$ rpki-client -vvf rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.mft File: D2tHILCjVyLYXzRG79R0C9NBg04.mft (raw, json) Hash identifier: wLUihzUAMj7hNIxvOTlDMz4g3/5BUCD1QP7gc66hxfA= Subject key identifier: 3D:20:89:FE:D0:5F:9E:61:35:3E:5D:52:25:62:5A:6B:1F:E9:CF:FD Authority key identifier: 0F:6B:47:20:B0:A3:57:22:D8:5F:34:46:EF:D4:74:0B:D3:41:83:4E Certificate issuer: /CN=A91850AD/serialNumber=0F6B4720B0A35722D85F3446EFD4740BD341834E Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D2tHILCjVyLYXzRG79R0C9NBg04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.mft Manifest number: 0145 Signing time: Mon 11 May 2026 05:24:20 +0000 Manifest this update: Mon 11 May 2026 05:24:20 +0000 Manifest next update: Mon 18 May 2026 05:24:20 +0000 Files and hashes: 1: D2tHILCjVyLYXzRG79R0C9NBg04.crl (hash: NHzEZ3ctoYIHhJ6m1QAahJnK8yqzdXBJjq9wdLOn1zw=) 2: CD1FB5C2643611EFA2C41948C4F9AE02.roa (hash: Oees07yYoqgn5PrN7dD6R0kAM+w8GIQPtiPs4eqC920=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.crl rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D2tHILCjVyLYXzRG79R0C9NBg04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 05:24:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91850AD, serialNumber=0F6B4720B0A35722D85F3446EFD4740BD341834E Validity Not Before: May 11 05:24:20 2026 GMT Not After : May 18 05:24:20 2026 GMT Subject: CN=6a016804-fdd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0a:a7:4d:7f:17:53:65:03:0e:42:ce:a2:32: ad:10:b5:84:82:86:3d:08:75:10:a3:4c:84:04:84: 00:11:0b:f7:55:6f:0f:a2:64:1b:dc:5f:03:f2:9f: 16:5e:42:76:05:9d:9c:b0:1d:6e:01:66:b8:19:3a: e7:ce:85:07:93:a2:71:b7:62:32:10:4e:d1:82:40: d5:a7:cd:a7:56:6e:ea:66:fa:1a:66:94:de:58:14: d3:e7:20:59:92:f4:eb:ec:d9:29:92:ea:31:6a:7d: b9:3b:f6:ee:f8:bb:04:97:a5:d1:c3:44:c7:91:ba: 33:35:42:6c:95:d3:f0:8c:b0:54:99:00:e1:33:66: 72:7e:0d:b3:51:ae:b4:1e:85:8c:c9:40:dc:4d:11: 88:d6:9f:d1:15:9c:f4:a2:3c:0f:d9:7f:e8:3f:aa: 93:df:ad:13:9d:45:b2:8f:f7:30:72:63:61:ae:97: 78:69:76:a2:d6:19:87:e2:b2:d2:f9:5e:b3:f9:6e: ca:00:1e:b5:1e:59:2c:8e:e6:83:dc:6b:4c:11:db: 39:52:d2:bd:48:97:81:b5:04:d2:89:22:7f:60:d3: 11:61:21:b1:5d:da:24:8b:26:49:88:11:54:28:e3: 97:1c:f6:13:79:7b:b2:1e:ad:8b:47:b6:2d:b3:88: e2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:20:89:FE:D0:5F:9E:61:35:3E:5D:52:25:62:5A:6B:1F:E9:CF:FD X509v3 Authority Key Identifier: keyid:0F:6B:47:20:B0:A3:57:22:D8:5F:34:46:EF:D4:74:0B:D3:41:83:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D2tHILCjVyLYXzRG79R0C9NBg04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:00:2b:95:c1:02:4d:85:d0:f7:ff:c9:15:68:f8:f3:86:91: dc:40:2d:28:d7:58:2f:cb:c0:93:83:3b:c6:25:69:5a:4a:86: 62:5a:75:2c:18:eb:84:78:f7:db:4d:2d:0c:39:30:5e:b3:dc: 1b:5d:e8:76:96:56:fc:b2:4d:30:91:b1:86:a8:3c:18:9c:01: b1:7a:df:eb:d8:b0:4d:63:fe:e2:79:a1:69:d2:ea:95:d7:7a: 2b:29:da:d7:31:3a:39:95:7f:8e:95:e9:f9:53:60:2b:8a:1b: 48:49:52:0f:6c:49:dc:28:24:9b:0b:bb:37:85:eb:53:99:a8: ff:53:62:61:c2:70:4a:6d:bb:6b:4e:6e:f8:06:93:8c:bb:b0: ce:60:6e:52:45:c7:f5:ef:b1:5b:81:e3:94:c3:32:94:4e:1b: 7d:39:09:fd:87:eb:7c:38:3a:3b:8c:c2:62:69:ca:47:b1:b1: 96:16:09:33:69:d7:e2:d6:ac:7d:37:8d:90:af:91:ec:7f:4d: bb:7e:8d:af:dd:6b:e0:18:2a:91:08:0c:07:6d:c5:97:f9:e9: 00:0a:47:b9:07:c9:ea:93:7e:21:1d:f5:a0:36:7d:7e:dc:19: c3:71:27:7d:f7:d4:6e:6d:53:6b:c6:51:45:c4:ac:b4:6a:cc: 5b:5f:45:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUwQUQxMTAvBgNVBAUTKDBGNkI0NzIwQjBBMzU3MjJEODVGMzQ0NkVGRDQ3NDBC RDM0MTgzNEUwHhcNMjYwNTExMDUyNDIwWhcNMjYwNTE4MDUyNDIwWjAYMRYwFAYD VQQDEw02YTAxNjgwNC1mZGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3gqnTX8XU2UDDkLOojKtELWEgoY9CHUQo0yEBIQAEQv3VW8PomQb3F8D8p8W XkJ2BZ2csB1uAWa4GTrnzoUHk6Jxt2IyEE7RgkDVp82nVm7qZvoaZpTeWBTT5yBZ kvTr7Nkpkuoxan25O/bu+LsEl6XRw0THkbozNUJsldPwjLBUmQDhM2Zyfg2zUa60 HoWMyUDcTRGI1p/RFZz0ojwP2X/oP6qT360TnUWyj/cwcmNhrpd4aXai1hmH4rLS +V6z+W7KAB61HlksjuaD3GtMEds5UtK9SJeBtQTSiSJ/YNMRYSGxXdokiyZJiBFU KOOXHPYTeXuyHq2LR7Yts4ji/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD0gif7Q X55hNT5dUiViWmsf6c/9MB8GA1UdIwQYMBaAFA9rRyCwo1ci2F80Ru/UdAvTQYNO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTBBRC82MEVCRTFBQzY0 MzQxMUVGODQyRkM2MjBDNEY5QUUwMi9EMnRISUxDalZ5TFlYelJHNzlSMEM5TkJn MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0QydEhJTENqVnlMWVh6Ukc3OVIwQzlOQmcwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTBBRC82MEVCRTFBQzY0MzQxMUVGODQyRkM2MjBDNEY5QUUwMi9EMnRISUxDalZ5 TFlYelJHNzlSMEM5TkJnMDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkwArlcECTYXQ9//JFWj484aR3EAtKNdYL8vAk4M7xiVpWkqGYlp1LBjrhHj3 200tDDkwXrPcG13odpZW/LJNMJGxhqg8GJwBsXrf69iwTWP+4nmhadLqldd6Kyna 1zE6OZV/jpXp+VNgK4obSElSD2xJ3Cgkmwu7N4XrU5mo/1NiYcJwSm27a05u+AaT jLuwzmBuUkXH9e+xW4HjlMMylE4bfTkJ/YfrfDg6O4zCYmnKR7GxlhYJM2nX4tas fTeNkK+R7H9Nu36Nr91r4BgqkQgMB23Fl/npAApHuQfJ6pN+IR31oDZ9ftwZw3En fffUbm1Ta8ZRRcSstGrMW19FhQ== -----END CERTIFICATE-----Generated at Wed May 13 03:05:03 2026 by rpki-client