$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft File: bb1cTQEh_LMY54xFG29WcyCYYAI.mft (raw, json) Hash identifier: poDq1QMtAuPTiuXUBqcqXA62raeqhJzYO3DKllc++Yo= Subject key identifier: 2C:20:FF:48:2F:EC:4B:20:62:4F:BE:34:AA:9E:41:BC:A3:7E:1B:51 Authority key identifier: 6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02 Certificate issuer: /CN=A91D1216/serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002 Certificate serial: 047D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft Manifest number: 043D Signing time: Mon 11 May 2026 00:30:16 +0000 Manifest this update: Mon 11 May 2026 00:30:15 +0000 Manifest next update: Mon 18 May 2026 00:30:15 +0000 Files and hashes: 1: bb1cTQEh_LMY54xFG29WcyCYYAI.crl (hash: ANVaiPktLTXv6g7RBdZdzrB644r07ovqSvUJeOrjdd8=) 2: AD17704445F611EE97DF317CC4F9AE02.roa (hash: /vhmP+Y6Yb84j9vhzg0Zbk6HCi7aZS+Km8vmqSzsrmM=) 3: 943D15902D1011EFBBEBA67BC4F9AE02.roa (hash: dPxIUNEqYuFtJskM6HAN9FGSFnQOEAtn06dnZBLnvG8=) 4: AEE9F9E6326011ED9031BC4FC4F9AE02.roa (hash: r+lrx7WpAI1BilPAcnEksEUaCu2KnCEQLhymAPB2i1s=) 5: 9B0C244C73B611EEB18A0385C4F9AE02.roa (hash: tBey+DH64+Kn32UVWimcmMh2WoGFqT18gD06i2GEZsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 00:30:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1149 (0x47d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1216, serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002 Validity Not Before: May 11 00:30:15 2026 GMT Not After : May 18 00:30:15 2026 GMT Subject: CN=6a012317-4f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5c:19:2c:56:87:2e:8a:32:7a:62:c5:b5:a6: e9:7b:50:16:06:0d:3c:39:86:1a:4a:6d:1f:c3:53: 1c:35:59:52:0e:d1:24:3c:7f:09:94:fa:1e:71:d6: e9:1b:5d:f6:94:a8:0b:4e:81:3a:a2:f9:ae:42:8c: 70:35:92:22:2d:31:5e:d4:21:8c:fd:37:52:51:06: f2:e0:b8:d7:3e:e3:34:f6:75:b7:97:68:5b:de:0d: 78:93:46:62:5e:01:92:58:a5:fe:da:7c:39:4c:dc: 18:d5:5f:9a:7c:96:98:60:37:b0:b5:e8:26:78:3e: 0a:ca:08:6c:24:c5:89:c0:12:ad:65:8c:27:e9:f5: 82:1f:36:98:e8:9d:fb:c6:00:5f:61:05:67:c8:06: 32:1c:36:6f:20:f2:5b:ec:5a:f9:3e:81:3d:d3:da: 57:53:41:02:c4:24:5f:3b:8f:49:01:2b:1a:ef:93: b8:ee:81:ed:35:db:41:d9:36:22:6c:e9:cd:31:81: 80:db:f7:74:45:5e:3b:1a:6f:52:a4:e7:18:55:b8: a8:38:75:f9:f1:3e:71:f3:30:e0:44:59:1f:9e:7b: 0e:e4:8f:47:b2:e1:aa:9a:10:c2:15:89:14:ba:56: 88:78:5e:a7:31:75:83:54:9b:9d:92:1e:bc:28:b5: d6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:20:FF:48:2F:EC:4B:20:62:4F:BE:34:AA:9E:41:BC:A3:7E:1B:51 X509v3 Authority Key Identifier: keyid:6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:19:98:ee:24:b9:24:27:5c:cb:83:d4:04:bf:d3:c5:91:58: 1d:b3:f3:77:55:1d:f2:a6:70:ad:3a:3e:a1:69:30:ee:fd:3c: f1:89:3d:3f:4e:8f:62:b2:75:ab:31:0f:d9:0e:df:8a:67:2f: 68:5b:a8:d6:41:ed:f0:af:8b:0d:c3:49:01:d3:c1:8a:b5:bc: e8:f2:51:1e:4c:17:73:6f:23:56:5b:39:6b:f0:17:d3:fa:9c: 47:04:9c:a4:08:b1:29:da:9f:6e:7e:5c:3d:ec:2b:44:ce:0a: af:6d:4f:96:03:50:d8:81:9a:a5:0c:9c:67:14:f4:fa:42:8f: 51:17:b8:0b:94:c8:88:af:34:a2:c7:10:e5:33:77:21:8f:38: b0:eb:89:f9:13:65:d6:f0:8b:a2:ab:d6:d9:b0:82:f8:8b:e6: 67:a8:49:a2:2c:3a:5e:12:54:13:ec:be:f4:54:01:89:41:57: 4b:87:12:ec:b8:73:19:4e:9e:82:a2:31:74:b8:47:51:ce:13: ef:a1:51:cd:c0:db:78:c1:2d:f3:70:c2:14:5f:ec:f1:4b:6b: 2e:98:9f:53:2a:4d:a4:72:a4:c5:42:4d:61:4c:5d:e4:c7:30: d8:e3:38:ed:27:e4:ae:ac:27:a8:f6:5a:2e:06:4a:a8:a1:9a: 93:0f:c2:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyMTYxMTAvBgNVBAUTKDZEQkQ1QzREMDEyMUZDQjMxOEU3OEM0NTFCNkY1Njcz MjA5ODYwMDIwHhcNMjYwNTExMDAzMDE1WhcNMjYwNTE4MDAzMDE1WjAYMRYwFAYD VQQDEw02YTAxMjMxNy00ZjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlwZLFaHLooyemLFtabpe1AWBg08OYYaSm0fw1McNVlSDtEkPH8JlPoecdbp G132lKgLToE6ovmuQoxwNZIiLTFe1CGM/TdSUQby4LjXPuM09nW3l2hb3g14k0Zi XgGSWKX+2nw5TNwY1V+afJaYYDewtegmeD4KyghsJMWJwBKtZYwn6fWCHzaY6J37 xgBfYQVnyAYyHDZvIPJb7Fr5PoE909pXU0ECxCRfO49JASsa75O47oHtNdtB2TYi bOnNMYGA2/d0RV47Gm9SpOcYVbioOHX58T5x8zDgRFkfnnsO5I9HsuGqmhDCFYkU ulaIeF6nMXWDVJudkh68KLXWSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCwg/0gv 7EsgYk++NKqeQbyjfhtRMB8GA1UdIwQYMBaAFG29XE0BIfyzGOeMRRtvVnMgmGAC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIxNi9EQzc4MjY4Q0I5 NEIxMUVDODMyQjc0MTlDNEY5QUUwMi9iYjFjVFFFaF9MTVk1NHhGRzI5V2N5Q1lZ QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JiMWNUUUVoX0xNWTU0eEZHMjlXY3lDWVlBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTIxNi9EQzc4MjY4Q0I5NEIxMUVDODMyQjc0MTlDNEY5QUUwMi9iYjFjVFFFaF9M TVk1NHhGRzI5V2N5Q1lZQUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACBmY7iS5JCdcy4PUBL/TxZFYHbPzd1Ud8qZwrTo+oWkw7v088Yk9P06PYrJ1 qzEP2Q7fimcvaFuo1kHt8K+LDcNJAdPBirW86PJRHkwXc28jVls5a/AX0/qcRwSc pAixKdqfbn5cPewrRM4Kr21PlgNQ2IGapQycZxT0+kKPURe4C5TIiK80oscQ5TN3 IY84sOuJ+RNl1vCLoqvW2bCC+IvmZ6hJoiw6XhJUE+y+9FQBiUFXS4cS7LhzGU6e gqIxdLhHUc4T76FRzcDbeMEt83DCFF/s8UtrLpifUypNpHKkxUJNYUxd5Mcw2OM4 7SfkrqwnqPZaLgZKqKGakw/CNw== -----END CERTIFICATE-----Generated at Tue May 12 22:15:43 2026 by rpki-client