$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft File: tii4qSXEXjrDpxvkEUZimYv0s-A.mft (raw, json) Hash identifier: lDXuWn2UGkpjczIuVbcGbgeL2zV/QYo6HYDGT/aLDVA= Subject key identifier: E2:57:BB:E7:0B:8F:60:52:BE:81:A0:0B:49:11:22:23:36:54:93:8D Authority key identifier: B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0 Certificate issuer: /CN=A91CA8EA/serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0 Certificate serial: 0553 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft Manifest number: 0541 Signing time: Tue 12 May 2026 23:35:39 +0000 Manifest this update: Tue 12 May 2026 23:35:39 +0000 Manifest next update: Tue 19 May 2026 23:35:39 +0000 Files and hashes: 1: tii4qSXEXjrDpxvkEUZimYv0s-A.crl (hash: pF18SykRvBjEt6ZfBT0u3ddn/CfC4wQ2AG6EE23UUfY=) 2: 207388F2D45E11EE8D29793EC4F9AE02.roa (hash: GZLAqFDcKyRRvVvDeTXr2Kcx2FQWYyo5VaaW0SZn3+0=) 3: 14A07422D45E11EEB37CB639C4F9AE02.roa (hash: PITcK7XRyy+LMYXHuylhY3+Q/YKqPcRjVZDoGb15cIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 23:35:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1363 (0x553) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA8EA, serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0 Validity Not Before: May 12 23:35:39 2026 GMT Not After : May 19 23:35:39 2026 GMT Subject: CN=6a03b94b-1ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a8:e5:4c:30:e6:1c:5f:47:87:cf:41:3c:41: 4d:d6:fb:b6:76:50:f8:68:91:5e:0f:ff:a3:3f:34: 6c:89:a1:dc:d8:c1:81:db:0c:e6:46:02:32:d8:d6: 9a:b5:7e:65:89:81:04:88:3c:e6:eb:05:59:4a:21: 6c:11:41:3a:7b:50:bb:32:a9:b5:2b:45:d9:16:15: b5:54:6d:61:0a:4e:8b:f2:b1:25:db:58:6a:97:7e: e3:05:80:94:27:07:d4:c2:7a:1e:8f:f5:e8:4b:be: f0:f5:3d:32:dd:fb:31:38:c0:3a:85:48:fd:7f:19: ca:d5:04:45:c7:8c:93:dc:c6:e7:a0:fd:f1:4d:65: 13:68:73:cf:ec:b2:f4:48:75:ba:32:b4:c9:e9:fd: a7:5d:ef:d5:07:78:f2:49:41:87:f8:42:08:19:87: 79:65:d8:2b:1a:c0:db:5a:d0:9b:5c:78:fd:12:20: 4f:ff:99:cf:0f:48:5b:04:b8:6a:44:05:5d:85:07: 44:fb:e1:46:ac:d4:cd:9b:58:e2:d7:9b:ba:84:bd: 95:53:df:bd:6e:dd:d1:b4:36:a3:9b:12:db:54:10: b4:ec:d4:d8:7e:f7:fd:61:f2:c3:43:1b:f3:9b:5f: 46:4f:f9:70:83:d6:fb:03:b8:89:ff:13:8c:89:0e: c1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:57:BB:E7:0B:8F:60:52:BE:81:A0:0B:49:11:22:23:36:54:93:8D X509v3 Authority Key Identifier: keyid:B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:fd:61:26:c5:92:df:0f:05:e1:37:00:84:a6:48:35:74:8b: b9:34:2b:10:17:80:01:78:7b:06:76:d3:f2:c4:b3:b5:40:da: b5:a7:7f:00:6f:5c:73:e4:da:a8:0a:84:e7:d4:80:1c:df:f6: 4e:c5:82:eb:de:52:c0:29:31:9c:26:eb:b3:7e:6e:1f:2e:d4: fd:c7:83:55:50:70:4f:2f:b6:97:6c:27:e0:7e:71:36:e2:b7: d5:76:22:dd:cb:66:8a:93:34:a6:21:ab:7e:47:78:5d:90:20: 83:7d:c2:61:b3:12:0d:40:a5:25:b2:0c:64:12:c8:b2:f5:3c: 66:7e:c3:08:aa:d0:b0:a4:db:c8:0b:37:bb:fe:13:bb:27:82: 50:d2:ce:45:4a:23:50:1a:ce:12:85:6d:37:1d:94:5c:24:db: fc:a0:78:e2:62:52:5d:47:a3:1a:59:0f:a4:22:d1:c4:a8:7e: 3d:af:76:95:ff:75:c1:6e:e0:9d:63:25:5c:f9:f2:4d:b5:b1: 69:32:78:2b:85:f7:05:73:6a:7f:cd:86:1d:fe:dd:de:21:d7: 8e:de:be:fc:7a:3a:48:9c:2b:70:38:24:bf:cd:66:4f:58:a7: cf:2a:fa:d1:83:7f:30:bb:52:d4:fd:30:fe:72:fc:7d:d8:16: 25:67:6d:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E4RUExMTAvBgNVBAUTKEI2MjhCOEE5MjVDNDVFM0FDM0E3MUJFNDExNDY2Mjk5 OEJGNEIzRTAwHhcNMjYwNTEyMjMzNTM5WhcNMjYwNTE5MjMzNTM5WjAYMRYwFAYD VQQDEw02YTAzYjk0Yi0xZWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6jlTDDmHF9Hh89BPEFN1vu2dlD4aJFeD/+jPzRsiaHc2MGB2wzmRgIy2Naa tX5liYEEiDzm6wVZSiFsEUE6e1C7Mqm1K0XZFhW1VG1hCk6L8rEl21hql37jBYCU JwfUwnoej/XoS77w9T0y3fsxOMA6hUj9fxnK1QRFx4yT3MbnoP3xTWUTaHPP7LL0 SHW6MrTJ6f2nXe/VB3jySUGH+EIIGYd5ZdgrGsDbWtCbXHj9EiBP/5nPD0hbBLhq RAVdhQdE++FGrNTNm1ji15u6hL2VU9+9bt3RtDajmxLbVBC07NTYfvf9YfLDQxvz m19GT/lwg9b7A7iJ/xOMiQ7BJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOJXu+cL j2BSvoGgC0kRIiM2VJONMB8GA1UdIwQYMBaAFLYouKklxF46w6cb5BFGYpmL9LPg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQThFQS9EOENBMTNDMjQw NDkxMUVDOUI2RUZFN0JDNEY5QUUwMi90aWk0cVNYRVhqckRweHZrRVVaaW1ZdjBz LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpaTRxU1hFWGpyRHB4dmtFVVppbVl2MHMtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QThFQS9EOENBMTNDMjQwNDkxMUVDOUI2RUZFN0JDNEY5QUUwMi90aWk0cVNYRVhq ckRweHZrRVVaaW1ZdjBzLUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwP1hJsWS3w8F4TcAhKZINXSLuTQrEBeAAXh7BnbT8sSztUDatad/AG9cc+Ta qAqE59SAHN/2TsWC695SwCkxnCbrs35uHy7U/ceDVVBwTy+2l2wn4H5xNuK31XYi 3ctmipM0piGrfkd4XZAgg33CYbMSDUClJbIMZBLIsvU8Zn7DCKrQsKTbyAs3u/4T uyeCUNLORUojUBrOEoVtNx2UXCTb/KB44mJSXUejGlkPpCLRxKh+Pa92lf91wW7g nWMlXPnyTbWxaTJ4K4X3BXNqf82GHf7d3iHXjt6+/Ho6SJwrcDgkv81mT1inzyr6 0YN/MLtS1P0w/nL8fdgWJWdtRw== -----END CERTIFICATE-----Generated at Wed May 13 15:55:36 2026 by rpki-client