$ rpki-client -vvf rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft File: nB5FqAhMMR3VAEShc2BejuPEzJU.mft (raw, json) Hash identifier: 54VhPN2OawkBey8UvwlnPhGEIvoCJF+WvopeyHQAivQ= Subject key identifier: 0D:D3:6D:B0:09:30:67:13:B3:0F:51:E0:91:53:16:79:10:6F:C3:E9 Authority key identifier: 9C:1E:45:A8:08:4C:31:1D:D5:00:44:A1:73:60:5E:8E:E3:C4:CC:95 Certificate issuer: /CN=A91491CC/serialNumber=9C1E45A8084C311DD50044A173605E8EE3C4CC95 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft Manifest number: 77 Signing time: Mon 11 May 2026 07:54:46 +0000 Manifest this update: Mon 11 May 2026 07:54:45 +0000 Manifest next update: Mon 18 May 2026 07:54:45 +0000 Files and hashes: 1: nB5FqAhMMR3VAEShc2BejuPEzJU.crl (hash: qbPeXbvZxolVvGryEbrUkoavCS35qeMDaqmHH2PStN8=) 2: 31E9004E9A0F11F0BC057E7DC4F9AE02.roa (hash: lMXIM574jb3Z0QsqRGCGYyP7C5VSgFPD1a4YIovILSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.crl rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 07:54:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91491CC, serialNumber=9C1E45A8084C311DD50044A173605E8EE3C4CC95 Validity Not Before: May 11 07:54:45 2026 GMT Not After : May 18 07:54:45 2026 GMT Subject: CN=6a018b45-42fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8d:6e:18:56:0e:79:8a:07:95:22:c3:b9:c1: 08:0c:c5:17:e3:8b:04:05:0c:91:d9:37:cd:76:17: 06:c6:2e:26:de:5e:1c:76:18:ff:24:01:49:72:47: ea:1c:3c:a7:4d:73:e3:c5:87:17:99:b4:ef:62:f5: 74:40:81:07:a5:c4:cd:cb:08:e5:54:66:c4:0d:c7: c2:a6:5e:06:48:55:85:4f:32:ce:c8:5a:55:ee:39: ab:25:3d:97:80:68:80:54:54:dc:f8:94:46:a2:8b: a5:59:a6:f5:bf:39:b8:55:d4:25:37:38:b6:23:a9: 07:6e:fd:f1:46:f4:f5:3b:fe:27:6b:47:9e:c1:b3: 66:c0:4f:c9:b7:84:63:f0:e6:50:0f:1a:87:fc:35: 69:1e:fa:f2:7d:cc:1e:51:a7:36:89:77:8d:a2:46: 92:52:b3:7a:fa:55:c2:c7:a9:b7:1b:cb:d7:c2:d3: 55:b5:9a:cb:6b:73:10:71:62:6a:9d:71:3a:09:8b: eb:42:ca:90:39:40:d7:a3:ab:c3:06:62:bb:a2:c5: 4e:0e:11:dc:87:c9:34:02:8e:fb:ab:82:7c:48:3c: 0d:11:45:66:94:e5:5c:58:c9:55:e3:c7:f8:01:34: 1e:d5:1b:5c:7c:d0:63:1f:5e:91:b7:c4:a2:63:ac: 47:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D3:6D:B0:09:30:67:13:B3:0F:51:E0:91:53:16:79:10:6F:C3:E9 X509v3 Authority Key Identifier: keyid:9C:1E:45:A8:08:4C:31:1D:D5:00:44:A1:73:60:5E:8E:E3:C4:CC:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a7:95:cc:66:95:56:89:57:1c:11:9a:87:b6:c2:7c:56:27: 55:39:08:1f:07:6a:20:02:29:db:93:8d:92:90:a1:88:20:c8: 09:4d:1e:62:87:98:e9:79:80:d3:5b:09:cd:a6:f6:08:a5:4b: 0a:9d:e7:dc:8b:a6:e9:de:c9:2a:4e:bc:84:de:da:96:ff:25: 98:cc:b3:8a:19:83:d9:6b:97:95:d1:c8:87:e6:06:82:40:8f: 9d:70:f8:53:0b:0b:84:9e:13:ab:dd:9f:e6:c4:91:ee:73:e0: 5a:d3:5e:3e:29:fc:07:48:d9:93:bd:0e:f6:22:c9:f4:ef:0e: 30:78:b4:06:fd:46:08:9e:72:93:7b:48:59:4d:d1:8e:d5:a1: 9f:f6:1c:cf:eb:43:33:f5:e2:e5:9d:e9:50:c3:1d:cd:ae:e5: 07:ee:ea:ab:31:e3:63:d5:bd:79:5a:a8:f5:e5:17:6b:12:24: f3:f7:ed:df:b1:82:ff:9c:74:7f:f8:2c:0b:55:54:11:c9:37: fb:ef:5f:f0:2a:f8:91:11:38:b3:e3:4d:81:a3:1a:06:a5:2a: a2:26:35:c2:ba:9b:57:aa:3f:42:89:e6:bd:6b:12:a9:1d:d8: d4:92:70:6d:1d:db:6c:82:27:c7:c0:ac:e4:74:68:79:17:9b: 13:55:67:c3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OTFDQzExMC8GA1UEBRMoOUMxRTQ1QTgwODRDMzExREQ1MDA0NEExNzM2MDVFOEVF M0M0Q0M5NTAeFw0yNjA1MTEwNzU0NDVaFw0yNjA1MTgwNzU0NDVaMBgxFjAUBgNV BAMTDTZhMDE4YjQ1LTQyZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3jW4YVg55igeVIsO5wQgMxRfjiwQFDJHZN812FwbGLibeXhx2GP8kAUlyR+oc PKdNc+PFhxeZtO9i9XRAgQelxM3LCOVUZsQNx8KmXgZIVYVPMs7IWlXuOaslPZeA aIBUVNz4lEaii6VZpvW/ObhV1CU3OLYjqQdu/fFG9PU7/idrR57Bs2bAT8m3hGPw 5lAPGof8NWke+vJ9zB5RpzaJd42iRpJSs3r6VcLHqbcby9fC01W1mstrcxBxYmqd cToJi+tCypA5QNejq8MGYruixU4OEdyHyTQCjvurgnxIPA0RRWaU5VxYyVXjx/gB NB7VG1x80GMfXpG3xKJjrEdnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUDdNtsAkw ZxOzD1HgkVMWeRBvw+kwHwYDVR0jBBgwFoAUnB5FqAhMMR3VAEShc2BejuPEzJUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5MUNDLzlERjA3RTQ0OUEw RTExRjA4OUM4OEI3Q0M0RjlBRTAyL25CNUZxQWhNTVIzVkFFU2hjMkJlanVQRXpK VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbkI1RnFBaE1NUjNWQUVTaGMyQmVqdVBFekpVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5 MUNDLzlERjA3RTQ0OUEwRTExRjA4OUM4OEI3Q0M0RjlBRTAyL25CNUZxQWhNTVIz VkFFU2hjMkJlanVQRXpKVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAqp5XMZpVWiVccEZqHtsJ8VidVOQgfB2ogAinbk42SkKGIIMgJTR5ih5jpeYDT WwnNpvYIpUsKnefci6bp3skqTryE3tqW/yWYzLOKGYPZa5eV0ciH5gaCQI+dcPhT CwuEnhOr3Z/mxJHuc+Ba014+KfwHSNmTvQ72Isn07w4weLQG/UYInnKTe0hZTdGO 1aGf9hzP60Mz9eLlnelQwx3NruUH7uqrMeNj1b15Wqj15RdrEiTz9+3fsYL/nHR/ +CwLVVQRyTf771/wKviRETiz402BoxoGpSqiJjXCuptXqj9Ciea9axKpHdjUknBt HdtsgifHwKzkdGh5F5sTVWfD -----END CERTIFICATE-----Generated at Wed May 13 03:54:32 2026 by rpki-client