$ rpki-client -vvf rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft File: FDm85NeiKugDbOsu5uavGPIbtZM.mft (raw, json) Hash identifier: K+ZseOWaf7XueEQuZUO4tAtiqxNV75E2M7a6fhSlpWs= Subject key identifier: 77:DF:38:3F:BA:76:8E:54:3E:8B:DB:5E:CE:A3:07:23:2F:FC:42:AE Authority key identifier: 14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93 Certificate issuer: /CN=A91F57D9/serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593 Certificate serial: 045A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft Manifest number: 0448 Signing time: Mon 11 May 2026 00:19:28 +0000 Manifest this update: Mon 11 May 2026 00:19:27 +0000 Manifest next update: Mon 18 May 2026 00:19:27 +0000 Files and hashes: 1: FDm85NeiKugDbOsu5uavGPIbtZM.crl (hash: qLjOo5rRVlSmaTpzCmxKRr5TFI5lQoPQs3p6Pp3jPTQ=) 2: CD22C9C8DC0D11ECA064B94CC4F9AE02.roa (hash: KrGSfeFezfMBfirneaLIWiJ6P58/fqAvRIXr1XydAtM=) 3: F8071E24DC1111EC80AE816DC4F9AE02.roa (hash: diQEJwaRZGmvk+KKJJNr2sqtXhHrrXlc+8yBz+g5Wd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 00:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1114 (0x45a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F57D9, serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593 Validity Not Before: May 11 00:19:27 2026 GMT Not After : May 18 00:19:27 2026 GMT Subject: CN=6a01208f-4af7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:92:3e:3e:22:9b:1f:34:8a:ed:24:eb:45:c3: 75:85:a4:0e:e3:aa:bc:48:56:34:cf:47:73:2a:5d: 9b:94:96:0c:a2:2f:2f:a6:d1:96:1f:49:d2:d9:38: 07:96:84:3e:86:4c:c8:1a:24:49:6e:28:30:5d:34: 18:e5:94:2d:1b:9a:e7:ed:e8:6d:b8:4b:76:99:03: 65:5a:e8:ba:bc:7c:b8:65:ee:2c:3d:20:c3:a9:d0: e5:d2:e6:00:fa:8a:15:f9:56:53:4b:51:3b:45:38: b5:3f:36:3d:b4:b1:c7:53:98:9c:3d:3f:13:c7:0b: 16:b7:42:82:d4:02:61:af:c7:63:ae:27:40:2e:92: 8e:d0:64:f3:21:1f:d7:71:d0:b1:a5:62:a3:13:82: ba:85:0f:c2:cc:5e:68:61:c6:69:db:41:25:01:e0: da:bd:5b:90:fa:d2:c4:a7:c3:7a:a2:d2:86:5d:bb: fb:90:81:25:2f:c6:38:b6:e2:69:b2:0a:fd:48:91: e3:70:36:e9:8d:5c:75:b9:7b:51:98:be:94:92:f7: 31:cb:d0:a2:dc:9a:49:c4:43:72:79:b6:b4:23:1c: f9:34:09:2f:82:de:5f:67:e2:60:66:91:53:a3:70: 80:53:d6:ec:73:d8:e5:7b:d0:3e:c8:8e:5f:8d:80: 7f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:DF:38:3F:BA:76:8E:54:3E:8B:DB:5E:CE:A3:07:23:2F:FC:42:AE X509v3 Authority Key Identifier: keyid:14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:cd:21:42:91:a9:f8:61:3b:3a:a4:da:ca:e5:5b:b8:2c:23: f4:02:49:32:35:3d:8a:6b:d9:ec:b1:c4:04:9f:12:77:32:fd: de:50:ad:7c:08:cf:a4:e5:2c:1b:f0:95:05:d3:f7:d2:5a:f4: 72:6b:0d:b5:7a:3c:41:ce:18:34:43:16:09:a7:47:67:b3:b1: 5a:13:5f:21:b1:f5:c0:ce:54:ad:15:aa:a5:5b:e8:40:a0:2c: ca:88:05:3f:da:49:9a:ee:4a:bf:70:37:59:1e:c8:cf:50:ab: e7:ab:c3:92:7d:d2:d6:68:5e:7e:0f:bb:fe:99:11:6b:6a:66: 58:1b:35:4a:02:91:5c:b5:8e:15:72:1a:cc:e2:26:a8:a0:b3: e4:63:39:02:b3:a3:2b:6e:c6:cb:29:7a:ac:ba:7e:5d:77:03: 79:cd:f2:7d:dc:ee:e8:e1:3a:3f:1d:10:d9:f4:28:3b:28:79: 65:64:61:6d:06:90:ff:0e:2e:c1:9f:24:53:07:02:3f:54:2c: 3a:8a:b4:28:69:85:3b:4a:97:6f:a4:fc:13:fc:63:0f:6a:b3: 59:92:ef:fc:02:8a:45:e1:f0:f9:e0:81:29:a6:82:46:f5:08: 52:0d:48:02:51:50:a4:03:76:32:30:5d:25:85:52:43:e8:4a: 82:ab:c4:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU3RDkxMTAvBgNVBAUTKDE0MzlCQ0U0RDdBMjJBRTgwMzZDRUIyRUU2RTZBRjE4 RjIxQkI1OTMwHhcNMjYwNTExMDAxOTI3WhcNMjYwNTE4MDAxOTI3WjAYMRYwFAYD VQQDEw02YTAxMjA4Zi00YWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2JI+PiKbHzSK7STrRcN1haQO46q8SFY0z0dzKl2blJYMoi8vptGWH0nS2TgH loQ+hkzIGiRJbigwXTQY5ZQtG5rn7ehtuEt2mQNlWui6vHy4Ze4sPSDDqdDl0uYA +ooV+VZTS1E7RTi1PzY9tLHHU5icPT8TxwsWt0KC1AJhr8djridALpKO0GTzIR/X cdCxpWKjE4K6hQ/CzF5oYcZp20ElAeDavVuQ+tLEp8N6otKGXbv7kIElL8Y4tuJp sgr9SJHjcDbpjVx1uXtRmL6Ukvcxy9Ci3JpJxENyeba0Ixz5NAkvgt5fZ+JgZpFT o3CAU9bsc9jle9A+yI5fjYB/swIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHffOD+6 do5UPovbXs6jByMv/EKuMB8GA1UdIwQYMBaAFBQ5vOTXoiroA2zrLubmrxjyG7WT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTdEOS8wNzE3RTlFRTlG NUQxMUVDQkJDQTk2MThDNEY5QUUwMi9GRG04NU5laUt1Z0RiT3N1NXVhdkdQSWJ0 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZEbTg1TmVpS3VnRGJPc3U1dWF2R1BJYnRaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTdEOS8wNzE3RTlFRTlGNUQxMUVDQkJDQTk2MThDNEY5QUUwMi9GRG04NU5laUt1 Z0RiT3N1NXVhdkdQSWJ0Wk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ80hQpGp+GE7OqTayuVbuCwj9AJJMjU9imvZ7LHEBJ8SdzL93lCtfAjPpOUs G/CVBdP30lr0cmsNtXo8Qc4YNEMWCadHZ7OxWhNfIbH1wM5UrRWqpVvoQKAsyogF P9pJmu5Kv3A3WR7Iz1Cr56vDkn3S1mhefg+7/pkRa2pmWBs1SgKRXLWOFXIazOIm qKCz5GM5ArOjK27Gyyl6rLp+XXcDec3yfdzu6OE6Px0Q2fQoOyh5ZWRhbQaQ/w4u wZ8kUwcCP1QsOoq0KGmFO0qXb6T8E/xjD2qzWZLv/AKKReHw+eCBKaaCRvUIUg1I AlFQpAN2MjBdJYVSQ+hKgqvECw== -----END CERTIFICATE-----Generated at Tue May 12 22:45:01 2026 by rpki-client