$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft File: tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft (raw, json) Hash identifier: 8DRzvgCQbJahIL8folXvgizOxjS+odUCOE0zifkk5bw= Subject key identifier: D0:DA:EA:31:FB:60:16:5E:D3:DF:8A:97:B3:C7:03:80:93:28:B0:A1 Authority key identifier: B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 Certificate issuer: /CN=A91DB551/serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Certificate serial: 0DA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft Manifest number: 0D9F Signing time: Tue 12 May 2026 17:57:39 +0000 Manifest this update: Tue 12 May 2026 17:57:38 +0000 Manifest next update: Tue 19 May 2026 17:57:38 +0000 Files and hashes: 1: tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl (hash: eNYFgmgf0lTAlegNep+5f0ek30GyrN2rgw2hJcfZT6M=) 2: 3F6AC59EB27A11F095B9C63DC4F9AE02.roa (hash: DNZsoV57+rQGIAJrL+CwAovCV4qI5UyFXg2qYhLRO4o=) 3: 97EA257424D611F1948C90B8AB833773.roa (hash: x7ThlrbpRobxp6D+qx/sidRoN6DyIJk6KWUPxoCM1O0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3490 (0xda2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB551, serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Validity Not Before: May 12 17:57:38 2026 GMT Not After : May 19 17:57:38 2026 GMT Subject: CN=6a036a13-8257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:cb:00:e9:4e:99:e4:bd:1d:17:a0:b2:a2:97: 27:fe:38:1d:88:8e:e3:3b:25:3b:02:f0:49:fa:04: 2b:ae:a5:9c:d6:23:97:79:73:00:52:97:4c:71:d8: b3:b4:9e:6b:5d:ae:ab:cb:80:ae:6c:52:ae:45:f5: a1:49:19:ae:ed:14:66:8e:d6:f9:69:ab:75:55:b8: f5:67:f8:16:b7:f7:1a:fa:ed:61:db:03:ad:e0:aa: 64:9b:d7:df:43:60:b1:fc:e0:10:2c:28:98:38:50: e3:a3:9e:e7:53:9a:be:27:9f:10:9b:9d:2f:21:73: 20:33:8f:bd:44:34:1e:f4:04:66:41:0d:bd:f4:28: a7:28:3f:d5:ec:4b:fe:f9:3f:98:8a:79:5b:56:8e: 49:ac:c9:a4:fd:31:4a:e4:14:dd:90:a0:bc:8b:ad: 4f:44:85:66:bf:85:31:92:96:79:a6:15:66:cc:eb: 7d:b8:f6:35:31:13:97:e4:d9:47:3a:58:71:a6:d4: 05:6d:40:5a:a8:82:1b:44:d9:73:56:68:a7:24:46: b6:67:12:b3:58:3d:b0:e8:7b:15:b1:85:bb:5f:b6: 81:5e:0b:7f:3c:47:e4:07:13:0d:11:f6:1a:47:75: f6:cf:b5:52:9c:9e:30:8f:be:71:d9:51:15:a4:02: db:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:DA:EA:31:FB:60:16:5E:D3:DF:8A:97:B3:C7:03:80:93:28:B0:A1 X509v3 Authority Key Identifier: keyid:B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:2c:dc:02:eb:ae:55:4d:ff:6a:94:d0:90:35:d3:c1:9d:6d: bf:de:36:07:bb:1c:f3:9b:c3:00:95:e0:af:5d:f0:62:cd:25: f5:d8:d3:4c:ed:08:9a:a7:5c:1b:08:cd:4b:ff:14:c1:d0:30: 09:d4:55:da:db:32:e0:73:8c:77:b1:6e:db:58:05:a2:46:2c: b4:f7:f7:46:e4:98:53:f8:6e:4a:ca:f1:6e:a3:86:39:0f:0f: 95:15:d7:bc:14:76:c1:9f:06:ee:aa:ae:ef:f2:f4:76:d4:aa: fd:ca:ea:47:55:2c:53:70:23:56:e2:f7:6a:00:6f:c1:dd:7e: 46:84:cb:e2:b0:34:e7:e6:8e:bb:1d:f2:6b:da:75:4b:e8:e5: 34:93:a9:68:43:30:9e:91:d6:d2:1d:44:c6:19:46:a8:87:4f: 85:31:45:d6:44:3e:a5:76:38:61:2f:ee:1d:ca:a0:ae:5a:41: 5e:65:71:4a:c9:05:6e:13:00:2d:c5:3e:be:79:af:c2:dd:34: b5:13:05:37:d0:4e:24:1b:3d:57:38:29:46:70:3d:39:7c:5b: 51:bc:37:9a:52:7d:ae:cd:05:fb:c4:64:aa:0b:ba:98:d1:d0: 98:b1:f8:85:8b:fe:02:5f:18:f5:65:3a:8c:47:ad:9a:24:69: 77:58:8a:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI1NTExMTAvBgNVBAUTKEI2Mzg5NzkxQkQ1NDA5NkFEMDA5OTlBNzU5MUZCMjA0 MTg5QUYxOTgwHhcNMjYwNTEyMTc1NzM4WhcNMjYwNTE5MTc1NzM4WjAYMRYwFAYD VQQDEw02YTAzNmExMy04MjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8ssA6U6Z5L0dF6Cyopcn/jgdiI7jOyU7AvBJ+gQrrqWc1iOXeXMAUpdMcdiz tJ5rXa6ry4CubFKuRfWhSRmu7RRmjtb5aat1Vbj1Z/gWt/ca+u1h2wOt4Kpkm9ff Q2Cx/OAQLCiYOFDjo57nU5q+J58Qm50vIXMgM4+9RDQe9ARmQQ299CinKD/V7Ev+ +T+YinlbVo5JrMmk/TFK5BTdkKC8i61PRIVmv4UxkpZ5phVmzOt9uPY1MROX5NlH OlhxptQFbUBaqIIbRNlzVminJEa2ZxKzWD2w6HsVsYW7X7aBXgt/PEfkBxMNEfYa R3X2z7VSnJ4wj75x2VEVpALboQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNDa6jH7 YBZe09+Kl7PHA4CTKLChMB8GA1UdIwQYMBaAFLY4l5G9VAlq0AmZp1kfsgQYmvGY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU1MS9EQkY2RTFENEUy RTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNXclFDWm1uV1IteUJCaWE4 WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqaVhrYjFVQ1dyUUNabW5XUi15QkJpYThaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjU1MS9EQkY2RTFENEUyRTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNX clFDWm1uV1IteUJCaWE4WmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIizcAuuuVU3/apTQkDXTwZ1tv942B7sc85vDAJXgr13wYs0l9djTTO0Imqdc GwjNS/8UwdAwCdRV2tsy4HOMd7Fu21gFokYstPf3RuSYU/huSsrxbqOGOQ8PlRXX vBR2wZ8G7qqu7/L0dtSq/crqR1UsU3AjVuL3agBvwd1+RoTL4rA05+aOux3ya9p1 S+jlNJOpaEMwnpHW0h1ExhlGqIdPhTFF1kQ+pXY4YS/uHcqgrlpBXmVxSskFbhMA LcU+vnmvwt00tRMFN9BOJBs9VzgpRnA9OXxbUbw3mlJ9rs0F+8Rkqgu6mNHQmLH4 hYv+Al8Y9WU6jEetmiRpd1iKvg== -----END CERTIFICATE-----Generated at Wed May 13 09:58:36 2026 by rpki-client