$ rpki-client -vvf rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft File: cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft (raw, json) Hash identifier: T4C3j5PcgSjGOUdF+rxn1zbdG9TEngY/GpiabyXqbkI= Subject key identifier: FF:70:1F:50:1B:6A:9F:28:FC:0C:92:D1:C8:AB:B7:19:73:2F:A7:0F Authority key identifier: 70:E8:85:57:B0:C0:82:C9:B0:6E:CF:59:B8:F2:8A:77:03:A6:38:01 Certificate issuer: /CN=A91764E1/serialNumber=70E88557B0C082C9B06ECF59B8F28A7703A63801 Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft Manifest number: 01AA Signing time: Wed 13 May 2026 04:11:17 +0000 Manifest this update: Wed 13 May 2026 04:11:16 +0000 Manifest next update: Wed 20 May 2026 04:11:16 +0000 Files and hashes: 1: cOiFV7DAgsmwbs9ZuPKKdwOmOAE.crl (hash: SS/P+vKX92Mgj0LENXPwHevm+xnp26ITOvxkiNephqY=) 2: 0C708FB4C67E11EE87B34958C4F9AE02.roa (hash: k3TfFva0pazkCIRXdBLI4mn/25rKAlL7flbXoW+92L0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.crl rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 04:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91764E1, serialNumber=70E88557B0C082C9B06ECF59B8F28A7703A63801 Validity Not Before: May 13 04:11:16 2026 GMT Not After : May 20 04:11:16 2026 GMT Subject: CN=6a03f9e5-2b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:07:1b:ff:07:6d:e3:5a:cd:f6:a2:be:08:3a: 5b:0d:6a:94:d1:5f:46:7e:d7:a6:0d:1d:d4:70:e8: 39:b7:02:72:4d:5a:c3:8d:b4:23:ec:6b:15:81:97: a8:53:ae:75:a4:89:2d:81:80:40:dc:33:56:fc:7c: d6:c8:64:04:67:bb:8b:04:81:22:ef:88:95:f5:c1: 71:e6:de:2c:2f:1b:ad:7f:f2:88:03:71:bc:6d:21: f0:99:97:a9:67:3f:a4:10:30:7f:a3:29:c3:ab:39: 6c:2e:74:23:7a:b7:3a:76:42:8c:fa:ef:ca:fe:95: 55:0d:d1:d0:76:0f:1d:73:4c:4b:23:b1:bb:88:05: 83:72:2b:bd:ca:b9:e2:e6:52:fb:b1:61:f4:db:cf: 80:6b:47:f0:45:9b:fd:cc:7e:c4:f7:af:3a:43:ce: 97:a9:d9:9a:57:23:52:5e:cf:ee:24:4b:e4:02:d7: f3:25:c0:b3:b1:c2:61:74:d0:3b:33:d3:fb:81:df: ac:31:72:5e:fc:31:88:7d:7b:50:46:96:48:27:04: b8:38:b5:ae:f5:76:f1:1c:02:50:c3:29:13:6e:ef: 13:97:a4:9b:d8:a6:6c:9b:3d:d8:d6:ad:95:de:48: 7b:a1:d5:b2:63:c8:16:a2:fe:c3:56:d5:4a:5d:59: 28:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:70:1F:50:1B:6A:9F:28:FC:0C:92:D1:C8:AB:B7:19:73:2F:A7:0F X509v3 Authority Key Identifier: keyid:70:E8:85:57:B0:C0:82:C9:B0:6E:CF:59:B8:F2:8A:77:03:A6:38:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:e5:bd:31:32:4e:6a:da:6b:87:62:b8:91:12:10:c7:49:8e: d1:18:86:f3:f6:4a:42:5c:24:81:36:15:8f:ed:69:14:44:e2: 4b:27:af:45:30:78:de:8b:74:ac:14:8f:1b:6a:44:4a:73:7a: 1e:c7:27:bd:2d:76:bc:9c:2a:9b:9d:0d:a3:47:90:de:10:cc: 89:05:a2:e3:b1:b5:6f:e7:cc:27:41:a5:34:e5:41:59:2f:67: 1b:6e:c5:10:4b:79:63:07:29:af:df:96:04:1e:60:47:c2:1b: ed:90:af:3f:6c:09:0d:03:93:82:78:28:52:3e:82:ff:07:95: 6d:d2:9c:fa:cb:cd:1b:dc:90:05:bd:ad:6c:9d:b3:a4:89:8a: b3:b6:ca:ed:c9:6a:c2:55:f0:d5:67:2f:3d:23:c0:e3:e4:f6: 68:67:a5:6a:83:7f:3d:4c:b9:6b:07:8b:c1:47:b7:20:3e:27: 56:fa:29:c1:75:8c:a4:98:cb:85:67:06:18:ce:f9:cb:61:9f: 86:26:3c:8f:5f:26:45:74:ec:06:b2:a7:a1:02:a5:7c:e7:07: 4f:8d:50:33:e4:62:0d:50:b1:59:2b:71:12:0d:d2:75:84:10: c4:32:04:d9:67:b5:f2:26:1a:af:64:d6:b3:15:66:2f:01:fc: 8c:d1:ef:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY0RTExMTAvBgNVBAUTKDcwRTg4NTU3QjBDMDgyQzlCMDZFQ0Y1OUI4RjI4QTc3 MDNBNjM4MDEwHhcNMjYwNTEzMDQxMTE2WhcNMjYwNTIwMDQxMTE2WjAYMRYwFAYD VQQDEw02YTAzZjllNS0yYjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Qcb/wdt41rN9qK+CDpbDWqU0V9GftemDR3UcOg5twJyTVrDjbQj7GsVgZeo U651pIktgYBA3DNW/HzWyGQEZ7uLBIEi74iV9cFx5t4sLxutf/KIA3G8bSHwmZep Zz+kEDB/oynDqzlsLnQjerc6dkKM+u/K/pVVDdHQdg8dc0xLI7G7iAWDciu9yrni 5lL7sWH028+Aa0fwRZv9zH7E9686Q86XqdmaVyNSXs/uJEvkAtfzJcCzscJhdNA7 M9P7gd+sMXJe/DGIfXtQRpZIJwS4OLWu9XbxHAJQwykTbu8Tl6Sb2KZsmz3Y1q2V 3kh7odWyY8gWov7DVtVKXVko/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP9wH1Ab ap8o/AyS0cirtxlzL6cPMB8GA1UdIwQYMBaAFHDohVewwILJsG7PWbjyincDpjgB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjRFMS82MjMxQTAyRUM2 N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9jT2lGVjdEQWdzbXdiczladVBLS2R3T21P QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NPaUZWN0RBZ3Ntd2JzOVp1UEtLZHdPbU9BRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjRFMS82MjMxQTAyRUM2N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9jT2lGVjdEQWdz bXdiczladVBLS2R3T21PQUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYuW9MTJOatprh2K4kRIQx0mO0RiG8/ZKQlwkgTYVj+1pFETiSyevRTB43ot0 rBSPG2pESnN6HscnvS12vJwqm50No0eQ3hDMiQWi47G1b+fMJ0GlNOVBWS9nG27F EEt5Ywcpr9+WBB5gR8Ib7ZCvP2wJDQOTgngoUj6C/weVbdKc+svNG9yQBb2tbJ2z pImKs7bK7clqwlXw1WcvPSPA4+T2aGelaoN/PUy5aweLwUe3ID4nVvopwXWMpJjL hWcGGM75y2GfhiY8j18mRXTsBrKnoQKlfOcHT41QM+RiDVCxWStxEg3SdYQQxDIE 2We18iYar2TWsxVmLwH8jNHvIA== -----END CERTIFICATE-----Generated at Wed May 13 09:10:46 2026 by rpki-client