$ rpki-client -vvf rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft File: mpwxvYeWc4abPI8FWW6IFVgvEdA.mft (raw, json) Hash identifier: zVKgY7gG2fdSlMjqlR++g+4UlvyirM+qoeB+urqXAPA= Subject key identifier: 77:3B:BF:E8:8A:83:01:38:4A:B8:28:BA:FB:BC:5D:9E:83:EC:E6:41 Authority key identifier: 9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0 Certificate issuer: /CN=A91856C4/serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0 Certificate serial: 0D0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft Manifest number: 0CF8 Signing time: Tue 12 May 2026 18:15:33 +0000 Manifest this update: Tue 12 May 2026 18:15:33 +0000 Manifest next update: Tue 19 May 2026 18:15:33 +0000 Files and hashes: 1: mpwxvYeWc4abPI8FWW6IFVgvEdA.crl (hash: mqeJT40IYqZezxnAKrO+Fu9pSDfn2NqAIWWQxh4mJpQ=) 2: 98DC875C050111EA9BDD372BC4F9AE02.roa (hash: YHhtbTx3DFi9+kl85V+ijdhzu/uN/CR3C5x9c+CBrX0=) 3: 58AEC9929C0F11EA9CC4217CC4F9AE02.roa (hash: 1lJZiaXN2+jlJbSyyyT2ZVc0TvKSt6+Hz3K+SpWk1T8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3338 (0xd0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91856C4, serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0 Validity Not Before: May 12 18:15:33 2026 GMT Not After : May 19 18:15:33 2026 GMT Subject: CN=6a036e45-3236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3f:ea:72:8e:40:ab:56:49:2d:e4:6b:5a:8b: c4:69:c4:be:e1:d2:51:ea:84:79:1f:56:2f:30:96: 37:00:46:6d:c4:61:8f:4d:4c:b4:65:e9:2a:c7:ae: 26:53:3e:c8:6d:6f:d5:04:6d:9a:5b:14:b8:c1:05: d0:57:94:0c:fa:51:04:3c:d0:f4:f7:ea:6f:0e:23: de:9f:e7:55:2f:90:0c:27:e1:e2:0e:90:da:d6:16: be:7d:ee:ca:f8:8f:3e:28:d1:26:6f:ce:2e:70:ea: dc:54:3b:e6:0a:4d:83:d0:5d:54:ee:87:73:04:e7: a0:01:9e:04:10:2e:e6:03:80:e2:4d:d5:99:3d:14: 29:05:d5:db:f8:6a:8e:f8:ba:96:a2:c1:e6:4a:ff: 7c:a4:df:29:2d:0f:0f:f2:cb:0a:bf:18:ef:1b:c3: 3e:ed:46:ee:3e:d8:1f:c9:12:e0:f0:28:4c:58:06: ea:67:7e:f5:f7:8e:68:9b:fe:83:99:03:e5:d9:77: 5c:71:1b:c0:b7:56:3f:a4:0d:5d:51:d9:1d:d4:dc: 39:7b:64:14:b1:4a:b4:03:f2:c0:f4:4e:5b:d0:18: e8:1c:43:b1:2a:a6:6c:1b:69:9f:e3:da:2c:e5:42: 14:43:1f:3b:38:19:a5:83:d9:c5:e6:bd:50:64:da: ac:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:3B:BF:E8:8A:83:01:38:4A:B8:28:BA:FB:BC:5D:9E:83:EC:E6:41 X509v3 Authority Key Identifier: keyid:9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:ac:23:d1:f0:65:22:e9:e7:1f:07:16:20:8d:f9:88:77:cc: b2:84:8f:1d:3f:6c:bd:b7:13:32:8c:0f:85:1a:e6:56:d0:3a: 7c:26:3f:e1:1c:5a:e7:64:90:19:78:fc:7e:5e:bc:7b:3a:f7: e0:10:f1:fc:64:86:2c:f7:81:9c:b5:3f:fc:a9:99:74:de:b4: 6f:7f:bd:f9:71:6c:0a:0c:4a:70:e8:44:1b:8f:82:ad:79:5e: b8:60:7a:a0:36:2c:f9:db:74:1f:4e:95:d1:a5:54:1a:8b:e6: f0:27:4e:9b:79:c8:d6:ba:30:cf:23:c0:36:ae:15:5c:31:9b: ef:14:75:4d:d5:f2:62:16:6c:99:d8:62:d5:ab:bf:91:43:e6: e2:a9:e7:0b:33:be:18:65:84:f6:58:05:ac:b1:e0:d7:26:c6: 94:35:d4:86:4e:ae:a6:7f:74:4c:5d:9c:9c:07:fe:ba:b2:3f: d1:2a:e9:b5:b3:3b:b2:3d:56:b3:8a:0e:5b:a9:03:c5:c1:69: 88:75:7b:06:3f:01:bc:cb:9c:22:33:80:5f:e4:bc:60:b5:76: 21:14:9a:b7:ce:d7:be:5b:36:5a:ca:c1:71:c8:db:fb:ad:04: 06:a0:2b:3c:67:be:b6:13:c7:d8:24:06:bb:ed:62:1d:8e:8e: 03:11:25:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU2QzQxMTAvBgNVBAUTKDlBOUMzMUJEODc5NjczODY5QjNDOEYwNTU5NkU4ODE1 NTgyRjExRDAwHhcNMjYwNTEyMTgxNTMzWhcNMjYwNTE5MTgxNTMzWjAYMRYwFAYD VQQDEw02YTAzNmU0NS0zMjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoD/qco5Aq1ZJLeRrWovEacS+4dJR6oR5H1YvMJY3AEZtxGGPTUy0Zekqx64m Uz7IbW/VBG2aWxS4wQXQV5QM+lEEPND09+pvDiPen+dVL5AMJ+HiDpDa1ha+fe7K +I8+KNEmb84ucOrcVDvmCk2D0F1U7odzBOegAZ4EEC7mA4DiTdWZPRQpBdXb+GqO +LqWosHmSv98pN8pLQ8P8ssKvxjvG8M+7UbuPtgfyRLg8ChMWAbqZ371945om/6D mQPl2XdccRvAt1Y/pA1dUdkd1Nw5e2QUsUq0A/LA9E5b0BjoHEOxKqZsG2mf49os 5UIUQx87OBmlg9nF5r1QZNqsUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHc7v+iK gwE4Srgouvu8XZ6D7OZBMB8GA1UdIwQYMBaAFJqcMb2HlnOGmzyPBVluiBVYLxHQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTZDNC9BM0JBRDhFMjA0 RkYxMUVBOTNFRTlBMjNDNEY5QUUwMi9tcHd4dlllV2M0YWJQSThGV1c2SUZWZ3ZF ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21wd3h2WWVXYzRhYlBJOEZXVzZJRlZndkVkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTZDNC9BM0JBRDhFMjA0RkYxMUVBOTNFRTlBMjNDNEY5QUUwMi9tcHd4dlllV2M0 YWJQSThGV1c2SUZWZ3ZFZEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAv6wj0fBlIunnHwcWII35iHfMsoSPHT9svbcTMowPhRrmVtA6fCY/4Rxa52SQ GXj8fl68ezr34BDx/GSGLPeBnLU//KmZdN60b3+9+XFsCgxKcOhEG4+CrXleuGB6 oDYs+dt0H06V0aVUGovm8CdOm3nI1rowzyPANq4VXDGb7xR1TdXyYhZsmdhi1au/ kUPm4qnnCzO+GGWE9lgFrLHg1ybGlDXUhk6upn90TF2cnAf+urI/0SrptbM7sj1W s4oOW6kDxcFpiHV7Bj8BvMucIjOAX+S8YLV2IRSat87Xvls2WsrBccjb+60EBqAr PGe+thPH2CQGu+1iHY6OAxElIw== -----END CERTIFICATE-----Generated at Wed May 13 03:07:44 2026 by rpki-client