$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft File: 5OTCQkd4XDQv81kH9-EcSrs5i4M.mft (raw, json) Hash identifier: 6ZaJJ7wsK3Pz5EeTeUaKCLCtFGv0Hm69j3G9bkrGzfQ= Subject key identifier: 9B:E6:15:E8:5B:02:34:43:60:A3:ED:FC:A7:6A:93:96:93:9E:69:CA Authority key identifier: E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83 Certificate issuer: /CN=A91E85F1/serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83 Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft Manifest number: D6 Signing time: Mon 11 May 2026 06:52:28 +0000 Manifest this update: Mon 11 May 2026 06:52:27 +0000 Manifest next update: Mon 18 May 2026 06:52:27 +0000 Files and hashes: 1: 5OTCQkd4XDQv81kH9-EcSrs5i4M.crl (hash: tT2JpHjTJsBqs1PNj3uhi4erIQYo9vSyHJF1IY1cstQ=) 2: 212E0B520DFE11F0B266963AC4F9AE02.roa (hash: 0Pd2RnR3Fb00tGS21BR3ZHRM+0PBa1aIDio+p3wBXao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 06:52:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E85F1, serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83 Validity Not Before: May 11 06:52:27 2026 GMT Not After : May 18 06:52:27 2026 GMT Subject: CN=6a017cab-0ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:bd:b6:98:d2:7e:0e:6c:e7:1e:42:91:4a:5e: 49:30:98:ef:c7:a7:d1:f6:46:d7:4f:a5:82:e7:cd: 17:b4:b3:47:07:95:88:72:af:ae:99:04:d1:f0:55: 24:f6:ae:db:e9:57:5a:9d:32:c1:03:a1:bd:d6:ef: bf:f9:c3:41:36:12:37:00:7b:dc:54:ab:72:d7:0f: 69:ec:16:14:e5:8e:c6:b0:4c:4c:52:74:5a:16:a0: 09:49:2a:89:46:d9:4e:5e:47:81:35:dc:a7:a3:49: 48:b2:1d:e3:fa:4b:e7:32:56:dc:0a:5e:63:d8:02: f3:5a:c1:74:34:5b:53:cf:81:6e:db:6c:ab:23:0a: 3c:84:c4:82:b5:fd:ee:8c:b0:21:2c:75:23:10:c1: 00:23:7a:cb:37:1d:3f:d4:0d:5d:1d:e5:94:7a:c9: c7:47:c3:14:2c:0f:2f:c3:66:b1:38:79:00:4e:95: 52:30:38:0b:fe:59:35:0e:0f:52:ee:c6:40:f8:74: 9c:5e:71:be:e8:3a:99:5d:76:4b:e6:97:1c:71:c4: 4d:65:59:e1:a6:58:b0:43:37:6d:cb:f0:25:1a:2e: 69:4f:ee:1f:0a:d3:d9:cf:55:74:42:60:b8:b3:2f: ac:f1:eb:29:e5:6b:51:b5:0f:40:c1:13:94:ab:1e: 47:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E6:15:E8:5B:02:34:43:60:A3:ED:FC:A7:6A:93:96:93:9E:69:CA X509v3 Authority Key Identifier: keyid:E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:e7:98:b1:42:f8:04:c5:e1:05:13:42:e4:d1:80:ee:69:e5: d9:b7:7a:2d:f3:6c:77:45:c7:ef:11:be:c4:a7:26:c5:ca:93: 2b:99:69:02:d2:46:e1:d2:0a:6d:a8:05:8e:82:01:f0:2f:c6: cb:f5:21:b9:3f:16:7b:c8:93:2f:18:40:62:e5:5d:90:0e:26: 8a:e3:23:fe:e5:ec:fc:0a:e7:e4:bd:7e:22:b7:59:fb:a5:ce: 30:2d:e7:65:91:16:51:1f:13:5e:3c:49:4c:12:e4:d1:cd:1a: f8:c9:73:bf:51:9d:39:eb:6e:78:46:c8:57:b9:bf:17:37:8b: f0:53:92:a6:96:f1:5a:7d:2c:94:3f:f3:95:8c:b5:25:2f:84: 5e:27:e1:a4:ad:21:18:2c:55:7e:81:5f:5b:fa:f0:55:83:38: 8c:33:2e:9f:e8:14:61:1f:6d:8b:b3:5a:6b:01:7d:4f:0d:63: 9c:f3:8a:be:9e:00:eb:a7:6c:66:b5:8a:4a:75:b4:7f:08:d4: 9c:c4:72:3d:c5:75:4a:32:7a:9b:3b:95:5e:b7:05:7d:b8:f6: 8d:4b:3e:95:6b:a7:b1:5d:f3:2d:09:2e:9a:e9:3f:f0:fc:70: cc:15:69:df:22:53:6b:8d:1c:2f:68:97:7d:3f:4d:49:32:fb: 78:48:1c:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg1RjExMTAvBgNVBAUTKEU0RTRDMjQyNDc3ODVDMzQyRkYzNTkwN0Y3RTExQzRB QkIzOThCODMwHhcNMjYwNTExMDY1MjI3WhcNMjYwNTE4MDY1MjI3WjAYMRYwFAYD VQQDEw02YTAxN2NhYi0wZWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3722mNJ+DmznHkKRSl5JMJjvx6fR9kbXT6WC580XtLNHB5WIcq+umQTR8FUk 9q7b6VdanTLBA6G91u+/+cNBNhI3AHvcVKty1w9p7BYU5Y7GsExMUnRaFqAJSSqJ RtlOXkeBNdyno0lIsh3j+kvnMlbcCl5j2ALzWsF0NFtTz4Fu22yrIwo8hMSCtf3u jLAhLHUjEMEAI3rLNx0/1A1dHeWUesnHR8MULA8vw2axOHkATpVSMDgL/lk1Dg9S 7sZA+HScXnG+6DqZXXZL5pccccRNZVnhpliwQzdty/AlGi5pT+4fCtPZz1V0QmC4 sy+s8esp5WtRtQ9AwROUqx5HjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJvmFehb AjRDYKPt/Kdqk5aTnmnKMB8GA1UdIwQYMBaAFOTkwkJHeFw0L/NZB/fhHEq7OYuD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODVGMS82MjIwNjMzQzBE RkMxMUYwQTFEOTgwNTNDNEY5QUUwMi81T1RDUWtkNFhEUXY4MWtIOS1FY1NyczVp NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVPVENRa2Q0WERRdjgxa0g5LUVjU3JzNWk0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODVGMS82MjIwNjMzQzBERkMxMUYwQTFEOTgwNTNDNEY5QUUwMi81T1RDUWtkNFhE UXY4MWtIOS1FY1NyczVpNE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWeeYsUL4BMXhBRNC5NGA7mnl2bd6LfNsd0XH7xG+xKcmxcqTK5lpAtJG4dIK bagFjoIB8C/Gy/UhuT8We8iTLxhAYuVdkA4miuMj/uXs/Arn5L1+IrdZ+6XOMC3n ZZEWUR8TXjxJTBLk0c0a+Mlzv1GdOetueEbIV7m/FzeL8FOSppbxWn0slD/zlYy1 JS+EXifhpK0hGCxVfoFfW/rwVYM4jDMun+gUYR9ti7NaawF9Tw1jnPOKvp4A66ds ZrWKSnW0fwjUnMRyPcV1SjJ6mzuVXrcFfbj2jUs+lWunsV3zLQkumuk/8PxwzBVp 3yJTa40cL2iXfT9NSTL7eEgcFA== -----END CERTIFICATE-----Generated at Wed May 13 06:35:46 2026 by rpki-client