$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.mft File: maB2Nu64AHCDMDGWpYxBvsxoj4A.mft (raw, json) Hash identifier: PQaKU2wx/N5sHDgyfyX7hy2MMsSSXPop5x23uDrwTD8= Subject key identifier: 70:A9:0E:55:B1:07:3D:64:04:93:39:5A:12:4E:3C:D7:0F:36:13:02 Authority key identifier: 99:A0:76:36:EE:B8:00:70:83:30:31:96:A5:8C:41:BE:CC:68:8F:80 Certificate issuer: /CN=A91EEC3B/serialNumber=99A07636EEB8007083303196A58C41BECC688F80 Certificate serial: 0C8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/maB2Nu64AHCDMDGWpYxBvsxoj4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.mft Manifest number: 2E66 Signing time: Tue 12 May 2026 16:23:54 +0000 Manifest this update: Tue 12 May 2026 16:23:54 +0000 Manifest next update: Tue 19 May 2026 16:23:54 +0000 Files and hashes: 1: maB2Nu64AHCDMDGWpYxBvsxoj4A.crl (hash: tg7uGHvIVVca0zxgzRzfB0/2yKsKxk5iVQq4TGGDCeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.crl rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/maB2Nu64AHCDMDGWpYxBvsxoj4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 16:23:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3213 (0xc8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEC3B, serialNumber=99A07636EEB8007083303196A58C41BECC688F80 Validity Not Before: May 12 16:23:54 2026 GMT Not After : May 19 16:23:54 2026 GMT Subject: CN=6a03541a-fcc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a3:b7:bf:73:8d:79:bd:6e:aa:b5:28:92:fb: 24:40:56:19:f7:76:a2:f8:04:e4:20:a8:df:a8:32: 6d:ae:3b:d1:c0:c6:90:2d:03:2c:b1:b0:b1:7a:d0: dd:95:2d:bd:68:d5:63:b3:85:8d:4e:c5:5c:c5:3e: 92:5f:5d:d6:a4:82:d5:cc:a4:f2:d8:b2:0e:ec:49: a5:6d:ea:d6:80:33:70:bd:45:08:d9:75:fb:9b:cb: a2:a6:39:0e:54:7a:04:e4:f0:5a:29:b4:be:a1:48: 8d:26:91:5d:5f:7a:94:a0:b3:8f:42:1c:e8:ae:bc: 72:94:41:53:a7:af:92:0d:3b:b0:17:0b:bf:c6:37: 9b:a2:9c:93:2c:46:91:32:7f:d0:da:8c:5e:6d:3b: 85:14:80:ef:af:ff:a1:4e:d9:f8:43:9a:60:2a:7c: 1c:3d:dc:3b:e9:c9:8b:b6:5d:4f:c4:c4:77:a5:7c: 82:b7:58:35:f1:68:c5:e0:a8:0d:0f:1b:cc:ec:a6: fd:ce:6c:32:59:8e:24:3f:e8:70:83:6b:ff:9c:c7: e6:56:b5:47:6f:e8:ce:dc:bd:05:3c:64:af:1d:c5: 60:a8:67:39:64:5f:33:83:1c:88:3c:91:fb:c2:4c: 0d:a0:63:49:0d:2f:17:78:70:2f:8a:6b:d2:0a:e7: 26:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A9:0E:55:B1:07:3D:64:04:93:39:5A:12:4E:3C:D7:0F:36:13:02 X509v3 Authority Key Identifier: keyid:99:A0:76:36:EE:B8:00:70:83:30:31:96:A5:8C:41:BE:CC:68:8F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/maB2Nu64AHCDMDGWpYxBvsxoj4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d8:5f:f5:99:20:82:fe:9a:3c:13:e0:f5:4d:2b:0a:6c:2b: 54:7e:7e:6b:2c:8b:6b:14:f1:9c:9d:43:02:7c:ec:89:39:3e: fb:5a:db:66:6d:93:1b:20:c3:52:4e:1c:0b:02:21:6b:64:e3: 5d:13:b9:83:91:90:c9:43:84:38:05:0f:e7:71:9b:ca:25:99: 01:ca:c7:7d:2d:6c:7a:02:28:c6:1b:00:d3:b4:63:78:16:1f: 22:38:d7:dc:d2:8b:e0:66:0e:48:3f:b2:5e:23:33:e5:42:90: 05:59:3e:7b:2f:7c:30:40:16:74:f1:2f:18:95:56:9c:45:eb: 15:10:1b:65:8b:73:1d:2d:3a:c8:d7:e9:e6:b3:15:6e:1e:10: 07:3e:73:ad:5d:07:95:f8:95:56:51:d3:bf:70:58:b8:7f:3b: 75:0f:f9:a3:a0:a1:a6:d1:b5:c2:21:b3:54:db:f1:f7:d8:08: e6:4f:fb:63:a1:db:46:a5:62:d3:d3:eb:6b:3a:0a:42:e8:01: 04:ba:3f:6f:ea:6f:aa:27:f6:34:ca:89:ac:fa:6e:5f:1e:10: 3f:f2:6b:fe:d5:c2:2c:c1:ea:b6:c7:99:6f:11:fd:24:db:ed: 53:f8:52:c0:f0:16:7e:4b:9a:34:da:5b:e2:84:c4:28:99:30: 8c:5a:a3:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVDM0IxMTAvBgNVBAUTKDk5QTA3NjM2RUVCODAwNzA4MzMwMzE5NkE1OEM0MUJF Q0M2ODhGODAwHhcNMjYwNTEyMTYyMzU0WhcNMjYwNTE5MTYyMzU0WjAYMRYwFAYD VQQDEw02YTAzNTQxYS1mY2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6O3v3ONeb1uqrUokvskQFYZ93ai+ATkIKjfqDJtrjvRwMaQLQMssbCxetDd lS29aNVjs4WNTsVcxT6SX13WpILVzKTy2LIO7EmlberWgDNwvUUI2XX7m8uipjkO VHoE5PBaKbS+oUiNJpFdX3qUoLOPQhzorrxylEFTp6+SDTuwFwu/xjebopyTLEaR Mn/Q2oxebTuFFIDvr/+hTtn4Q5pgKnwcPdw76cmLtl1PxMR3pXyCt1g18WjF4KgN DxvM7Kb9zmwyWY4kP+hwg2v/nMfmVrVHb+jO3L0FPGSvHcVgqGc5ZF8zgxyIPJH7 wkwNoGNJDS8XeHAvimvSCucmNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHCpDlWx Bz1kBJM5WhJOPNcPNhMCMB8GA1UdIwQYMBaAFJmgdjbuuABwgzAxlqWMQb7MaI+A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUMzQi82QjM3RTE5Qzg0 MTcxMUU3ODVGMTcwODBDNEY5QUUwMi9tYUIyTnU2NEFIQ0RNREdXcFl4QnZzeG9q NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21hQjJOdTY0QUhDRE1ER1dwWXhCdnN4b2o0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUMzQi82QjM3RTE5Qzg0MTcxMUU3ODVGMTcwODBDNEY5QUUwMi9tYUIyTnU2NEFI Q0RNREdXcFl4QnZzeG9qNEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi9hf9Zkggv6aPBPg9U0rCmwrVH5+ayyLaxTxnJ1DAnzsiTk++1rbZm2TGyDD Uk4cCwIha2TjXRO5g5GQyUOEOAUP53GbyiWZAcrHfS1segIoxhsA07RjeBYfIjjX 3NKL4GYOSD+yXiMz5UKQBVk+ey98MEAWdPEvGJVWnEXrFRAbZYtzHS06yNfp5rMV bh4QBz5zrV0HlfiVVlHTv3BYuH87dQ/5o6ChptG1wiGzVNvx99gI5k/7Y6HbRqVi 09PrazoKQugBBLo/b+pvqif2NMqJrPpuXx4QP/Jr/tXCLMHqtseZbxH9JNvtU/hS wPAWfkuaNNpb4oTEKJkwjFqjHw== -----END CERTIFICATE-----Generated at Wed May 13 05:21:39 2026 by rpki-client