$ rpki-client -vvf rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft File: 38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft (raw, json) Hash identifier: 6Rmxw7a9n1iSJ8RJq43NmnF8B4l+dAh+1Ym9CMZoLaQ= Subject key identifier: F3:EF:91:6C:7F:22:72:4A:7A:F4:C1:E6:1A:7D:77:AE:C8:15:C1:94 Authority key identifier: DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99 Certificate issuer: /CN=A91516FF/serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99 Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft Manifest number: DF Signing time: Wed 13 May 2026 06:54:46 +0000 Manifest this update: Wed 13 May 2026 06:54:45 +0000 Manifest next update: Wed 20 May 2026 06:54:45 +0000 Files and hashes: 1: 38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl (hash: 4rva5N1OCRwEhZNJZHGe4ZiDs8NA46OLHf4CmHICzPs=) 2: 692243D640AA11F096F2746AC4F9AE02.roa (hash: hrId0XK3QT59rfCxOyEsibtNRieUfn4KutYpjg3t3lE=) 3: 572A655C6E8E11F0BC00AD68C4F9AE02.roa (hash: FmJuf298hS3Cq5FkDNYaTuFTUFK1cdgTe8R72xFRVHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 06:54:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91516FF, serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99 Validity Not Before: May 13 06:54:45 2026 GMT Not After : May 20 06:54:45 2026 GMT Subject: CN=6a042036-1a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fb:83:1a:26:3f:dc:44:21:d3:2b:94:03:7a: 85:b8:5b:78:1f:0e:15:25:76:0c:8b:d7:e5:1c:c2: 3c:c4:66:91:c1:1e:20:80:85:c4:ea:b8:3c:6a:ac: 7f:79:b9:e8:fb:79:17:80:30:84:91:5f:b1:77:aa: c7:66:8e:d5:82:19:63:e1:83:c8:9b:77:68:c2:18: a3:ff:ec:62:1d:1a:5e:0f:8f:94:3c:d2:3d:39:f9: 9d:43:fd:81:2c:60:4e:e1:23:6f:b4:d1:25:9a:bc: 28:2e:1d:ae:b8:a7:be:14:ef:03:2f:fd:b5:c5:1c: b0:77:03:46:e4:08:6e:ea:6b:12:32:13:c7:9e:2b: de:ed:52:4c:f5:6f:79:e6:82:94:38:f2:c2:76:f1: 8f:65:ee:88:02:7e:f7:a1:5c:f1:80:18:92:55:a3: ad:7f:b1:4a:1f:2e:80:4c:c2:d1:2b:b7:7b:00:5b: 5c:62:60:29:e8:09:c5:cd:f0:6c:0d:39:20:f6:04: 3a:6d:f8:39:b2:a5:d6:5d:7b:cb:c9:bd:4e:c9:51: 79:47:bb:55:6d:e3:6a:42:e1:6f:fc:f3:56:ab:54: 81:11:72:b0:96:4f:0d:04:41:f8:3a:51:6e:1f:42: 08:32:07:21:e1:81:d8:97:41:35:df:af:86:ad:b0: 30:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:EF:91:6C:7F:22:72:4A:7A:F4:C1:E6:1A:7D:77:AE:C8:15:C1:94 X509v3 Authority Key Identifier: keyid:DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:d3:5a:1b:62:f2:6e:c3:4b:96:f4:e6:83:db:87:07:c3:af: 54:c9:ed:d7:e9:39:ad:37:a9:b1:ab:ec:87:8c:35:87:fd:ac: 5a:f9:60:e4:24:0c:a6:24:87:cf:6a:5a:3c:a0:da:2d:a7:99: af:da:32:3d:87:9a:36:dc:e0:c4:27:26:b3:e2:99:d2:e7:86: 68:29:90:82:8c:80:c7:0e:c2:dc:9c:1e:b0:94:60:14:ee:71: da:41:72:0a:4c:e1:17:86:f6:a0:36:af:cf:d4:c9:0f:86:1c: a6:21:90:eb:d1:ce:1f:a2:2c:db:0b:3c:b8:d2:c1:1c:d7:e6: 1d:d7:f7:16:b3:95:85:83:fb:7a:6f:cc:b4:d7:93:39:44:b6: 3d:f6:d4:65:59:0c:82:fb:86:33:71:72:0c:c4:62:02:8b:4e: 04:2c:6d:56:fa:6d:21:61:a5:81:51:b5:18:d3:1e:dd:f7:e1: bd:7d:95:1c:fa:92:af:80:bd:d2:96:fc:9c:84:a5:03:2c:d0: 6c:89:e0:42:a4:51:f6:2f:78:63:83:0c:51:4e:ed:2a:46:18: 6a:51:4f:05:29:27:c1:8d:28:3f:f9:ce:81:e9:00:b1:14:33: 1a:38:4a:8b:23:63:44:cc:0b:96:ee:36:dd:09:85:fc:cf:d6: 8b:37:02:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE2RkYxMTAvBgNVBAUTKERGQ0E4RkRBQTVGRUY5NDhFMEVDRjZGOUM3MDM2MzlC NTY1MzlEOTkwHhcNMjYwNTEzMDY1NDQ1WhcNMjYwNTIwMDY1NDQ1WjAYMRYwFAYD VQQDEw02YTA0MjAzNi0xYTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmfuDGiY/3EQh0yuUA3qFuFt4Hw4VJXYMi9flHMI8xGaRwR4ggIXE6rg8aqx/ ebno+3kXgDCEkV+xd6rHZo7Vghlj4YPIm3dowhij/+xiHRpeD4+UPNI9OfmdQ/2B LGBO4SNvtNElmrwoLh2uuKe+FO8DL/21xRywdwNG5Ahu6msSMhPHnive7VJM9W95 5oKUOPLCdvGPZe6IAn73oVzxgBiSVaOtf7FKHy6ATMLRK7d7AFtcYmAp6AnFzfBs DTkg9gQ6bfg5sqXWXXvLyb1OyVF5R7tVbeNqQuFv/PNWq1SBEXKwlk8NBEH4OlFu H0IIMgch4YHYl0E136+GrbAwcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPPvkWx/ InJKevTB5hp9d67IFcGUMB8GA1UdIwQYMBaAFN/Kj9ql/vlI4Oz2+ccDY5tWU52Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTZGRi8yREE1NTkxMjE0 MTYxMUYwQTg1MjMyMTlDNEY5QUUwMi8zOHFQMnFYLS1Vamc3UGI1eHdOam0xWlRu WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM4cVAycVgtLVVqZzdQYjV4d05qbTFaVG5aay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTZGRi8yREE1NTkxMjE0MTYxMUYwQTg1MjMyMTlDNEY5QUUwMi8zOHFQMnFYLS1V amc3UGI1eHdOam0xWlRuWmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAktNaG2LybsNLlvTmg9uHB8OvVMnt1+k5rTepsavsh4w1h/2sWvlg5CQMpiSH z2paPKDaLaeZr9oyPYeaNtzgxCcms+KZ0ueGaCmQgoyAxw7C3JwesJRgFO5x2kFy CkzhF4b2oDavz9TJD4YcpiGQ69HOH6Is2ws8uNLBHNfmHdf3FrOVhYP7em/MtNeT OUS2PfbUZVkMgvuGM3FyDMRiAotOBCxtVvptIWGlgVG1GNMe3ffhvX2VHPqSr4C9 0pb8nISlAyzQbIngQqRR9i94Y4MMUU7tKkYYalFPBSknwY0oP/nOgekAsRQzGjhK iyNjRMwLlu423QmF/M/WizcCrw== -----END CERTIFICATE-----Generated at Wed May 13 11:00:30 2026 by rpki-client