$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft File: rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft (raw, json) Hash identifier: NSdEFvhSb626aDhQpJP7jJbSQONxwWeD4y9ug7oyvHA= Subject key identifier: 44:64:D9:5D:66:18:F0:27:1D:52:6A:7D:53:AE:DD:76:9E:4A:05:C3 Authority key identifier: AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2 Certificate issuer: /CN=A91CB765/serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2 Certificate serial: 05A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft Manifest number: 0592 Signing time: Sun 10 May 2026 23:17:43 +0000 Manifest this update: Sun 10 May 2026 23:17:43 +0000 Manifest next update: Sun 17 May 2026 23:17:43 +0000 Files and hashes: 1: rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl (hash: YgVUk3lPhWhHIxjqNv2fv3UrHF4UGZN08Y9xIaa1KBw=) 2: F9A8F3561F3D11ECB2E88C32C4F9AE02.roa (hash: nMAueD71AbMo3NTxzg/tId7Satepp1btvdBVnm0IwvU=) 3: E66070EE36F911F0B0111510C4F9AE02.roa (hash: KwF38ZBP8Utf4qS1kbQsJebYoDtue89xp1vHyUdKSU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 23:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1445 (0x5a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB765, serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2 Validity Not Before: May 10 23:17:43 2026 GMT Not After : May 17 23:17:43 2026 GMT Subject: CN=6a011217-e2af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b6:4d:17:50:17:fd:f4:d9:04:4c:b7:7f:16: 6d:97:f1:31:38:e5:e6:b0:51:d1:82:a5:de:e9:34: a7:2a:a1:24:1f:f0:73:11:9a:45:3c:8b:39:9f:52: 89:b0:7f:89:6d:99:7c:d9:6b:e7:79:03:b3:b3:de: 92:42:5e:ea:48:7f:00:e7:c4:07:8f:53:a8:7d:58: 40:6f:cb:3f:a1:98:f8:b8:63:2e:60:1e:e2:33:fa: 6c:f7:0a:c6:3d:71:3b:a4:29:62:f6:7d:cc:25:5a: 15:38:b3:6a:65:6a:be:d5:a4:50:15:cc:63:70:44: a6:b6:eb:1d:35:24:9f:11:3b:c2:e5:a3:ef:48:3f: ca:43:1b:04:cc:48:3a:bb:ca:ae:8c:9f:e2:63:6a: b1:c1:4e:01:90:ed:55:6e:31:3b:c7:69:05:8b:1b: 02:e6:ad:2e:b3:44:2b:b9:02:c1:c4:41:b0:a6:93: 97:7e:f3:94:6f:d6:65:72:e3:18:e8:fa:de:15:54: fb:0c:47:e6:ee:2e:9c:d9:14:d0:ce:aa:a4:4e:f5: ac:31:35:af:03:1f:03:4d:ed:45:a2:b7:6b:08:42: 8d:23:40:9e:4b:95:67:9c:e6:15:f5:38:1a:ef:81: c5:72:8d:68:f4:c2:df:22:8e:c3:e6:12:ba:fd:43: 4a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:64:D9:5D:66:18:F0:27:1D:52:6A:7D:53:AE:DD:76:9E:4A:05:C3 X509v3 Authority Key Identifier: keyid:AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:87:e1:81:bb:1d:a8:a2:8b:c6:66:e7:c4:68:40:78:fa:f0: 32:44:a5:96:b4:3f:e7:39:f0:c0:5c:32:37:a6:37:df:ed:a0: 58:59:d8:f1:2c:e7:d5:ef:cf:ca:59:75:e7:24:88:32:e5:20: ef:75:4f:db:65:ed:de:47:dd:ee:a1:fe:60:4c:d2:93:91:0d: e8:19:85:df:b0:9e:f5:57:31:40:06:86:24:b8:2e:76:94:ad: 38:9d:bb:e0:ca:63:21:32:7c:b5:b6:31:a4:13:16:1b:ec:fd: e4:fe:a8:73:4a:35:ea:a0:c5:18:63:5a:07:14:f3:2d:81:f3: 97:19:87:2d:b1:cf:02:cd:fd:12:a2:9d:4f:ea:31:46:9c:8a: 2a:fd:eb:7f:10:91:99:f3:46:6d:53:a7:fc:77:8c:14:ab:03: 61:72:df:cd:f4:21:9a:75:3d:8d:09:b4:25:8a:6c:9a:08:f7: b2:79:1e:c2:a5:38:d8:50:3c:3a:af:6a:99:11:0d:5c:52:1d: 0b:dd:94:9f:dc:fb:be:b0:cf:46:ff:bb:51:bc:c1:fc:99:e5: e6:f3:c6:6c:e6:76:29:d7:72:a4:17:19:85:ae:83:fc:74:e2: d3:4e:63:d8:77:e5:0b:be:0d:08:81:38:f3:0f:49:8f:61:72: c4:11:d2:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I3NjUxMTAvBgNVBAUTKEFERjMxMkVBNjhCN0YwNURBNjEwMTA4MEY5ODMyMkZC RDY1OTE4QjIwHhcNMjYwNTEwMjMxNzQzWhcNMjYwNTE3MjMxNzQzWjAYMRYwFAYD VQQDEw02YTAxMTIxNy1lMmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjrZNF1AX/fTZBEy3fxZtl/ExOOXmsFHRgqXe6TSnKqEkH/BzEZpFPIs5n1KJ sH+JbZl82WvneQOzs96SQl7qSH8A58QHj1OofVhAb8s/oZj4uGMuYB7iM/ps9wrG PXE7pCli9n3MJVoVOLNqZWq+1aRQFcxjcESmtusdNSSfETvC5aPvSD/KQxsEzEg6 u8qujJ/iY2qxwU4BkO1VbjE7x2kFixsC5q0us0QruQLBxEGwppOXfvOUb9ZlcuMY 6PreFVT7DEfm7i6c2RTQzqqkTvWsMTWvAx8DTe1FordrCEKNI0CeS5VnnOYV9Tga 74HFco1o9MLfIo7D5hK6/UNKvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFERk2V1m GPAnHVJqfVOu3XaeSgXDMB8GA1UdIwQYMBaAFK3zEupot/BdphAQgPmDIvvWWRiy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjc2NS9BNERERkE5NDFG M0IxMUVDQjdEQzQ1MkZDNEY5QUUwMi9yZk1TNm1pMzhGMm1FQkNBLVlNaS05WlpH TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JmTVM2bWkzOEYybUVCQ0EtWU1pLTlaWkdMSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Qjc2NS9BNERERkE5NDFGM0IxMUVDQjdEQzQ1MkZDNEY5QUUwMi9yZk1TNm1pMzhG Mm1FQkNBLVlNaS05WlpHTEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOofhgbsdqKKLxmbnxGhAePrwMkSllrQ/5znwwFwyN6Y33+2gWFnY8Szn1e/P yll15ySIMuUg73VP22Xt3kfd7qH+YEzSk5EN6BmF37Ce9VcxQAaGJLgudpStOJ27 4MpjITJ8tbYxpBMWG+z95P6oc0o16qDFGGNaBxTzLYHzlxmHLbHPAs39EqKdT+ox RpyKKv3rfxCRmfNGbVOn/HeMFKsDYXLfzfQhmnU9jQm0JYpsmgj3snkewqU42FA8 Oq9qmRENXFIdC92Un9z7vrDPRv+7UbzB/Jnl5vPGbOZ2KddypBcZha6D/HTi005j 2HflC74NCIE48w9Jj2FyxBHSKQ== -----END CERTIFICATE-----Generated at Tue May 12 22:28:19 2026 by rpki-client