$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.mft File: 5bsti54YaXwBWe2BMuXzS4axN7E.mft (raw, json) Hash identifier: veYq7/Cdklqaqn1oITPvPV0+pzFL/YRgCsRXz3OD9Nk= Subject key identifier: E5:43:5F:EF:AF:2A:6F:8F:7A:E8:DB:0E:05:02:85:82:D1:E8:47:DE Authority key identifier: E5:BB:2D:8B:9E:18:69:7C:01:59:ED:81:32:E5:F3:4B:86:B1:37:B1 Certificate issuer: /CN=A91E0C2B/serialNumber=E5BB2D8B9E18697C0159ED8132E5F34B86B137B1 Certificate serial: 0258 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bsti54YaXwBWe2BMuXzS4axN7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.mft Manifest number: 0251 Signing time: Wed 13 May 2026 02:25:52 +0000 Manifest this update: Wed 13 May 2026 02:25:52 +0000 Manifest next update: Wed 20 May 2026 02:25:52 +0000 Files and hashes: 1: 5bsti54YaXwBWe2BMuXzS4axN7E.crl (hash: p+1tSyqwDL+9KohiCB5pnJ6VKJRDzfE58g50ZqEJv5U=) 2: 12B9A5DECBC211EDB6F09516C4F9AE02.roa (hash: r/QdasLc5bg8TvtpOH3qUVDciFGg4kgkaUmfu3ixoOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.crl rsync://rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bsti54YaXwBWe2BMuXzS4axN7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:25:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 600 (0x258) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0C2B, serialNumber=E5BB2D8B9E18697C0159ED8132E5F34B86B137B1 Validity Not Before: May 13 02:25:52 2026 GMT Not After : May 20 02:25:52 2026 GMT Subject: CN=6a03e130-d7c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ec:2a:6d:f8:00:5e:c7:45:52:1e:7d:48:76: 7b:91:94:bd:1c:11:bc:cd:bb:80:c5:b7:29:ad:c3: 01:ac:45:d7:ff:48:c1:08:dd:c4:93:50:b5:75:45: d5:25:91:c6:cb:1e:06:e4:5f:f9:35:95:8d:b7:4a: e0:85:92:77:74:89:a3:52:c0:37:2a:1e:aa:76:3e: 4a:c0:03:49:fe:a2:c8:63:6f:e4:64:b0:1a:a8:c2: b6:9a:08:ea:3a:3c:db:10:43:14:fc:19:f3:bc:16: 5f:77:0e:82:7b:65:0b:53:78:f0:d1:ac:81:24:ce: ea:5d:d3:02:91:87:17:e3:e0:15:37:40:20:b6:ad: 7e:1a:28:20:3c:04:21:17:38:44:9c:66:4c:32:8d: 4c:70:d6:3e:10:f3:37:8e:ef:25:15:b5:2f:1a:b7: 70:21:01:46:e9:b8:b7:e1:02:16:e6:7c:d0:bb:f7: 42:40:3f:a1:74:ef:ca:89:2e:74:d0:7d:af:5d:4c: 54:82:9b:be:f1:1d:82:fc:fb:72:f8:66:f5:14:2e: d2:ee:fa:1e:93:c2:e3:59:ca:a1:31:a0:b0:e2:a7: b0:28:46:cf:70:89:2d:ad:fd:58:6d:ed:e2:99:00: 33:98:2b:8a:86:c3:c3:f6:b5:89:56:a2:cf:8e:a3: 83:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:43:5F:EF:AF:2A:6F:8F:7A:E8:DB:0E:05:02:85:82:D1:E8:47:DE X509v3 Authority Key Identifier: keyid:E5:BB:2D:8B:9E:18:69:7C:01:59:ED:81:32:E5:F3:4B:86:B1:37:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bsti54YaXwBWe2BMuXzS4axN7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C2B/D27E6ED0CB9611EDAC349B79C4F9AE02/5bsti54YaXwBWe2BMuXzS4axN7E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:97:25:88:5f:b5:ff:eb:50:df:58:42:75:85:51:48:b9:6f: 90:87:70:d1:62:39:b9:d4:24:75:30:cb:36:54:c6:7c:37:0b: f8:cb:ff:cd:e1:7e:8f:cb:59:ed:cc:6d:0f:67:2d:13:1c:1a: a0:69:5d:39:1a:ae:00:aa:c6:e8:0b:38:f4:34:00:00:69:58: 15:8c:cf:05:a7:f4:ad:a6:5d:13:e9:fa:a2:29:b2:f3:f0:24: 2c:0d:0b:b5:7c:c0:29:d6:df:6c:8a:5a:cb:53:04:20:98:ba: 4e:e0:68:8f:a3:91:a3:23:d4:9b:8c:70:c6:3b:41:81:9e:af: bd:40:f9:ef:ba:eb:13:2f:a6:2c:1c:1c:88:e8:20:91:1c:00: 8d:ca:e7:38:d0:23:93:84:32:8f:45:15:74:fc:5b:86:af:f4: 72:3a:80:fc:2f:fb:fa:da:33:5f:7e:6c:17:72:28:55:0d:c5: f9:ef:79:a3:b1:75:28:46:ad:b7:cd:13:8e:4c:7a:c7:d2:16: 88:b1:00:8f:93:b9:fa:71:f5:f8:d1:9b:48:8b:a8:bf:44:11: ec:83:e9:6c:d0:ec:b3:2d:de:ab:42:b7:9e:8f:91:15:cf:ec: 24:83:7c:7f:05:32:7d:06:48:6f:db:c5:9c:c7:cc:67:a9:98: d3:fd:f7:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDMkIxMTAvBgNVBAUTKEU1QkIyRDhCOUUxODY5N0MwMTU5RUQ4MTMyRTVGMzRC ODZCMTM3QjEwHhcNMjYwNTEzMDIyNTUyWhcNMjYwNTIwMDIyNTUyWjAYMRYwFAYD VQQDEw02YTAzZTEzMC1kN2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlOwqbfgAXsdFUh59SHZ7kZS9HBG8zbuAxbcprcMBrEXX/0jBCN3Ek1C1dUXV JZHGyx4G5F/5NZWNt0rghZJ3dImjUsA3Kh6qdj5KwANJ/qLIY2/kZLAaqMK2mgjq OjzbEEMU/BnzvBZfdw6Ce2ULU3jw0ayBJM7qXdMCkYcX4+AVN0Agtq1+GiggPAQh FzhEnGZMMo1McNY+EPM3ju8lFbUvGrdwIQFG6bi34QIW5nzQu/dCQD+hdO/KiS50 0H2vXUxUgpu+8R2C/Pty+Gb1FC7S7voek8LjWcqhMaCw4qewKEbPcIktrf1Ybe3i mQAzmCuKhsPD9rWJVqLPjqODjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOVDX++v Km+PeujbDgUChYLR6EfeMB8GA1UdIwQYMBaAFOW7LYueGGl8AVntgTLl80uGsTex MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEMyQi9EMjdFNkVEMENC OTYxMUVEQUMzNDlCNzlDNEY5QUUwMi81YnN0aTU0WWFYd0JXZTJCTXVYelM0YXhO N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVic3RpNTRZYVh3QldlMkJNdVh6UzRheE43RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEMyQi9EMjdFNkVEMENCOTYxMUVEQUMzNDlCNzlDNEY5QUUwMi81YnN0aTU0WWFY d0JXZTJCTXVYelM0YXhON0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe5cliF+1/+tQ31hCdYVRSLlvkIdw0WI5udQkdTDLNlTGfDcL+Mv/zeF+j8tZ 7cxtD2ctExwaoGldORquAKrG6As49DQAAGlYFYzPBaf0raZdE+n6oimy8/AkLA0L tXzAKdbfbIpay1MEIJi6TuBoj6ORoyPUm4xwxjtBgZ6vvUD577rrEy+mLBwciOgg kRwAjcrnONAjk4Qyj0UVdPxbhq/0cjqA/C/7+tozX35sF3IoVQ3F+e95o7F1KEat t80Tjkx6x9IWiLEAj5O5+nH1+NGbSIuov0QR7IPpbNDssy3eq0K3no+RFc/sJIN8 fwUyfQZIb9vFnMfMZ6mY0/33Dg== -----END CERTIFICATE-----Generated at Wed May 13 07:51:53 2026 by rpki-client