$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft File: -WS28tsd8I3d2tR5U1OdnFk9CmY.mft (raw, json) Hash identifier: s7Nl4qlKr+AJaDLWgIGErvRKNYA87+GUodrZe5ATWc0= Subject key identifier: 24:A2:D7:8D:77:84:FD:10:FD:07:C5:B4:A5:9E:B6:B6:1B:89:90:C1 Authority key identifier: F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66 Certificate issuer: /CN=A91F0F53/serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66 Certificate serial: 02BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft Manifest number: 02AB Signing time: Mon 11 May 2026 01:35:39 +0000 Manifest this update: Mon 11 May 2026 01:35:38 +0000 Manifest next update: Mon 18 May 2026 01:35:38 +0000 Files and hashes: 1: -WS28tsd8I3d2tR5U1OdnFk9CmY.crl (hash: wSld9NoOtkJSZDfPYO/ZkjcXDy0z3IY7YoxuTen9koY=) 2: 051D87824A9A11ED9B9F6E25C4F9AE02.roa (hash: 5RaPjFBnhiFZyA3PtlxXYhV1TZyEd5Mgtbgk5McoTSs=) 3: 50AC0FBE329011EEB46D367FC4F9AE02.roa (hash: TRXYmyqIh38BJQpPjdJnxxRS6yMm2jbuDarUopXUSZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 01:35:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 703 (0x2bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0F53, serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66 Validity Not Before: May 11 01:35:38 2026 GMT Not After : May 18 01:35:38 2026 GMT Subject: CN=6a01326b-0af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b2:e2:15:32:77:84:8a:c4:3f:85:f1:a6:71: f3:c1:53:44:c2:84:fa:4e:6d:50:19:a5:e0:ce:fa: 05:ce:23:48:61:15:59:cc:64:e3:28:a9:ff:24:50: 8c:c5:d2:1a:bd:04:b5:a8:cf:41:48:ed:dc:3e:c4: 53:97:9a:ca:c6:c8:c1:61:75:1a:34:e9:78:81:08: 41:e8:0d:07:b4:f3:18:54:c2:b1:4c:75:37:58:9d: 10:85:24:2c:a7:12:f8:a7:a8:53:68:0a:23:45:2d: 2e:1e:79:ec:9d:e2:bc:bb:63:f4:cb:70:3a:73:2a: b6:f8:77:8e:8d:d9:96:47:3d:e4:cf:76:d4:ce:43: 4c:bf:71:4c:ab:bb:0c:e2:c4:c0:b9:3b:e8:fc:e9: 7c:f7:9d:e5:2c:01:3b:de:53:6a:c5:6c:40:43:3f: 08:c1:c4:38:cd:f8:bb:ba:0a:6d:86:87:4c:0e:62: c6:9e:ab:fb:39:ad:bd:03:a0:f7:f7:c5:d0:f8:07: 31:a1:e8:41:6c:35:ae:f4:c5:c8:77:08:e7:c0:e6: 8f:31:61:ed:03:97:b3:15:22:92:cb:f5:8f:76:22: 92:ef:25:0a:85:2d:e3:d4:7c:93:d3:3d:a0:d0:89: 1d:d2:66:87:56:e1:72:bc:51:bc:77:3a:99:f9:af: 81:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A2:D7:8D:77:84:FD:10:FD:07:C5:B4:A5:9E:B6:B6:1B:89:90:C1 X509v3 Authority Key Identifier: keyid:F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:2d:56:b5:48:18:0c:2d:66:f8:f5:ce:a1:64:3f:82:ec:1b: 1a:38:99:45:a0:08:05:5e:a3:53:62:e1:0c:e1:da:8c:0d:07: 8b:ff:91:d0:4f:c4:82:e9:bf:ed:e4:d4:c3:ed:1b:6e:1e:a9: 4b:f5:67:0c:40:8e:bc:30:47:cf:fe:19:17:d9:14:5e:5a:6f: 75:83:5c:fe:df:22:45:76:b9:14:74:d9:ab:8c:3b:7a:a5:6b: 5e:e5:52:51:7a:4f:2d:88:cb:fa:4e:be:41:86:4f:b9:5f:81: 66:16:9d:47:4c:f8:66:08:35:be:41:39:07:d5:6e:91:17:40: 64:9d:20:ab:97:2e:61:99:d1:38:f7:04:5d:a3:a1:8b:39:19: cb:ce:62:17:f2:15:98:4e:fe:8b:46:d0:af:fe:fd:cc:6f:65: 67:10:42:06:5d:07:53:a7:f3:74:6f:64:76:d2:44:a6:c2:9f: c2:48:c5:c0:87:41:78:71:82:2d:d9:b0:6c:70:18:ba:37:78: 4e:29:cc:cd:63:5d:23:70:bb:fb:92:40:74:0a:76:e6:f5:84: 29:88:65:07:c9:1c:da:2a:93:87:db:56:a2:12:85:63:e6:3a: 50:80:bc:72:0d:00:b1:a0:01:17:06:82:05:35:c6:5f:ff:d0: 85:47:3a:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGNTMxMTAvBgNVBAUTKEY5NjRCNkYyREIxREYwOERERERBRDQ3OTUzNTM5RDlD NTkzRDBBNjYwHhcNMjYwNTExMDEzNTM4WhcNMjYwNTE4MDEzNTM4WjAYMRYwFAYD VQQDEw02YTAxMzI2Yi0wYWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7LiFTJ3hIrEP4XxpnHzwVNEwoT6Tm1QGaXgzvoFziNIYRVZzGTjKKn/JFCM xdIavQS1qM9BSO3cPsRTl5rKxsjBYXUaNOl4gQhB6A0HtPMYVMKxTHU3WJ0QhSQs pxL4p6hTaAojRS0uHnnsneK8u2P0y3A6cyq2+HeOjdmWRz3kz3bUzkNMv3FMq7sM 4sTAuTvo/Ol8953lLAE73lNqxWxAQz8IwcQ4zfi7ugpthodMDmLGnqv7Oa29A6D3 98XQ+AcxoehBbDWu9MXIdwjnwOaPMWHtA5ezFSKSy/WPdiKS7yUKhS3j1HyT0z2g 0Ikd0maHVuFyvFG8dzqZ+a+B3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCSi1413 hP0Q/QfFtKWetrYbiZDBMB8GA1UdIwQYMBaAFPlktvLbHfCN3drUeVNTnZxZPQpm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEY1My9BMjIzNTJDMjRB OTYxMUVEOTg5MURDMThDNEY5QUUwMi8tV1MyOHRzZDhJM2QydFI1VTFPZG5GazlD bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1XUzI4dHNkOEkzZDJ0UjVVMU9kbkZrOUNtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEY1My9BMjIzNTJDMjRBOTYxMUVEOTg5MURDMThDNEY5QUUwMi8tV1MyOHRzZDhJ M2QydFI1VTFPZG5GazlDbVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZS1WtUgYDC1m+PXOoWQ/guwbGjiZRaAIBV6jU2LhDOHajA0Hi/+R0E/Egum/ 7eTUw+0bbh6pS/VnDECOvDBHz/4ZF9kUXlpvdYNc/t8iRXa5FHTZq4w7eqVrXuVS UXpPLYjL+k6+QYZPuV+BZhadR0z4Zgg1vkE5B9VukRdAZJ0gq5cuYZnROPcEXaOh izkZy85iF/IVmE7+i0bQr/79zG9lZxBCBl0HU6fzdG9kdtJEpsKfwkjFwIdBeHGC LdmwbHAYujd4TinMzWNdI3C7+5JAdAp25vWEKYhlB8kc2iqTh9tWohKFY+Y6UIC8 cg0AsaABFwaCBTXGX//QhUc6HQ== -----END CERTIFICATE-----Generated at Wed May 13 01:21:25 2026 by rpki-client