$ rpki-client -vvf rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft File: rGoi8eThZQrPtSifXctdU5IPzzQ.mft (raw, json) Hash identifier: txs3hiTQRlGLUIPH0FJUsO7FkaSagym3zIMAbkHagsQ= Subject key identifier: 9F:0C:1C:11:86:4D:BB:2D:02:72:86:E6:24:B5:B2:00:DC:A9:71:3E Authority key identifier: AC:6A:22:F1:E4:E1:65:0A:CF:B5:28:9F:5D:CB:5D:53:92:0F:CF:34 Certificate issuer: /CN=A91422D7/serialNumber=AC6A22F1E4E1650ACFB5289F5DCB5D53920FCF34 Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft Manifest number: 052C Signing time: Mon 11 May 2026 00:53:13 +0000 Manifest this update: Mon 11 May 2026 00:53:13 +0000 Manifest next update: Mon 18 May 2026 00:53:13 +0000 Files and hashes: 1: rGoi8eThZQrPtSifXctdU5IPzzQ.crl (hash: u3I5Q9hN7CDQwvPTkV83sdz6lUqkTIfdwPDtVEjLmWw=) 2: CE5F74E2BE5811EEA8C02E2AC4F9AE02.roa (hash: Z1lkPboS7Do5JVczgOK46BmhKy5Eyozp7p6CLVvAhpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.crl rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 00:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91422D7, serialNumber=AC6A22F1E4E1650ACFB5289F5DCB5D53920FCF34 Validity Not Before: May 11 00:53:13 2026 GMT Not After : May 18 00:53:13 2026 GMT Subject: CN=6a012879-4eb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:56:28:f0:5a:0d:bb:bf:36:c3:68:d3:c5:1b: 7f:19:5d:3a:80:e8:6a:bd:1f:2c:3c:7d:dd:0d:98: e2:bd:fe:69:fe:60:89:ee:f0:2e:50:17:54:68:a4: 23:cb:43:90:6c:e5:5c:0b:72:43:55:00:14:6f:9b: c3:0d:98:95:ac:6f:d5:a5:22:66:59:8a:c8:54:a4: 1b:a7:de:fd:c4:03:9c:f8:8c:66:b0:0f:26:06:7e: 93:95:75:67:88:e0:7a:88:e3:48:fd:f7:57:96:bf: df:c3:e4:8a:55:cb:e9:1a:2a:98:d8:b4:9d:90:4b: b7:29:11:74:a2:24:4b:85:bb:04:da:7b:87:10:ba: a6:f6:f4:d6:7c:58:60:21:1d:6c:d9:f7:55:cf:a7: 4e:8c:3c:01:78:41:de:ba:4c:03:25:52:7c:f1:e0: d8:f2:19:d2:46:37:da:7f:c5:dc:99:fd:48:36:9c: c7:93:24:53:39:c0:ee:3c:51:7f:ed:c0:76:46:45: 10:5f:39:13:ce:61:00:05:e9:71:86:ab:9c:c2:11: 68:b6:01:80:bd:02:9b:84:1a:06:62:f9:28:b2:db: 07:c8:20:37:cc:c8:52:c5:df:f6:0e:78:01:cc:88: c8:45:cf:e5:0c:fc:5e:88:9c:ca:ae:30:55:94:3f: e5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:0C:1C:11:86:4D:BB:2D:02:72:86:E6:24:B5:B2:00:DC:A9:71:3E X509v3 Authority Key Identifier: keyid:AC:6A:22:F1:E4:E1:65:0A:CF:B5:28:9F:5D:CB:5D:53:92:0F:CF:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoi8eThZQrPtSifXctdU5IPzzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/rGoi8eThZQrPtSifXctdU5IPzzQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:82:40:a1:74:c5:0d:62:48:86:cc:f2:8d:5e:96:b8:7b:ff: 89:a0:e9:a7:6f:63:f6:c6:62:50:c3:d6:c0:e1:4c:23:da:a5: a1:50:ba:a2:37:a3:29:56:f3:cf:04:36:84:ae:c6:0d:ef:fc: 3a:62:dd:15:1a:a9:e7:f0:ba:47:e9:d9:ac:22:66:bc:2f:c4: 09:8e:53:7f:b8:b2:90:55:d4:88:7d:b1:72:3b:5e:8b:fb:c5: 5f:d7:49:44:a6:aa:e4:58:b1:34:da:64:fe:10:ce:36:63:25: df:e9:17:f6:77:9a:5d:d0:78:f5:cc:3a:ce:62:5a:49:cf:64: d9:ea:89:42:ae:ce:bb:ed:f4:79:24:c0:4b:31:2c:f0:79:b7: 8a:7c:a6:b4:3b:f1:51:98:4c:09:a9:e0:e6:10:b6:0d:0d:9d: 0f:e9:54:24:f6:8a:8e:8e:b3:2d:8d:22:52:b6:d7:13:fc:eb: 51:21:c7:50:a2:d4:5a:5e:f5:15:c2:65:65:cc:2e:aa:5c:a3: 0b:cb:c4:64:01:c5:41:31:75:10:8c:bc:a3:78:bf:0f:9a:65: a9:9c:d8:ec:0a:f7:c0:6a:27:14:78:f2:0c:c7:83:45:e9:52: dd:6f:0e:8d:a0:98:d0:b4:7e:66:5a:4a:3d:6d:b9:58:19:dc: 64:79:3d:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyRDcxMTAvBgNVBAUTKEFDNkEyMkYxRTRFMTY1MEFDRkI1Mjg5RjVEQ0I1RDUz OTIwRkNGMzQwHhcNMjYwNTExMDA1MzEzWhcNMjYwNTE4MDA1MzEzWjAYMRYwFAYD VQQDEw02YTAxMjg3OS00ZWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslYo8FoNu782w2jTxRt/GV06gOhqvR8sPH3dDZjivf5p/mCJ7vAuUBdUaKQj y0OQbOVcC3JDVQAUb5vDDZiVrG/VpSJmWYrIVKQbp979xAOc+IxmsA8mBn6TlXVn iOB6iONI/fdXlr/fw+SKVcvpGiqY2LSdkEu3KRF0oiRLhbsE2nuHELqm9vTWfFhg IR1s2fdVz6dOjDwBeEHeukwDJVJ88eDY8hnSRjfaf8Xcmf1INpzHkyRTOcDuPFF/ 7cB2RkUQXzkTzmEABelxhqucwhFotgGAvQKbhBoGYvkostsHyCA3zMhSxd/2DngB zIjIRc/lDPxeiJzKrjBVlD/lAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ8MHBGG TbstAnKG5iS1sgDcqXE+MB8GA1UdIwQYMBaAFKxqIvHk4WUKz7Uon13LXVOSD880 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjJENy81QjlGNzFEMkVE MzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9yR29pOGVUaFpRclB0U2lmWGN0ZFU1SVB6 elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JHb2k4ZVRoWlFyUHRTaWZYY3RkVTVJUHp6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjJENy81QjlGNzFEMkVEMzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9yR29pOGVUaFpR clB0U2lmWGN0ZFU1SVB6elEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALYJAoXTFDWJIhszyjV6WuHv/iaDpp29j9sZiUMPWwOFMI9qloVC6ojejKVbz zwQ2hK7GDe/8OmLdFRqp5/C6R+nZrCJmvC/ECY5Tf7iykFXUiH2xcjtei/vFX9dJ RKaq5FixNNpk/hDONmMl3+kX9neaXdB49cw6zmJaSc9k2eqJQq7Ou+30eSTASzEs 8Hm3inymtDvxUZhMCang5hC2DQ2dD+lUJPaKjo6zLY0iUrbXE/zrUSHHUKLUWl71 FcJlZcwuqlyjC8vEZAHFQTF1EIy8o3i/D5plqZzY7Ar3wGonFHjyDMeDRelS3W8O jaCY0LR+ZlpKPW25WBncZHk9Lg== -----END CERTIFICATE-----Generated at Wed May 13 02:29:37 2026 by rpki-client