$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft File: 70llBmvaJCursGhbwuat2fdWM_0.mft (raw, json) Hash identifier: dVQ0rAcZXyyNcHmzoaRqzh7ghMwMP3Mq5tKayExgolo= Subject key identifier: F9:0A:F9:01:74:07:AC:37:BB:75:16:0B:63:5B:66:50:D7:5E:A7:19 Authority key identifier: EF:49:65:06:6B:DA:24:2B:AB:B0:68:5B:C2:E6:AD:D9:F7:56:33:FD Certificate issuer: /CN=A91FE9B1/serialNumber=EF4965066BDA242BABB0685BC2E6ADD9F75633FD Certificate serial: 0691 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70llBmvaJCursGhbwuat2fdWM_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft Manifest number: 068A Signing time: Sun 10 May 2026 22:31:55 +0000 Manifest this update: Sun 10 May 2026 22:31:54 +0000 Manifest next update: Sun 17 May 2026 22:31:54 +0000 Files and hashes: 1: 70llBmvaJCursGhbwuat2fdWM_0.crl (hash: ehfFyoIZYwtRiOQSFiSqBN/SwwcFVPm3AwPArWmSAHY=) 2: 02157718B9DF11EBA8BE9876C4F9AE02.roa (hash: PC7NOM6+hnkG1gPiPyv+NHeq+JDdl65OBUlZqNZsHp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.crl rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70llBmvaJCursGhbwuat2fdWM_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 22:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1681 (0x691) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE9B1, serialNumber=EF4965066BDA242BABB0685BC2E6ADD9F75633FD Validity Not Before: May 10 22:31:54 2026 GMT Not After : May 17 22:31:54 2026 GMT Subject: CN=6a01075a-f86e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:62:81:04:5a:00:a7:4a:6e:4a:24:a2:2d:8a: 85:02:3c:fe:a1:c8:26:26:c5:0d:28:b8:b4:6b:c7: 88:c8:3c:2c:74:0f:1d:aa:00:9e:96:c8:90:0c:51: 12:f9:2d:03:a2:fb:af:51:cd:95:95:b5:1f:80:d0: 29:50:ea:8c:94:c9:e5:f8:cb:22:9a:21:1a:c1:46: e9:62:2a:f8:d4:13:97:46:79:1d:01:99:74:26:7b: 3e:f4:3f:6d:e9:b3:e5:47:87:be:2f:b6:4f:88:f0: 3c:e0:56:05:06:e9:e1:15:58:2a:ec:6e:89:35:9c: a3:e5:70:da:53:21:6e:6d:9c:39:26:e0:ed:0b:d6: bf:c7:9a:c2:86:e6:26:3e:77:94:f9:95:20:ae:b8: fa:a7:e9:3a:78:24:44:aa:4c:d3:bd:b9:da:33:9a: fa:fc:15:1b:0b:c4:db:f8:bb:74:8b:95:cf:f4:70: 79:ad:99:6d:c4:1f:e7:64:ad:3b:8d:ba:77:3c:f1: 2c:fb:03:c8:f9:c5:3b:24:75:b4:9a:6b:96:c4:75: 15:14:44:58:75:0e:44:4b:f3:bc:30:fa:6e:e4:b7: 08:f9:e9:a5:48:74:40:90:62:dd:5a:c4:14:9e:96: 23:a7:a7:5c:5e:28:26:1b:66:f7:b0:89:23:62:7e: 92:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:0A:F9:01:74:07:AC:37:BB:75:16:0B:63:5B:66:50:D7:5E:A7:19 X509v3 Authority Key Identifier: keyid:EF:49:65:06:6B:DA:24:2B:AB:B0:68:5B:C2:E6:AD:D9:F7:56:33:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70llBmvaJCursGhbwuat2fdWM_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:f2:e3:36:ee:f9:68:8e:fc:fb:8c:8e:30:3d:97:fa:d9:fe: 68:61:63:e7:97:f6:2a:e7:c0:93:c1:9e:ad:83:17:4b:a4:79: 93:0d:4d:2e:6a:cf:77:ce:33:6d:b6:df:5e:7e:cd:99:4e:93: e4:9a:ab:42:c7:ee:4e:b6:7a:84:72:98:9d:bb:7e:de:1e:1c: eb:ab:46:b1:4c:5d:e8:cb:a4:d1:8c:df:95:41:5d:f5:6e:17: eb:5d:b9:fc:43:09:77:77:2b:a4:90:d1:b4:bb:32:c5:de:86: 5e:0e:14:45:7e:cb:b6:74:38:e3:fb:e6:2c:f1:72:d1:44:a4: 55:7e:14:dc:6d:b2:cc:89:a3:9d:80:ca:31:e5:30:d8:05:5e: 21:bb:ef:b0:c4:7c:c7:4a:dc:38:49:4f:ab:59:4a:6b:ca:b7: 35:60:5c:94:a6:01:9a:1c:96:f8:d6:51:8e:a6:9e:80:38:23: 9f:03:82:31:0b:92:a9:6d:23:66:6f:9e:5e:1c:cf:58:a7:67: a6:6a:23:da:cb:ac:f2:4e:34:b6:02:bf:7b:68:5c:2d:59:d2: 41:81:11:5e:46:47:1a:98:2b:b6:f5:5b:3a:94:2e:d7:16:88: 37:74:83:11:e3:8d:31:31:10:f4:4f:63:73:c2:84:44:fe:d3: 59:33:ab:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU5QjExMTAvBgNVBAUTKEVGNDk2NTA2NkJEQTI0MkJBQkIwNjg1QkMyRTZBREQ5 Rjc1NjMzRkQwHhcNMjYwNTEwMjIzMTU0WhcNMjYwNTE3MjIzMTU0WjAYMRYwFAYD VQQDEw02YTAxMDc1YS1mODZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWKBBFoAp0puSiSiLYqFAjz+ocgmJsUNKLi0a8eIyDwsdA8dqgCelsiQDFES +S0DovuvUc2VlbUfgNApUOqMlMnl+MsimiEawUbpYir41BOXRnkdAZl0Jns+9D9t 6bPlR4e+L7ZPiPA84FYFBunhFVgq7G6JNZyj5XDaUyFubZw5JuDtC9a/x5rChuYm PneU+ZUgrrj6p+k6eCREqkzTvbnaM5r6/BUbC8Tb+Lt0i5XP9HB5rZltxB/nZK07 jbp3PPEs+wPI+cU7JHW0mmuWxHUVFERYdQ5ES/O8MPpu5LcI+emlSHRAkGLdWsQU npYjp6dcXigmG2b3sIkjYn6SKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPkK+QF0 B6w3u3UWC2NbZlDXXqcZMB8GA1UdIwQYMBaAFO9JZQZr2iQrq7BoW8Lmrdn3VjP9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTlCMS81QkI5RTAwQUI5 REIxMUVCOUNGM0I4NkVDNEY5QUUwMi83MGxsQm12YUpDdXJzR2hid3VhdDJmZFdN XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcwbGxCbXZhSkN1cnNHaGJ3dWF0MmZkV01fMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTlCMS81QkI5RTAwQUI5REIxMUVCOUNGM0I4NkVDNEY5QUUwMi83MGxsQm12YUpD dXJzR2hid3VhdDJmZFdNXzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt/LjNu75aI78+4yOMD2X+tn+aGFj55f2KufAk8GerYMXS6R5kw1NLmrPd84z bbbfXn7NmU6T5JqrQsfuTrZ6hHKYnbt+3h4c66tGsUxd6Muk0YzflUFd9W4X6125 /EMJd3crpJDRtLsyxd6GXg4URX7LtnQ44/vmLPFy0USkVX4U3G2yzImjnYDKMeUw 2AVeIbvvsMR8x0rcOElPq1lKa8q3NWBclKYBmhyW+NZRjqaegDgjnwOCMQuSqW0j Zm+eXhzPWKdnpmoj2sus8k40tgK/e2hcLVnSQYERXkZHGpgrtvVbOpQu1xaIN3SD EeONMTEQ9E9jc8KERP7TWTOrBg== -----END CERTIFICATE-----Generated at Tue May 12 22:44:11 2026 by rpki-client