$ rpki-client -vvf rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft File: PShwiOOGgqTkudgoRQszZr3q1d0.mft (raw, json) Hash identifier: 1T2MM/iQkk/+ZgAHPEoNOF9WjawI5arh+6SVx/gO30s= Subject key identifier: D9:AF:84:23:50:71:9E:39:2C:0B:AF:EE:BD:03:E0:3B:C7:74:B7:0A Authority key identifier: 3D:28:70:88:E3:86:82:A4:E4:B9:D8:28:45:0B:33:66:BD:EA:D5:DD Certificate issuer: /CN=A91F02EA/serialNumber=3D287088E38682A4E4B9D828450B3366BDEAD5DD Certificate serial: 0CD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft Manifest number: 0CC2 Signing time: Tue 12 May 2026 18:31:57 +0000 Manifest this update: Tue 12 May 2026 18:31:57 +0000 Manifest next update: Tue 19 May 2026 18:31:57 +0000 Files and hashes: 1: PShwiOOGgqTkudgoRQszZr3q1d0.crl (hash: eXJHVhkZ3SKYn0DoaN+XpmVfEt9BAqohvE2kOYIJ/TE=) 2: 7716938A416211EB9B0F3C54C4F9AE02.roa (hash: JsMxuAz2clvL8td5dPv4MoycNcApjVpvYRYlrs8BPh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.crl rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3285 (0xcd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F02EA, serialNumber=3D287088E38682A4E4B9D828450B3366BDEAD5DD Validity Not Before: May 12 18:31:57 2026 GMT Not After : May 19 18:31:57 2026 GMT Subject: CN=6a03721d-141f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:76:58:bb:26:5f:38:ac:de:bf:4e:29:78:3a: f6:85:12:5f:01:44:cd:14:71:a4:b6:2f:e8:08:b2: a3:35:fd:68:29:57:13:af:76:be:4c:f5:1b:03:db: ca:08:4b:98:71:ba:71:34:f4:63:ea:b6:0c:a7:26: 37:26:67:4a:73:fa:b7:22:d5:23:75:23:3e:d3:ef: 7a:eb:3f:53:f7:86:6b:8a:ca:47:24:65:e6:de:b7: f7:58:5b:8f:fd:5d:81:b6:0e:7b:79:49:50:a1:14: 3b:90:52:6d:5b:02:97:fd:80:23:ac:47:21:65:e0: 27:42:38:d0:e7:df:df:96:10:f7:af:08:dc:4d:93: 70:7e:d7:5c:6c:d0:e9:b5:57:91:d3:38:3d:a8:61: af:83:fb:64:8d:7a:d9:a5:ec:c3:9c:81:d2:b3:95: d2:82:ad:82:0a:57:90:b1:f6:f3:41:d8:ee:c1:86: 3a:3b:26:fa:75:84:7a:5d:f0:bc:cc:f6:94:12:7d: 0a:dc:90:64:9c:2e:2d:47:66:b5:60:ab:37:e5:1d: 9d:42:63:98:79:2a:38:84:57:15:54:0f:b1:c7:d5: e2:bb:b2:fd:cd:a6:b3:c7:73:3b:7c:74:91:26:99: f3:c8:57:87:c8:32:08:d3:b1:61:d5:bf:ca:60:d6: cd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AF:84:23:50:71:9E:39:2C:0B:AF:EE:BD:03:E0:3B:C7:74:B7:0A X509v3 Authority Key Identifier: keyid:3D:28:70:88:E3:86:82:A4:E4:B9:D8:28:45:0B:33:66:BD:EA:D5:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:e0:f3:01:81:c1:32:df:c3:0f:31:17:b3:70:0c:2c:9e:e0: d5:dd:a0:52:38:11:f2:f7:04:1f:f7:a3:6c:ae:e9:39:9a:94: 07:08:c7:98:87:31:f5:f3:79:cc:f7:ba:f1:c8:b4:bb:8a:b2: 78:27:f8:1c:09:26:60:17:49:96:1e:da:16:25:53:49:20:ee: 52:63:e1:29:11:e8:35:bc:0e:44:a1:93:87:1d:d8:b2:4b:c3: bd:a9:df:ba:b3:ab:3b:aa:4d:40:e3:f4:24:f7:f1:79:0c:9f: b9:fc:a3:a1:3b:90:13:83:4e:c2:cb:c6:dd:41:aa:82:ba:d8: b6:d6:cb:b7:3a:b7:57:8b:6c:6b:b4:bc:c9:1a:52:22:86:8d: ca:5c:24:29:1f:1d:86:3e:f8:80:0e:2c:ce:c7:31:99:32:92: 04:31:44:c7:8a:61:f0:30:1c:57:bf:6c:47:d6:f1:00:35:1b: 9c:db:2d:91:05:27:5f:3a:f1:00:3e:c8:05:c6:85:97:0e:72: 7c:14:9d:43:7d:6b:82:93:97:61:79:b9:0c:76:1b:cc:59:0a: 96:76:7d:ed:4b:f4:c8:7e:7a:ea:95:f7:2c:51:c6:fb:00:cd: 84:20:9d:14:e0:c1:4e:9e:90:b3:de:b4:fe:21:71:8a:65:20: 45:d0:89:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjAyRUExMTAvBgNVBAUTKDNEMjg3MDg4RTM4NjgyQTRFNEI5RDgyODQ1MEIzMzY2 QkRFQUQ1REQwHhcNMjYwNTEyMTgzMTU3WhcNMjYwNTE5MTgzMTU3WjAYMRYwFAYD VQQDEw02YTAzNzIxZC0xNDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHZYuyZfOKzev04peDr2hRJfAUTNFHGkti/oCLKjNf1oKVcTr3a+TPUbA9vK CEuYcbpxNPRj6rYMpyY3JmdKc/q3ItUjdSM+0+966z9T94ZrispHJGXm3rf3WFuP /V2Btg57eUlQoRQ7kFJtWwKX/YAjrEchZeAnQjjQ59/flhD3rwjcTZNwftdcbNDp tVeR0zg9qGGvg/tkjXrZpezDnIHSs5XSgq2CCleQsfbzQdjuwYY6Oyb6dYR6XfC8 zPaUEn0K3JBknC4tR2a1YKs35R2dQmOYeSo4hFcVVA+xx9Xiu7L9zaazx3M7fHSR JpnzyFeHyDII07Fh1b/KYNbNgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNmvhCNQ cZ45LAuv7r0D4DvHdLcKMB8GA1UdIwQYMBaAFD0ocIjjhoKk5LnYKEULM2a96tXd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDJFQS9EQjE1Q0RFMDEx REIxMUVBOTVGMkIwNTlDNEY5QUUwMi9QU2h3aU9PR2dxVGt1ZGdvUlFzelpyM3Ex ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BTaHdpT09HZ3FUa3VkZ29SUXN6WnIzcTFkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDJFQS9EQjE1Q0RFMDExREIxMUVBOTVGMkIwNTlDNEY5QUUwMi9QU2h3aU9PR2dx VGt1ZGdvUlFzelpyM3ExZDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApODzAYHBMt/DDzEXs3AMLJ7g1d2gUjgR8vcEH/ejbK7pOZqUBwjHmIcx9fN5 zPe68ci0u4qyeCf4HAkmYBdJlh7aFiVTSSDuUmPhKRHoNbwORKGThx3YskvDvanf urOrO6pNQOP0JPfxeQyfufyjoTuQE4NOwsvG3UGqgrrYttbLtzq3V4tsa7S8yRpS IoaNylwkKR8dhj74gA4szscxmTKSBDFEx4ph8DAcV79sR9bxADUbnNstkQUnXzrx AD7IBcaFlw5yfBSdQ31rgpOXYXm5DHYbzFkKlnZ97Uv0yH566pX3LFHG+wDNhCCd FODBTp6Qs960/iFximUgRdCJEg== -----END CERTIFICATE-----Generated at Wed May 13 09:21:40 2026 by rpki-client