$ rpki-client -vvf rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft File: CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft (raw, json) Hash identifier: +Tz8MlYxx90SmfPwO7XDwYiGGaUtT/UMKsVt/FBzLnI= Subject key identifier: C7:9A:43:5E:64:81:A2:B5:B7:69:CE:C5:05:48:87:1B:C1:5B:68:8F Authority key identifier: 08:02:5B:9B:44:EE:D8:AE:0B:76:F1:1E:03:72:CE:96:18:77:AD:9F Certificate issuer: /CN=A91C941B/serialNumber=08025B9B44EED8AE0B76F11E0372CE961877AD9F Certificate serial: 05AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft Manifest number: 0598 Signing time: Tue 12 May 2026 23:18:26 +0000 Manifest this update: Tue 12 May 2026 23:18:25 +0000 Manifest next update: Tue 19 May 2026 23:18:25 +0000 Files and hashes: 1: CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl (hash: x7GdOpfD8B4o9SuqFdKx4fbGm+9iB4MGmYn3IiYUmTE=) 2: F719961A1A8611ECB908E939C4F9AE02.roa (hash: 6Zu4L1ezgqlBaAtZaZeJDXKxjpiSp79xQrfuVaBXNZ8=) 3: B3883EE61A8C11ECBD6CCF18C4F9AE02.roa (hash: mFoBkWfLh0LGrOinTzXA38KoXXGaCtnMvz2q3N7gfu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 23:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1451 (0x5ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C941B, serialNumber=08025B9B44EED8AE0B76F11E0372CE961877AD9F Validity Not Before: May 12 23:18:25 2026 GMT Not After : May 19 23:18:25 2026 GMT Subject: CN=6a03b542-5320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4f:d9:cd:ca:6f:a8:71:7c:2b:a1:99:0d:45: 4c:33:a4:4f:0c:8c:92:14:8e:15:1a:f5:9b:8c:ec: b2:6f:6d:7f:a8:8c:e2:2e:76:20:ea:30:53:b2:72: a4:99:dd:f8:47:cf:48:8b:6f:98:3c:75:73:93:b0: cc:67:0a:15:b3:17:6d:4f:f7:49:ec:1b:b0:55:b8: ed:aa:2d:d3:32:a7:31:65:c4:74:d1:f8:c3:5e:8f: 0e:d0:11:1d:b8:98:fa:9a:73:4e:1d:56:a1:8e:2b: 1e:ca:03:ef:21:b4:83:8a:ea:79:5d:ff:3b:94:9b: dd:f0:e0:16:fe:e7:bf:2e:d2:c5:3f:70:62:8c:32: f1:f7:15:d3:e0:5d:6f:1d:38:25:9e:a5:5c:5c:70: 19:b4:2a:c8:2a:03:38:da:5d:e7:f5:a3:df:7f:48: 60:56:9d:7a:0a:59:0f:8d:36:9b:f3:48:fb:69:40: 2e:c8:67:85:c0:89:60:bc:a0:20:03:e1:ef:76:02: 47:d8:4b:24:2e:80:cc:d1:eb:34:0d:92:2e:47:73: 02:92:64:49:a8:6f:71:82:39:16:bf:34:11:e7:3a: c8:49:12:15:f5:35:fa:62:99:cc:27:c6:ce:71:7b: 18:7d:8b:4e:f0:d1:dc:a8:30:c2:e3:0c:dd:6e:2b: fb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:9A:43:5E:64:81:A2:B5:B7:69:CE:C5:05:48:87:1B:C1:5B:68:8F X509v3 Authority Key Identifier: keyid:08:02:5B:9B:44:EE:D8:AE:0B:76:F1:1E:03:72:CE:96:18:77:AD:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:ef:ce:78:6a:66:e2:3a:c6:ff:f8:67:4e:0b:de:de:48:77: 4d:de:1f:44:0d:31:59:6f:11:96:a9:94:67:d2:f1:57:45:cd: 9e:78:01:08:b8:a0:ef:fd:e4:cf:52:d8:cb:27:63:d9:02:83: ba:45:53:87:15:2c:ad:87:48:07:3e:2e:fd:b3:fe:a5:ce:6d: 9d:1f:21:71:be:24:df:37:d5:c2:aa:53:d5:4a:51:f7:5b:cb: 10:1a:04:93:81:f1:39:80:d4:35:7a:5a:a0:85:6a:d5:7d:2b: 67:7a:3a:8f:ed:3a:94:94:5b:20:3b:4c:84:3f:d0:b7:44:55: 64:5d:4b:63:cb:c8:77:16:85:59:3f:e6:70:19:5d:0d:c6:02: 67:a7:e2:41:6b:bc:b8:28:16:00:11:c2:b3:d8:0b:b9:a3:52: 84:3b:7f:f8:83:4c:6c:1e:fb:3b:c0:0e:42:4e:c7:85:aa:ce: 5a:d0:e8:c6:63:8a:f9:12:f0:e0:a6:9f:f0:a2:78:ed:a8:7e: 4e:52:6e:8a:1c:a0:d0:eb:ea:91:ef:12:e4:79:b0:1d:8b:4e: 19:e7:16:15:8a:47:12:e1:9d:1a:3c:a6:a9:83:f3:b1:53:d0: b9:86:fa:5b:8a:4c:be:8e:aa:36:fb:e7:3a:1b:15:07:4f:cc: 62:bc:4a:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0MUIxMTAvBgNVBAUTKDA4MDI1QjlCNDRFRUQ4QUUwQjc2RjExRTAzNzJDRTk2 MTg3N0FEOUYwHhcNMjYwNTEyMjMxODI1WhcNMjYwNTE5MjMxODI1WjAYMRYwFAYD VQQDEw02YTAzYjU0Mi01MzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl0/ZzcpvqHF8K6GZDUVMM6RPDIySFI4VGvWbjOyyb21/qIziLnYg6jBTsnKk md34R89Ii2+YPHVzk7DMZwoVsxdtT/dJ7BuwVbjtqi3TMqcxZcR00fjDXo8O0BEd uJj6mnNOHVahjiseygPvIbSDiup5Xf87lJvd8OAW/ue/LtLFP3BijDLx9xXT4F1v HTglnqVcXHAZtCrIKgM42l3n9aPff0hgVp16ClkPjTab80j7aUAuyGeFwIlgvKAg A+HvdgJH2EskLoDM0es0DZIuR3MCkmRJqG9xgjkWvzQR5zrISRIV9TX6YpnMJ8bO cXsYfYtO8NHcqDDC4wzdbiv7MwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMeaQ15k gaK1t2nOxQVIhxvBW2iPMB8GA1UdIwQYMBaAFAgCW5tE7tiuC3bxHgNyzpYYd62f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQxQi82OUY2QjdERTFB ODMxMUVDOEM5MjIyMjlDNEY5QUUwMi9DQUpibTBUdTJLNExkdkVlQTNMT2xoaDNy WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NBSmJtMFR1Mks0TGR2RWVBM0xPbGhoM3JaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTQxQi82OUY2QjdERTFBODMxMUVDOEM5MjIyMjlDNEY5QUUwMi9DQUpibTBUdTJL NExkdkVlQTNMT2xoaDNyWjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc+/OeGpm4jrG//hnTgve3kh3Td4fRA0xWW8RlqmUZ9LxV0XNnngBCLig7/3k z1LYyydj2QKDukVThxUsrYdIBz4u/bP+pc5tnR8hcb4k3zfVwqpT1UpR91vLEBoE k4HxOYDUNXpaoIVq1X0rZ3o6j+06lJRbIDtMhD/Qt0RVZF1LY8vIdxaFWT/mcBld DcYCZ6fiQWu8uCgWABHCs9gLuaNShDt/+INMbB77O8AOQk7HharOWtDoxmOK+RLw 4Kaf8KJ47ah+TlJuihyg0Ovqke8S5HmwHYtOGecWFYpHEuGdGjymqYPzsVPQuYb6 W4pMvo6qNvvnOhsVB0/MYrxKBQ== -----END CERTIFICATE-----Generated at Wed May 13 05:27:53 2026 by rpki-client