$ rpki-client -vvf rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft File: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft (raw, json) Hash identifier: Ll3jlAf/FGMFHxOKp0GdYCYyQCvWnQPogmvuzWtdce0= Subject key identifier: 11:83:9A:B1:B6:5D:06:98:53:93:20:30:E1:23:3F:85:D1:79:74:1D Authority key identifier: 4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92 Certificate issuer: /CN=A91D92FB/serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992 Certificate serial: 3588 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft Manifest number: 355D Signing time: Tue 12 May 2026 14:30:06 +0000 Manifest this update: Tue 12 May 2026 14:30:05 +0000 Manifest next update: Tue 19 May 2026 14:30:05 +0000 Files and hashes: 1: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl (hash: 7ATlAC8hK1KNp8AmnirHSKJ7CLFRhRTx+HL4z2olFYI=) 2: 3712E24075D911E8A722EC33C4F9AE02.roa (hash: 0XTEt5zoDaqcrBr+823BjJa/ThjwRUzgKmsZbBXqoBs=) 3: F86E9DE46B9811ED9330AC4CC4F9AE02.roa (hash: zH3hNiG3oNZT93Paosmg2thFHMW31DTiFkny+zicvU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:30:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13704 (0x3588) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D92FB, serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992 Validity Not Before: May 12 14:30:05 2026 GMT Not After : May 19 14:30:05 2026 GMT Subject: CN=6a03396e-8e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:31:61:1a:d7:33:9f:49:da:f0:37:7d:fd:b9: 10:0e:e3:da:ca:23:31:ea:7e:bc:11:30:0d:dd:d6: 42:4c:f1:98:83:15:bd:2d:26:81:61:b0:13:0f:cd: a1:e9:ad:1c:4c:91:79:2a:d9:f1:4f:18:36:1f:38: c2:94:b6:3a:5b:4f:ea:a2:5a:2c:70:b4:b7:c6:51: 18:30:33:b3:c1:c8:e8:45:ba:8b:16:d8:b8:b7:0e: 72:b6:ea:f3:fb:a8:cf:8d:e7:c0:ac:db:54:1c:6e: 1d:68:fd:e0:87:89:86:b6:6e:03:84:50:3d:02:5f: 88:ad:a1:7d:2a:63:50:d1:6f:aa:85:c4:9c:c0:76: a2:7d:d2:62:99:e2:e4:0a:50:19:1a:53:2c:32:5b: 58:ab:17:b8:a6:b7:d2:69:80:a1:59:38:9f:e0:60: 5b:ed:ed:ce:48:86:05:5a:57:70:19:71:50:18:97: 4f:16:97:cf:5a:9c:a3:92:6f:d1:f6:7a:5c:f8:35: db:a8:79:ac:dd:10:ee:a9:1e:bf:1a:7f:bc:c0:7f: 69:3c:bd:91:bd:37:3c:5c:82:61:c3:53:77:eb:f0: bd:fd:2b:7d:f4:ee:83:ae:db:e7:32:07:99:fb:ba: d8:1b:3d:69:66:ca:e0:cb:af:9b:83:55:04:ee:0f: c8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:83:9A:B1:B6:5D:06:98:53:93:20:30:E1:23:3F:85:D1:79:74:1D X509v3 Authority Key Identifier: keyid:4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:15:ed:bb:67:13:03:67:8d:f1:db:90:e9:3c:79:d6:23:95: 7f:99:59:b3:c0:64:7c:b1:63:36:54:99:c5:ee:ae:f9:94:72: 7d:d2:6c:e2:85:61:54:91:0d:51:4c:9c:97:87:6a:06:ba:dc: 6c:b3:60:79:1f:48:d7:a6:5d:a8:8b:9a:88:cc:cb:f3:9d:9d: d4:aa:a1:fb:67:22:68:97:19:bf:bb:ae:71:1a:3c:e0:87:33: f5:9a:58:4f:73:78:66:9b:d3:12:14:22:14:c4:76:9d:47:e9: 61:59:57:28:41:b2:d7:44:4e:71:aa:8b:ba:28:9c:64:d3:54: cd:11:1d:9e:c4:af:40:31:27:1f:52:cd:60:33:68:0b:88:3e: be:34:ac:92:2a:fc:20:96:8e:bf:bb:54:5b:9f:2a:d5:51:7a: c8:a3:77:de:c2:00:d0:58:35:d6:a6:28:d8:69:c8:39:26:bc: 24:b5:6f:58:a7:3f:53:93:29:8a:bb:96:e1:ad:e3:31:ef:76: fc:d1:79:24:cc:3c:07:1a:82:52:b8:ef:1f:14:af:8c:0d:b5: 78:5d:11:30:5b:11:08:89:b7:18:ea:42:f1:d2:40:e2:54:cd: 8d:26:22:ab:be:9a:c8:d9:3d:a0:f6:46:b2:84:02:b0:d2:3d: f9:71:b1:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkyRkIxMTAvBgNVBAUTKDRDMzZGODEyRTc2RDgyN0VDRTZFNTlCRDE1NjA1ODVD NTFFQ0Q5OTIwHhcNMjYwNTEyMTQzMDA1WhcNMjYwNTE5MTQzMDA1WjAYMRYwFAYD VQQDEw02YTAzMzk2ZS04ZTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujFhGtczn0na8Dd9/bkQDuPayiMx6n68ETAN3dZCTPGYgxW9LSaBYbATD82h 6a0cTJF5KtnxTxg2HzjClLY6W0/qoloscLS3xlEYMDOzwcjoRbqLFti4tw5yturz +6jPjefArNtUHG4daP3gh4mGtm4DhFA9Al+IraF9KmNQ0W+qhcScwHaifdJimeLk ClAZGlMsMltYqxe4prfSaYChWTif4GBb7e3OSIYFWldwGXFQGJdPFpfPWpyjkm/R 9npc+DXbqHms3RDuqR6/Gn+8wH9pPL2RvTc8XIJhw1N36/C9/St99O6DrtvnMgeZ +7rYGz1pZsrgy6+bg1UE7g/IKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBGDmrG2 XQaYU5MgMOEjP4XReXQdMB8GA1UdIwQYMBaAFEw2+BLnbYJ+zm5ZvRVgWFxR7NmS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTJGQi8zMjdGQzZCMjFE ODgxMUUyOThGM0EzRTAwOEIwMkNEMi9URGI0RXVkdGduN09ibG05RldCWVhGSHMy WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REYjRFdWR0Z243T2JsbTlGV0JZWEZIczJaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTJGQi8zMjdGQzZCMjFEODgxMUUyOThGM0EzRTAwOEIwMkNEMi9URGI0RXVkdGdu N09ibG05RldCWVhGSHMyWkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALBXtu2cTA2eN8duQ6Tx51iOVf5lZs8BkfLFjNlSZxe6u+ZRyfdJs4oVhVJEN UUycl4dqBrrcbLNgeR9I16ZdqIuaiMzL852d1Kqh+2ciaJcZv7uucRo84Icz9ZpY T3N4ZpvTEhQiFMR2nUfpYVlXKEGy10ROcaqLuiicZNNUzREdnsSvQDEnH1LNYDNo C4g+vjSskir8IJaOv7tUW58q1VF6yKN33sIA0Fg11qYo2GnIOSa8JLVvWKc/U5Mp iruW4a3jMe92/NF5JMw8BxqCUrjvHxSvjA21eF0RMFsRCIm3GOpC8dJA4lTNjSYi q76ayNk9oPZGsoQCsNI9+XGxfQ== -----END CERTIFICATE-----Generated at Wed May 13 05:15:53 2026 by rpki-client