$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft File: _0lSk8tfFeXRS6zC2xBSsuLIJcg.mft (raw, json) Hash identifier: 4zFGhEkxE/pQ+kEdgDIsoCyk9P4QJKu1GH+tAVRQ7P4= Subject key identifier: 3F:46:EE:F5:1F:AA:C2:4B:24:B0:2F:AF:EE:15:8F:08:D2:2D:55:E6 Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 Certificate issuer: /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Certificate serial: 358C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft Manifest number: 3556 Signing time: Tue 12 May 2026 14:55:39 +0000 Manifest this update: Tue 12 May 2026 14:55:39 +0000 Manifest next update: Tue 19 May 2026 14:55:39 +0000 Files and hashes: 1: _0lSk8tfFeXRS6zC2xBSsuLIJcg.crl (hash: M2/3oQf1c2aDuwj/GvJUv2JsmkVLynYObyjWYkb4plM=) 2: B2306182F3F911EAB9D11D26C4F9AE02.roa (hash: 0N8+UfH8NuaA9qjC81UIdofpt+ivc/1OzKhyAWBOmEo=) 3: 0DEF13D4FC1711EC919B6757C4F9AE02.roa (hash: u2Ar2PlNEkyQ2SuYxInhQURzKf5tXQUSrdtG0Brtz4Q=) 4: 75906378FC1F11ECAD09AF21C4F9AE02.roa (hash: 6rBcARPDFtZ25ZUjJ6KXnh4+h4VHUuegYqgFp9CrpCA=) 5: 767E7B3CA60211EFBFCDB65FC4F9AE02.roa (hash: 4UFHtr4XeXNnq7KTZknkybZI+zmVWrMYnwFvfLsG+uw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:55:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13708 (0x358c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAA2, serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Validity Not Before: May 12 14:55:39 2026 GMT Not After : May 19 14:55:39 2026 GMT Subject: CN=6a033f6b-08a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:11:94:26:b5:6f:09:be:9c:84:9a:07:47:80: 92:d7:8f:61:a8:0d:f6:b8:59:01:d4:86:d0:a3:1e: b8:8a:8a:01:a2:fe:e0:26:ed:b3:1d:20:5e:38:1d: ad:f4:11:f9:a8:d6:d8:dd:5f:a0:d6:1e:e0:bf:f5: b5:94:f5:e9:6e:77:91:e8:72:c6:bf:4c:8d:c3:9c: 08:fa:f8:a0:e7:5c:e7:11:f5:db:1c:dd:5a:6d:94: a6:fc:b4:61:e2:3d:d6:98:62:fd:8d:47:2b:28:26: e4:b4:0d:71:c0:c7:b4:9d:85:04:5f:b5:5c:ad:b6: 30:23:50:9a:54:18:08:a0:bc:08:3f:96:bb:cb:74: cc:14:74:fa:76:79:c2:70:85:6c:d2:93:ae:8c:ee: f8:a7:98:cd:c5:e4:4a:a0:1c:49:b0:85:b7:d5:17: 65:12:f8:ab:52:42:e6:af:c4:0f:56:0e:50:8f:f0: d5:06:c3:3d:56:2a:c0:87:e3:72:c8:cd:24:15:f5: 96:b8:b5:1a:e0:28:e3:53:bf:40:52:28:8c:cb:96: b1:75:30:54:9d:90:51:3e:4d:1c:97:07:ea:e2:4e: 67:d7:9f:ac:34:0b:17:ba:7b:46:3d:3d:6f:14:23: 4e:d2:cb:bd:87:73:bc:6b:92:cb:87:d3:f6:db:88: 76:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:46:EE:F5:1F:AA:C2:4B:24:B0:2F:AF:EE:15:8F:08:D2:2D:55:E6 X509v3 Authority Key Identifier: keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:0c:b7:2f:77:e8:34:38:a6:2f:45:04:09:ef:c4:7d:5d:ac: 19:8c:82:42:75:be:2d:12:a7:5f:b2:20:6c:c7:88:dd:68:c8: c7:7f:e0:0e:fb:62:4e:d8:26:28:68:fa:56:de:09:d2:73:2e: c6:25:52:bf:84:fc:cd:a8:ac:4e:43:ab:69:6d:ac:f3:87:84: 20:39:d7:c4:d3:94:a0:29:0e:1f:97:ec:3b:ee:f5:0a:cc:4e: 1e:b9:b8:bf:40:d9:d7:16:ab:6f:38:5e:76:04:95:b6:43:a3: 0c:f1:61:eb:5c:3c:5c:14:5e:41:6d:93:fb:05:fb:53:64:09: 65:67:c7:f3:c6:3a:92:e6:8b:21:3d:c4:fa:65:da:e7:6d:73: 55:4a:d6:3f:ce:d8:a2:65:12:6d:b4:55:5a:6d:c7:6a:e7:c3: a9:a8:c9:a0:97:43:bf:3e:8b:76:49:3e:50:f0:8e:1c:dd:f2: 06:db:d2:ac:c8:67:f1:77:f2:3a:67:55:cb:87:18:d2:03:19: 32:63:25:f0:88:21:26:7d:5f:29:6c:11:ef:24:e6:c2:1a:ce: 2f:ec:1a:4b:56:0e:65:d3:62:a2:bc:1f:a3:7f:84:87:c9:ca: b3:d9:de:d9:75:da:6b:99:74:90:78:d7:0e:8a:54:ca:a9:8e: 4d:f9:f8:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBQTIxMTAvBgNVBAUTKEZGNDk1MjkzQ0I1RjE1RTVEMTRCQUNDMkRCMTA1MkIy RTJDODI1QzgwHhcNMjYwNTEyMTQ1NTM5WhcNMjYwNTE5MTQ1NTM5WjAYMRYwFAYD VQQDEw02YTAzM2Y2Yi0wOGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnhGUJrVvCb6chJoHR4CS149hqA32uFkB1IbQox64iooBov7gJu2zHSBeOB2t 9BH5qNbY3V+g1h7gv/W1lPXpbneR6HLGv0yNw5wI+vig51znEfXbHN1abZSm/LRh 4j3WmGL9jUcrKCbktA1xwMe0nYUEX7VcrbYwI1CaVBgIoLwIP5a7y3TMFHT6dnnC cIVs0pOujO74p5jNxeRKoBxJsIW31RdlEvirUkLmr8QPVg5Qj/DVBsM9VirAh+Ny yM0kFfWWuLUa4CjjU79AUiiMy5axdTBUnZBRPk0clwfq4k5n15+sNAsXuntGPT1v FCNO0su9h3O8a5LLh9P224h25QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD9G7vUf qsJLJLAvr+4VjwjSLVXmMB8GA1UdIwQYMBaAFP9JUpPLXxXl0UuswtsQUrLiyCXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFBMi9EMkFCMjkyQzFE OTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZlWFJTNnpDMnhCU3N1TElK Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wbFNrOHRmRmVYUlM2ekMyeEJTc3VMSUpjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFBMi9EMkFCMjkyQzFEOTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZl WFJTNnpDMnhCU3N1TElKY2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXgy3L3foNDimL0UECe/EfV2sGYyCQnW+LRKnX7IgbMeI3WjIx3/gDvtiTtgm KGj6Vt4J0nMuxiVSv4T8zaisTkOraW2s84eEIDnXxNOUoCkOH5fsO+71CsxOHrm4 v0DZ1xarbzhedgSVtkOjDPFh61w8XBReQW2T+wX7U2QJZWfH88Y6kuaLIT3E+mXa 521zVUrWP87YomUSbbRVWm3HaufDqajJoJdDvz6Ldkk+UPCOHN3yBtvSrMhn8Xfy OmdVy4cY0gMZMmMl8IghJn1fKWwR7yTmwhrOL+waS1YOZdNiorwfo3+Eh8nKs9ne 2XXaa5l0kHjXDopUyqmOTfn4xA== -----END CERTIFICATE-----Generated at Tue May 12 23:41:05 2026 by rpki-client