$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.mft File: 4Skj9-Cqi7JwDciJz-kNkOoSYYg.mft (raw, json) Hash identifier: evwmCHXk7YxQZNJGQqzj7U6JkCHCCjqJAQ+S2vEFiWw= Subject key identifier: 42:D2:52:F7:0B:39:7E:E8:12:65:EE:F7:D5:1F:B9:5D:BC:6A:1B:A5 Authority key identifier: E1:29:23:F7:E0:AA:8B:B2:70:0D:C8:89:CF:E9:0D:90:EA:12:61:88 Certificate issuer: /CN=A91E3441/serialNumber=E12923F7E0AA8BB2700DC889CFE90D90EA126188 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Skj9-Cqi7JwDciJz-kNkOoSYYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.mft Manifest number: 42 Signing time: Wed 13 May 2026 08:34:19 +0000 Manifest this update: Wed 13 May 2026 08:34:19 +0000 Manifest next update: Wed 20 May 2026 08:34:19 +0000 Files and hashes: 1: 4Skj9-Cqi7JwDciJz-kNkOoSYYg.crl (hash: c6n5rVamMjwV0aNVYEKQr+0wLNXYdj6sH74FAKzXTt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.crl rsync://rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Skj9-Cqi7JwDciJz-kNkOoSYYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 08:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3441, serialNumber=E12923F7E0AA8BB2700DC889CFE90D90EA126188 Validity Not Before: May 13 08:34:19 2026 GMT Not After : May 20 08:34:19 2026 GMT Subject: CN=6a04378b-ce61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:22:06:5b:5c:0d:43:21:c5:ea:ce:9f:79:83: 3a:0c:12:e9:91:73:5f:ea:93:20:63:ab:8b:ea:7a: 9d:a6:16:47:35:4a:0f:12:86:4a:e2:24:fe:c0:3c: d0:e0:d1:a2:ba:23:d4:08:ab:77:a2:5f:52:71:b3: 7d:b3:9a:7e:9c:c9:78:23:28:7d:a6:ac:85:5e:dd: 0a:06:29:23:ec:43:10:0f:7e:b5:a9:5e:60:85:66: 2c:60:4d:b8:b0:e8:8b:cc:1a:3f:44:8c:6d:ef:9e: d9:24:86:62:91:7f:ed:da:02:3c:49:80:fa:21:67: 75:27:a0:6e:f4:a2:9f:01:25:36:ef:96:60:ba:97: 4a:46:41:0a:15:00:46:30:62:ac:a3:c3:d9:11:70: ab:4a:25:cf:f3:a6:da:d1:85:5e:fa:45:17:77:e5: 4f:89:b2:9d:6b:c5:e2:2f:b0:21:51:4b:96:8f:7e: 18:f7:5f:99:65:65:df:2c:f7:ad:97:e3:b6:49:61: 1c:c6:bf:d6:cf:76:21:b0:3d:30:ef:1f:b3:14:4e: 08:c8:51:cf:0e:fc:91:11:a8:be:34:f7:c2:90:b9: ff:d8:9e:39:df:e0:34:0a:6d:3c:07:99:38:7c:ee: e5:25:c4:59:01:74:25:5d:c8:7d:b1:ee:79:a3:7f: a8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D2:52:F7:0B:39:7E:E8:12:65:EE:F7:D5:1F:B9:5D:BC:6A:1B:A5 X509v3 Authority Key Identifier: keyid:E1:29:23:F7:E0:AA:8B:B2:70:0D:C8:89:CF:E9:0D:90:EA:12:61:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Skj9-Cqi7JwDciJz-kNkOoSYYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:f1:02:48:26:e3:fd:fb:2c:9e:a6:94:dd:84:22:4a:3a:ba: fc:19:b1:97:07:b0:5e:b4:be:13:cc:80:cf:5f:16:09:c4:3d: a6:e6:c5:41:fc:be:b7:f7:e0:82:bc:36:76:91:0e:0e:66:a6: b1:99:1e:d7:57:28:d2:c3:81:ab:68:4c:1f:aa:c9:2a:48:b0: 0f:b4:4d:32:8d:c2:6e:b3:9f:8c:d2:b9:fb:d3:62:5f:df:23: 3e:4c:3c:1f:68:77:ac:1a:fe:9e:59:48:cd:e5:d7:27:ad:b6: ca:93:16:54:37:a5:6b:19:05:63:7a:49:82:73:dc:f5:d3:e2: 38:ec:74:40:f0:f5:fc:64:7d:8b:b0:9c:50:b5:b0:fb:7c:29: 22:98:61:85:77:ae:89:72:b3:54:9f:da:ee:3a:a2:ba:e8:e3: c4:19:b1:52:98:ac:20:91:d1:53:49:f7:c9:9a:e8:3c:27:86: 8c:5b:5b:b8:8d:1a:b1:77:4b:d8:06:e2:82:6a:a1:7f:7f:17: 96:b4:f7:0c:25:46:dd:d5:4f:96:f8:07:0e:c0:4a:33:6e:39: 1f:54:02:b2:5b:92:6a:2c:cf:c4:75:07:be:8d:07:82:9a:b3: e6:a3:05:55:c4:da:b8:c5:70:de:1f:af:0c:15:26:2c:d4:57: d1:a5:00:71 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzQ0MTExMC8GA1UEBRMoRTEyOTIzRjdFMEFBOEJCMjcwMERDODg5Q0ZFOTBEOTBF QTEyNjE4ODAeFw0yNjA1MTMwODM0MTlaFw0yNjA1MjAwODM0MTlaMBgxFjAUBgNV BAMTDTZhMDQzNzhiLWNlNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOIgZbXA1DIcXqzp95gzoMEumRc1/qkyBjq4vqep2mFkc1Sg8ShkriJP7APNDg 0aK6I9QIq3eiX1Jxs32zmn6cyXgjKH2mrIVe3QoGKSPsQxAPfrWpXmCFZixgTbiw 6IvMGj9EjG3vntkkhmKRf+3aAjxJgPohZ3UnoG70op8BJTbvlmC6l0pGQQoVAEYw Yqyjw9kRcKtKJc/zptrRhV76RRd35U+Jsp1rxeIvsCFRS5aPfhj3X5llZd8s962X 47ZJYRzGv9bPdiGwPTDvH7MUTgjIUc8O/JERqL4098KQuf/Ynjnf4DQKbTwHmTh8 7uUlxFkBdCVdyH2x7nmjf6jZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQtJS9ws5 fugSZe731R+5XbxqG6UwHwYDVR0jBBgwFoAU4Skj9+Cqi7JwDciJz+kNkOoSYYgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzNDQxL0U5QzUwMzM4RUU5 RDExRjBBQ0UyNUM5RDY2NkY1NkJDLzRTa2o5LUNxaTdKd0RjaUp6LWtOa09vU1lZ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNFNrajktQ3FpN0p3RGNpSnota05rT29TWVlnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz NDQxL0U5QzUwMzM4RUU5RDExRjBBQ0UyNUM5RDY2NkY1NkJDLzRTa2o5LUNxaTdK d0RjaUp6LWtOa09vU1lZZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCr8QJIJuP9+yyeppTdhCJKOrr8GbGXB7BetL4TzIDPXxYJxD2m5sVB/L639+CC vDZ2kQ4OZqaxmR7XVyjSw4GraEwfqskqSLAPtE0yjcJus5+M0rn702Jf3yM+TDwf aHesGv6eWUjN5dcnrbbKkxZUN6VrGQVjekmCc9z10+I47HRA8PX8ZH2LsJxQtbD7 fCkimGGFd66JcrNUn9ruOqK66OPEGbFSmKwgkdFTSffJmug8J4aMW1u4jRqxd0vY BuKCaqF/fxeWtPcMJUbd1U+W+AcOwEozbjkfVAKyW5JqLM/EdQe+jQeCmrPmowVV xNq4xXDeH68MFSYs1FfRpQBx -----END CERTIFICATE-----Generated at Wed May 13 15:13:15 2026 by rpki-client