$ rpki-client -vvf rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft File: 0wlAzG8MECS4QLu309gBJjYGylk.mft (raw, json) Hash identifier: k8Wl5VVAGElAQL/itDNQrgDx2IdVIaPwVwBOQJkuOiU= Subject key identifier: 88:B2:C5:8E:6A:71:D9:74:DE:5E:E1:F6:02:84:D5:47:BA:F3:CA:6A Authority key identifier: D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59 Certificate issuer: /CN=A91412BC/serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft Manifest number: C2 Signing time: Mon 11 May 2026 07:01:48 +0000 Manifest this update: Mon 11 May 2026 07:01:47 +0000 Manifest next update: Mon 18 May 2026 07:01:47 +0000 Files and hashes: 1: 0wlAzG8MECS4QLu309gBJjYGylk.crl (hash: SD1OhFm9tQShMLu0PTrpPGY7W5z/41G9xbhNRTNsENk=) 2: 92F3063C248A11F0AD4B1179C4F9AE02.roa (hash: snLyJB1mtilsonSg8bolW4tfoO6cxLckhLrYHgEKQiQ=) 3: 936B147E248A11F0AD4B1179C4F9AE02.roa (hash: LyQfyLurnqqH+WScrTsxG9TtblSEPenqHyPotX69udU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 07:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91412BC, serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59 Validity Not Before: May 11 07:01:47 2026 GMT Not After : May 18 07:01:47 2026 GMT Subject: CN=6a017edb-b108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b6:2a:e4:bc:f9:94:d3:e8:27:4c:da:41:8e: cd:c5:a4:98:40:fe:17:cb:dd:2f:57:cd:74:70:92: 6c:dc:fe:d2:a4:f5:e2:34:03:18:2d:1d:e7:22:e5: c3:60:09:1e:5e:ea:da:b3:a5:74:30:d1:0b:53:e0: 6c:a3:a4:23:d4:9e:9f:71:86:23:ca:f2:a9:3b:be: e3:e5:0d:55:90:d3:e0:f0:3b:e8:56:d9:e9:dd:57: 73:be:98:31:d7:1c:7d:4f:68:e1:e1:a7:24:ca:fa: 22:5e:a2:01:b7:b5:a6:fa:21:7f:df:b4:f2:8f:d3: 8c:60:d2:ef:85:48:75:79:0c:fb:0f:06:5c:09:90: e1:43:0b:ad:4e:a4:d4:0c:74:26:16:10:fa:49:d1: 66:95:16:60:0a:14:24:76:c7:f3:a9:ea:5b:4e:43: ea:cd:09:56:f0:7b:e0:bf:3e:aa:3b:6b:7d:98:9a: 7e:4d:d0:2e:e6:49:5f:c7:00:3e:74:8c:c5:56:e1: 7b:a1:36:14:44:60:f4:e4:e4:79:5d:a2:9b:ec:3d: e2:62:79:04:5c:d4:eb:d8:16:11:b8:de:b6:3f:ac: 7a:68:aa:f4:f1:a8:d9:6c:fa:71:44:08:fb:a4:fa: 74:ec:6d:6e:0b:ac:86:c8:ac:2e:3d:1c:a7:94:ef: 59:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B2:C5:8E:6A:71:D9:74:DE:5E:E1:F6:02:84:D5:47:BA:F3:CA:6A X509v3 Authority Key Identifier: keyid:D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a6:5b:ff:fb:8b:3d:ca:76:d6:f0:7e:f6:a8:e2:0d:15:90: 7f:50:d8:d1:c9:65:5b:38:2b:66:8c:81:b3:1a:17:25:8a:c3: 77:c7:19:cf:ae:de:6a:87:68:71:aa:4b:b3:07:11:cc:16:8f: ea:9d:18:da:d5:a0:3c:e1:69:13:ba:ec:3f:1c:52:86:01:95: 39:b8:d4:9c:ea:df:4d:ed:ca:e2:b1:bb:51:8d:e3:37:8b:8b: 90:a3:34:98:38:89:cd:6f:19:16:9d:58:c5:8a:0e:b4:45:a4: 9d:97:6c:b7:06:54:28:81:e8:66:dd:67:33:11:fa:57:51:85: 34:cf:b5:1c:1b:98:23:39:99:38:fe:fb:4b:3d:fb:26:e4:4b: a8:3b:f4:66:07:b7:92:df:49:1b:e6:98:23:d9:2b:2c:b8:ba: b1:a7:8c:ad:46:7b:51:a2:6b:c3:25:3b:ea:66:65:79:f6:35: 9d:5f:43:03:fd:8c:ce:ff:70:5b:e0:95:19:af:1c:d1:6d:97: 91:c3:2f:2a:4f:21:fc:5b:fb:78:1f:aa:b7:d1:cb:70:26:e3: c6:82:fa:1a:76:f7:61:aa:ff:59:2d:2c:51:20:48:cf:be:86: 6d:96:c7:bd:b9:8e:fd:90:79:56:21:6a:57:b2:36:08:94:a4: 1c:d3:ce:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDEyQkMxMTAvBgNVBAUTKEQzMDk0MENDNkYwQzEwMjRCODQwQkJCN0QzRDgwMTI2 MzYwNkNBNTkwHhcNMjYwNTExMDcwMTQ3WhcNMjYwNTE4MDcwMTQ3WjAYMRYwFAYD VQQDEw02YTAxN2VkYi1iMTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1LYq5Lz5lNPoJ0zaQY7NxaSYQP4Xy90vV810cJJs3P7SpPXiNAMYLR3nIuXD YAkeXuras6V0MNELU+Bso6Qj1J6fcYYjyvKpO77j5Q1VkNPg8DvoVtnp3Vdzvpgx 1xx9T2jh4ackyvoiXqIBt7Wm+iF/37Tyj9OMYNLvhUh1eQz7DwZcCZDhQwutTqTU DHQmFhD6SdFmlRZgChQkdsfzqepbTkPqzQlW8Hvgvz6qO2t9mJp+TdAu5klfxwA+ dIzFVuF7oTYURGD05OR5XaKb7D3iYnkEXNTr2BYRuN62P6x6aKr08ajZbPpxRAj7 pPp07G1uC6yGyKwuPRynlO9Z3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIiyxY5q cdl03l7h9gKE1Ue688pqMB8GA1UdIwQYMBaAFNMJQMxvDBAkuEC7t9PYASY2BspZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTJCQy8yMUE5NTMxNDI0 OEExMUYwOTk4NkQwNzdDNEY5QUUwMi8wd2xBekc4TUVDUzRRTHUzMDlnQkpqWUd5 bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB3bEF6RzhNRUNTNFFMdTMwOWdCSmpZR3lsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTJCQy8yMUE5NTMxNDI0OEExMUYwOTk4NkQwNzdDNEY5QUUwMi8wd2xBekc4TUVD UzRRTHUzMDlnQkpqWUd5bGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPKZb//uLPcp21vB+9qjiDRWQf1DY0cllWzgrZoyBsxoXJYrDd8cZz67eaodo capLswcRzBaP6p0Y2tWgPOFpE7rsPxxShgGVObjUnOrfTe3K4rG7UY3jN4uLkKM0 mDiJzW8ZFp1YxYoOtEWknZdstwZUKIHoZt1nMxH6V1GFNM+1HBuYIzmZOP77Sz37 JuRLqDv0Zge3kt9JG+aYI9krLLi6saeMrUZ7UaJrwyU76mZlefY1nV9DA/2Mzv9w W+CVGa8c0W2XkcMvKk8h/Fv7eB+qt9HLcCbjxoL6Gnb3Yar/WS0sUSBIz76GbZbH vbmO/ZB5ViFqV7I2CJSkHNPOtw== -----END CERTIFICATE-----Generated at Wed May 13 02:20:55 2026 by rpki-client