$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft File: 4CEd1HfFtNoX56IChgOs2OcWZrU.mft (raw, json) Hash identifier: 7o94O6E6UugqA3PT3kNKmRUsy+T9PKQNvFbscmpKMWo= Subject key identifier: D0:EB:7D:A6:26:1D:B8:CD:14:A7:8F:C1:32:8C:31:88:68:7B:D0:BC Authority key identifier: E0:21:1D:D4:77:C5:B4:DA:17:E7:A2:02:86:03:AC:D8:E7:16:66:B5 Certificate issuer: /CN=A91EB1BE/serialNumber=E0211DD477C5B4DA17E7A2028603ACD8E71666B5 Certificate serial: 138E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4CEd1HfFtNoX56IChgOs2OcWZrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft Manifest number: 137A Signing time: Tue 12 May 2026 16:59:38 +0000 Manifest this update: Tue 12 May 2026 16:59:38 +0000 Manifest next update: Tue 19 May 2026 16:59:38 +0000 Files and hashes: 1: 4CEd1HfFtNoX56IChgOs2OcWZrU.crl (hash: XgnG0d2JOuriRX3UKiKUtvKchpsdU8xIrh/uI+PFn5w=) 2: 31E1DE72B04B11EE9F3B384BC4F9AE02.roa (hash: O9w5ukmDcrFDcEjD6HiwQa6Y82NCxJ277Oe6QTyQjzM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.crl rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4CEd1HfFtNoX56IChgOs2OcWZrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 16:59:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5006 (0x138e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB1BE, serialNumber=E0211DD477C5B4DA17E7A2028603ACD8E71666B5 Validity Not Before: May 12 16:59:38 2026 GMT Not After : May 19 16:59:38 2026 GMT Subject: CN=6a035c7a-0b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:28:09:a7:94:f4:13:ce:40:a8:58:8a:20:1d: 81:c5:b5:73:21:11:9e:c1:68:31:f5:32:9c:bf:11: bc:3a:69:21:b0:4f:2c:17:a9:86:78:13:32:a5:b2: fb:36:47:d7:66:d9:0f:e9:9d:e1:fa:a1:a0:e3:77: 16:bf:5f:f7:bc:52:de:f1:4f:b7:06:58:f4:9f:7d: 12:c9:33:79:94:cd:35:fd:60:ee:fc:13:2b:36:73: da:4d:ca:94:10:4a:d6:3f:96:6a:21:ff:9c:a8:2d: aa:11:0c:3b:5e:71:ad:f5:4b:62:18:6d:f7:8f:f1: 96:28:c9:9a:0d:27:e6:e9:06:30:00:67:2c:7a:a6: 13:c2:37:82:15:1f:1f:92:d6:3e:b9:da:e7:5d:69: 77:6a:37:2d:f6:99:3d:0e:61:9b:64:7d:a2:b1:e2: e0:1d:91:0c:79:5e:00:6f:e1:74:9a:13:71:a0:04: e9:2b:56:d6:8f:ff:a1:00:27:cc:86:52:83:e8:a4: a4:1c:c5:97:79:e9:3d:d7:e9:b0:3a:50:3d:53:21: 96:e7:05:04:9f:fc:d5:48:ee:9d:d2:50:ba:8c:47: 56:e5:a1:85:7a:14:c1:ca:bb:7f:f2:73:c5:c5:6c: 27:92:59:7f:31:8f:b9:e7:b9:b4:b8:71:d2:74:20: 35:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:EB:7D:A6:26:1D:B8:CD:14:A7:8F:C1:32:8C:31:88:68:7B:D0:BC X509v3 Authority Key Identifier: keyid:E0:21:1D:D4:77:C5:B4:DA:17:E7:A2:02:86:03:AC:D8:E7:16:66:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4CEd1HfFtNoX56IChgOs2OcWZrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:18:06:bc:b4:a2:cb:fc:38:fa:9f:32:b6:bb:8e:43:57:20: 0c:68:dd:17:b6:36:1f:35:5e:28:1e:85:f1:59:94:98:55:db: e4:22:55:f3:dd:7d:2b:b7:2d:f6:7d:b2:9b:27:d3:85:49:68: 79:55:55:1c:27:54:fa:48:29:34:db:bf:3a:12:8d:29:96:c9: 8a:fa:22:ae:42:e2:48:0c:68:e8:0d:f4:ad:b5:58:38:6f:1a: 70:ac:ff:4b:12:5f:e2:0a:5a:5b:52:65:dd:10:6f:37:59:0a: b1:dc:40:64:6d:df:3f:c4:4b:ca:c9:a3:06:58:5e:2e:82:1c: 82:8b:0e:34:74:41:2a:49:f3:6f:d2:41:db:5b:c2:64:3b:0c: 8a:8c:75:2d:79:c6:06:b3:c5:69:6f:c2:62:f8:52:01:b1:d7: c1:43:81:9d:e4:f3:81:01:23:0b:1f:85:76:c6:2f:90:92:d0: 59:d7:20:27:d0:98:ec:d3:6b:6c:97:f5:ad:74:26:64:b2:7e: 0f:e5:aa:9e:58:f7:5b:04:55:c6:4d:7a:69:87:bb:b3:1a:d0: ca:8d:1b:91:a4:ae:68:b0:27:3e:82:45:92:28:9b:a5:da:df: 9d:94:05:37:89:ad:e2:b3:5d:12:6f:d7:81:18:98:0c:fa:18: e2:68:b8:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIxQkUxMTAvBgNVBAUTKEUwMjExREQ0NzdDNUI0REExN0U3QTIwMjg2MDNBQ0Q4 RTcxNjY2QjUwHhcNMjYwNTEyMTY1OTM4WhcNMjYwNTE5MTY1OTM4WjAYMRYwFAYD VQQDEw02YTAzNWM3YS0wYjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCgJp5T0E85AqFiKIB2BxbVzIRGewWgx9TKcvxG8OmkhsE8sF6mGeBMypbL7 NkfXZtkP6Z3h+qGg43cWv1/3vFLe8U+3Blj0n30SyTN5lM01/WDu/BMrNnPaTcqU EErWP5ZqIf+cqC2qEQw7XnGt9UtiGG33j/GWKMmaDSfm6QYwAGcseqYTwjeCFR8f ktY+udrnXWl3ajct9pk9DmGbZH2iseLgHZEMeV4Ab+F0mhNxoATpK1bWj/+hACfM hlKD6KSkHMWXeek91+mwOlA9UyGW5wUEn/zVSO6d0lC6jEdW5aGFehTByrt/8nPF xWwnkll/MY+557m0uHHSdCA1MwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNDrfaYm HbjNFKePwTKMMYhoe9C8MB8GA1UdIwQYMBaAFOAhHdR3xbTaF+eiAoYDrNjnFma1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjFCRS81QTU3Nzg2Q0Mw QzgxMUU4QUU4MDUzMzRDNEY5QUUwMi80Q0VkMUhmRnROb1g1NklDaGdPczJPY1da clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDRWQxSGZGdE5vWDU2SUNoZ09zMk9jV1pyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjFCRS81QTU3Nzg2Q0MwQzgxMUU4QUU4MDUzMzRDNEY5QUUwMi80Q0VkMUhmRnRO b1g1NklDaGdPczJPY1daclUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkRgGvLSiy/w4+p8ytruOQ1cgDGjdF7Y2HzVeKB6F8VmUmFXb5CJV8919K7ct 9n2ymyfThUloeVVVHCdU+kgpNNu/OhKNKZbJivoirkLiSAxo6A30rbVYOG8acKz/ SxJf4gpaW1Jl3RBvN1kKsdxAZG3fP8RLysmjBlheLoIcgosONHRBKknzb9JB21vC ZDsMiox1LXnGBrPFaW/CYvhSAbHXwUOBneTzgQEjCx+FdsYvkJLQWdcgJ9CY7NNr bJf1rXQmZLJ+D+Wqnlj3WwRVxk16aYe7sxrQyo0bkaSuaLAnPoJFkiibpdrfnZQF N4mt4rNdEm/XgRiYDPoY4mi4pg== -----END CERTIFICATE-----Generated at Wed May 13 03:11:13 2026 by rpki-client