$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft File: SU13HlEeEgBTuwmx8nS9j1nXOqg.mft (raw, json) Hash identifier: qV1IQhqQsqn29/72KP7BQSwpD/jmBP03B3TPgPYuQgs= Subject key identifier: 08:38:81:EE:A7:F8:08:9D:DD:85:6C:9A:08:86:2A:AB:3F:96:61:20 Authority key identifier: 49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 Certificate issuer: /CN=A91C4614/serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Certificate serial: 0D70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft Manifest number: 0D5A Signing time: Tue 12 May 2026 18:03:39 +0000 Manifest this update: Tue 12 May 2026 18:03:39 +0000 Manifest next update: Tue 19 May 2026 18:03:39 +0000 Files and hashes: 1: SU13HlEeEgBTuwmx8nS9j1nXOqg.crl (hash: u0YmfR1InY8478vgB97MmIM0vWrfJkdEWA00dHe+JaY=) 2: 2BFBE7E687EF11F0BA5DF073C4F9AE02.roa (hash: 6W0EKCmbhZXUCb3JTj4cb3LX+lvYczLDKfF06TRghFI=) 3: 86B2C22287EF11F0BB972D77C4F9AE02.roa (hash: n64xYPc/honl4c/2W5UUus2lLDkgfGWSMJZBO6CSTtw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3440 (0xd70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4614, serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Validity Not Before: May 12 18:03:39 2026 GMT Not After : May 19 18:03:39 2026 GMT Subject: CN=6a036b7b-d51c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:db:2c:65:e2:64:19:d9:26:e5:42:8a:49:40: 18:71:1b:8b:06:dc:e2:6d:72:05:2e:7e:26:5e:25: b5:12:74:27:cf:aa:51:7b:b4:9b:88:e3:67:25:db: 1b:4f:f8:06:3d:22:63:a0:8f:86:f6:66:0c:85:27: 03:7c:55:60:e1:3a:df:d5:34:d2:69:9d:1a:ff:9d: 97:94:d7:7d:2f:2e:39:9e:f7:42:57:37:a1:80:dd: 32:d8:c9:99:97:19:b8:52:d2:4c:54:7b:b1:4f:bc: 50:e8:a0:7b:f5:23:a1:96:cc:ea:6d:b4:ef:8b:3b: 14:59:36:8d:e6:62:71:e3:d7:c7:7a:49:d5:b7:fd: e0:f8:e4:bb:0e:d7:18:80:3d:1d:1f:16:f7:89:6b: 1f:b6:c5:1d:9e:82:e4:b7:64:ce:12:05:7c:29:8c: d6:59:ce:14:88:07:97:dc:07:ca:49:66:5c:45:b8: 9f:4d:3c:de:ec:40:6f:44:34:0b:6a:5c:b3:1b:2f: 49:1d:8e:31:73:c7:31:ca:02:f2:f7:fb:de:f6:93: be:36:61:86:bf:8b:58:8e:b0:5f:7f:af:0b:c6:44: 4a:ef:63:e3:5e:ec:1e:25:b2:ca:fb:2f:d6:b5:e2: 2b:15:34:a2:c5:0d:14:64:e6:ee:0c:33:c1:7e:77: 12:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:38:81:EE:A7:F8:08:9D:DD:85:6C:9A:08:86:2A:AB:3F:96:61:20 X509v3 Authority Key Identifier: keyid:49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:ad:8c:28:2d:d9:fe:d4:68:dd:01:8d:50:18:a8:b6:da:5c: 41:f6:89:97:d1:23:d7:ba:f3:02:d1:08:83:19:64:60:c6:62: 57:70:2b:cb:c2:30:81:3d:f5:9e:74:f2:88:81:19:c4:25:6a: 95:95:bc:25:22:91:88:fb:7f:f6:b6:3c:3f:ca:39:2f:c6:3d: e5:6d:8c:bd:e5:bb:5f:82:41:c4:b2:0f:85:65:dc:1e:ba:12: a0:2d:69:dd:5b:f7:5c:17:0f:d7:f1:1a:2a:1f:fe:cb:85:2a: ab:b7:77:63:cb:80:df:88:d7:26:a3:ce:86:6f:a8:9d:bf:cc: ad:9a:f8:b7:90:eb:c9:b9:29:be:f9:d8:57:96:38:ab:88:74: 5b:92:11:02:96:41:94:4a:68:f2:16:2f:fa:ef:b3:bb:a3:a2: 11:b0:46:08:1f:da:5e:ba:9b:27:44:8b:99:83:4e:b8:bf:0c: 37:69:6f:d8:17:45:d5:f6:56:1c:90:02:75:af:7a:53:7a:df: 5d:9a:e8:14:f1:87:77:1b:99:bc:ad:a7:79:7c:b2:19:4c:7f: 5d:4b:4b:5a:af:60:30:0b:d4:dc:85:be:8f:9e:cc:1d:78:b9: 7c:8e:a8:cf:54:11:d5:f2:74:f8:68:db:4e:46:2d:be:49:82: 40:27:4c:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2MTQxMTAvBgNVBAUTKDQ5NEQ3NzFFNTExRTEyMDA1M0JCMDlCMUYyNzRCRDhG NTlENzNBQTgwHhcNMjYwNTEyMTgwMzM5WhcNMjYwNTE5MTgwMzM5WjAYMRYwFAYD VQQDEw02YTAzNmI3Yi1kNTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutssZeJkGdkm5UKKSUAYcRuLBtzibXIFLn4mXiW1EnQnz6pRe7SbiONnJdsb T/gGPSJjoI+G9mYMhScDfFVg4Trf1TTSaZ0a/52XlNd9Ly45nvdCVzehgN0y2MmZ lxm4UtJMVHuxT7xQ6KB79SOhlszqbbTvizsUWTaN5mJx49fHeknVt/3g+OS7DtcY gD0dHxb3iWsftsUdnoLkt2TOEgV8KYzWWc4UiAeX3AfKSWZcRbifTTze7EBvRDQL alyzGy9JHY4xc8cxygLy9/ve9pO+NmGGv4tYjrBff68LxkRK72PjXuweJbLK+y/W teIrFTSixQ0UZObuDDPBfncSPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAg4ge6n +Aid3YVsmgiGKqs/lmEgMB8GA1UdIwQYMBaAFElNdx5RHhIAU7sJsfJ0vY9Z1zqo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDYxNC8xQzk0ODk5QUY0 RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVnQlR1d214OG5TOWoxblhP cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVMTNIbEVlRWdCVHV3bXg4blM5ajFuWE9xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDYxNC8xQzk0ODk5QUY0RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVn QlR1d214OG5TOWoxblhPcWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANq2MKC3Z/tRo3QGNUBiottpcQfaJl9Ej17rzAtEIgxlkYMZiV3Ary8IwgT31 nnTyiIEZxCVqlZW8JSKRiPt/9rY8P8o5L8Y95W2MveW7X4JBxLIPhWXcHroSoC1p 3Vv3XBcP1/EaKh/+y4Uqq7d3Y8uA34jXJqPOhm+onb/MrZr4t5DrybkpvvnYV5Y4 q4h0W5IRApZBlEpo8hYv+u+zu6OiEbBGCB/aXrqbJ0SLmYNOuL8MN2lv2BdF1fZW HJACda96U3rfXZroFPGHdxuZvK2neXyyGUx/XUtLWq9gMAvU3IW+j57MHXi5fI6o z1QR1fJ0+GjbTkYtvkmCQCdMKg== -----END CERTIFICATE-----Generated at Wed May 13 11:54:48 2026 by rpki-client