$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft File: i6wN0-SRhYlP2uKChO3IBHILRhQ.mft (raw, json) Hash identifier: kmktsGFRCS9nshR7cNsCW5Pd2mNYveDNIJnTCUe4P2o= Subject key identifier: B4:96:53:87:56:EA:A6:55:82:5D:1D:E2:1E:39:E6:0C:B3:D9:8F:15 Authority key identifier: 8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14 Certificate issuer: /CN=A91EBFAE/serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614 Certificate serial: 3540 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft Manifest number: 353F Signing time: Tue 12 May 2026 14:32:59 +0000 Manifest this update: Tue 12 May 2026 14:32:58 +0000 Manifest next update: Tue 19 May 2026 14:32:58 +0000 Files and hashes: 1: i6wN0-SRhYlP2uKChO3IBHILRhQ.crl (hash: wq08usJ5pv5zi5iZU7gCqp0SAq9BQjBuzQGBcSwNh6k=) 2: 93F991501F4C11F19ED52041133D8C67.roa (hash: riV+YFoj73RGskIzJAtr/Lp7lGHXyMFCcQQ1eQ66pUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13632 (0x3540) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBFAE, serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614 Validity Not Before: May 12 14:32:58 2026 GMT Not After : May 19 14:32:58 2026 GMT Subject: CN=6a033a1a-7ca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ff:3a:2a:9a:7f:e1:6b:a9:37:1c:3f:fa:3b: 91:44:a8:f3:4a:92:a4:ce:83:95:58:23:64:8c:b4: 7f:99:02:ef:2a:b0:d6:15:94:be:bf:3d:22:1f:01: 56:84:0c:12:7b:e3:97:11:f0:42:53:26:16:75:f8: 21:4a:c4:89:fa:bb:0d:c3:2a:03:be:3d:3b:07:4d: dc:b3:58:48:8c:5c:7a:b6:5d:06:d6:ce:66:9f:99: 00:f3:a6:61:2c:be:9d:71:02:a7:c1:49:c9:5a:f3: fb:e5:c6:e2:47:92:eb:43:e1:ca:f1:4e:00:d5:82: 92:19:6d:a7:f9:92:79:93:c5:d1:a9:7c:fb:4b:1a: 77:7e:e5:38:ad:26:d1:63:20:8c:e6:bc:c2:1e:a2: 6f:cf:09:d2:c9:40:80:2c:f7:1d:42:26:71:85:16: 9e:10:39:eb:72:21:77:7d:f9:a0:e6:42:c7:fc:38: 66:59:e8:95:f2:7d:89:88:cd:af:75:37:66:61:04: 51:01:78:06:86:1d:bd:ea:f1:d8:c6:b2:aa:fc:90: 5b:25:b4:23:3d:79:ea:64:40:d2:56:50:91:37:17: c2:fa:16:a2:b2:cf:13:05:cc:43:9e:e1:ef:fe:0d: 1f:bb:ce:22:ef:45:e8:31:34:57:fd:62:6f:3e:95: 88:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:96:53:87:56:EA:A6:55:82:5D:1D:E2:1E:39:E6:0C:B3:D9:8F:15 X509v3 Authority Key Identifier: keyid:8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:92:c5:92:af:bd:fa:8c:5c:c9:26:29:e9:d6:16:3c:c1:20: 85:96:6a:0c:a4:16:19:d1:9b:62:65:bd:79:8f:b4:54:11:14: 81:71:b6:58:23:c7:68:ac:a2:5b:15:8f:81:4e:3f:f7:09:30: d7:c8:30:fd:56:97:86:ee:33:f3:a8:ee:50:1e:50:6d:a0:41: 2d:8f:f7:65:0e:bc:8d:58:bf:d5:b6:53:e4:d1:c9:32:b1:77: b9:70:a6:76:7d:91:aa:50:8b:58:2b:4c:c4:9a:d7:3e:53:29: 53:d3:7a:9c:51:2d:c9:e3:8a:93:cf:d3:99:fc:3f:4d:ce:94: 0a:04:96:61:59:90:11:f9:7f:97:ac:1b:dc:7b:f5:1b:ae:53: b6:7b:05:fe:96:c2:16:a3:22:09:8e:0d:26:cf:1a:27:67:f5: 14:53:af:dc:6d:22:43:39:c4:97:bc:1c:2e:f0:8c:91:08:0e: c3:56:db:7e:1d:a0:c6:db:73:78:1e:ca:54:f1:9a:fa:0b:cd: 48:d0:5d:a8:a6:95:18:13:68:d3:d3:ca:a2:90:66:d2:62:65: 54:cb:ee:84:53:c1:28:17:ee:bb:19:bc:37:01:f0:93:72:46: f7:9e:c7:27:0f:9c:80:03:3d:98:e3:e0:e3:25:ec:87:d0:1a: d9:47:05:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGQUUxMTAvBgNVBAUTKDhCQUMwREQzRTQ5MTg1ODk0RkRBRTI4Mjg0RURDODA0 NzIwQjQ2MTQwHhcNMjYwNTEyMTQzMjU4WhcNMjYwNTE5MTQzMjU4WjAYMRYwFAYD VQQDEw02YTAzM2ExYS03Y2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/86Kpp/4WupNxw/+juRRKjzSpKkzoOVWCNkjLR/mQLvKrDWFZS+vz0iHwFW hAwSe+OXEfBCUyYWdfghSsSJ+rsNwyoDvj07B03cs1hIjFx6tl0G1s5mn5kA86Zh LL6dcQKnwUnJWvP75cbiR5LrQ+HK8U4A1YKSGW2n+ZJ5k8XRqXz7Sxp3fuU4rSbR YyCM5rzCHqJvzwnSyUCALPcdQiZxhRaeEDnrciF3ffmg5kLH/DhmWeiV8n2JiM2v dTdmYQRRAXgGhh296vHYxrKq/JBbJbQjPXnqZEDSVlCRNxfC+haiss8TBcxDnuHv /g0fu84i70XoMTRX/WJvPpWIpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLSWU4dW 6qZVgl0d4h455gyz2Y8VMB8GA1UdIwQYMBaAFIusDdPkkYWJT9rigoTtyARyC0YU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkZBRS8xNjhGRkQ2QzFE OEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZbFAydUtDaE8zSUJISUxS aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k2d04wLVNSaFlsUDJ1S0NoTzNJQkhJTFJoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkZBRS8xNjhGRkQ2QzFEOEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZ bFAydUtDaE8zSUJISUxSaFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR5LFkq+9+oxcySYp6dYWPMEghZZqDKQWGdGbYmW9eY+0VBEUgXG2WCPHaKyi WxWPgU4/9wkw18gw/VaXhu4z86juUB5QbaBBLY/3ZQ68jVi/1bZT5NHJMrF3uXCm dn2RqlCLWCtMxJrXPlMpU9N6nFEtyeOKk8/Tmfw/Tc6UCgSWYVmQEfl/l6wb3Hv1 G65TtnsF/pbCFqMiCY4NJs8aJ2f1FFOv3G0iQznEl7wcLvCMkQgOw1bbfh2gxttz eB7KVPGa+gvNSNBdqKaVGBNo09PKopBm0mJlVMvuhFPBKBfuuxm8NwHwk3JG957H Jw+cgAM9mOPg4yXsh9Aa2UcFGg== -----END CERTIFICATE-----Generated at Wed May 13 05:04:50 2026 by rpki-client