$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft File: o5mhLEjADkJh0o4MV_1OPkcNLrc.mft (raw, json) Hash identifier: qH4sZJOBer1ZPFuGP+woyfsOPpNid2kGtHtGtuHIvdI= Subject key identifier: 3F:DD:BE:F8:CF:EF:C6:B8:92:48:08:D0:DC:6A:BE:DA:EB:AA:0E:6C Authority key identifier: A3:99:A1:2C:48:C0:0E:42:61:D2:8E:0C:57:FD:4E:3E:47:0D:2E:B7 Certificate issuer: /CN=A91C4401/serialNumber=A399A12C48C00E4261D28E0C57FD4E3E470D2EB7 Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5mhLEjADkJh0o4MV_1OPkcNLrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft Manifest number: 6C Signing time: Mon 11 May 2026 08:00:43 +0000 Manifest this update: Mon 11 May 2026 08:00:43 +0000 Manifest next update: Mon 18 May 2026 08:00:43 +0000 Files and hashes: 1: o5mhLEjADkJh0o4MV_1OPkcNLrc.crl (hash: zG8QIMgPbvMFNoQ5booBevPyRzVv942Jshezjd8vshM=) 2: C0FD1FF0AA7111F0B4546269C4F9AE02.roa (hash: ny6KgtWAxAxsP09sSmBzSKP9/SUXwkqR5HeRZHk3STU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.crl rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5mhLEjADkJh0o4MV_1OPkcNLrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4401, serialNumber=A399A12C48C00E4261D28E0C57FD4E3E470D2EB7 Validity Not Before: May 11 08:00:43 2026 GMT Not After : May 18 08:00:43 2026 GMT Subject: CN=6a018cab-8e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d5:91:9f:b5:71:65:25:00:c0:c4:ec:f5:25: fe:77:af:3f:00:1a:9c:ce:3f:e5:d9:4b:7b:b5:50: 25:ff:ad:c6:7e:47:19:99:8f:02:3e:dc:dc:5a:60: 4c:22:85:58:d7:3f:67:ea:e6:15:64:55:a0:5e:1b: 2f:3d:28:4d:cd:b5:f2:67:9b:fb:bf:95:d1:6f:d0: 80:15:ba:a5:0c:4b:08:06:07:19:5f:44:4b:0f:a6: c5:a2:79:1c:30:df:13:71:1d:ee:63:fe:c4:67:2d: 5c:65:02:f2:b7:20:d3:97:04:dc:76:c0:ff:02:01: d0:93:bf:d0:9f:fe:64:97:8a:c0:3b:25:01:a6:c4: 1c:a9:60:3f:be:e6:c6:69:47:4c:d2:a4:42:84:6f: 5b:eb:9d:c4:9b:f4:4c:18:b9:53:49:0d:cc:96:33: 81:c3:29:60:1f:2e:57:fa:82:6f:94:9f:e2:1d:21: 78:a4:92:0c:7e:25:e6:6f:82:98:f1:23:b6:a7:b7: 18:de:94:ab:03:5c:6b:b2:7a:54:ef:ad:bb:5c:17: db:e3:82:3f:36:f7:ef:27:da:d1:39:34:11:3d:6f: a1:86:cf:57:ee:4e:34:ec:6e:1b:88:ee:1e:e9:63: 4c:2c:56:ef:0a:ca:37:6d:74:fd:b5:4c:c9:99:a4: e0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:DD:BE:F8:CF:EF:C6:B8:92:48:08:D0:DC:6A:BE:DA:EB:AA:0E:6C X509v3 Authority Key Identifier: keyid:A3:99:A1:2C:48:C0:0E:42:61:D2:8E:0C:57:FD:4E:3E:47:0D:2E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5mhLEjADkJh0o4MV_1OPkcNLrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4401/1B882160AA7011F0B428E663C4F9AE02/o5mhLEjADkJh0o4MV_1OPkcNLrc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:0a:6d:c8:ee:42:e1:d1:48:82:95:2d:6b:19:13:d8:d3:87: da:c4:04:03:56:70:fb:94:0f:4f:9a:73:4a:93:a1:60:a6:8f: 0b:c1:40:e2:01:d3:8e:63:55:b8:9d:1a:17:bc:71:e1:76:c4: 64:14:be:c6:66:70:6d:68:b6:16:61:e5:2a:d6:ce:26:7e:35: de:0d:17:27:c4:8d:08:f0:94:8d:6a:87:00:89:da:34:37:30: 35:00:cb:fe:08:75:87:83:28:41:55:b2:d9:55:f0:d2:92:f4: 80:b6:d3:a4:85:a3:33:52:b4:a8:f2:1a:89:bb:16:ad:a8:b3: ad:4f:3b:f3:12:bb:9b:a3:5e:97:c9:d0:5d:be:a9:7c:a3:79: b1:73:f3:24:f4:6a:24:cc:83:1d:d6:e7:e5:f5:dc:6f:a8:08: e1:35:d3:eb:f1:b6:7e:05:13:50:e7:68:3e:f3:10:ee:48:4f: 1e:fe:db:3e:f8:cf:07:fd:4e:ab:f7:0b:91:48:4f:7c:4f:42: 3c:16:06:94:31:b8:b3:f3:a9:20:a5:07:52:b5:1b:60:bd:36: 5b:31:dc:08:a0:90:1e:ba:8b:15:e4:00:6f:99:92:02:c3:99: a2:56:45:21:17:70:08:23:93:7e:62:7b:72:87:cd:dc:1f:62: 24:ef:28:b9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NDQwMTExMC8GA1UEBRMoQTM5OUExMkM0OEMwMEU0MjYxRDI4RTBDNTdGRDRFM0U0 NzBEMkVCNzAeFw0yNjA1MTEwODAwNDNaFw0yNjA1MTgwODAwNDNaMBgxFjAUBgNV BAMTDTZhMDE4Y2FiLThlM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH1ZGftXFlJQDAxOz1Jf53rz8AGpzOP+XZS3u1UCX/rcZ+RxmZjwI+3NxaYEwi hVjXP2fq5hVkVaBeGy89KE3NtfJnm/u/ldFv0IAVuqUMSwgGBxlfREsPpsWieRww 3xNxHe5j/sRnLVxlAvK3INOXBNx2wP8CAdCTv9Cf/mSXisA7JQGmxBypYD++5sZp R0zSpEKEb1vrncSb9EwYuVNJDcyWM4HDKWAfLlf6gm+Un+IdIXikkgx+JeZvgpjx I7antxjelKsDXGuyelTvrbtcF9vjgj829+8n2tE5NBE9b6GGz1fuTjTsbhuI7h7p Y0wsVu8KyjdtdP21TMmZpOCTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUP92++M/v xriSSAjQ3Gq+2uuqDmwwHwYDVR0jBBgwFoAUo5mhLEjADkJh0o4MV/1OPkcNLrcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0NDAxLzFCODgyMTYwQUE3 MDExRjBCNDI4RTY2M0M0RjlBRTAyL281bWhMRWpBRGtKaDBvNE1WXzFPUGtjTkxy Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbzVtaExFakFEa0poMG80TVZfMU9Qa2NOTHJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0 NDAxLzFCODgyMTYwQUE3MDExRjBCNDI4RTY2M0M0RjlBRTAyL281bWhMRWpBRGtK aDBvNE1WXzFPUGtjTkxyYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAwCm3I7kLh0UiClS1rGRPY04faxAQDVnD7lA9PmnNKk6Fgpo8LwUDiAdOOY1W4 nRoXvHHhdsRkFL7GZnBtaLYWYeUq1s4mfjXeDRcnxI0I8JSNaocAido0NzA1AMv+ CHWHgyhBVbLZVfDSkvSAttOkhaMzUrSo8hqJuxatqLOtTzvzErubo16XydBdvql8 o3mxc/Mk9GokzIMd1ufl9dxvqAjhNdPr8bZ+BRNQ52g+8xDuSE8e/ts++M8H/U6r 9wuRSE98T0I8FgaUMbiz86kgpQdStRtgvTZbMdwIoJAeuosV5ABvmZICw5miVkUh F3AII5N+Yntyh83cH2Ik7yi5 -----END CERTIFICATE-----Generated at Wed May 13 09:58:58 2026 by rpki-client