$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft File: g4L2GIxKbdZpVNVxij2cz5uL-JU.mft (raw, json) Hash identifier: TaRkE+jwrpu/yJ85SK1HSqUXKoX12Lu0ilOJtY/Y65g= Subject key identifier: 10:64:EF:39:01:DF:BF:C5:36:13:A8:69:D1:B5:F8:92:84:97:A2:84 Authority key identifier: 83:82:F6:18:8C:4A:6D:D6:69:54:D5:71:8A:3D:9C:CF:9B:8B:F8:95 Certificate issuer: /CN=A91CB8BA/serialNumber=8382F6188C4A6DD66954D5718A3D9CCF9B8BF895 Certificate serial: 08A1 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft Manifest number: 0894 Signing time: Tue 12 May 2026 20:10:39 +0000 Manifest this update: Tue 12 May 2026 20:10:38 +0000 Manifest next update: Tue 19 May 2026 20:10:38 +0000 Files and hashes: 1: g4L2GIxKbdZpVNVxij2cz5uL-JU.crl (hash: ij/YHKYcY0hP39ypaNkTKXjNjY9IDlLOUiIXj4YdWFo=) 2: 21B96F2E7BC911EBABCF472DC4F9AE02.roa (hash: i37T+miB19JllsQUkIFRFN9qItWKSwoaTSynWV3QKsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.crl rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:10:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2209 (0x8a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8BA, serialNumber=8382F6188C4A6DD66954D5718A3D9CCF9B8BF895 Validity Not Before: May 12 20:10:38 2026 GMT Not After : May 19 20:10:38 2026 GMT Subject: CN=6a03893f-d975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fa:ee:3c:66:f2:8e:56:7c:65:db:76:b7:ac: 95:65:88:de:63:03:2c:ab:51:6a:96:b9:28:f2:2c: 89:aa:88:62:41:93:f7:d8:6a:bf:67:1b:9e:a8:11: 62:5b:82:db:89:a6:63:12:9f:53:1f:ab:bf:56:21: d8:e4:0e:b2:c4:f2:8b:ea:b2:f9:87:c9:99:93:05: 81:46:19:9e:0d:16:6f:ee:fd:74:0b:3b:ae:04:eb: 1b:15:c3:21:f0:28:3b:71:22:7d:9a:40:71:b9:cd: 30:8a:ce:50:d4:73:4e:b2:82:24:25:79:a9:73:ab: c0:eb:15:ec:6c:88:41:03:41:4e:42:bc:d2:9a:d0: b8:1d:a5:83:b2:3e:9a:b2:6c:8a:b6:25:c1:19:59: 44:05:b2:6a:e5:63:0a:39:94:d2:ae:a0:7c:2f:25: 8e:dd:39:93:1e:e2:79:c9:f3:ba:c2:63:e9:06:13: 86:19:0e:78:cc:c5:e7:22:42:ee:be:23:c7:47:6a: 4d:4f:12:06:b4:87:ea:59:8d:cd:ae:75:97:40:b3: 63:c4:41:7c:84:b9:5e:cc:a3:76:13:04:73:c2:8f: 0b:d7:01:3b:d0:12:e8:5a:25:ad:12:dc:cd:3c:98: 1c:02:2c:a0:96:c3:3d:6e:22:6a:a5:d9:b4:fa:8b: 02:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:64:EF:39:01:DF:BF:C5:36:13:A8:69:D1:B5:F8:92:84:97:A2:84 X509v3 Authority Key Identifier: keyid:83:82:F6:18:8C:4A:6D:D6:69:54:D5:71:8A:3D:9C:CF:9B:8B:F8:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:19:8e:e9:35:7e:94:a2:40:4f:00:ec:b1:5c:cb:1b:50:f4: ba:a5:2b:c0:97:1b:72:ce:4d:c4:45:ad:70:6f:67:83:b7:b9: 14:fb:fd:95:46:b4:72:e6:77:1e:da:a4:c5:51:5a:cb:a5:a3: ec:fb:b0:90:7a:9a:da:3c:bd:96:0a:1f:04:b5:23:7f:1a:65: b0:9f:7c:9e:4a:0d:5a:09:f7:03:89:48:a2:55:19:04:d8:4a: d9:fc:b8:ba:ed:cf:6a:ed:aa:83:63:16:9a:ec:bf:68:7d:76: 0e:0e:90:11:a4:e6:d0:a3:fe:0b:64:92:b3:d4:11:b2:54:db: 00:c5:7c:66:81:1e:f5:72:39:71:30:c2:54:5e:6d:c1:f7:8d: 85:05:3c:d8:9e:55:62:e4:c4:14:18:86:00:51:e1:98:9f:f3: 1b:aa:8e:98:d4:87:9b:f4:32:1a:75:6e:a2:1b:d9:1f:23:d2: 39:36:55:a0:27:f1:62:66:c6:90:41:df:4c:22:4c:10:ce:c5: 69:a1:74:62:11:0e:14:0e:94:1b:bd:07:b3:7f:7c:b1:39:f4: 2b:7b:ce:d2:bd:87:00:54:ee:71:aa:87:68:f9:41:d0:77:1b: e5:0b:5f:6e:67:30:77:34:6b:a4:d1:49:d2:60:d1:c5:64:ec: 2b:1b:48:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QkExMTAvBgNVBAUTKDgzODJGNjE4OEM0QTZERDY2OTU0RDU3MThBM0Q5Q0NG OUI4QkY4OTUwHhcNMjYwNTEyMjAxMDM4WhcNMjYwNTE5MjAxMDM4WjAYMRYwFAYD VQQDEw02YTAzODkzZi1kOTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/ruPGbyjlZ8Zdt2t6yVZYjeYwMsq1Fqlrko8iyJqohiQZP32Gq/ZxueqBFi W4LbiaZjEp9TH6u/ViHY5A6yxPKL6rL5h8mZkwWBRhmeDRZv7v10CzuuBOsbFcMh 8Cg7cSJ9mkBxuc0wis5Q1HNOsoIkJXmpc6vA6xXsbIhBA0FOQrzSmtC4HaWDsj6a smyKtiXBGVlEBbJq5WMKOZTSrqB8LyWO3TmTHuJ5yfO6wmPpBhOGGQ54zMXnIkLu viPHR2pNTxIGtIfqWY3NrnWXQLNjxEF8hLlezKN2EwRzwo8L1wE70BLoWiWtEtzN PJgcAiyglsM9biJqpdm0+osCmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBBk7zkB 37/FNhOoadG1+JKEl6KEMB8GA1UdIwQYMBaAFIOC9hiMSm3WaVTVcYo9nM+bi/iV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhCQS8yNTEwQjRFNkYw RkMxMUVBQjk4NUZBNUZDNEY5QUUwMi9nNEwyR0l4S2JkWnBWTlZ4aWoyY3o1dUwt SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2c0TDJHSXhLYmRacFZOVnhpajJjejV1TC1KVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjhCQS8yNTEwQjRFNkYwRkMxMUVBQjk4NUZBNUZDNEY5QUUwMi9nNEwyR0l4S2Jk WnBWTlZ4aWoyY3o1dUwtSlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgxmO6TV+lKJATwDssVzLG1D0uqUrwJcbcs5NxEWtcG9ng7e5FPv9lUa0cuZ3 HtqkxVFay6Wj7PuwkHqa2jy9lgofBLUjfxplsJ98nkoNWgn3A4lIolUZBNhK2fy4 uu3Pau2qg2MWmuy/aH12Dg6QEaTm0KP+C2SSs9QRslTbAMV8ZoEe9XI5cTDCVF5t wfeNhQU82J5VYuTEFBiGAFHhmJ/zG6qOmNSHm/QyGnVuohvZHyPSOTZVoCfxYmbG kEHfTCJMEM7FaaF0YhEOFA6UG70Hs398sTn0K3vO0r2HAFTucaqHaPlB0Hcb5Qtf bmcwdzRrpNFJ0mDRxWTsKxtIkQ== -----END CERTIFICATE-----Generated at Wed May 13 06:45:22 2026 by rpki-client