$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.mft File: rDKuLAwq1FPHzruPsoyhI5ov5aU.mft (raw, json) Hash identifier: wcTsQ2uuOXSDMbjXlECABpZ/LqrUj6Bk2i8edQMqukk= Subject key identifier: 6C:3D:A4:F7:96:0F:E8:33:88:C2:21:D6:6B:FD:FD:6F:DD:A0:B5:67 Authority key identifier: AC:32:AE:2C:0C:2A:D4:53:C7:CE:BB:8F:B2:8C:A1:23:9A:2F:E5:A5 Certificate issuer: /CN=A91FDC31/serialNumber=AC32AE2C0C2AD453C7CEBB8FB28CA1239A2FE5A5 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rDKuLAwq1FPHzruPsoyhI5ov5aU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.mft Manifest number: 04 Signing time: Mon 11 May 2026 09:26:17 +0000 Manifest this update: Mon 11 May 2026 09:26:17 +0000 Manifest next update: Mon 18 May 2026 09:26:17 +0000 Files and hashes: 1: rDKuLAwq1FPHzruPsoyhI5ov5aU.crl (hash: 6lVLdSV/0HZAygXnMEGQowB02kSo824O2LjGd2ecXmU=) 2: C2E7AA224A3211F1BD5DF90392833773.roa (hash: GcwDkPymz7zW7+vsuIsz6xXHjXAVw/W3Kds1cjW9Iiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.crl rsync://rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rDKuLAwq1FPHzruPsoyhI5ov5aU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 09:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDC31, serialNumber=AC32AE2C0C2AD453C7CEBB8FB28CA1239A2FE5A5 Validity Not Before: May 11 09:26:17 2026 GMT Not After : May 18 09:26:17 2026 GMT Subject: CN=6a01a0b9-49ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0a:f8:e1:ae:f4:5b:3c:d9:fa:62:2a:81:52: 00:57:e3:2c:05:60:81:ed:64:2a:79:97:33:3e:c4: e1:2c:8c:5d:57:55:9c:82:34:08:53:66:70:c7:8d: 45:6a:93:56:20:f1:dc:42:96:a9:b4:53:6b:2d:c3: 66:40:0e:af:1b:1a:c9:81:a4:df:c6:08:8e:0f:73: fc:ee:4d:0b:f4:5a:c1:09:b7:02:7d:76:2a:53:4b: 00:af:b5:ee:4a:95:76:aa:a6:9e:1a:c1:37:28:a7: 57:c9:a8:62:81:be:e3:a1:4e:19:e1:4a:b1:c6:77: 07:93:e5:c1:7f:e2:ee:4e:a3:4e:ec:01:ea:60:24: 26:4a:83:a4:90:9a:2d:8a:92:82:0f:1e:d7:cb:69: b2:44:42:e9:51:45:d1:e5:d6:86:62:39:cf:d5:22: 18:da:20:ee:8b:5e:f0:3c:bb:f2:f9:b0:32:82:3d: 24:e8:fb:c8:82:c6:33:a7:92:47:f0:1a:31:0e:6b: 7f:27:ba:b5:86:7e:b9:38:26:56:72:bf:e4:c1:f2: 9f:d1:7c:9b:ce:a1:79:e0:20:d6:f5:a0:5d:f9:49: d2:98:da:99:99:3e:af:6c:aa:a6:b6:d2:c9:0f:6c: 49:ee:52:32:90:2f:69:47:c7:5d:67:1a:b5:d8:c3: 08:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:3D:A4:F7:96:0F:E8:33:88:C2:21:D6:6B:FD:FD:6F:DD:A0:B5:67 X509v3 Authority Key Identifier: keyid:AC:32:AE:2C:0C:2A:D4:53:C7:CE:BB:8F:B2:8C:A1:23:9A:2F:E5:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rDKuLAwq1FPHzruPsoyhI5ov5aU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:bd:c2:8e:7c:ac:86:4f:12:94:38:10:d0:c0:b8:11:21:d8: 24:3b:09:de:06:07:d6:8c:09:07:a5:66:d1:a4:44:f0:59:d1: b2:4c:52:05:23:94:63:75:24:2f:63:df:d5:32:90:64:50:32: 9a:d8:c8:41:5f:63:fd:fa:49:8f:e6:66:b4:d7:c4:7e:81:55: 9a:28:46:c6:b2:31:80:4f:96:e0:fc:28:f3:94:1e:8f:ce:ff: b3:cb:58:22:33:ee:1e:c7:96:6f:ba:a4:f9:c9:0d:4c:a1:c1: d9:8a:85:02:61:79:74:a4:cb:ef:27:72:5f:29:c8:2f:eb:c4: af:75:16:22:8b:96:73:0e:c4:6f:05:b1:eb:59:70:53:8b:69: 30:98:25:81:2f:69:6c:7b:12:06:b4:07:fa:61:a0:fc:ef:3c: 69:ac:ac:90:d5:ae:1c:8c:33:16:34:cb:c7:13:9d:cd:0b:db: 2c:4d:85:c0:39:8e:7b:a6:9f:3d:d3:57:a9:f8:f7:3e:c1:74: f6:cd:b5:e3:13:17:35:ed:eb:61:9f:a8:49:e6:b9:dc:8c:f9: 49:b9:5b:69:45:ee:22:fe:19:e1:3d:a9:2e:78:d3:ae:92:81: a3:84:e6:5f:0d:14:2b:af:99:4e:a0:c0:cf:7a:9a:0a:32:52: 08:9f:4d:23 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG REMzMTExMC8GA1UEBRMoQUMzMkFFMkMwQzJBRDQ1M0M3Q0VCQjhGQjI4Q0ExMjM5 QTJGRTVBNTAeFw0yNjA1MTEwOTI2MTdaFw0yNjA1MTgwOTI2MTdaMBgxFjAUBgNV BAMTDTZhMDFhMGI5LTQ5ZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuCvjhrvRbPNn6YiqBUgBX4ywFYIHtZCp5lzM+xOEsjF1XVZyCNAhTZnDHjUVq k1Yg8dxClqm0U2stw2ZADq8bGsmBpN/GCI4Pc/zuTQv0WsEJtwJ9dipTSwCvte5K lXaqpp4awTcop1fJqGKBvuOhThnhSrHGdweT5cF/4u5Oo07sAepgJCZKg6SQmi2K koIPHtfLabJEQulRRdHl1oZiOc/VIhjaIO6LXvA8u/L5sDKCPSTo+8iCxjOnkkfw GjEOa38nurWGfrk4JlZyv+TB8p/RfJvOoXngINb1oF35SdKY2pmZPq9sqqa20skP bEnuUjKQL2lHx11nGrXYwwh9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUbD2k95YP 6DOIwiHWa/39b92gtWcwHwYDVR0jBBgwFoAUrDKuLAwq1FPHzruPsoyhI5ov5aUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEQzMxLzJDRDNEMTkyNEEz MTExRjE5QkQzMTAzNjkwODMzNzczL3JES3VMQXdxMUZQSHpydVBzb3loSTVvdjVh VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvckRLdUxBd3ExRlBIenJ1UHNveWhJNW92NWFVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE QzMxLzJDRDNEMTkyNEEzMTExRjE5QkQzMTAzNjkwODMzNzczL3JES3VMQXdxMUZQ SHpydVBzb3loSTVvdjVhVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAwvcKOfKyGTxKUOBDQwLgRIdgkOwneBgfWjAkHpWbRpETwWdGyTFIFI5RjdSQv Y9/VMpBkUDKa2MhBX2P9+kmP5ma018R+gVWaKEbGsjGAT5bg/CjzlB6Pzv+zy1gi M+4ex5ZvuqT5yQ1MocHZioUCYXl0pMvvJ3JfKcgv68SvdRYii5ZzDsRvBbHrWXBT i2kwmCWBL2lsexIGtAf6YaD87zxprKyQ1a4cjDMWNMvHE53NC9ssTYXAOY57pp89 01ep+Pc+wXT2zbXjExc17ethn6hJ5rncjPlJuVtpRe4i/hnhPakueNOukoGjhOZf DRQrr5lOoMDPepoKMlIIn00j -----END CERTIFICATE-----Generated at Wed May 13 00:13:53 2026 by rpki-client