$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft File: cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft (raw, json) Hash identifier: m7Of+wky1a5/7YrFiOt2f1mb1BwAeFPmCAKS/McdZ6M= Subject key identifier: 7C:F4:28:AE:53:86:1B:75:AA:9A:97:F3:EA:68:15:CA:FA:7E:14:ED Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 Certificate issuer: /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Certificate serial: 05F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft Manifest number: 05BE Signing time: Tue 12 May 2026 23:21:53 +0000 Manifest this update: Tue 12 May 2026 23:21:53 +0000 Manifest next update: Tue 19 May 2026 23:21:53 +0000 Files and hashes: 1: cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl (hash: NAkasBDlKP3XHbXBqkJjOnJqJ7TkbHKicqDz/iBlsRw=) 2: 345F56F87FE311EF80C0F71FC4F9AE02.roa (hash: qDBbxutM6whAYRqUGL23M9IPWqduEyKAvV9efNJXIMw=) 3: 2A490316D97011F0A9AB95F59AD3641D.roa (hash: MTKYuHS54sbbIgz0FdQa7tPFCtPZViVZZlK3jzFk3Qo=) 4: 39EA203238DB11F1AA6C3EA5A2833773.roa (hash: FIOERkFBxjFZZKgJ4C3oRsu/xDofXWARRAIpEemUT/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 23:21:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1526 (0x5f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Validity Not Before: May 12 23:21:53 2026 GMT Not After : May 19 23:21:53 2026 GMT Subject: CN=6a03b611-08e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:65:29:b8:a0:6a:76:3d:ca:95:95:0a:8a:15: 80:45:aa:0e:77:5d:e4:82:d7:72:41:8d:44:6b:de: 7b:5e:c6:48:1e:44:ec:25:cb:56:9d:a4:db:05:9f: 3c:a5:8d:7a:27:9a:ff:57:ea:df:e2:9f:82:09:61: 52:d1:34:bb:8f:b0:86:81:00:3a:88:b7:b8:f6:35: 8d:6f:7b:fd:48:d8:fd:f6:74:1b:c0:d8:7a:22:c6: 73:d1:f3:6a:97:b1:34:1d:7f:fd:53:09:40:33:21: 2c:e5:ad:ea:db:23:04:3c:db:21:6e:03:08:74:a7: f4:24:c1:86:a6:24:1d:f1:00:d1:40:8b:b7:f4:6d: 84:e4:a4:4f:f8:b8:43:8b:43:c5:60:40:1a:bc:fa: 21:4c:e5:78:01:2d:b8:6c:be:79:14:9e:e5:be:1f: f0:71:af:27:d0:7b:81:2c:3e:ca:df:de:72:13:19: 14:df:c7:f0:13:d5:f8:e5:d8:bd:10:14:9d:be:65: 53:13:cf:f7:ac:6f:50:fc:71:c0:25:f7:a2:44:46: cc:57:b7:51:12:e6:92:e4:d7:bc:a3:98:12:25:f6: 55:4d:70:bb:e6:20:84:1b:f2:88:97:83:99:20:94: e6:d5:87:05:86:a9:7c:56:79:59:e6:5c:1f:2b:37: a1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F4:28:AE:53:86:1B:75:AA:9A:97:F3:EA:68:15:CA:FA:7E:14:ED X509v3 Authority Key Identifier: keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a3:eb:dd:d0:e5:86:ec:b8:97:af:60:e2:7a:36:36:e3:b6: 46:5c:6d:e9:24:ac:f7:06:fe:ba:ce:36:9e:f0:2e:0e:49:bb: 9f:96:1c:5f:2b:68:c1:ee:bf:8a:d6:9c:31:99:f3:ec:28:e8: 95:07:df:e3:be:19:93:19:19:c2:94:19:5e:c5:d4:7f:97:a7: bc:d3:3b:ff:15:b0:83:17:8b:fc:4d:20:82:40:97:ef:f4:d2: 6e:21:45:dc:5a:48:8b:f0:c9:6c:dd:f7:fc:fb:5a:32:b2:25: a7:92:5a:28:56:1a:13:b4:7f:d0:27:5d:06:02:e0:1e:bb:d4: ad:f0:d2:e2:fc:f2:9e:40:5e:b4:5e:e6:00:29:58:9c:79:04: df:a1:94:a3:b9:ea:f6:4f:98:40:ec:1a:5b:44:cf:a8:e4:ac: bf:8c:4b:66:fe:53:9e:b3:99:5b:ed:30:31:71:a9:81:4a:33: 83:20:a2:ac:bc:af:bb:c0:0a:98:3b:77:cc:58:ef:63:ef:77: 6a:45:3f:e0:39:fe:27:21:6c:11:46:6f:85:df:0e:71:e0:a8: 07:6a:64:e1:1c:0f:73:ec:49:d7:37:17:2b:db:35:3f:3c:e1: 36:88:a3:1b:10:73:99:01:5d:9b:97:b6:3d:5d:40:52:07:cd: 9b:2d:d8:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBEODcxMTAvBgNVBAUTKDcyNUZEOTc3Q0U3MzRCQkE5OTMzRjI5NDNEQzI2OTM5 RkEwNjA4QTcwHhcNMjYwNTEyMjMyMTUzWhcNMjYwNTE5MjMyMTUzWjAYMRYwFAYD VQQDEw02YTAzYjYxMS0wOGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2UpuKBqdj3KlZUKihWARaoOd13kgtdyQY1Ea957XsZIHkTsJctWnaTbBZ88 pY16J5r/V+rf4p+CCWFS0TS7j7CGgQA6iLe49jWNb3v9SNj99nQbwNh6IsZz0fNq l7E0HX/9UwlAMyEs5a3q2yMEPNshbgMIdKf0JMGGpiQd8QDRQIu39G2E5KRP+LhD i0PFYEAavPohTOV4AS24bL55FJ7lvh/wca8n0HuBLD7K395yExkU38fwE9X45di9 EBSdvmVTE8/3rG9Q/HHAJfeiREbMV7dREuaS5Ne8o5gSJfZVTXC75iCEG/KIl4OZ IJTm1YcFhql8VnlZ5lwfKzehKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHz0KK5T hht1qpqX8+poFcr6fhTtMB8GA1UdIwQYMBaAFHJf2XfOc0u6mTPylD3CaTn6Bgin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Ny9GNjgzQ0VGMjIx RUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3cVpNX0tVUGNKcE9mb0dD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NsX1pkODV6UzdxWk1fS1VQY0pwT2ZvR0NLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEQ4Ny9GNjgzQ0VGMjIxRUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3 cVpNX0tVUGNKcE9mb0dDS2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnaPr3dDlhuy4l69g4no2NuO2Rlxt6SSs9wb+us42nvAuDkm7n5YcXytowe6/ itacMZnz7CjolQff474ZkxkZwpQZXsXUf5envNM7/xWwgxeL/E0ggkCX7/TSbiFF 3FpIi/DJbN33/PtaMrIlp5JaKFYaE7R/0CddBgLgHrvUrfDS4vzynkBetF7mAClY nHkE36GUo7nq9k+YQOwaW0TPqOSsv4xLZv5TnrOZW+0wMXGpgUozgyCirLyvu8AK mDt3zFjvY+93akU/4Dn+JyFsEUZvhd8OceCoB2pk4RwPc+xJ1zcXK9s1PzzhNoij GxBzmQFdm5e2PV1AUgfNmy3YIw== -----END CERTIFICATE-----Generated at Wed May 13 03:25:37 2026 by rpki-client