$ rpki-client -vvf rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft File: Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft (raw, json) Hash identifier: ntsDmGHC9Atxt8d4HDZy8o/dkuIxP9YvN64+wPuWsbM= Subject key identifier: C2:D1:EF:2D:9F:DD:67:51:FF:E3:EB:C3:72:26:20:66:B3:E2:FF:1A Authority key identifier: 57:2E:76:0D:BC:E6:D6:55:53:09:8B:01:7E:FC:32:EC:B1:CE:CA:E1 Certificate issuer: /CN=A91E331D/serialNumber=572E760DBCE6D65553098B017EFC32ECB1CECAE1 Certificate serial: 04F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft Manifest number: 04EA Signing time: Tue 12 May 2026 23:52:51 +0000 Manifest this update: Tue 12 May 2026 23:52:51 +0000 Manifest next update: Tue 19 May 2026 23:52:51 +0000 Files and hashes: 1: Vy52Dbzm1lVTCYsBfvwy7LHOyuE.crl (hash: CUYAeSO+bhA/uvfc5JzAwWtuuWUgPbD5VxapqE+CmoI=) 2: DBE8B4205F0F11ECA6315D2AC4F9AE02.roa (hash: l0NUWEUPjisvKhFGpflwXULabo5GNsblx0h91Os9bCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.crl rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 23:52:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1265 (0x4f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E331D, serialNumber=572E760DBCE6D65553098B017EFC32ECB1CECAE1 Validity Not Before: May 12 23:52:51 2026 GMT Not After : May 19 23:52:51 2026 GMT Subject: CN=6a03bd53-e2ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:57:c8:43:1d:21:42:b6:86:a7:cd:a5:ff:44: 3b:6d:09:20:9d:5b:e3:34:ef:19:1e:e0:02:3a:b3: 2e:ec:1b:d2:30:24:89:2e:62:de:55:9f:7e:22:5c: 7e:02:1a:30:34:9b:58:90:f7:a2:ab:3b:8f:c6:14: 3c:04:4a:78:07:1d:d0:a0:68:2d:67:b2:e9:1e:fb: 2b:6f:c0:e3:e6:6d:f8:85:f0:6f:7b:a7:88:0f:32: 84:69:a2:2b:de:b6:8c:4f:37:3e:dc:80:79:1f:e3: aa:5c:01:c0:42:61:0b:46:31:6c:10:b6:1b:8c:08: e7:48:9a:4c:c7:ff:36:96:4f:02:0e:fe:41:b1:f4: 4c:f7:9a:ff:b2:be:e4:2a:f1:45:81:a8:bf:a6:bc: 23:d0:4f:b0:c8:f3:f7:65:33:6f:3f:26:2f:26:4b: 0f:1e:f7:b9:1f:b3:3e:68:26:ad:be:cf:e3:b4:ee: 4f:4b:6c:a8:c6:cf:98:a9:92:28:18:84:90:3f:11: 46:e7:93:02:d4:c4:e7:fe:69:f1:0d:fb:9a:6f:4f: 88:6e:59:5a:84:d3:3c:9e:c1:7c:2e:4b:d3:e9:99: 9d:1c:02:4e:1c:ca:a5:2b:90:e2:22:e8:e8:c8:ce: 90:d7:4e:c9:a4:4b:23:d8:57:43:09:30:47:7b:5f: 52:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D1:EF:2D:9F:DD:67:51:FF:E3:EB:C3:72:26:20:66:B3:E2:FF:1A X509v3 Authority Key Identifier: keyid:57:2E:76:0D:BC:E6:D6:55:53:09:8B:01:7E:FC:32:EC:B1:CE:CA:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:3b:da:21:eb:6f:3e:67:c1:9f:1f:76:f2:24:1e:f5:83:54: 7c:cc:5c:69:43:9e:fe:32:c5:02:bd:b7:d1:62:ae:d0:f5:60: 4d:48:a2:22:2b:ca:e5:2a:81:ce:93:29:15:29:c2:d0:d3:11: 25:8b:ae:25:3b:b2:ec:7b:8c:56:ad:e1:2a:5c:e6:1f:e4:5a: 77:e8:4f:0e:18:4a:a2:4a:27:11:60:c4:57:c6:6f:58:66:90: f9:79:c6:dd:df:b1:b6:de:17:d6:5c:80:8d:22:13:80:3e:55: f2:7f:b1:c2:1d:38:f2:43:5f:ad:b0:58:72:ad:85:4e:41:45: 72:0d:cb:7f:62:ab:49:90:93:8e:cd:cb:88:d9:61:e9:d8:44: fd:f6:42:5c:66:79:3e:05:da:f0:08:6b:fe:29:8f:46:88:89: 9d:e3:d6:76:fb:2e:51:06:9a:37:68:92:a3:2e:77:08:49:cf: 3c:f4:68:46:9e:c9:ef:1c:61:4f:9c:a7:7e:e2:ca:b5:88:0f: 3e:0d:61:f3:84:11:44:06:00:cd:16:f1:c1:78:26:9a:4c:c8: 2a:ba:66:bc:6d:f1:85:09:04:9c:77:ac:f8:24:bf:cf:c3:c2: 5b:86:8f:5e:a0:34:95:2d:d7:f1:e8:f1:eb:5b:eb:84:7a:eb: b3:fb:ab:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMzMUQxMTAvBgNVBAUTKDU3MkU3NjBEQkNFNkQ2NTU1MzA5OEIwMTdFRkMzMkVD QjFDRUNBRTEwHhcNMjYwNTEyMjM1MjUxWhcNMjYwNTE5MjM1MjUxWjAYMRYwFAYD VQQDEw02YTAzYmQ1My1lMmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFfIQx0hQraGp82l/0Q7bQkgnVvjNO8ZHuACOrMu7BvSMCSJLmLeVZ9+Ilx+ AhowNJtYkPeiqzuPxhQ8BEp4Bx3QoGgtZ7LpHvsrb8Dj5m34hfBve6eIDzKEaaIr 3raMTzc+3IB5H+OqXAHAQmELRjFsELYbjAjnSJpMx/82lk8CDv5BsfRM95r/sr7k KvFFgai/prwj0E+wyPP3ZTNvPyYvJksPHve5H7M+aCatvs/jtO5PS2yoxs+YqZIo GISQPxFG55MC1MTn/mnxDfuab0+IbllahNM8nsF8LkvT6ZmdHAJOHMqlK5DiIujo yM6Q107JpEsj2FdDCTBHe19ShQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMLR7y2f 3WdR/+Prw3ImIGaz4v8aMB8GA1UdIwQYMBaAFFcudg285tZVUwmLAX78Muyxzsrh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzMxRC9FNzYxMENDRTVG MEMxMUVDQTkxNDQ0MjZDNEY5QUUwMi9WeTUyRGJ6bTFsVlRDWXNCZnZ3eTdMSE95 dUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z5NTJEYnptMWxWVENZc0Jmdnd5N0xIT3l1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzMxRC9FNzYxMENDRTVGMEMxMUVDQTkxNDQ0MjZDNEY5QUUwMi9WeTUyRGJ6bTFs VlRDWXNCZnZ3eTdMSE95dUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARzvaIetvPmfBnx928iQe9YNUfMxcaUOe/jLFAr230WKu0PVgTUiiIivK5SqB zpMpFSnC0NMRJYuuJTuy7HuMVq3hKlzmH+Rad+hPDhhKokonEWDEV8ZvWGaQ+XnG 3d+xtt4X1lyAjSITgD5V8n+xwh048kNfrbBYcq2FTkFFcg3Lf2KrSZCTjs3LiNlh 6dhE/fZCXGZ5PgXa8Ahr/imPRoiJnePWdvsuUQaaN2iSoy53CEnPPPRoRp7J7xxh T5ynfuLKtYgPPg1h84QRRAYAzRbxwXgmmkzIKrpmvG3xhQkEnHes+CS/z8PCW4aP XqA0lS3X8ejx61vrhHrrs/urcQ== -----END CERTIFICATE-----Generated at Wed May 13 04:38:42 2026 by rpki-client