$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft File: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft (raw, json) Hash identifier: Zaiqd/vHLWh2/LZ+hIyyWHdIejq2PAm+yDAxL5Mgm0E= Subject key identifier: AA:B2:CD:24:8A:9E:9E:0C:95:6C:98:10:27:29:DE:F7:BE:45:65:B8 Authority key identifier: 52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 Certificate issuer: /CN=A91E9467/serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Certificate serial: 0574 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft Manifest number: 0540 Signing time: Sun 10 May 2026 23:42:16 +0000 Manifest this update: Sun 10 May 2026 23:42:16 +0000 Manifest next update: Sun 17 May 2026 23:42:16 +0000 Files and hashes: 1: Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl (hash: MXvFLv/qy09gr5QbmTLSy5ems04jfkCbQ1K8WmJ7pHg=) 2: F63AA888900F11ED8B4CB41DC4F9AE02.roa (hash: MEZBYUD5FqO/c2lwUKhY6AyLEguQGUqvgydiauMWIwc=) 3: 9D9B2E7A6D3211F0A68A8A58C4F9AE02.roa (hash: KD8sbQxVGc6+o0NWvmiwxFni81JXRae+CNqEs/9OB/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 23:42:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1396 (0x574) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9467, serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Validity Not Before: May 10 23:42:16 2026 GMT Not After : May 17 23:42:16 2026 GMT Subject: CN=6a0117d8-d6f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fe:77:fb:7d:ad:6c:4e:af:f8:01:1d:30:dd: 0c:62:5f:48:6b:97:a4:19:4d:55:f3:62:ab:69:01: 1c:bc:6a:74:30:fa:73:bd:be:99:de:08:09:a0:ee: de:e6:b7:d2:49:61:e5:b8:20:65:26:b8:5a:c3:b3: a1:de:87:42:f2:cb:86:4a:5f:f6:2a:4e:ac:f9:2f: 58:1a:9d:58:0e:8e:b9:8c:86:ab:81:85:af:b7:6d: b7:f7:94:ca:f2:12:87:15:7c:70:74:b4:54:86:1a: 0e:81:9c:a1:66:e2:e2:58:2d:fb:72:98:d5:9c:de: c6:a8:4e:4c:d5:11:85:4a:4b:d4:77:06:81:65:98: 02:fe:37:ff:70:c0:01:f5:83:4e:1a:7a:d8:8c:c8: d8:93:32:c5:00:08:a1:f1:c2:09:73:53:52:ad:81: 91:27:26:2b:a1:cb:9a:b4:42:6b:17:b6:da:29:39: 39:fe:92:01:7b:03:3b:d7:69:72:80:bc:a5:26:a9: 89:60:e5:0e:18:ca:da:d6:8c:58:91:ee:b6:16:87: fd:2b:ba:8d:3c:61:5d:b6:d1:12:84:b6:42:1f:74: e0:5a:37:a4:eb:b4:a6:7d:e2:c7:51:9e:7b:49:00: 99:67:66:1e:81:cd:a9:8f:0c:cf:18:92:f7:a2:3f: 51:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B2:CD:24:8A:9E:9E:0C:95:6C:98:10:27:29:DE:F7:BE:45:65:B8 X509v3 Authority Key Identifier: keyid:52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:9f:33:f8:47:9c:8c:b3:8b:67:c4:35:97:d9:d5:e1:33:2b: bc:b6:c2:2f:d7:fd:bb:35:d7:e8:61:a5:c4:6d:d7:d5:3b:4f: 70:15:4a:5c:64:01:74:e0:da:2d:ac:55:c5:86:5e:7d:4b:39: 9f:9b:31:55:3f:25:c5:ad:14:10:49:a7:64:76:b2:7f:e5:f3: 44:99:d2:40:6a:bc:c3:2e:7c:6f:0d:c3:9b:0f:0f:95:19:5b: 05:59:1f:de:b0:73:fd:14:89:0a:91:a6:3f:d3:e5:a7:19:86: 14:72:a1:6c:18:df:ec:cd:88:27:87:5e:23:d7:50:41:15:e7: 9c:7f:48:b2:57:ba:e0:e6:bd:8b:6d:58:0e:53:b3:fc:42:10: 0c:4c:c6:40:a8:4c:6d:5f:c3:b3:bb:3a:ed:fd:c7:03:41:32: 69:9c:d6:ec:8c:fb:44:52:4e:1d:09:9d:3e:ca:ea:2e:73:b0: cb:2f:3d:2c:59:cb:97:5b:34:e7:fe:da:7d:dd:36:72:e2:0c: 9d:7c:dd:c8:58:91:05:5a:9d:c8:34:1c:a6:af:e2:ac:84:ad: 82:de:51:b3:8a:2f:fe:3f:85:3b:0e:e7:d1:9b:5e:ec:e0:03: 77:8d:e7:ad:03:f9:17:a5:1c:8e:da:f0:21:ae:99:79:bb:fd: 0a:05:c2:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0NjcxMTAvBgNVBAUTKDUyQkU5RERFOTU2OEZFNEFEQ0EwRjM0NUIzNjE3QTYz QzMwNzU4NDUwHhcNMjYwNTEwMjM0MjE2WhcNMjYwNTE3MjM0MjE2WjAYMRYwFAYD VQQDEw02YTAxMTdkOC1kNmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnv53+32tbE6v+AEdMN0MYl9Ia5ekGU1V82KraQEcvGp0MPpzvb6Z3ggJoO7e 5rfSSWHluCBlJrhaw7Oh3odC8suGSl/2Kk6s+S9YGp1YDo65jIargYWvt22395TK 8hKHFXxwdLRUhhoOgZyhZuLiWC37cpjVnN7GqE5M1RGFSkvUdwaBZZgC/jf/cMAB 9YNOGnrYjMjYkzLFAAih8cIJc1NSrYGRJyYrocuatEJrF7baKTk5/pIBewM712ly gLylJqmJYOUOGMra1oxYke62Fof9K7qNPGFdttEShLZCH3TgWjek67SmfeLHUZ57 SQCZZ2Yegc2pjwzPGJL3oj9R5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKqyzSSK np4MlWyYECcp3ve+RWW4MB8GA1UdIwQYMBaAFFK+nd6VaP5K3KDzRbNhemPDB1hF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTQ2Ny83NzBCNEYxQTUy NkYxMUVDQkM1MEVCMTdDNEY5QUUwMi9VcjZkM3BWb19rcmNvUE5GczJGNlk4TUhX RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyNmQzcFZvX2tyY29QTkZzMkY2WThNSFdFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTQ2Ny83NzBCNEYxQTUyNkYxMUVDQkM1MEVCMTdDNEY5QUUwMi9VcjZkM3BWb19r cmNvUE5GczJGNlk4TUhXRVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmJ8z+EecjLOLZ8Q1l9nV4TMrvLbCL9f9uzXX6GGlxG3X1TtPcBVKXGQBdODa LaxVxYZefUs5n5sxVT8lxa0UEEmnZHayf+XzRJnSQGq8wy58bw3Dmw8PlRlbBVkf 3rBz/RSJCpGmP9PlpxmGFHKhbBjf7M2IJ4deI9dQQRXnnH9Isle64Oa9i21YDlOz /EIQDEzGQKhMbV/Ds7s67f3HA0EyaZzW7Iz7RFJOHQmdPsrqLnOwyy89LFnLl1s0 5/7afd02cuIMnXzdyFiRBVqdyDQcpq/irIStgt5Rs4ov/j+FOw7n0Zte7OADd43n rQP5F6UcjtrwIa6Zebv9CgXCOw== -----END CERTIFICATE-----Generated at Wed May 13 01:09:22 2026 by rpki-client