$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft File: C-AoY1W14laYjORU35P8D8p_YEA.mft (raw, json) Hash identifier: 2ooYZJALpj+nF/H1yvy1Mu2Jii7DnoV2z/ASUwrG1Co= Subject key identifier: 93:5F:BA:14:05:E0:06:36:3E:97:1E:2D:8F:9A:5D:1A:85:26:9C:5E Authority key identifier: 0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40 Certificate issuer: /CN=A91A1D43/serialNumber=0BE0286355B5E256988CE454DF93FC0FCA7F6040 Certificate serial: 0245 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft Manifest number: 0239 Signing time: Mon 11 May 2026 02:33:54 +0000 Manifest this update: Mon 11 May 2026 02:33:54 +0000 Manifest next update: Mon 18 May 2026 02:33:54 +0000 Files and hashes: 1: C-AoY1W14laYjORU35P8D8p_YEA.crl (hash: xvtDvMyc5UC9Pq+KCzaf8isjA40/TcuF1/ZKNhK5buk=) 2: 8B1BDC14EA3911EDB91E190BC4F9AE02.roa (hash: IRQ+OR5t+v1uxAMW20q5TYiXjn6EFNEgE2VqHO9rI/w=) 3: 8BCB2CFAEA3911EDB91E190BC4F9AE02.roa (hash: QhSp+pceORKO5TeSj6aanaSrz92dgNngwmylNT95Bc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.crl rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 02:33:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 581 (0x245) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1D43, serialNumber=0BE0286355B5E256988CE454DF93FC0FCA7F6040 Validity Not Before: May 11 02:33:54 2026 GMT Not After : May 18 02:33:54 2026 GMT Subject: CN=6a014012-498f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f7:43:8d:82:61:4d:33:ad:ec:31:2b:25:ed: aa:1b:a6:06:b3:3a:49:49:6e:dd:55:e1:19:ed:cb: 49:29:13:d1:9c:8a:22:92:e6:2f:03:1c:7c:bd:a2: 2d:3e:98:8f:1b:19:c4:2a:27:31:18:8e:56:76:2e: 8f:e8:2d:6e:75:c6:4f:d7:26:80:3b:2e:16:76:af: 19:17:d9:d9:1a:a8:c7:a9:ea:cf:06:38:be:48:b6: 14:c6:d1:c7:d4:50:7c:8f:f0:af:6f:eb:90:47:c1: 43:53:5e:1b:64:76:81:90:ca:10:83:f7:6b:38:a8: 45:0c:c4:60:9a:ec:8a:46:93:1a:a2:3d:5a:a4:27: b0:08:9a:42:8c:68:bf:00:40:a2:cb:a4:10:bb:b2: 73:37:6d:15:4f:66:d2:fc:62:4e:19:21:70:3d:77: b8:da:a9:c5:5c:e7:53:cd:db:cc:80:87:e5:e3:6f: 67:96:c4:62:77:f0:6d:0f:f2:8c:7c:ed:09:74:fa: d2:91:ad:b4:37:20:9f:d3:a3:b1:3a:fc:01:b4:5c: 7f:74:74:fb:77:91:26:28:b4:19:f5:86:08:ce:a7: b8:8d:cd:1d:8e:50:d6:3b:80:fc:c6:71:6c:17:55: 13:91:48:8d:93:00:e6:4a:76:44:50:8e:4b:2f:99: 69:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:5F:BA:14:05:E0:06:36:3E:97:1E:2D:8F:9A:5D:1A:85:26:9C:5E X509v3 Authority Key Identifier: keyid:0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:1c:82:df:a7:1f:17:4b:3b:a4:33:6e:d3:22:cd:98:a1:93: f4:ff:fd:4f:6d:73:40:8c:5d:08:71:20:17:e0:42:82:83:b7: 62:43:15:38:d8:d5:12:0d:4c:9c:f3:3e:10:db:96:e5:c5:a2: 0a:3c:98:85:80:4b:d3:d0:6b:4e:60:46:39:23:f0:b1:96:40: 4f:2c:1c:e4:5c:4d:70:48:e2:0d:10:b9:51:df:f6:a9:e6:34: be:9d:1f:16:0b:f4:3f:7c:18:72:9e:d1:75:d3:a9:9c:dd:49: 98:e8:24:e9:7b:38:96:e1:fd:67:ca:7f:04:bd:f4:48:98:43: 14:00:d6:10:fa:8a:68:31:2e:e0:71:0a:30:6e:23:48:9e:da: 07:73:2b:61:7b:bf:7c:d6:8a:47:1a:53:8b:c7:d4:18:d8:73: 8a:9f:46:ae:bc:f4:5f:01:6f:2e:a0:f0:47:9c:f8:d2:03:bf: d2:83:2c:da:da:9c:17:f8:36:2f:f1:bb:11:ad:33:e5:12:8b: f0:ab:25:d5:a9:97:25:43:09:42:81:78:c8:ae:af:37:59:d5: b0:16:4c:74:a8:25:98:4f:a5:9b:81:08:71:96:fb:71:a2:f3: 8e:d4:fe:48:3b:65:bf:97:07:5d:f3:e4:05:df:78:c1:aa:b5: ec:4a:49:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFENDMxMTAvBgNVBAUTKDBCRTAyODYzNTVCNUUyNTY5ODhDRTQ1NERGOTNGQzBG Q0E3RjYwNDAwHhcNMjYwNTExMDIzMzU0WhcNMjYwNTE4MDIzMzU0WjAYMRYwFAYD VQQDEw02YTAxNDAxMi00OThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPdDjYJhTTOt7DErJe2qG6YGszpJSW7dVeEZ7ctJKRPRnIoikuYvAxx8vaIt PpiPGxnEKicxGI5Wdi6P6C1udcZP1yaAOy4Wdq8ZF9nZGqjHqerPBji+SLYUxtHH 1FB8j/Cvb+uQR8FDU14bZHaBkMoQg/drOKhFDMRgmuyKRpMaoj1apCewCJpCjGi/ AECiy6QQu7JzN20VT2bS/GJOGSFwPXe42qnFXOdTzdvMgIfl429nlsRid/BtD/KM fO0JdPrSka20NyCf06OxOvwBtFx/dHT7d5EmKLQZ9YYIzqe4jc0djlDWO4D8xnFs F1UTkUiNkwDmSnZEUI5LL5lpxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJNfuhQF 4AY2PpceLY+aXRqFJpxeMB8GA1UdIwQYMBaAFAvgKGNVteJWmIzkVN+T/A/Kf2BA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUQ0My84OTI5REZERUVB MjgxMUVEQjdERDAxMThDNEY5QUUwMi9DLUFvWTFXMTRsYVlqT1JVMzVQOEQ4cF9Z RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MtQW9ZMVcxNGxhWWpPUlUzNVA4RDhwX1lFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUQ0My84OTI5REZERUVBMjgxMUVEQjdERDAxMThDNEY5QUUwMi9DLUFvWTFXMTRs YVlqT1JVMzVQOEQ4cF9ZRUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMhyC36cfF0s7pDNu0yLNmKGT9P/9T21zQIxdCHEgF+BCgoO3YkMVONjVEg1M nPM+ENuW5cWiCjyYhYBL09BrTmBGOSPwsZZATywc5FxNcEjiDRC5Ud/2qeY0vp0f Fgv0P3wYcp7RddOpnN1JmOgk6Xs4luH9Z8p/BL30SJhDFADWEPqKaDEu4HEKMG4j SJ7aB3MrYXu/fNaKRxpTi8fUGNhzip9Grrz0XwFvLqDwR5z40gO/0oMs2tqcF/g2 L/G7Ea0z5RKL8Ksl1amXJUMJQoF4yK6vN1nVsBZMdKglmE+lm4EIcZb7caLzjtT+ SDtlv5cHXfPkBd94waq17EpJhg== -----END CERTIFICATE-----Generated at Wed May 13 04:59:26 2026 by rpki-client