$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft File: 4x5nyg5b7bJI-Xplfe_2LshvUks.mft (raw, json) Hash identifier: J3RV5Wq5i4AZyZMGC5nXCZyLWFuYylz1KC5tgbiB0v0= Subject key identifier: 4F:70:D8:99:2C:5C:5A:D8:E4:7B:37:41:70:A4:DB:DF:3B:84:D9:EF Authority key identifier: E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B Certificate issuer: /CN=A91ED5D9/serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B Certificate serial: 0336 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft Manifest number: 032F Signing time: Wed 13 May 2026 01:12:47 +0000 Manifest this update: Wed 13 May 2026 01:12:47 +0000 Manifest next update: Wed 20 May 2026 01:12:47 +0000 Files and hashes: 1: 4x5nyg5b7bJI-Xplfe_2LshvUks.crl (hash: 6iV4/5WQ1l2bQZryNzEVokM3VHP55RUQvZdRf+UKc3c=) 2: A3013D2A0CCB11ED97820077C4F9AE02.roa (hash: TRVZ/NM/BJRiha8eAPz94grzikRFW1KWfdpr0FjIAaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 01:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 822 (0x336) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED5D9, serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B Validity Not Before: May 13 01:12:47 2026 GMT Not After : May 20 01:12:47 2026 GMT Subject: CN=6a03d00f-f9b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:15:d1:93:f4:36:ea:82:b2:3d:b5:8c:85:e0: fd:76:16:fb:17:68:e3:f3:82:04:62:ef:fb:24:04: 3d:31:62:cf:fe:17:5d:94:08:cb:e1:b6:30:48:84: 5e:5a:d3:41:1a:a0:8b:c8:8d:c2:81:43:96:e2:06: 83:7e:57:57:a3:d1:47:13:7d:6a:ef:92:3f:6c:b4: 8f:c6:7a:11:1d:89:e0:90:d8:05:81:89:a0:c8:23: 5a:af:11:04:e1:db:48:c9:75:b8:67:bf:a3:e4:34: ea:08:d5:49:34:c3:9d:ea:86:ae:0a:5c:91:1b:66: 06:d1:34:78:ad:35:a5:d2:95:b2:cd:f6:25:c1:74: f8:48:d3:1c:72:8a:65:5f:b6:13:51:c1:bc:db:b6: a0:f6:45:b8:9e:5f:47:f9:93:33:c3:c1:ae:75:c7: 72:01:a3:bd:fe:7c:25:f9:5e:31:0c:39:b3:b2:9a: 41:17:50:05:a7:6f:ac:15:04:a9:b6:e6:f0:38:d7: 14:72:48:b2:ae:48:5e:85:d3:8e:23:5c:98:92:cb: b1:24:ee:a7:a9:c1:c0:3b:02:97:e5:aa:8d:36:e8: 30:88:94:e3:75:02:aa:eb:46:97:81:74:92:73:90: d4:80:00:88:21:8e:6b:d7:ee:b4:0d:e1:c1:27:b9: aa:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:70:D8:99:2C:5C:5A:D8:E4:7B:37:41:70:A4:DB:DF:3B:84:D9:EF X509v3 Authority Key Identifier: keyid:E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:93:c3:b0:93:5c:23:6c:4c:9a:17:a3:c2:bc:ac:c7:b6:3d: 68:5d:44:82:dd:17:f1:2a:e2:24:bc:6f:bb:33:02:9b:05:0f: c9:39:7c:3f:2a:a1:8a:6f:03:c5:90:c4:e2:25:30:0a:3a:57: 5f:ae:fe:05:bd:b1:1d:04:fe:52:b0:b8:87:15:b8:15:93:e5: 41:64:25:5e:b7:8c:f9:32:26:78:4f:f3:ea:4d:7c:f3:5c:8b: a4:97:55:f7:e1:39:17:f4:c0:54:87:a3:ef:08:a4:d3:ba:e5: 40:37:65:b4:78:23:91:73:89:a3:b1:36:50:ff:77:48:28:fb: 01:54:65:c4:88:b2:d6:b8:e8:87:d5:8f:5f:ca:0a:bd:7e:62: 32:25:db:ec:60:11:20:d9:30:4f:2b:90:ed:cb:f7:7d:a3:4d: f7:f8:04:96:fa:d9:5c:68:c2:e5:d3:76:e7:dc:95:d1:52:b8: 68:53:7d:38:c2:9a:76:ff:b6:50:48:0d:d1:e0:29:27:28:62: 1d:a5:2b:9a:6b:dd:ce:29:6d:ad:18:a1:41:49:55:00:e3:77: ad:f5:3d:07:9b:eb:7d:a3:c5:0a:12:01:79:89:54:60:ca:00: 4b:69:f2:3d:f8:09:15:cc:ec:16:3c:0f:9c:8f:d8:1a:f7:d0: d9:3a:9d:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1RDkxMTAvBgNVBAUTKEUzMUU2N0NBMEU1QkVEQjI0OEY5N0E2NTdERUZGNjJF Qzg2RjUyNEIwHhcNMjYwNTEzMDExMjQ3WhcNMjYwNTIwMDExMjQ3WjAYMRYwFAYD VQQDEw02YTAzZDAwZi1mOWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAohXRk/Q26oKyPbWMheD9dhb7F2jj84IEYu/7JAQ9MWLP/hddlAjL4bYwSIRe WtNBGqCLyI3CgUOW4gaDfldXo9FHE31q75I/bLSPxnoRHYngkNgFgYmgyCNarxEE 4dtIyXW4Z7+j5DTqCNVJNMOd6oauClyRG2YG0TR4rTWl0pWyzfYlwXT4SNMccopl X7YTUcG827ag9kW4nl9H+ZMzw8GudcdyAaO9/nwl+V4xDDmzsppBF1AFp2+sFQSp tubwONcUckiyrkhehdOOI1yYksuxJO6nqcHAOwKX5aqNNugwiJTjdQKq60aXgXSS c5DUgACIIY5r1+60DeHBJ7mqWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE9w2Jks XFrY5Hs3QXCk2987hNnvMB8GA1UdIwQYMBaAFOMeZ8oOW+2ySPl6ZX3v9i7Ib1JL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDVEOS84OUU4N0ZFMDBD QzgxMUVEQjMzQjEzNzFDNEY5QUUwMi80eDVueWc1YjdiSkktWHBsZmVfMkxzaHZV a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR4NW55ZzViN2JKSS1YcGxmZV8yTHNodlVrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDVEOS84OUU4N0ZFMDBDQzgxMUVEQjMzQjEzNzFDNEY5QUUwMi80eDVueWc1Yjdi SkktWHBsZmVfMkxzaHZVa3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm5PDsJNcI2xMmhejwrysx7Y9aF1Egt0X8SriJLxvuzMCmwUPyTl8Pyqhim8D xZDE4iUwCjpXX67+Bb2xHQT+UrC4hxW4FZPlQWQlXreM+TImeE/z6k1881yLpJdV 9+E5F/TAVIej7wik07rlQDdltHgjkXOJo7E2UP93SCj7AVRlxIiy1rjoh9WPX8oK vX5iMiXb7GARINkwTyuQ7cv3faNN9/gElvrZXGjC5dN259yV0VK4aFN9OMKadv+2 UEgN0eApJyhiHaUrmmvdziltrRihQUlVAON3rfU9B5vrfaPFChIBeYlUYMoAS2ny PfgJFczsFjwPnI/YGvfQ2TqdlQ== -----END CERTIFICATE-----Generated at Wed May 13 04:12:17 2026 by rpki-client