLVfhxfkwpn0cSYBLB3fjygZOuUr6dRaYCA Qq6ETyg7WZma7uAfxirz3GC7wwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBt0v/rO 04dGL5QwCzMmboufuBaFMB8GA1UdIwQYMBaAFOQgDUStnW7LaHL2U6lYQ/sn2Eek MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wNUVFQ0Q4NjUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJzdG9jdlpUcVZoRC15ZllS NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVDQU5SSzJkYnN0b2N2WlRxVmhELXlmWVI2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEQzNy8wNUVFQ0Q4NjUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJz dG9jdlpUcVZoRC15ZllSNlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADAgc2NqifQff/YKRW8hr1l33nHdOPI8dU9oirCw0aoHpGeCK0JKPoWmlGPhs A3WEFft5oRVpoq3C7wJCTTFE4SjCi4erqwjNKihx3VmiQN+m2uqR2qBvI5/ErZ0a IyHlt/UyOFLD/ixjpiAEC8Rq/S1i++ckSJuDgvbK9y8KJZvP8knUF7NAJ2j7IbBB tRsUORcCjW/CHuBv7Hy3djR/FCxaYRfyLT5nIzonwG+lVkxw6RYPzfHBSMIfznAg HjxOVTkr4PzPcKyTDfDz0FU7zd1HlPS/ffSb+UsXX3P3w3EJSfr89tKJqQHhBbzX yzrHVZAXA+UAcz9SdFoxD95DIQ== -----END CERTIFICATE-----Generated at Wed May 13 03:37:37 2026 by rpki-client