$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft File: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft (raw, json) Hash identifier: TSZIW5aKoMfz/ltPQR9C65DfHdOGPZ2lx8EZYEzse94= Subject key identifier: 34:53:D2:A4:EE:3A:D2:4F:8F:A6:A3:CD:0A:75:DE:0E:2D:E2:0C:B1 Authority key identifier: DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21 Certificate issuer: /CN=A91CF848/serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321 Certificate serial: 02E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft Manifest number: 02D7 Signing time: Mon 11 May 2026 01:25:59 +0000 Manifest this update: Mon 11 May 2026 01:25:59 +0000 Manifest next update: Mon 18 May 2026 01:25:59 +0000 Files and hashes: 1: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl (hash: TR5wL6RfdYFiZBNt74lfW8ELIh1YH42qIrJJQixN/8I=) 2: E9399E722E7211EDAE100C3DC4F9AE02.roa (hash: 41XnV0Dfd97uGyPbDbqHHH2dJuzZIdcHH6ek0SjFVbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 01:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 737 (0x2e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF848, serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321 Validity Not Before: May 11 01:25:59 2026 GMT Not After : May 18 01:25:59 2026 GMT Subject: CN=6a013027-41fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:92:c6:a5:98:46:96:ea:2a:00:e5:69:b0:68: 34:88:6d:2c:91:66:08:b8:ef:b9:de:61:8b:bc:4b: 27:36:50:6c:55:fe:c9:4e:ed:a0:3c:d7:84:46:53: e0:06:08:7c:1e:89:40:62:cc:ed:ba:75:33:22:a4: d2:21:c0:84:98:3f:79:a3:be:cf:9f:2b:0c:50:24: c4:f0:b5:c6:eb:9f:a0:45:ba:f2:bd:7c:61:cc:35: 46:ae:f2:83:1b:27:15:68:61:6c:76:6a:9f:e3:28: 5d:80:23:9d:42:1c:69:32:04:e3:0c:73:3a:6e:c6: c4:46:74:c6:15:f0:9e:ff:6b:70:51:ef:01:77:28: d6:de:95:78:42:44:95:ca:a0:b6:46:a8:5b:c1:9a: 36:b2:a2:95:ac:ca:27:2c:20:4f:5e:ea:f7:37:1e: 9c:41:0c:cb:a9:ba:81:b1:b8:96:a7:04:e1:b2:ea: 2f:5a:75:23:31:71:d8:29:8f:fb:7b:19:04:5e:37: 32:c7:f3:0e:90:f0:a4:73:d1:0e:f1:f0:c8:52:ff: e0:c4:db:ac:4e:5d:00:2f:c0:60:92:de:54:55:e7: dd:6a:7b:34:a5:04:0c:9a:20:f9:8e:ee:aa:31:93: 3e:b4:d8:28:c3:8f:dc:97:cb:cb:c2:d5:52:53:cd: 73:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:53:D2:A4:EE:3A:D2:4F:8F:A6:A3:CD:0A:75:DE:0E:2D:E2:0C:B1 X509v3 Authority Key Identifier: keyid:DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:62:3b:6c:81:da:2f:79:b3:f9:cf:6e:5a:a0:5b:67:cd:0c: 97:38:37:45:c4:5b:1d:54:6f:ba:0b:ad:ce:96:91:cf:d5:bc: dc:3e:a4:c5:2e:32:6c:69:43:3a:31:69:00:60:22:d8:2b:1c: 60:65:6a:03:79:93:0d:ad:69:6a:58:28:09:96:8f:cd:b8:41: e7:e8:cf:f4:ff:5e:11:b4:7c:5b:13:6d:4d:15:af:0f:e8:11: 4b:f6:bb:bf:25:ec:7f:a8:29:29:91:7a:a1:b7:40:51:b0:42: 55:86:3c:f7:64:e4:10:12:8c:87:f4:4c:b9:6c:ba:d3:7c:0e: 07:91:54:b5:48:ab:d2:6c:51:8a:f8:e3:1a:90:67:57:f4:e6: 7f:a6:d2:40:f6:88:9d:34:97:58:3a:53:d0:9b:53:92:4d:7a: c3:9a:1a:6f:02:a5:08:08:57:42:76:28:b2:52:00:be:12:40: 4d:3f:d3:52:87:2c:e7:a2:d1:80:23:b5:f5:fa:a3:f3:ae:fd: 6f:95:0d:8c:f1:2f:bf:d3:67:34:54:b8:e8:fe:d0:59:f9:e8: 55:5b:e2:aa:b5:c2:a1:bb:b1:12:79:ec:31:95:90:f2:59:31: 9d:82:33:d5:1f:19:19:a3:b5:8f:cf:19:3c:5f:94:28:66:df: 77:e4:99:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y4NDgxMTAvBgNVBAUTKERCMzUzRjk2QzBEMDJDREQ0QzFGMDhEQTFCQzE2OUZF RTU4RDczMjEwHhcNMjYwNTExMDEyNTU5WhcNMjYwNTE4MDEyNTU5WjAYMRYwFAYD VQQDEw02YTAxMzAyNy00MWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ZLGpZhGluoqAOVpsGg0iG0skWYIuO+53mGLvEsnNlBsVf7JTu2gPNeERlPg Bgh8HolAYsztunUzIqTSIcCEmD95o77PnysMUCTE8LXG65+gRbryvXxhzDVGrvKD GycVaGFsdmqf4yhdgCOdQhxpMgTjDHM6bsbERnTGFfCe/2twUe8BdyjW3pV4QkSV yqC2RqhbwZo2sqKVrMonLCBPXur3Nx6cQQzLqbqBsbiWpwThsuovWnUjMXHYKY/7 exkEXjcyx/MOkPCkc9EO8fDIUv/gxNusTl0AL8Bgkt5UVefdans0pQQMmiD5ju6q MZM+tNgow4/cl8vLwtVSU81zoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDRT0qTu OtJPj6ajzQp13g4t4gyxMB8GA1UdIwQYMBaAFNs1P5bA0CzdTB8I2hvBaf7ljXMh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjg0OC9DQURBQjdCMjJF NkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxOMU1Id2phRzhGcF91V05j eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6VV9sc0RRTE4xTUh3amFHOEZwX3VXTmN5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Rjg0OC9DQURBQjdCMjJFNkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxO MU1Id2phRzhGcF91V05jeUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfGI7bIHaL3mz+c9uWqBbZ80Mlzg3RcRbHVRvugutzpaRz9W83D6kxS4ybGlD OjFpAGAi2CscYGVqA3mTDa1palgoCZaPzbhB5+jP9P9eEbR8WxNtTRWvD+gRS/a7 vyXsf6gpKZF6obdAUbBCVYY892TkEBKMh/RMuWy603wOB5FUtUir0mxRivjjGpBn V/Tmf6bSQPaInTSXWDpT0JtTkk16w5oabwKlCAhXQnYoslIAvhJATT/TUocs56LR gCO19fqj8679b5UNjPEvv9NnNFS46P7QWfnoVVviqrXCobuxEnnsMZWQ8lkxnYIz 1R8ZGaO1j88ZPF+UKGbfd+SZcw== -----END CERTIFICATE-----Generated at Wed May 13 00:23:42 2026 by rpki-client