$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft File: CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft (raw, json) Hash identifier: fzLxdIQmf3qNUf/Uo5yPvTiGh/bUZmD1NyEeRQ0eoLY= Subject key identifier: 61:96:2C:FC:E2:E3:EF:B1:96:C2:CE:65:3E:C8:6F:89:C2:DE:ED:BD Authority key identifier: 0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F Certificate issuer: /CN=A91FFE9F/serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F Certificate serial: 1006 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft Manifest number: 0FCE Signing time: Tue 12 May 2026 17:32:29 +0000 Manifest this update: Tue 12 May 2026 17:32:29 +0000 Manifest next update: Tue 19 May 2026 17:32:29 +0000 Files and hashes: 1: CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl (hash: U6n7HSeoLQMcg3v3bljQxPjZjnUQ1tM43uBGA1Yx5j8=) 2: 6153EE40A64911EEA2F9C24AC4F9AE02.roa (hash: xxh6NZnNYpflyBEdhUUFw/SOYfLeyMddymrrtghmKYo=) 3: D927A2DAA64A11EE8316D651C4F9AE02.roa (hash: LdvKEMxHF6LRdf8uDUGPZDjjr7RNd+qCPf5qkED55LI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:32:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4102 (0x1006) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFE9F, serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F Validity Not Before: May 12 17:32:29 2026 GMT Not After : May 19 17:32:29 2026 GMT Subject: CN=6a03642d-f8a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d7:f1:9b:97:d2:78:20:47:86:92:a4:32:1e: b9:74:29:44:fe:a3:e3:d1:4c:c6:0b:6f:7d:32:eb: 00:6a:39:99:47:41:4c:86:09:27:f8:c4:6a:8d:43: 41:b5:50:46:6c:3a:72:45:14:a5:47:2d:b4:d6:aa: fa:fa:61:45:52:d6:cd:07:af:20:fd:79:8d:3b:32: 30:f6:90:56:db:20:fe:f0:ad:c0:ac:24:9e:b9:0c: e1:98:eb:6f:71:11:de:b3:82:84:a7:41:3f:12:1e: 89:80:4e:39:f5:db:55:da:7f:59:09:32:24:e6:c4: ff:28:46:12:d2:d0:49:e9:9a:12:80:1d:08:67:96: f8:e1:40:7b:a3:6d:10:be:52:19:d2:8b:4c:aa:a8: d5:67:88:3b:49:44:d2:6b:87:8f:70:5f:d5:78:3e: 9a:b9:e0:96:38:15:7b:32:37:3d:e8:de:42:70:42: 43:2e:21:ad:2e:93:f7:92:c8:fe:f3:d8:b3:dd:9b: fb:f9:40:f4:1a:c6:5e:d9:4b:88:a0:e3:99:4f:94: 60:3b:88:38:da:a3:a3:2d:fb:0e:92:8a:f5:9d:34: b1:b5:43:bd:e7:a6:d3:7f:4a:55:13:18:aa:e2:71: 6d:a9:a0:5e:f2:85:f3:b9:86:77:0a:dc:b3:84:6d: de:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:96:2C:FC:E2:E3:EF:B1:96:C2:CE:65:3E:C8:6F:89:C2:DE:ED:BD X509v3 Authority Key Identifier: keyid:0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:90:c3:5c:ca:34:e4:46:22:7e:65:74:50:4d:29:2d:a1:a8: cd:c1:4e:0c:6c:d0:95:e2:8d:41:de:b8:05:eb:c3:0c:df:e2: a1:30:be:fe:f3:fa:d3:3e:c6:11:70:b3:a3:3f:8d:2b:a9:88: a1:a1:10:f9:d2:f4:ee:5f:f1:1a:ee:41:9a:44:ed:b7:e8:2f: 16:52:aa:08:f4:f5:a6:f8:66:44:f9:40:17:85:aa:95:b7:bc: 9a:34:b6:a6:62:79:af:ac:13:87:48:4a:6c:11:ac:60:9e:c6: aa:ec:56:bc:bc:ac:98:b8:a3:94:8c:66:87:09:14:9d:46:eb: 8b:a3:e1:4f:84:2a:1d:0f:a3:bb:22:c6:39:9b:ab:d9:e8:2c: e1:b2:16:27:f9:25:e6:38:09:c2:bd:09:c3:e2:d6:e9:6a:10: 9b:b8:3e:a8:14:e8:4b:6e:50:65:84:30:61:b0:8c:97:1d:6d: 0e:62:e5:dd:24:85:53:bc:85:8f:f3:cf:82:8b:40:35:c3:fe: ce:3c:38:dd:ca:fe:bd:f8:cb:80:46:c0:73:60:4d:b0:41:a0: b8:2f:49:30:a9:58:a2:21:82:26:b7:a8:d5:37:5c:9b:2d:96: 46:0d:f5:d5:af:9e:18:54:b9:78:85:6e:19:db:52:dc:3c:2a: ef:17:c6:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZFOUYxMTAvBgNVBAUTKDBCMDk1MjM2MjM0RTY5MzVCQUEzNDFFMzIzNUEzREI0 NzNBQ0M2N0YwHhcNMjYwNTEyMTczMjI5WhcNMjYwNTE5MTczMjI5WjAYMRYwFAYD VQQDEw02YTAzNjQyZC1mOGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttfxm5fSeCBHhpKkMh65dClE/qPj0UzGC299MusAajmZR0FMhgkn+MRqjUNB tVBGbDpyRRSlRy201qr6+mFFUtbNB68g/XmNOzIw9pBW2yD+8K3ArCSeuQzhmOtv cRHes4KEp0E/Eh6JgE459dtV2n9ZCTIk5sT/KEYS0tBJ6ZoSgB0IZ5b44UB7o20Q vlIZ0otMqqjVZ4g7SUTSa4ePcF/VeD6aueCWOBV7Mjc96N5CcEJDLiGtLpP3ksj+ 89iz3Zv7+UD0GsZe2UuIoOOZT5RgO4g42qOjLfsOkor1nTSxtUO956bTf0pVExiq 4nFtqaBe8oXzuYZ3CtyzhG3ehwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGGWLPzi 4++xlsLOZT7Ib4nC3u29MB8GA1UdIwQYMBaAFAsJUjYjTmk1uqNB4yNaPbRzrMZ/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkU5Ri84QkUwNjNFMDdC MTYxMUU5OTk0OUFDNTFDNEY5QUUwMi9Dd2xTTmlOT2FUVzZvMEhqSTFvOXRIT3N4 bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N3bFNOaU5PYVRXNm8wSGpJMW85dEhPc3huOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkU5Ri84QkUwNjNFMDdCMTYxMUU5OTk0OUFDNTFDNEY5QUUwMi9Dd2xTTmlOT2FU VzZvMEhqSTFvOXRIT3N4bjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXJDDXMo05EYifmV0UE0pLaGozcFODGzQleKNQd64BevDDN/ioTC+/vP60z7G EXCzoz+NK6mIoaEQ+dL07l/xGu5BmkTtt+gvFlKqCPT1pvhmRPlAF4Wqlbe8mjS2 pmJ5r6wTh0hKbBGsYJ7GquxWvLysmLijlIxmhwkUnUbri6PhT4QqHQ+juyLGOZur 2egs4bIWJ/kl5jgJwr0Jw+LW6WoQm7g+qBToS25QZYQwYbCMlx1tDmLl3SSFU7yF j/PPgotANcP+zjw43cr+vfjLgEbAc2BNsEGguC9JMKlYoiGCJreo1Tdcmy2WRg31 1a+eGFS5eIVuGdtS3Dwq7xfGAQ== -----END CERTIFICATE-----Generated at Wed May 13 16:06:24 2026 by rpki-client