$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft File: 2OL6sVCi_VePZ-GbApZTmzdSyak.mft (raw, json) Hash identifier: Ne+3BpRcT+2fpLI1KiDGyleHhFSuQww9VWPyUXWx2zM= Subject key identifier: F5:29:03:51:5F:CE:39:5C:AE:95:DD:58:1E:5A:A8:BF:F1:DB:4C:6B Authority key identifier: D8:E2:FA:B1:50:A2:FD:57:8F:67:E1:9B:02:96:53:9B:37:52:C9:A9 Certificate issuer: /CN=A91EC225/serialNumber=D8E2FAB150A2FD578F67E19B0296539B3752C9A9 Certificate serial: 0F64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft Manifest number: 0F5A Signing time: Tue 12 May 2026 17:34:57 +0000 Manifest this update: Tue 12 May 2026 17:34:56 +0000 Manifest next update: Tue 19 May 2026 17:34:56 +0000 Files and hashes: 1: 2OL6sVCi_VePZ-GbApZTmzdSyak.crl (hash: 9NEH71qp2pJ6RbeBlZKASqVrTg6Mxn2VcvixJS9GbNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.crl rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3940 (0xf64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC225, serialNumber=D8E2FAB150A2FD578F67E19B0296539B3752C9A9 Validity Not Before: May 12 17:34:56 2026 GMT Not After : May 19 17:34:56 2026 GMT Subject: CN=6a0364c1-6ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d6:1d:9c:c9:4c:3b:4a:10:b7:ab:45:2d:d8: 38:13:89:f8:7f:65:4c:1c:6e:0e:5e:e4:e6:45:88: dc:1e:0b:7f:46:1c:89:71:dc:00:dc:a3:0c:7b:43: 08:be:81:f7:ca:cc:5d:9e:c6:3c:db:50:b4:e7:3e: 0b:85:8a:ce:b1:ea:ad:84:4c:10:74:50:18:26:b5: 52:cb:aa:fa:5d:98:ce:7f:6a:5b:ed:22:94:1e:a9: da:58:99:6b:d0:6f:85:73:55:8c:4e:28:37:62:5c: 72:47:eb:e1:8e:da:6f:56:a6:5e:ec:ce:2b:bd:2d: 7b:79:37:e4:ae:06:39:e7:85:b8:75:65:88:86:c5: c3:20:87:01:33:2f:b4:97:0d:76:3c:60:af:12:8c: 6e:eb:33:95:1e:19:53:d4:eb:08:3c:68:55:73:25: 06:e6:61:7c:58:a3:6f:94:fd:bb:da:48:dc:2e:70: 28:be:7a:f5:2d:05:67:a0:c0:b1:60:dd:96:2e:55: 54:88:b2:94:39:68:3f:43:74:18:80:c9:64:c0:43: e0:a2:b0:a2:1d:e0:cc:f7:8a:a6:26:ff:fa:b6:f1: ac:7d:38:9b:b3:65:7e:a8:e6:82:de:72:22:4f:86: e8:80:39:27:8b:43:75:89:ef:08:6c:d4:0a:09:a4: 26:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:29:03:51:5F:CE:39:5C:AE:95:DD:58:1E:5A:A8:BF:F1:DB:4C:6B X509v3 Authority Key Identifier: keyid:D8:E2:FA:B1:50:A2:FD:57:8F:67:E1:9B:02:96:53:9B:37:52:C9:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2OL6sVCi_VePZ-GbApZTmzdSyak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC225/499FDF908E5511E980D09A42C4F9AE02/2OL6sVCi_VePZ-GbApZTmzdSyak.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:c3:b8:3d:41:fb:05:ce:53:92:c1:59:74:b6:d0:80:05:79: 28:16:1e:18:14:8a:8f:92:f0:1b:db:1a:28:e8:5e:5f:54:e6: 9c:27:ec:eb:34:63:d4:e5:e6:0b:f3:9a:5a:85:57:d3:16:a6: a5:77:2b:c6:1e:ca:7a:91:df:04:6c:1d:d8:06:cf:20:1c:a0: a1:0f:e6:a7:82:97:76:6c:30:e3:6f:8d:c5:a5:38:52:5d:09: 5d:4c:f6:86:0d:a3:b2:28:9f:5c:41:41:d6:67:80:62:49:77: 42:e6:c9:5b:05:95:b1:da:e9:ca:03:fe:9d:f9:f8:60:2b:28: bf:40:f7:8e:73:54:b9:ac:5d:3f:2d:8b:15:d7:f1:88:0c:d1: c2:19:e3:c8:94:06:17:90:cd:9a:ea:95:24:81:2f:b0:0d:0b: 90:81:a0:9e:f6:d9:ab:5d:2d:1c:ff:4f:6a:6a:85:23:c8:96: ba:64:9a:ae:f5:60:29:ac:68:49:0a:71:f9:5c:aa:3d:4c:27: a6:08:78:89:5d:e8:b0:2d:9b:5e:cd:75:56:3b:ff:e7:1d:c0: 55:4b:e2:b9:bf:37:6a:03:73:44:e1:62:1e:9a:20:7a:93:b6: 3e:e0:2d:7d:c4:ea:95:0d:d6:d8:90:85:87:26:6a:6e:d2:27: e8:b3:c8:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMyMjUxMTAvBgNVBAUTKEQ4RTJGQUIxNTBBMkZENTc4RjY3RTE5QjAyOTY1MzlC Mzc1MkM5QTkwHhcNMjYwNTEyMTczNDU2WhcNMjYwNTE5MTczNDU2WjAYMRYwFAYD VQQDEw02YTAzNjRjMS02Y2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9YdnMlMO0oQt6tFLdg4E4n4f2VMHG4OXuTmRYjcHgt/RhyJcdwA3KMMe0MI voH3ysxdnsY821C05z4LhYrOseqthEwQdFAYJrVSy6r6XZjOf2pb7SKUHqnaWJlr 0G+Fc1WMTig3YlxyR+vhjtpvVqZe7M4rvS17eTfkrgY554W4dWWIhsXDIIcBMy+0 lw12PGCvEoxu6zOVHhlT1OsIPGhVcyUG5mF8WKNvlP272kjcLnAovnr1LQVnoMCx YN2WLlVUiLKUOWg/Q3QYgMlkwEPgorCiHeDM94qmJv/6tvGsfTibs2V+qOaC3nIi T4bogDkni0N1ie8IbNQKCaQmjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPUpA1Ff zjlcrpXdWB5aqL/x20xrMB8GA1UdIwQYMBaAFNji+rFQov1Xj2fhmwKWU5s3Usmp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzIyNS80OTlGREY5MDhF NTUxMUU5ODBEMDlBNDJDNEY5QUUwMi8yT0w2c1ZDaV9WZVBaLUdiQXBaVG16ZFN5 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJPTDZzVkNpX1ZlUFotR2JBcFpUbXpkU3lhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzIyNS80OTlGREY5MDhFNTUxMUU5ODBEMDlBNDJDNEY5QUUwMi8yT0w2c1ZDaV9W ZVBaLUdiQXBaVG16ZFN5YWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAicO4PUH7Bc5TksFZdLbQgAV5KBYeGBSKj5LwG9saKOheX1TmnCfs6zRj1OXm C/OaWoVX0xampXcrxh7KepHfBGwd2AbPIBygoQ/mp4KXdmww42+NxaU4Ul0JXUz2 hg2jsiifXEFB1meAYkl3QubJWwWVsdrpygP+nfn4YCsov0D3jnNUuaxdPy2LFdfx iAzRwhnjyJQGF5DNmuqVJIEvsA0LkIGgnvbZq10tHP9PamqFI8iWumSarvVgKaxo SQpx+VyqPUwnpgh4iV3osC2bXs11Vjv/5x3AVUviub83agNzROFiHpogepO2PuAt fcTqlQ3W2JCFhyZqbtIn6LPIpg== -----END CERTIFICATE-----Generated at Tue May 12 22:15:42 2026 by rpki-client