$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft File: cnQCOx-0p0kyj11N-DsN0_B_6UI.mft (raw, json) Hash identifier: sgzM05KPfXCYlOUu8TthIAg5jK9i9cQ68Jm0lzhd32s= Subject key identifier: CB:64:0C:CB:AC:E8:EB:68:C9:EF:D0:78:83:A0:B1:90:4D:4B:01:A7 Authority key identifier: 72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42 Certificate issuer: /CN=A91FFDF3/serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942 Certificate serial: 071A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft Manifest number: 071A Signing time: Tue 12 May 2026 21:57:02 +0000 Manifest this update: Tue 12 May 2026 21:57:02 +0000 Manifest next update: Tue 19 May 2026 21:57:02 +0000 Files and hashes: 1: cnQCOx-0p0kyj11N-DsN0_B_6UI.crl (hash: BRz01OYbK8fp3ymze3MHDHq5bX6Y8Z6qNcUnc76F4w4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.crl rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 21:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1818 (0x71a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFDF3, serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942 Validity Not Before: May 12 21:57:02 2026 GMT Not After : May 19 21:57:02 2026 GMT Subject: CN=6a03a22e-bc03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f8:20:95:79:5b:02:99:3f:97:b4:67:f1:0f: 70:5b:4a:51:52:4d:26:b2:aa:bc:c0:7e:4f:93:e8: b6:fc:4d:a1:8d:e9:9f:be:55:42:60:ee:3d:5b:32: 16:e4:f7:6c:b4:31:94:56:56:01:60:58:26:97:3e: d2:65:45:75:47:3b:dd:65:3b:a8:69:f7:86:02:bb: 53:1d:9f:17:7e:ac:57:fc:08:23:a2:8c:60:c0:65: 52:84:db:c9:20:9c:b3:41:31:82:c7:c1:29:e2:18: 6c:ec:c8:bf:ad:b6:86:c9:71:91:b9:e8:4e:d9:ad: 11:97:f6:b1:9f:e7:52:a7:2f:59:0d:35:e2:74:9d: 96:93:88:05:74:b6:05:a6:eb:a4:9d:bd:83:af:95: 70:b7:c7:86:dd:0a:f4:43:1b:2c:db:fb:3e:f5:8e: 05:0d:63:61:1e:b2:21:66:6e:f3:fa:a6:23:e5:cf: 36:be:d6:3a:12:cd:f3:ea:93:87:b2:2b:50:d6:7f: 68:32:08:ce:72:76:5b:4e:fb:cf:2e:80:b2:53:26: 08:3e:27:33:6e:19:4a:31:16:28:08:ab:f4:16:53: 98:80:bc:df:7c:53:b4:ce:34:03:3a:9a:f3:1b:65: dc:c8:09:0a:d9:be:e9:ba:95:5f:63:7f:1a:21:e0: 57:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:64:0C:CB:AC:E8:EB:68:C9:EF:D0:78:83:A0:B1:90:4D:4B:01:A7 X509v3 Authority Key Identifier: keyid:72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:e3:04:8a:79:5c:48:0f:43:1b:ed:48:36:e5:63:b9:d2:fe: 02:bf:e0:4d:0f:cf:d6:5f:90:1e:99:35:aa:89:18:a2:8b:39: b5:2a:a8:d1:a5:eb:f4:c5:c1:60:e6:26:1c:04:2f:c5:42:cd: 05:35:53:1c:90:b2:a5:d2:ad:ee:fc:e1:c8:5d:8a:9b:9a:62: bf:47:42:a9:1f:94:af:92:d0:7d:79:85:cb:eb:ae:6c:5a:15: 98:54:ff:87:f0:68:1d:d5:d4:e5:2c:d4:11:0d:f8:71:43:f1: 2e:12:9e:f2:66:19:e7:d2:2a:68:bf:03:98:26:37:37:c7:80: aa:51:af:e4:2a:80:e5:74:d3:bf:cb:9e:f5:7e:2c:97:f0:30: 05:ad:53:50:22:d5:de:1d:a9:90:6f:dc:4b:c2:58:62:83:a6: cf:c6:1d:e0:cf:f7:f8:43:bc:95:b6:07:21:3d:f4:7b:e4:9f: 0e:ae:1f:26:12:cc:aa:55:8c:55:15:90:e2:fc:bb:ed:f9:7c: ab:aa:d6:9c:3e:c9:18:2d:88:9d:3a:b1:03:62:ce:bb:56:55: 31:93:db:55:83:36:b0:8b:0c:19:39:08:5b:c6:c3:d5:54:4e: 5e:7c:c5:56:43:07:2b:ca:ac:a3:f7:69:6c:0e:24:f1:ff:2c: 40:7a:16:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZERjMxMTAvBgNVBAUTKDcyNzQwMjNCMUZCNEE3NDkzMjhGNUQ0REY4M0IwREQz RjA3RkU5NDIwHhcNMjYwNTEyMjE1NzAyWhcNMjYwNTE5MjE1NzAyWjAYMRYwFAYD VQQDEw02YTAzYTIyZS1iYzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvgglXlbApk/l7Rn8Q9wW0pRUk0msqq8wH5Pk+i2/E2hjemfvlVCYO49WzIW 5PdstDGUVlYBYFgmlz7SZUV1RzvdZTuoafeGArtTHZ8XfqxX/AgjooxgwGVShNvJ IJyzQTGCx8Ep4hhs7Mi/rbaGyXGRuehO2a0Rl/axn+dSpy9ZDTXidJ2Wk4gFdLYF puuknb2Dr5Vwt8eG3Qr0Qxss2/s+9Y4FDWNhHrIhZm7z+qYj5c82vtY6Es3z6pOH sitQ1n9oMgjOcnZbTvvPLoCyUyYIPiczbhlKMRYoCKv0FlOYgLzffFO0zjQDOprz G2XcyAkK2b7pupVfY38aIeBXWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMtkDMus 6Otoye/QeIOgsZBNSwGnMB8GA1UdIwQYMBaAFHJ0AjsftKdJMo9dTfg7DdPwf+lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkRGMy83NTdEQjc4ODdE NzExMUVCODJEM0Q2NjFDNEY5QUUwMi9jblFDT3gtMHAwa3lqMTFOLURzTjBfQl82 VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NuUUNPeC0wcDBreWoxMU4tRHNOMF9CXzZVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkRGMy83NTdEQjc4ODdENzExMUVCODJEM0Q2NjFDNEY5QUUwMi9jblFDT3gtMHAw a3lqMTFOLURzTjBfQl82VUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcOMEinlcSA9DG+1INuVjudL+Ar/gTQ/P1l+QHpk1qokYoos5tSqo0aXr9MXB YOYmHAQvxULNBTVTHJCypdKt7vzhyF2Km5piv0dCqR+Ur5LQfXmFy+uubFoVmFT/ h/BoHdXU5SzUEQ34cUPxLhKe8mYZ59IqaL8DmCY3N8eAqlGv5CqA5XTTv8ue9X4s l/AwBa1TUCLV3h2pkG/cS8JYYoOmz8Yd4M/3+EO8lbYHIT30e+SfDq4fJhLMqlWM VRWQ4vy77fl8q6rWnD7JGC2InTqxA2LOu1ZVMZPbVYM2sIsMGTkIW8bD1VROXnzF VkMHK8qso/dpbA4k8f8sQHoWhQ== -----END CERTIFICATE-----Generated at Wed May 13 05:30:50 2026 by rpki-client