$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft File: CROi4pwkcA4hQx4EweNJf9X5qAA.mft (raw, json) Hash identifier: nZzkh6xvHCnBIdtPAdF6b6IxMkPMY85Xd0OFCq/Sv60= Subject key identifier: 03:A5:95:B7:4F:37:A2:02:3D:3B:E5:43:7B:22:82:77:F8:24:B5:BA Authority key identifier: 09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 Certificate issuer: /CN=A91D65C2/serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Certificate serial: 01D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft Manifest number: 01BF Signing time: Wed 13 May 2026 03:59:54 +0000 Manifest this update: Wed 13 May 2026 03:59:53 +0000 Manifest next update: Wed 20 May 2026 03:59:53 +0000 Files and hashes: 1: CROi4pwkcA4hQx4EweNJf9X5qAA.crl (hash: ms13FttKvlFNGLcwb5RyRNNxLBChZHQzYFv1Yxfhr5Y=) 2: AA134FD6BD1411EE95F45624C4F9AE02.roa (hash: PppVk2NI0XPWKna+ZtR6ofXLD7gkTcUleObVM6K34rE=) 3: C3A53484B06011EEA1D18B7FC4F9AE02.roa (hash: mmPmljEgq/UT3GHcfHd5W8JqbEjou9e+RRjhVJG9hpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 03:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 464 (0x1d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D65C2, serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Validity Not Before: May 13 03:59:53 2026 GMT Not After : May 20 03:59:53 2026 GMT Subject: CN=6a03f73a-4023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e8:50:28:78:f6:7a:75:d9:23:a1:c2:fa:67: d1:15:a0:a9:f8:d9:1a:5f:63:9a:8e:5b:13:de:aa: b8:e8:90:12:a8:64:78:e3:0e:b1:39:74:5e:3e:71: 3b:00:c8:40:27:4b:a8:d7:30:27:45:8b:5f:bc:1c: 89:40:95:94:47:d8:b4:70:d2:aa:12:11:fc:79:e4: 90:3f:4b:af:9d:2f:68:fe:fd:11:29:29:ab:13:10: dd:1f:85:8a:98:e7:37:76:1f:06:c1:8f:d0:2b:23: 3b:3c:c6:6f:3a:ac:a5:72:4f:63:df:60:93:98:b8: e8:99:ac:93:3d:97:2c:ba:28:6e:89:52:9a:57:3a: 35:0c:84:28:6f:44:cf:e1:12:57:2e:6a:4b:52:8e: c3:4e:10:a1:4d:4f:f8:d0:8f:11:46:12:e6:67:c2: 39:61:0f:e5:11:f8:88:6c:f4:b3:fe:05:aa:e3:cb: 79:ba:7f:05:ac:67:79:ff:94:a5:6c:8c:67:4d:8e: 70:4f:86:fe:4d:5f:48:77:bf:c0:a3:51:7a:61:83: 5a:57:d8:4f:92:57:34:f6:eb:69:0e:43:e8:88:40: a0:a8:7a:4e:ef:0d:0f:8f:38:e0:d3:d2:de:c7:f0: a5:b4:67:95:12:16:67:35:c5:97:3d:4a:c7:3f:20: 0e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A5:95:B7:4F:37:A2:02:3D:3B:E5:43:7B:22:82:77:F8:24:B5:BA X509v3 Authority Key Identifier: keyid:09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:a2:80:51:44:62:5b:af:29:83:45:f1:c7:54:92:57:29:a5: 7a:ef:6b:0d:6b:4b:7b:5f:73:ac:bf:ea:42:1c:e0:f1:50:03: 3a:3e:a6:8b:4b:37:d0:07:47:05:58:dc:ec:06:25:a6:0c:b1: 99:13:34:62:69:74:fa:ad:5b:10:ab:23:54:0e:4f:19:e0:bc: 76:0a:dd:bb:0d:60:fa:c0:33:4f:5b:46:b8:1e:d2:e5:33:1d: 3f:82:10:37:fa:41:a8:d6:63:4f:61:61:1f:31:ab:94:ec:d7: 00:d2:a3:93:fa:78:46:9c:1b:64:0e:f3:e3:dc:91:7e:37:2f: d0:3c:94:f8:f0:f9:30:22:f8:70:9b:88:b6:cc:66:b2:40:68: 47:14:00:1b:82:24:4e:26:39:6d:69:77:b5:02:1e:38:2f:de: c2:eb:26:1e:9b:ab:b3:57:fd:d5:0a:44:9f:97:92:7f:d4:40: 75:22:97:2c:e4:bb:70:b5:66:7e:1b:1c:9f:9b:57:df:68:3d: f9:0b:8b:65:e4:64:5c:92:43:1e:3b:69:77:e2:6d:f2:45:02: 90:09:af:a5:8e:92:e7:2e:af:1c:4c:da:6f:03:a6:2c:f1:e6: 17:39:74:22:3e:c2:4b:e9:9c:8f:4d:54:33:fd:b7:22:95:81: 39:f9:6e:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1QzIxMTAvBgNVBAUTKDA5MTNBMkUyOUMyNDcwMEUyMTQzMUUwNEMxRTM0OTdG RDVGOUE4MDAwHhcNMjYwNTEzMDM1OTUzWhcNMjYwNTIwMDM1OTUzWjAYMRYwFAYD VQQDEw02YTAzZjczYS00MDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtuhQKHj2enXZI6HC+mfRFaCp+NkaX2OajlsT3qq46JASqGR44w6xOXRePnE7 AMhAJ0uo1zAnRYtfvByJQJWUR9i0cNKqEhH8eeSQP0uvnS9o/v0RKSmrExDdH4WK mOc3dh8GwY/QKyM7PMZvOqylck9j32CTmLjomayTPZcsuihuiVKaVzo1DIQob0TP 4RJXLmpLUo7DThChTU/40I8RRhLmZ8I5YQ/lEfiIbPSz/gWq48t5un8FrGd5/5Sl bIxnTY5wT4b+TV9Id7/Ao1F6YYNaV9hPklc09utpDkPoiECgqHpO7w0Pjzjg09Le x/CltGeVEhZnNcWXPUrHPyAOaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAOllbdP N6ICPTvlQ3signf4JLW6MB8GA1UdIwQYMBaAFAkTouKcJHAOIUMeBMHjSX/V+agA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjVDMi83NkVFNzk1Q0Iw NjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NBNGhReDRFd2VOSmY5WDVx QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NST2k0cHdrY0E0aFF4NEV3ZU5KZjlYNXFBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjVDMi83NkVFNzk1Q0IwNjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NB NGhReDRFd2VOSmY5WDVxQUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOqKAUURiW68pg0Xxx1SSVymleu9rDWtLe19zrL/qQhzg8VADOj6mi0s30AdH BVjc7AYlpgyxmRM0Yml0+q1bEKsjVA5PGeC8dgrduw1g+sAzT1tGuB7S5TMdP4IQ N/pBqNZjT2FhHzGrlOzXANKjk/p4RpwbZA7z49yRfjcv0DyU+PD5MCL4cJuItsxm skBoRxQAG4IkTiY5bWl3tQIeOC/ewusmHpurs1f91QpEn5eSf9RAdSKXLOS7cLVm fhscn5tX32g9+QuLZeRkXJJDHjtpd+Jt8kUCkAmvpY6S5y6vHEzabwOmLPHmFzl0 Ij7CS+mcj01UM/23IpWBOfluVw== -----END CERTIFICATE-----Generated at Wed May 13 09:03:51 2026 by rpki-client