$ rpki-client -vvf rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft File: J23PPyNBrcfQvEbzY0T3FWANmlg.mft (raw, json) Hash identifier: 1gJP5BrhUBj9fxwEO7MUvXHn05L1r45vmr2NVHA3YSA= Subject key identifier: 49:F8:DC:AA:45:6F:D3:4C:9F:8E:A7:B6:0D:E7:BA:19:FD:48:C4:1C Authority key identifier: 27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58 Certificate issuer: /CN=A91A04B9/serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft Manifest number: FA Signing time: Mon 11 May 2026 06:21:22 +0000 Manifest this update: Mon 11 May 2026 06:21:21 +0000 Manifest next update: Mon 18 May 2026 06:21:21 +0000 Files and hashes: 1: J23PPyNBrcfQvEbzY0T3FWANmlg.crl (hash: o1FkjY4cvCGQNM6ENSjBIoMvnJZ6lXTc6LFe0mNP5UI=) 2: 197A8B3CD23611EF9EA7495DC4F9AE02.roa (hash: LydSAbFEgXunoPXmnpZMts641lpnMB3u48Fdl0a+zxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 06:21:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A04B9, serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58 Validity Not Before: May 11 06:21:21 2026 GMT Not After : May 18 06:21:21 2026 GMT Subject: CN=6a017562-7f31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ec:d8:27:90:a2:ad:f8:f1:b2:19:eb:33:1b: f2:5c:b5:f0:0c:94:f4:dd:83:c0:ab:03:b6:69:50: 57:8e:07:60:ac:c8:c4:6e:94:db:f0:08:3a:45:62: fb:9c:c5:b8:af:62:f3:bd:f5:25:e7:e7:64:27:7e: d9:c9:5c:dd:cb:57:18:1a:08:c1:32:ea:54:e0:4b: 03:cf:89:dc:2e:37:63:b1:99:c7:24:a2:e7:55:45: 1c:ac:20:ba:cf:b6:b7:7f:6b:2a:f5:cd:6d:27:da: 53:d2:26:35:4e:26:58:39:35:ed:6d:ac:6b:79:54: 48:2b:40:d1:59:25:f0:4f:a3:03:57:3f:e0:e5:28: d2:7f:73:dc:11:75:21:de:fa:6a:c4:b2:91:33:65: 9a:c5:a8:65:a0:9c:11:35:9a:61:fc:d4:c1:c3:2e: 54:cd:c3:e7:fe:f0:c2:ed:89:2b:5a:40:c8:bf:a1: 1d:8b:ed:a6:01:c9:ef:07:5f:30:0c:9e:cf:39:70: ea:e3:a9:4a:1c:9b:09:e3:0f:1f:78:44:35:d4:2c: dc:bb:48:7a:d1:4b:16:b8:bf:e0:ed:c2:c0:13:56: 0e:ae:12:a9:d3:65:32:21:b9:6d:f1:fc:48:ee:ce: 50:59:2a:21:47:1a:da:c3:92:c7:50:70:8d:f7:04: 76:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F8:DC:AA:45:6F:D3:4C:9F:8E:A7:B6:0D:E7:BA:19:FD:48:C4:1C X509v3 Authority Key Identifier: keyid:27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:ae:fa:39:d7:7d:6a:b3:cc:4b:ab:e5:88:a9:af:18:68:96: 39:3d:63:10:b5:f9:8d:9f:2d:6e:90:a3:08:ee:b7:9d:10:04: 8f:b9:e0:31:12:3d:6b:12:7e:4f:22:96:3b:ba:a4:ee:f9:ef: e1:af:dc:f7:bd:77:a6:4f:cb:a0:86:0f:7c:99:cb:c4:e7:ed: 6d:a3:cb:3a:d0:c4:34:9d:b1:9f:c1:a9:df:54:bf:35:67:6b: 51:29:a4:39:6b:79:4a:af:cf:65:35:b1:90:7f:37:63:9d:a2: 97:5d:0d:85:6a:bf:63:11:54:47:d8:ff:f8:86:80:c0:f5:b9: 93:03:c3:53:c8:10:84:ad:ec:fa:c1:ae:1f:e0:7a:d9:02:ca: 1f:5f:6c:36:88:f8:00:77:f5:fc:aa:0e:3e:6a:4b:c8:81:c4: 60:75:03:e4:a5:47:51:5a:a3:09:53:7e:02:ce:56:c2:c0:c5: ff:03:c9:b4:60:7c:36:aa:3a:2e:04:45:91:8f:2f:b9:35:07: d0:08:a6:c8:b1:29:8a:46:9b:99:71:55:9c:3d:7f:5d:0d:e3: b7:a5:ce:bd:51:38:2a:71:81:a4:a3:63:31:30:13:18:4f:54: cb:a3:db:c8:80:b1:24:65:d3:28:63:82:95:b2:b2:ae:aa:84: fd:6f:9c:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA0QjkxMTAvBgNVBAUTKDI3NkRDRjNGMjM0MUFEQzdEMEJDNDZGMzYzNDRGNzE1 NjAwRDlBNTgwHhcNMjYwNTExMDYyMTIxWhcNMjYwNTE4MDYyMTIxWjAYMRYwFAYD VQQDEw02YTAxNzU2Mi03ZjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+zYJ5CirfjxshnrMxvyXLXwDJT03YPAqwO2aVBXjgdgrMjEbpTb8Ag6RWL7 nMW4r2LzvfUl5+dkJ37ZyVzdy1cYGgjBMupU4EsDz4ncLjdjsZnHJKLnVUUcrCC6 z7a3f2sq9c1tJ9pT0iY1TiZYOTXtbaxreVRIK0DRWSXwT6MDVz/g5SjSf3PcEXUh 3vpqxLKRM2WaxahloJwRNZph/NTBwy5UzcPn/vDC7YkrWkDIv6Edi+2mAcnvB18w DJ7POXDq46lKHJsJ4w8feEQ11Czcu0h60UsWuL/g7cLAE1YOrhKp02UyIblt8fxI 7s5QWSohRxraw5LHUHCN9wR2XQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEn43KpF b9NMn46ntg3nuhn9SMQcMB8GA1UdIwQYMBaAFCdtzz8jQa3H0LxG82NE9xVgDZpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDRCOS9DRTg0MDU2OEQy MzUxMUVGOEZFMjlDNUNDNEY5QUUwMi9KMjNQUHlOQnJjZlF2RWJ6WTBUM0ZXQU5t bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0oyM1BQeU5CcmNmUXZFYnpZMFQzRldBTm1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDRCOS9DRTg0MDU2OEQyMzUxMUVGOEZFMjlDNUNDNEY5QUUwMi9KMjNQUHlOQnJj ZlF2RWJ6WTBUM0ZXQU5tbGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJq76Odd9arPMS6vliKmvGGiWOT1jELX5jZ8tbpCjCO63nRAEj7ngMRI9axJ+ TyKWO7qk7vnv4a/c9713pk/LoIYPfJnLxOftbaPLOtDENJ2xn8Gp31S/NWdrUSmk OWt5Sq/PZTWxkH83Y52il10NhWq/YxFUR9j/+IaAwPW5kwPDU8gQhK3s+sGuH+B6 2QLKH19sNoj4AHf1/KoOPmpLyIHEYHUD5KVHUVqjCVN+As5WwsDF/wPJtGB8Nqo6 LgRFkY8vuTUH0AimyLEpikabmXFVnD1/XQ3jt6XOvVE4KnGBpKNjMTATGE9Uy6Pb yICxJGXTKGOClbKyrqqE/W+cXg== -----END CERTIFICATE-----Generated at Wed May 13 08:12:22 2026 by rpki-client