$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft File: 4cWfpaa8h2985KRsqq5gYE8FGGY.mft (raw, json) Hash identifier: 4Im1jqg41QUNoSiO41Q4Wy8NhVwsa6uxjzlPm/9ZtzI= Subject key identifier: 6D:55:E0:6E:31:56:95:36:24:8B:3B:4B:A8:CA:BE:7B:4D:9A:11:F5 Authority key identifier: E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66 Certificate issuer: /CN=A91FEDE7/serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866 Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft Manifest number: 50 Signing time: Mon 11 May 2026 08:26:50 +0000 Manifest this update: Mon 11 May 2026 08:26:50 +0000 Manifest next update: Mon 18 May 2026 08:26:50 +0000 Files and hashes: 1: 4cWfpaa8h2985KRsqq5gYE8FGGY.crl (hash: v3EXOj5yUjYpfUHHHgjCb2913QZ7CBK14dN0R4DRrMU=) 2: C48E03F21D1A11F1AE90847F103D8C67.roa (hash: YqhCEr3kKDJmGDX75Nq9SUE9drBA93p8LP3gb+77yio=) 3: 63C2AF74D99E11F0A31734B566D3641D.roa (hash: XqsHjVz2/3IOIuZJsTXT+P8IFg2LCZpsTf20ES1Rkms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEDE7, serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866 Validity Not Before: May 11 08:26:50 2026 GMT Not After : May 18 08:26:50 2026 GMT Subject: CN=6a0192ca-58d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:25:5d:77:c2:0e:a4:25:11:97:c8:9f:ea:69: 6a:5c:77:e0:43:84:96:c6:a1:44:90:de:f2:d3:7f: fe:51:94:b4:b9:f0:ec:fa:3f:57:fc:0b:23:d6:39: 42:12:d4:81:49:ab:e8:4b:34:19:f8:aa:f4:48:c2: 55:ec:3e:75:f3:84:93:fd:e0:32:b4:dc:ad:c0:25: 23:b8:25:51:b7:d7:01:30:32:ec:8a:bb:20:b6:5a: c6:72:dc:4f:9c:e7:ec:6f:64:9f:49:2d:da:60:f5: 15:a9:f1:94:c9:20:0c:87:0d:7a:fa:d0:d6:38:c5: 7b:2d:6a:38:b2:ae:79:4e:1f:fa:0f:b3:17:6e:f7: 00:5f:8c:1e:a4:92:b8:5f:d0:c1:8f:22:92:16:01: 67:d4:b2:92:a5:df:47:29:fd:ad:a5:e2:32:27:90: 87:ae:33:9e:05:b7:57:39:24:e0:d2:ea:16:fd:00: e1:60:d5:d7:95:1a:e0:18:55:e3:c6:b7:7f:00:d5: 6a:1f:84:a9:40:0e:47:25:cd:13:9b:ee:b9:2d:e3: 7f:b7:5c:aa:c9:e0:cc:1b:c0:df:3f:30:b8:61:92: c9:23:4b:d4:5d:44:69:50:25:97:22:bc:d1:91:05: 0b:97:e7:24:5c:b1:cb:3d:e3:02:a3:a0:b8:4c:f5: d8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:55:E0:6E:31:56:95:36:24:8B:3B:4B:A8:CA:BE:7B:4D:9A:11:F5 X509v3 Authority Key Identifier: keyid:E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a0:26:58:94:fa:bf:fe:ec:1e:6b:8b:13:f3:c7:af:29:28: 87:90:c1:17:9e:93:7c:46:50:83:0a:5a:6c:35:e6:85:58:d9: de:16:cb:05:a7:3b:09:9c:af:ba:76:1c:a1:53:be:47:52:b1: fa:e9:9e:ef:ea:fd:02:11:83:30:f1:b3:09:73:17:23:39:d2: e8:96:b6:35:ab:ca:e4:da:3b:a9:5f:88:c3:16:dd:fc:aa:52: ec:a3:10:56:3c:98:a6:8b:fa:f3:0c:9b:93:2c:07:33:68:cc: fc:0f:11:a8:a8:10:7a:d9:f6:85:22:2f:dd:ae:92:b5:5c:5a: 51:ca:c1:e4:d4:9a:32:f9:44:81:ce:4c:07:9b:7d:cb:c4:90: 97:73:e1:c5:c0:a2:ce:91:51:c5:59:74:bf:f4:cf:8b:12:c2: 84:c9:9f:57:4a:f7:a4:4d:c4:4c:70:98:17:fb:5c:d4:b2:1f: 8c:d0:44:59:af:b2:fd:ac:d3:eb:d7:fe:bd:93:ee:5b:31:ff: c7:fa:5a:31:3b:30:67:99:a7:d7:b4:52:c6:37:cf:9b:30:ed: 10:6a:1d:99:d7:f2:b2:5e:9c:54:3a:81:ea:61:54:bf:b0:e0: 6a:a1:53:74:64:15:e3:9a:a5:02:17:bb:de:0c:c3:73:ca:4b: a2:4d:34:7c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RURFNzExMC8GA1UEBRMoRTFDNTlGQTVBNkJDODc2RjdDRTRBNDZDQUFBRTYwNjA0 RjA1MTg2NjAeFw0yNjA1MTEwODI2NTBaFw0yNjA1MTgwODI2NTBaMBgxFjAUBgNV BAMTDTZhMDE5MmNhLTU4ZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgJV13wg6kJRGXyJ/qaWpcd+BDhJbGoUSQ3vLTf/5RlLS58Oz6P1f8CyPWOUIS 1IFJq+hLNBn4qvRIwlXsPnXzhJP94DK03K3AJSO4JVG31wEwMuyKuyC2WsZy3E+c 5+xvZJ9JLdpg9RWp8ZTJIAyHDXr60NY4xXstajiyrnlOH/oPsxdu9wBfjB6kkrhf 0MGPIpIWAWfUspKl30cp/a2l4jInkIeuM54Ft1c5JODS6hb9AOFg1deVGuAYVePG t38A1WofhKlADkclzROb7rkt43+3XKrJ4MwbwN8/MLhhkskjS9RdRGlQJZcivNGR BQuX5yRcscs94wKjoLhM9djFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUbVXgbjFW lTYkiztLqMq+e02aEfUwHwYDVR0jBBgwFoAU4cWfpaa8h2985KRsqq5gYE8FGGYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFREU3L0U3RkQzMDU4RDk5 RDExRjBCQkU3ODM5OTY2RDM2NDFELzRjV2ZwYWE4aDI5ODVLUnNxcTVnWUU4RkdH WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNGNXZnBhYThoMjk4NUtSc3FxNWdZRThGR0dZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF REU3L0U3RkQzMDU4RDk5RDExRjBCQkU3ODM5OTY2RDM2NDFELzRjV2ZwYWE4aDI5 ODVLUnNxcTVnWUU4RkdHWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAvoCZYlPq//uwea4sT88evKSiHkMEXnpN8RlCDClpsNeaFWNneFssFpzsJnK+6 dhyhU75HUrH66Z7v6v0CEYMw8bMJcxcjOdLolrY1q8rk2jupX4jDFt38qlLsoxBW PJimi/rzDJuTLAczaMz8DxGoqBB62faFIi/drpK1XFpRysHk1Joy+USBzkwHm33L xJCXc+HFwKLOkVHFWXS/9M+LEsKEyZ9XSvekTcRMcJgX+1zUsh+M0ERZr7L9rNPr 1/69k+5bMf/H+loxOzBnmafXtFLGN8+bMO0Qah2Z1/KyXpxUOoHqYVS/sOBqoVN0 ZBXjmqUCF7veDMNzykuiTTR8 -----END CERTIFICATE-----Generated at Wed May 13 10:04:53 2026 by rpki-client