$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft File: Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft (raw, json) Hash identifier: 9TVL1CkJUOGiJjWDI6msqTqNc+IUHpHGzJq8SjFNzeM= Subject key identifier: C1:6D:89:77:35:F6:AC:4C:1B:30:AB:F5:85:D1:E4:13:F7:97:11:56 Authority key identifier: 09:DD:0E:A2:D2:03:11:F7:93:E4:74:3F:08:65:C8:4A:02:47:3F:DB Certificate issuer: /CN=A91CBF47/serialNumber=09DD0EA2D20311F793E4743F0865C84A02473FDB Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Cd0OotIDEfeT5HQ_CGXISgJHP9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft Manifest number: 44 Signing time: Tue 12 May 2026 14:33:15 +0000 Manifest this update: Tue 12 May 2026 14:33:14 +0000 Manifest next update: Tue 19 May 2026 14:33:14 +0000 Files and hashes: 1: Cd0OotIDEfeT5HQ_CGXISgJHP9s.crl (hash: +0yrOQdjHx6BZ0RsxmoNc5kZJ+JMPNlUSSAaLjpK/vA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.crl rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Cd0OotIDEfeT5HQ_CGXISgJHP9s.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:33:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBF47, serialNumber=09DD0EA2D20311F793E4743F0865C84A02473FDB Validity Not Before: May 12 14:33:14 2026 GMT Not After : May 19 14:33:14 2026 GMT Subject: CN=6a033a2b-959a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:08:99:92:9f:56:91:74:97:a9:98:43:3f:98: a9:df:60:dc:1a:8c:ef:41:a3:25:10:3a:49:40:0e: bc:f0:84:0b:c7:3d:a9:0f:bf:45:2d:46:9e:84:c9: 13:ab:43:ee:47:6e:91:5f:14:6c:52:07:92:fb:92: 69:18:0a:82:8e:95:51:44:45:0b:9a:24:83:3f:cd: 76:1e:09:e4:72:f7:7a:11:f0:a2:a8:78:c9:65:68: c6:ad:c4:ab:57:bb:42:f8:3e:e3:ed:ae:e3:e1:d2: ae:9a:51:1d:5d:3f:6b:79:34:53:66:5b:28:5b:46: 5c:20:3b:28:a9:66:68:e0:1d:5a:9b:f7:e7:e5:6e: 6a:57:36:30:7b:c0:51:f6:6e:be:ab:6a:6c:b6:87: 0b:1d:59:93:9d:70:b7:80:26:1a:ad:36:ed:38:4a: 0d:71:63:e7:a0:71:c4:55:08:cb:d1:e0:4f:fb:ec: ac:ba:23:63:6c:ea:69:4e:8f:88:3a:94:d2:c3:94: c1:bd:09:40:9f:46:4f:60:91:c5:02:a8:b2:3f:38: 4b:2f:1f:c3:cc:a7:68:af:55:35:0a:65:f9:d7:f0: d9:4c:73:ea:39:0f:b9:79:bb:28:32:a4:9d:1e:04: 46:27:d4:ab:53:91:ce:d9:83:f8:fe:0b:b0:86:2e: 5e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6D:89:77:35:F6:AC:4C:1B:30:AB:F5:85:D1:E4:13:F7:97:11:56 X509v3 Authority Key Identifier: keyid:09:DD:0E:A2:D2:03:11:F7:93:E4:74:3F:08:65:C8:4A:02:47:3F:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Cd0OotIDEfeT5HQ_CGXISgJHP9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:5c:93:28:fd:b4:2d:16:bf:30:03:34:8b:f3:8b:da:87:4a: 3d:fe:73:74:1b:cc:b0:f1:8e:67:e1:9f:67:96:eb:89:b8:71: 89:66:ab:fc:b1:d5:92:f9:f1:9f:57:74:a5:0a:9c:75:26:02: 12:ff:e3:d8:b6:5a:7b:2b:57:da:14:78:fd:83:cb:cb:95:cc: 1f:2e:fd:96:e7:c7:72:4b:34:7b:4b:08:cb:0b:59:19:30:a3: 15:dc:c7:4f:3a:46:b9:81:a9:3b:e3:e2:4d:f4:d4:f0:81:95: 19:80:72:c9:6d:b9:ed:38:32:fe:9a:35:9e:d9:62:38:87:a2: 14:ea:e0:bc:4a:3b:03:c6:9d:47:75:18:5a:47:19:bb:bd:c9: b4:73:b4:3b:0e:e6:9d:2d:ec:f1:29:f5:ef:6d:03:fb:60:db: 9f:47:2d:e5:13:7f:c5:9a:3a:72:40:ec:87:cb:80:57:fa:2d: b4:4e:cb:50:26:f8:58:54:08:03:2c:9b:6b:a0:51:1e:48:73: cd:79:5e:46:1a:2e:e1:0c:22:f6:00:bc:01:b7:45:17:4b:e0: bc:11:20:7e:0c:37:9d:96:f3:9b:99:93:48:b1:8c:be:29:4f: e3:81:89:23:c6:b5:18:a8:0d:b5:be:3a:2c:d9:a0:aa:bc:71: a3:cd:ea:77 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QkY0NzExMC8GA1UEBRMoMDlERDBFQTJEMjAzMTFGNzkzRTQ3NDNGMDg2NUM4NEEw MjQ3M0ZEQjAeFw0yNjA1MTIxNDMzMTRaFw0yNjA1MTkxNDMzMTRaMBgxFjAUBgNV BAMTDTZhMDMzYTJiLTk1OWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCCJmSn1aRdJepmEM/mKnfYNwajO9BoyUQOklADrzwhAvHPakPv0UtRp6EyROr Q+5HbpFfFGxSB5L7kmkYCoKOlVFERQuaJIM/zXYeCeRy93oR8KKoeMllaMatxKtX u0L4PuPtruPh0q6aUR1dP2t5NFNmWyhbRlwgOyipZmjgHVqb9+flbmpXNjB7wFH2 br6ramy2hwsdWZOdcLeAJhqtNu04Sg1xY+egccRVCMvR4E/77Ky6I2Ns6mlOj4g6 lNLDlMG9CUCfRk9gkcUCqLI/OEsvH8PMp2ivVTUKZfnX8NlMc+o5D7l5uygypJ0e BEYn1KtTkc7Zg/j+C7CGLl4tAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUwW2JdzX2 rEwbMKv1hdHkE/eXEVYwHwYDVR0jBBgwFoAUCd0OotIDEfeT5HQ/CGXISgJHP9sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCRjQ3LzBERkFFRTQ4RjI4 QjExRjBCM0ZERkU0MjZCNkY1NkJDL0NkME9vdElERWZlVDVIUV9DR1hJU2dKSFA5 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvQ2QwT290SURFZmVUNUhRX0NHWElTZ0pIUDlzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC RjQ3LzBERkFFRTQ4RjI4QjExRjBCM0ZERkU0MjZCNkY1NkJDL0NkME9vdElERWZl VDVIUV9DR1hJU2dKSFA5cy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCEXJMo/bQtFr8wAzSL84vah0o9/nN0G8yw8Y5n4Z9nluuJuHGJZqv8sdWS+fGf V3SlCpx1JgIS/+PYtlp7K1faFHj9g8vLlcwfLv2W58dySzR7SwjLC1kZMKMV3MdP Oka5gak74+JN9NTwgZUZgHLJbbntODL+mjWe2WI4h6IU6uC8SjsDxp1HdRhaRxm7 vcm0c7Q7DuadLezxKfXvbQP7YNufRy3lE3/FmjpyQOyHy4BX+i20TstQJvhYVAgD LJtroFEeSHPNeV5GGi7hDCL2ALwBt0UXS+C8ESB+DDedlvObmZNIsYy+KU/jgYkj xrUYqA21vjos2aCqvHGjzep3 -----END CERTIFICATE-----Generated at Wed May 13 00:20:18 2026 by rpki-client