$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft File: ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft (raw, json) Hash identifier: qlaXZ1ci98H2E/C7M9BBMD7cxtIbDt0Uahv7N4+qu3Q= Subject key identifier: 4E:19:09:20:01:8B:63:54:0E:85:86:E5:FA:70:36:DB:81:12:0D:43 Authority key identifier: A1:C2:39:65:70:40:17:72:42:9E:B8:CB:B0:DF:66:53:F1:67:8C:F6 Certificate issuer: /CN=A91CE6EC/serialNumber=A1C2396570401772429EB8CBB0DF6653F1678CF6 Certificate serial: 2640 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft Manifest number: 2631 Signing time: Tue 12 May 2026 15:43:15 +0000 Manifest this update: Tue 12 May 2026 15:43:15 +0000 Manifest next update: Tue 19 May 2026 15:43:15 +0000 Files and hashes: 1: ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl (hash: agYn6i+uWPPgrIdnk8KNDyYRgFJjfTACPg8RbUFCTzI=) 2: 86D7036A0E1011F1BB4320E6093D8C67.roa (hash: T9SIi9mDgUlqLoammnb7erYFDZJKyrEKSkygd0pgH9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 15:43:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9792 (0x2640) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE6EC, serialNumber=A1C2396570401772429EB8CBB0DF6653F1678CF6 Validity Not Before: May 12 15:43:15 2026 GMT Not After : May 19 15:43:15 2026 GMT Subject: CN=6a034a93-91e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ea:b4:97:ad:91:97:c7:14:af:f6:aa:1f:d5: a6:c5:bb:fc:51:9f:d4:99:9c:34:02:d8:ea:fc:0e: ae:c7:c7:db:a4:b4:b9:04:6f:ba:df:78:7a:a3:6e: 13:e9:28:13:29:2a:b8:98:95:9b:35:6a:73:57:fd: 61:40:82:a0:7d:8e:ab:aa:d1:d7:61:79:28:65:08: 40:b2:11:e7:a2:d9:a7:b2:34:fb:3b:3e:c1:ce:75: d3:a6:75:f7:7d:79:4e:31:b5:2b:5b:9a:db:71:52: 75:5b:4f:cd:bb:e0:4e:60:cd:a5:81:61:7d:5c:cd: 40:58:0c:b3:a9:51:1a:59:1f:23:b6:d3:33:e1:dd: 8c:24:d1:1e:2c:f8:23:6d:fc:1f:f9:e7:d7:98:ac: db:02:82:32:8e:2b:6d:b1:12:a7:78:04:e3:7e:65: 9b:e5:ec:5b:ea:52:04:4e:62:39:29:b6:87:4d:4a: 2d:94:f7:a8:49:70:81:9f:5a:3d:a7:ec:67:30:0f: 44:61:7b:1f:cb:ff:f2:68:ab:58:63:fa:b8:10:03: 22:ff:7e:15:4c:13:1b:c5:8b:a5:25:09:a9:03:7e: 36:66:00:f8:a2:83:50:d4:88:2c:d0:31:52:28:f4: fc:fd:57:e4:d0:33:cb:49:96:40:53:7a:2a:ff:e0: 1f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:19:09:20:01:8B:63:54:0E:85:86:E5:FA:70:36:DB:81:12:0D:43 X509v3 Authority Key Identifier: keyid:A1:C2:39:65:70:40:17:72:42:9E:B8:CB:B0:DF:66:53:F1:67:8C:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:ef:40:7f:6d:cd:8f:ce:0d:9a:4f:d4:70:78:8e:21:ae:5d: d5:d1:1b:8a:25:a5:44:56:62:73:7c:0f:ee:b8:10:45:41:91: 19:7e:13:1b:cf:18:13:54:40:03:10:ec:73:73:43:81:50:b3: 42:fe:cb:10:cf:70:de:16:09:f0:88:8c:d9:0f:bd:dd:7a:2d: 4c:d2:72:99:f8:de:25:60:86:e1:f3:f9:01:a2:43:78:76:f6: 4e:e2:5a:fa:d6:40:57:03:44:46:e4:83:9d:ea:10:e2:c7:83: 8c:17:92:11:81:85:7a:d2:d4:c9:dc:f8:54:5f:6e:07:d7:17: 90:d7:bf:40:a0:c3:71:9f:90:34:1e:9d:59:49:17:48:18:59: c0:6c:15:1a:cc:1a:1f:a5:d8:cc:3f:33:62:63:f6:52:4a:68: fe:86:50:39:d1:26:5b:d5:a0:50:a9:7c:fa:72:76:d8:f3:2f: 47:5a:7d:f0:cf:9a:76:88:c6:b9:35:bb:27:f2:ea:37:a6:b3: 17:08:bb:b8:4e:74:4a:15:b0:33:0c:4f:e5:d3:ec:fd:eb:c7: 78:69:8a:90:82:a7:08:4b:a2:c6:e5:3f:05:43:07:87:c9:1b: 2b:03:25:e0:89:33:98:79:24:af:87:df:8c:c3:a4:16:c3:7a: 09:79:41:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2RUMxMTAvBgNVBAUTKEExQzIzOTY1NzA0MDE3NzI0MjlFQjhDQkIwREY2NjUz RjE2NzhDRjYwHhcNMjYwNTEyMTU0MzE1WhcNMjYwNTE5MTU0MzE1WjAYMRYwFAYD VQQDEw02YTAzNGE5My05MWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2eq0l62Rl8cUr/aqH9Wmxbv8UZ/UmZw0Atjq/A6ux8fbpLS5BG+633h6o24T 6SgTKSq4mJWbNWpzV/1hQIKgfY6rqtHXYXkoZQhAshHnotmnsjT7Oz7BznXTpnX3 fXlOMbUrW5rbcVJ1W0/Nu+BOYM2lgWF9XM1AWAyzqVEaWR8jttMz4d2MJNEeLPgj bfwf+efXmKzbAoIyjittsRKneATjfmWb5exb6lIETmI5KbaHTUotlPeoSXCBn1o9 p+xnMA9EYXsfy//yaKtYY/q4EAMi/34VTBMbxYulJQmpA342ZgD4ooNQ1Igs0DFS KPT8/Vfk0DPLSZZAU3oq/+AfvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE4ZCSAB i2NUDoWG5fpwNtuBEg1DMB8GA1UdIwQYMBaAFKHCOWVwQBdyQp64y7DfZlPxZ4z2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTZFQy9EM0FCNjAxNjE0 QzgxMUU1QTJGQ0VGMTVDNEY5QUUwMi9vY0k1WlhCQUYzSkNucmpMc045bVVfRm5q UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29jSTVaWEJBRjNKQ25yakxzTjltVV9GbmpQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTZFQy9EM0FCNjAxNjE0QzgxMUU1QTJGQ0VGMTVDNEY5QUUwMi9vY0k1WlhCQUYz SkNucmpMc045bVVfRm5qUFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMu9Af23Nj84Nmk/UcHiOIa5d1dEbiiWlRFZic3wP7rgQRUGRGX4TG88YE1RA AxDsc3NDgVCzQv7LEM9w3hYJ8IiM2Q+93XotTNJymfjeJWCG4fP5AaJDeHb2TuJa +tZAVwNERuSDneoQ4seDjBeSEYGFetLUydz4VF9uB9cXkNe/QKDDcZ+QNB6dWUkX SBhZwGwVGswaH6XYzD8zYmP2Ukpo/oZQOdEmW9WgUKl8+nJ22PMvR1p98M+adojG uTW7J/LqN6azFwi7uE50ShWwMwxP5dPs/evHeGmKkIKnCEuixuU/BUMHh8kbKwMl 4IkzmHkkr4ffjMOkFsN6CXlB0Q== -----END CERTIFICATE-----Generated at Wed May 13 07:42:59 2026 by rpki-client