$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft File: 4ed5yzH_53MaM7Xrfq_GsqvbROM.mft (raw, json) Hash identifier: eI/zZIO1UoXadbT1VBI5nho7VXL/r/YDMPaXtpdlXO0= Subject key identifier: 0F:2E:9C:32:65:B0:0A:E6:67:D5:E9:33:60:1A:FE:BB:03:31:11:15 Authority key identifier: E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 Certificate issuer: /CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3 Certificate serial: 0220 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft Manifest number: 020E Signing time: Mon 11 May 2026 03:03:00 +0000 Manifest this update: Mon 11 May 2026 03:03:00 +0000 Manifest next update: Mon 18 May 2026 03:03:00 +0000 Files and hashes: 1: 4ed5yzH_53MaM7Xrfq_GsqvbROM.crl (hash: jhBzy1CKyfaJQMCMsagFlHjrl2xYnOn5nv/HR6L0IHk=) 2: 9F1B80CA372311EEACE5BF61C4F9AE02.roa (hash: pEZ4PzrQv6b6ndP0HpfE6ghr1BZrsxRE21MGz3Ej87E=) 3: 9E6C93C6372311EEACE5BF61C4F9AE02.roa (hash: oIFWU2U3FpoDzzLzWPnxsOr677OIj+OUoCa9oBm5yVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 03:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 544 (0x220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3737, serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3 Validity Not Before: May 11 03:03:00 2026 GMT Not After : May 18 03:03:00 2026 GMT Subject: CN=6a0146e4-1d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2b:51:4d:a4:4a:e3:91:54:51:d4:e3:fc:b7: ed:47:3a:2d:42:df:56:9f:d3:2e:d1:b7:8d:6e:04: 23:f7:c0:b1:c5:c0:86:d8:f9:1d:f6:de:6a:4e:51: 6b:d0:f4:4b:46:4f:bc:9d:bc:f1:f8:a6:6d:5a:12: 44:dc:a1:3c:14:9a:7d:d6:95:87:11:fb:f5:e0:b4: 66:e7:d5:a2:2d:98:df:ae:e9:5c:25:24:e1:35:3c: e6:7b:2e:22:85:82:c9:aa:82:50:53:80:ac:ae:a0: 00:b9:70:bf:70:c3:ac:59:cb:f1:50:81:69:d1:ba: e6:87:a7:4d:ce:38:87:56:47:f6:d4:2c:76:37:73: e0:51:7e:a5:7a:4f:be:e0:f1:b7:56:66:80:eb:6c: cb:4f:8f:51:b7:7e:c9:0a:fe:7b:e4:27:f9:64:e5: 70:a4:1b:8e:f1:21:74:b6:42:2d:9e:86:c9:af:50: 6a:31:68:dd:45:7a:eb:aa:70:5e:cb:35:66:c3:9b: 66:44:ae:aa:67:5f:ce:53:78:6c:8d:7e:db:e7:8b: 77:9f:ca:a9:b2:89:9b:a4:20:30:54:a0:80:f1:c5: b9:fa:31:1f:ae:92:44:40:ce:d8:b6:2e:78:8c:63: 03:92:ec:66:d6:c7:23:3c:7f:20:76:30:e9:2d:d4: 04:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:2E:9C:32:65:B0:0A:E6:67:D5:E9:33:60:1A:FE:BB:03:31:11:15 X509v3 Authority Key Identifier: keyid:E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:e6:46:8e:53:51:e8:2c:72:1a:77:5b:4e:1a:d5:97:e5:74: e4:51:66:f6:c1:28:15:79:b4:71:bd:7b:96:95:02:95:26:e7: 69:9d:96:53:90:13:51:a9:35:8f:3c:10:ea:95:d5:94:94:83: 3b:13:53:e4:2c:b7:32:82:f5:43:10:dc:20:80:61:84:c2:b9: 1e:ac:90:2d:a2:25:6f:cf:35:4c:8b:aa:98:ef:3b:c3:d4:39: b2:8e:e1:09:ef:df:ba:78:40:2a:f7:27:d8:ab:5d:66:49:4a: 52:9b:e0:40:f7:db:a0:9f:50:05:66:3f:63:be:2c:ca:d3:54: 16:76:e6:4d:b8:dc:0e:fc:b8:4a:4f:75:5f:4c:44:96:c5:5b: 6d:a3:33:9c:bc:0c:d7:42:80:4d:f8:a0:18:65:0d:37:0c:87: 30:1f:3d:cf:1b:33:d0:2d:71:e5:c4:83:fd:e1:2b:02:d6:6d: ad:97:44:4d:9a:25:98:8e:9f:25:7e:37:1e:65:96:43:01:22: 33:96:7f:02:b7:99:d6:b1:5d:0c:f4:56:d8:04:42:89:a3:8f: 6b:2b:bf:dc:3a:a3:42:17:ba:5b:f0:c0:f9:ea:59:72:0e:44: 86:5a:75:5a:4c:7b:8e:70:1b:85:ee:74:10:d3:cb:1f:8c:13: 7d:bd:27:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3MzcxMTAvBgNVBAUTKEUxRTc3OUNCMzFGRkU3NzMxQTMzQjVFQjdFQUZDNkIy QUJEQjQ0RTMwHhcNMjYwNTExMDMwMzAwWhcNMjYwNTE4MDMwMzAwWjAYMRYwFAYD VQQDEw02YTAxNDZlNC0xZDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlCtRTaRK45FUUdTj/LftRzotQt9Wn9Mu0beNbgQj98CxxcCG2Pkd9t5qTlFr 0PRLRk+8nbzx+KZtWhJE3KE8FJp91pWHEfv14LRm59WiLZjfrulcJSThNTzmey4i hYLJqoJQU4CsrqAAuXC/cMOsWcvxUIFp0brmh6dNzjiHVkf21Cx2N3PgUX6lek++ 4PG3VmaA62zLT49Rt37JCv575Cf5ZOVwpBuO8SF0tkItnobJr1BqMWjdRXrrqnBe yzVmw5tmRK6qZ1/OU3hsjX7b54t3n8qpsombpCAwVKCA8cW5+jEfrpJEQM7Yti54 jGMDkuxm1scjPH8gdjDpLdQEIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA8unDJl sArmZ9XpM2Aa/rsDMREVMB8GA1UdIwQYMBaAFOHnecsx/+dzGjO1636vxrKr20Tj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzczNy84Mjk0MzYzRTMz NTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUzTWFNN1hyZnFfR3NxdmJS T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRlZDV5ekhfNTNNYU03WHJmcV9Hc3F2YlJPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzczNy84Mjk0MzYzRTMzNTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUz TWFNN1hyZnFfR3NxdmJST00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAleZGjlNR6CxyGndbThrVl+V05FFm9sEoFXm0cb17lpUClSbnaZ2WU5ATUak1 jzwQ6pXVlJSDOxNT5Cy3MoL1QxDcIIBhhMK5HqyQLaIlb881TIuqmO87w9Q5so7h Ce/funhAKvcn2KtdZklKUpvgQPfboJ9QBWY/Y74sytNUFnbmTbjcDvy4Sk91X0xE lsVbbaMznLwM10KATfigGGUNNwyHMB89zxsz0C1x5cSD/eErAtZtrZdETZolmI6f JX43HmWWQwEiM5Z/AreZ1rFdDPRW2ARCiaOPayu/3DqjQhe6W/DA+epZcg5Ehlp1 Wkx7jnAbhe50ENPLH4wTfb0n4A== -----END CERTIFICATE-----Generated at Wed May 13 03:09:56 2026 by rpki-client