$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft File: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft (raw, json) Hash identifier: Rzsdrl/Mtn+EeslEkgMuwdF5Qpful3vHI5T8GTZKwEc= Subject key identifier: EC:19:1E:1F:39:3D:8B:82:B9:43:53:84:07:AC:8D:B6:08:ED:8C:7D Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E Certificate issuer: /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E Certificate serial: 085E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft Manifest number: 084A Signing time: Tue 12 May 2026 20:59:44 +0000 Manifest this update: Tue 12 May 2026 20:59:44 +0000 Manifest next update: Tue 19 May 2026 20:59:44 +0000 Files and hashes: 1: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl (hash: +K5TKSzWaObtrBJFTrEWzZHk58XAVa6rFPpHJ7ji49w=) 2: B1B8588ADAE511F0B4F8D00379D3641D.roa (hash: g7qg1j/BlXjx4IL6IJ73Vzos8b7yBkmpoG+vbhDXfpI=) 3: E1C6B9720DCC11EBAB25BC31C4F9AE02.roa (hash: 2R/fqixLYXQj2CN0sqD6jpnwoixSqADSrbi58jnvIx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:57:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2142 (0x85e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9FCC, serialNumber=E01002B37C26B9709915267666F44900C0131E2E Validity Not Before: May 12 20:59:44 2026 GMT Not After : May 19 20:59:44 2026 GMT Subject: CN=6a0394c0-f471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:67:48:4b:50:7f:d0:67:46:54:f7:3a:76:e1: 72:63:6a:d1:2c:45:98:c8:ec:bf:c7:6e:7b:25:a0: 5e:37:43:b9:ce:a4:2d:d2:07:e1:fe:fb:95:dd:49: 3c:dd:a2:6a:c3:47:1d:b5:4a:dc:5a:a9:7e:fa:42: 73:ae:53:e3:69:6d:5d:2d:00:74:a7:24:2a:86:e0: 3e:e6:cc:07:1a:33:42:a1:d4:e8:2e:44:79:c3:4b: 21:4a:b1:f0:0d:07:2a:80:49:8f:26:fa:90:e1:29: 68:7e:b7:74:1c:80:8e:2c:8f:94:27:85:28:3c:0f: 26:a7:8b:a7:c5:0a:fd:4a:f4:f5:fa:76:62:f6:40: 17:a1:90:ed:95:b6:d1:3d:06:7d:0f:70:15:db:26: b3:73:28:c8:f4:58:29:7b:a9:3f:d1:47:03:9b:cc: c5:0c:fc:55:53:a8:ac:e4:2e:ec:bd:15:bb:17:f2: a7:cd:fa:8e:ce:75:c1:35:65:a6:13:09:10:60:d1: a8:9a:b7:0b:9d:58:0f:34:f2:fe:96:fe:cc:07:54: 5a:bb:94:c0:02:fa:16:90:e6:22:09:d3:7e:ab:e3: cb:7e:70:cc:43:6c:91:29:e4:cb:58:bf:02:dc:e4: de:d8:af:b2:e9:c0:96:b6:15:81:02:d2:7d:ff:21: 49:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:19:1E:1F:39:3D:8B:82:B9:43:53:84:07:AC:8D:B6:08:ED:8C:7D X509v3 Authority Key Identifier: keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:e0:db:ac:e6:e1:db:ef:70:e4:32:8f:ed:50:d0:5a:52:b6: a3:5e:d9:5f:18:48:f2:c4:2b:15:e5:ea:4c:1e:86:92:2b:0b: 5d:63:17:b5:5d:5f:b2:04:aa:63:9d:80:74:97:d9:13:50:70: 94:84:69:c6:af:b5:0f:cc:4e:be:12:4a:d7:b2:76:b5:87:ca: db:35:2a:a4:eb:86:79:b0:13:9c:12:53:b5:3f:0b:35:78:d9: 89:ca:e1:91:8f:88:b7:33:1b:e9:cd:ab:e8:3d:d3:43:75:cc: 92:e8:ac:2e:18:11:d5:f7:0b:3d:68:38:2b:05:69:55:40:a5: 8d:ab:6a:02:7e:75:0a:bc:9e:b9:d4:64:1f:4a:14:40:4e:e1: fd:df:69:de:61:2f:e0:6b:71:7c:fe:6d:11:2e:a0:72:47:c2: 3f:fc:2c:7e:1d:be:e8:8c:00:0f:56:d6:cc:d5:a0:f6:d3:d7: 14:76:a1:2d:82:fd:00:44:82:ea:28:c5:1b:90:da:71:4d:75: 37:e2:bf:71:22:e3:c9:bb:37:0f:ba:98:03:40:cc:1e:4d:c3: 74:fa:ff:5f:80:ae:49:97:3b:31:4f:05:f5:08:a4:71:66:8d: 2b:3c:86:ce:7f:4b:0f:1b:5a:1e:f6:9b:3d:65:ee:0a:58:fe: 6f:3e:37:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGQ0MxMTAvBgNVBAUTKEUwMTAwMkIzN0MyNkI5NzA5OTE1MjY3NjY2RjQ0OTAw QzAxMzFFMkUwHhcNMjYwNTEyMjA1OTQ0WhcNMjYwNTE5MjA1OTQ0WjAYMRYwFAYD VQQDEw02YTAzOTRjMC1mNDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WdIS1B/0GdGVPc6duFyY2rRLEWYyOy/x257JaBeN0O5zqQt0gfh/vuV3Uk8 3aJqw0cdtUrcWql++kJzrlPjaW1dLQB0pyQqhuA+5swHGjNCodToLkR5w0shSrHw DQcqgEmPJvqQ4Slofrd0HICOLI+UJ4UoPA8mp4unxQr9SvT1+nZi9kAXoZDtlbbR PQZ9D3AV2yazcyjI9Fgpe6k/0UcDm8zFDPxVU6is5C7svRW7F/KnzfqOznXBNWWm EwkQYNGomrcLnVgPNPL+lv7MB1Rau5TAAvoWkOYiCdN+q+PLfnDMQ2yRKeTLWL8C 3OTe2K+y6cCWthWBAtJ9/yFJawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOwZHh85 PYuCuUNThAesjbYI7Yx9MB8GA1UdIwQYMBaAFOAQArN8JrlwmRUmdmb0SQDAEx4u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUZDQy8yMkNENzlERTBE Q0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVYQ1pGU1oyWnZSSkFNQVRI aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCQUNzM3dtdVhDWkZTWjJadlJKQU1BVEhpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUZDQy8yMkNENzlERTBEQ0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVY Q1pGU1oyWnZSSkFNQVRIaTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMODbrObh2+9w5DKP7VDQWlK2o17ZXxhI8sQrFeXqTB6GkisLXWMXtV1fsgSq Y52AdJfZE1BwlIRpxq+1D8xOvhJK17J2tYfK2zUqpOuGebATnBJTtT8LNXjZicrh kY+ItzMb6c2r6D3TQ3XMkuisLhgR1fcLPWg4KwVpVUCljatqAn51CryeudRkH0oU QE7h/d9p3mEv4GtxfP5tES6gckfCP/wsfh2+6IwAD1bWzNWg9tPXFHahLYL9AESC 6ijFG5DacU11N+K/cSLjybs3D7qYA0DMHk3DdPr/X4CuSZc7MU8F9QikcWaNKzyG zn9LDxtaHvabPWXuClj+bz434g== -----END CERTIFICATE-----Generated at Tue May 12 23:05:23 2026 by rpki-client