$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft File: FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft (raw, json) Hash identifier: Y6h0tKHLjn7WogHpag7nVvbJGw6AsmDmlGo9jCTe+K0= Subject key identifier: 88:71:38:72:68:66:72:99:01:2D:B8:7B:3D:04:4B:41:59:A5:9C:C4 Authority key identifier: 16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04 Certificate issuer: /CN=A91CB14D/serialNumber=16C662726F4A009133D6591664239E00C681A004 Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft Manifest number: 0ACE Signing time: Tue 12 May 2026 20:18:36 +0000 Manifest this update: Tue 12 May 2026 20:18:36 +0000 Manifest next update: Tue 19 May 2026 20:18:36 +0000 Files and hashes: 1: FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl (hash: xLUxt38IQBdec0liSeWbKO5a9oU4u3r8X5w/UGCKVYs=) 2: C483C80CDE4011EFB4A11D5CC4F9AE02.roa (hash: 39L0tuk++HvgBqoCLQnzcqUrTZqQJu3YDe0GGFe9LNA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:18:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB14D, serialNumber=16C662726F4A009133D6591664239E00C681A004 Validity Not Before: May 12 20:18:36 2026 GMT Not After : May 19 20:18:36 2026 GMT Subject: CN=6a038b1c-874f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:54:f2:bd:9d:bd:fe:28:2b:c2:87:e2:bf:21: dc:2f:79:79:db:77:c9:d2:68:21:1d:46:e0:23:4c: 34:30:a6:39:a4:97:7c:cf:33:8c:3c:53:3d:a8:b4: b8:79:c7:2d:63:ca:12:51:e0:dc:78:07:12:cd:af: 55:e6:4f:bb:95:f8:71:64:7d:ab:7d:e4:2d:ca:c9: f2:d2:b5:e7:fe:dc:be:aa:f7:04:5d:aa:e5:4c:0d: d6:f5:a6:55:e9:f4:b0:eb:09:29:49:76:10:29:a6: 39:2d:e3:9e:72:44:fa:01:f4:2c:2b:ca:9b:4c:bb: f0:e0:63:b6:70:83:7f:92:69:3e:70:7c:c9:04:86: bc:11:6e:69:2a:88:bf:c4:1c:6b:74:a4:02:26:7f: ec:d3:2a:5e:24:19:99:e7:87:54:96:dc:32:cb:c9: 46:b0:dc:15:27:49:d3:b8:de:d1:6f:e1:04:84:99: 46:5f:f7:83:1a:ac:6c:f2:b0:98:84:e0:0c:b7:6e: d4:4a:eb:4a:d0:ec:a5:0b:6c:90:9b:98:e5:5f:77: c1:48:93:3e:64:5c:28:39:ae:5c:b5:56:a0:4c:2c: 49:3b:d9:23:45:68:1d:85:82:4c:a3:74:53:2d:80: 22:e6:4e:07:ca:f7:a0:7b:28:d6:de:6f:81:75:3e: 2a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:71:38:72:68:66:72:99:01:2D:B8:7B:3D:04:4B:41:59:A5:9C:C4 X509v3 Authority Key Identifier: keyid:16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:6d:8e:aa:f9:13:54:b6:07:1e:0a:57:e9:8b:21:40:09:59: 0e:32:0c:6b:f0:49:0b:11:01:30:78:16:c8:ba:04:15:7e:35: e4:19:25:af:6d:11:26:c6:d7:5a:2c:c8:14:0e:55:ee:07:84: 34:aa:1c:7c:16:cb:ea:29:cb:b2:a1:66:24:85:f1:6a:2e:73: e7:4c:36:22:c0:90:03:a9:b0:02:ce:b4:f2:78:91:e3:de:4d: 35:38:b7:a4:99:62:5d:f6:e7:5a:b9:8c:df:36:06:78:6c:b2: b8:9b:73:b8:69:61:80:d3:10:5f:fc:d1:ef:65:dd:fe:fe:17: 45:9b:a4:d7:72:89:a3:dd:12:76:3c:e6:97:fd:c6:42:77:37: 8b:e4:c4:31:3d:c3:94:33:ba:48:dd:62:46:62:4a:11:cd:60: 13:97:fc:c1:d8:b8:d4:fa:d6:15:0d:8e:75:d1:77:b6:e6:64: 8e:34:37:6d:d0:e3:7b:41:dd:9c:8d:c0:7f:0f:af:e0:32:f7: 05:96:f1:6b:e5:ad:a0:0a:4d:e2:1b:cb:19:8f:04:20:90:91: 9a:18:5d:f1:23:36:c3:81:80:0c:45:c8:10:b3:f7:d5:8f:df: b1:0b:eb:2b:7b:4f:9f:79:84:c4:74:27:11:46:c8:ec:34:d1: fc:81:8f:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IxNEQxMTAvBgNVBAUTKDE2QzY2MjcyNkY0QTAwOTEzM0Q2NTkxNjY0MjM5RTAw QzY4MUEwMDQwHhcNMjYwNTEyMjAxODM2WhcNMjYwNTE5MjAxODM2WjAYMRYwFAYD VQQDEw02YTAzOGIxYy04NzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2VTyvZ29/igrwofivyHcL3l523fJ0mghHUbgI0w0MKY5pJd8zzOMPFM9qLS4 ecctY8oSUeDceAcSza9V5k+7lfhxZH2rfeQtysny0rXn/ty+qvcEXarlTA3W9aZV 6fSw6wkpSXYQKaY5LeOeckT6AfQsK8qbTLvw4GO2cIN/kmk+cHzJBIa8EW5pKoi/ xBxrdKQCJn/s0ypeJBmZ54dUltwyy8lGsNwVJ0nTuN7Rb+EEhJlGX/eDGqxs8rCY hOAMt27USutK0OylC2yQm5jlX3fBSJM+ZFwoOa5ctVagTCxJO9kjRWgdhYJMo3RT LYAi5k4HyvegeyjW3m+BdT4qZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIhxOHJo ZnKZAS24ez0ES0FZpZzEMB8GA1UdIwQYMBaAFBbGYnJvSgCRM9ZZFmQjngDGgaAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjE0RC8zMEZFMEFGRUM0 QzYxMUVBQThENUJFNjZDNEY5QUUwMi9Gc1ppY205S0FKRXoxbGtXWkNPZUFNYUJv QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZzWmljbTlLQUpFejFsa1daQ09lQU1hQm9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjE0RC8zMEZFMEFGRUM0QzYxMUVBQThENUJFNjZDNEY5QUUwMi9Gc1ppY205S0FK RXoxbGtXWkNPZUFNYUJvQVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIm2OqvkTVLYHHgpX6YshQAlZDjIMa/BJCxEBMHgWyLoEFX415Bklr20RJsbX WizIFA5V7geENKocfBbL6inLsqFmJIXxai5z50w2IsCQA6mwAs608niR495NNTi3 pJliXfbnWrmM3zYGeGyyuJtzuGlhgNMQX/zR72Xd/v4XRZuk13KJo90Sdjzml/3G Qnc3i+TEMT3DlDO6SN1iRmJKEc1gE5f8wdi41PrWFQ2OddF3tuZkjjQ3bdDje0Hd nI3Afw+v4DL3BZbxa+WtoApN4hvLGY8EIJCRmhhd8SM2w4GADEXIELP31Y/fsQvr K3tPn3mExHQnEUbI7DTR/IGPQg== -----END CERTIFICATE-----Generated at Wed May 13 03:04:24 2026 by rpki-client