$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft File: UCfzGS691UlQo5w9EwlKcfHTMmY.mft (raw, json) Hash identifier: dgQSFaJ2+TX9bOjNfeejAzSLf5P02mVBM73M8JxOKus= Subject key identifier: 7F:C5:47:98:51:93:93:CC:4A:13:DD:67:8E:53:24:96:DE:C2:80:80 Authority key identifier: 50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66 Certificate issuer: /CN=A91A3078/serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266 Certificate serial: 0BC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft Manifest number: 0B9F Signing time: Tue 12 May 2026 19:10:02 +0000 Manifest this update: Tue 12 May 2026 19:10:02 +0000 Manifest next update: Tue 19 May 2026 19:10:02 +0000 Files and hashes: 1: UCfzGS691UlQo5w9EwlKcfHTMmY.crl (hash: JGx4ENhnDb3BU7nVN+9MrKAtb4pNeGwd050u0OleqOQ=) 2: F3F7D2B0CE9711ECA2477C19C4F9AE02.roa (hash: GKFcFl36b7LnjNX4oCJ7zVjBqwtdvTCKUrd14r3mvVc=) 3: CDD62642854E11EBA2CFDC87C4F9AE02.roa (hash: y3tBCZ/zj5uXK4iELgDoXwmRBCPYOm3bLLdNGBDaIUc=) 4: CEFEEFEA854E11EBA2CFDC87C4F9AE02.roa (hash: STVj2nhR43tdaUjvSJVzwF108t0kdD6iF4pS76haPJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3015 (0xbc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3078, serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266 Validity Not Before: May 12 19:10:02 2026 GMT Not After : May 19 19:10:02 2026 GMT Subject: CN=6a037b0a-485f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:fc:b3:bd:75:f9:25:f4:cd:43:4c:37:99:01: c3:e1:0b:8d:70:b2:4a:44:0c:48:47:11:c7:bb:6a: 8f:2a:8f:bc:46:df:cc:4f:21:a3:38:62:e7:94:b3: 23:d1:7d:f0:4b:0e:5e:ed:de:64:c5:ee:11:e7:77: 60:0d:2c:b4:74:3e:8c:db:3d:e2:2a:d7:69:14:13: 22:86:6f:d1:10:0b:b8:d1:5f:ca:c0:99:af:4f:68: df:03:87:1c:20:fe:da:8f:3a:35:5c:c8:a2:01:de: 71:63:31:b9:12:6f:3c:09:a1:8b:de:d9:31:cb:14: 76:a4:47:e8:d8:31:b6:ac:a2:ee:c8:61:e6:88:65: 02:a3:05:2b:c0:dc:fc:e1:7a:13:95:7b:f0:7f:29: b9:de:da:10:89:74:2d:57:e1:1b:ea:29:80:70:17: 7a:88:1a:77:e8:ed:7f:d7:7f:a7:41:b0:a4:66:29: 08:1f:e8:12:1b:11:e7:bc:4a:77:35:6e:4b:09:8f: 60:5a:d9:0d:98:28:fb:9c:b9:e2:f8:41:e3:80:41: 18:86:5b:b7:59:94:d5:7d:e8:3a:c7:56:aa:4f:a6: 55:a7:f5:9f:f4:fd:c4:60:e5:03:be:11:3e:df:1a: 40:72:87:1f:5a:d5:b2:d1:11:05:71:50:25:dc:2a: ac:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C5:47:98:51:93:93:CC:4A:13:DD:67:8E:53:24:96:DE:C2:80:80 X509v3 Authority Key Identifier: keyid:50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a0:51:6d:ee:fd:0b:40:56:d1:94:60:15:d7:f5:60:6b:26: ef:1a:d7:34:df:29:5c:fe:5b:53:98:8e:4f:f4:7a:1d:91:7c: df:b4:4a:c8:75:e4:21:18:0a:4f:52:89:b6:d1:fa:98:d3:e0: cc:80:f3:5d:ba:39:6e:c8:48:2a:6a:0b:99:8b:de:c0:c7:b6: 67:0b:e5:22:16:8a:22:1a:e7:8b:da:c9:12:f5:2b:52:92:0c: 02:35:0a:f4:a1:7f:31:60:18:b6:13:43:7d:97:2d:ca:60:10: 2d:c0:79:c4:77:b0:6f:a1:41:92:c3:90:45:40:b2:55:8f:cc: 12:20:02:10:85:f0:2f:97:1d:f0:0b:af:f3:8d:40:19:a2:3f: 90:cf:57:c8:86:cb:ab:5d:9e:03:c7:dc:1e:20:7b:92:16:e2: fb:da:22:6c:82:d0:2c:d3:29:07:a6:e0:f7:f1:86:13:5c:83: fd:f5:27:b6:b1:6a:a8:0c:7a:c5:01:48:68:8d:19:8f:45:8d: 89:47:f8:6c:ef:58:11:62:4b:95:7b:47:de:47:45:9f:a3:98: 1c:3d:c6:5c:45:98:25:af:83:de:74:32:c4:98:99:ac:59:a2: 4b:2d:58:18:b0:a3:f0:ca:f8:bd:ae:cb:db:0e:34:94:8a:32: ef:73:be:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwNzgxMTAvBgNVBAUTKDUwMjdGMzE5MkVCREQ1NDk1MEEzOUMzRDEzMDk0QTcx RjFEMzMyNjYwHhcNMjYwNTEyMTkxMDAyWhcNMjYwNTE5MTkxMDAyWjAYMRYwFAYD VQQDEw02YTAzN2IwYS00ODVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7/yzvXX5JfTNQ0w3mQHD4QuNcLJKRAxIRxHHu2qPKo+8Rt/MTyGjOGLnlLMj 0X3wSw5e7d5kxe4R53dgDSy0dD6M2z3iKtdpFBMihm/REAu40V/KwJmvT2jfA4cc IP7ajzo1XMiiAd5xYzG5Em88CaGL3tkxyxR2pEfo2DG2rKLuyGHmiGUCowUrwNz8 4XoTlXvwfym53toQiXQtV+Eb6imAcBd6iBp36O1/13+nQbCkZikIH+gSGxHnvEp3 NW5LCY9gWtkNmCj7nLni+EHjgEEYhlu3WZTVfeg6x1aqT6ZVp/Wf9P3EYOUDvhE+ 3xpAcocfWtWy0REFcVAl3CqsVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH/FR5hR k5PMShPdZ45TJJbewoCAMB8GA1UdIwQYMBaAFFAn8xkuvdVJUKOcPRMJSnHx0zJm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzA3OC84NjMwQjFDODRD OEMxMUVBQjlFMjcwNTdDNEY5QUUwMi9VQ2Z6R1M2OTFVbFFvNXc5RXdsS2NmSFRN bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VDZnpHUzY5MVVsUW81dzlFd2xLY2ZIVE1tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzA3OC84NjMwQjFDODRDOEMxMUVBQjlFMjcwNTdDNEY5QUUwMi9VQ2Z6R1M2OTFV bFFvNXc5RXdsS2NmSFRNbVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPKBRbe79C0BW0ZRgFdf1YGsm7xrXNN8pXP5bU5iOT/R6HZF837RKyHXkIRgK T1KJttH6mNPgzIDzXbo5bshIKmoLmYvewMe2ZwvlIhaKIhrni9rJEvUrUpIMAjUK 9KF/MWAYthNDfZctymAQLcB5xHewb6FBksOQRUCyVY/MEiACEIXwL5cd8Auv841A GaI/kM9XyIbLq12eA8fcHiB7khbi+9oibILQLNMpB6bg9/GGE1yD/fUntrFqqAx6 xQFIaI0Zj0WNiUf4bO9YEWJLlXtH3kdFn6OYHD3GXEWYJa+D3nQyxJiZrFmiSy1Y GLCj8Mr4va7L2w40lIoy73O+0Q== -----END CERTIFICATE-----Generated at Wed May 13 07:09:22 2026 by rpki-client