$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.mft File: g4qU7SUkCVmqbxVJEAOsbm0DlX4.mft (raw, json) Hash identifier: vKV1DhdBF2ltLCRH7nLYIRGU/qzJquIrawn5R53sY7A= Subject key identifier: 49:12:38:B8:2C:93:53:9C:FF:60:00:A0:7E:EA:01:BA:D1:66:90:89 Authority key identifier: 83:8A:94:ED:25:24:09:59:AA:6F:15:49:10:03:AC:6E:6D:03:95:7E Certificate issuer: /CN=A91A7CDD/serialNumber=838A94ED25240959AA6F15491003AC6E6D03957E Certificate serial: 019F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4qU7SUkCVmqbxVJEAOsbm0DlX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.mft Manifest number: 019A Signing time: Wed 13 May 2026 04:20:43 +0000 Manifest this update: Wed 13 May 2026 04:20:42 +0000 Manifest next update: Wed 20 May 2026 04:20:42 +0000 Files and hashes: 1: g4qU7SUkCVmqbxVJEAOsbm0DlX4.crl (hash: c+BiaG6gNeZ1Wrp3H0/MIN9Pn/pAm/nAQYVhqFL/BJM=) 2: 1E595AE8DD0E11EE9833196BC4F9AE02.roa (hash: e8BrutbzfzM1UUyv17uARTWJ09lINCQWQeDDVfsXfGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.crl rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4qU7SUkCVmqbxVJEAOsbm0DlX4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 04:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 415 (0x19f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7CDD, serialNumber=838A94ED25240959AA6F15491003AC6E6D03957E Validity Not Before: May 13 04:20:42 2026 GMT Not After : May 20 04:20:42 2026 GMT Subject: CN=6a03fc1b-b952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:9d:6b:6a:4e:a1:75:42:a6:cf:82:4b:e6:1d: 17:71:95:2d:71:bf:75:19:9f:ab:de:6b:08:28:69: 80:9c:77:0d:12:4e:cf:e3:3c:35:3b:0c:7e:10:ac: 31:c5:5a:41:45:9f:34:46:4a:94:e8:84:b3:5e:9a: 45:ee:eb:d5:cd:b2:fe:c2:e9:2b:23:d9:0b:17:b7: 4c:87:de:ea:d5:3b:a6:f3:78:43:2c:c4:f4:03:4e: ff:c0:32:3c:48:4a:48:99:ea:df:77:11:b7:51:9d: 3e:b3:d6:a4:1c:4b:e4:b8:b9:d3:dc:2f:3e:c7:be: 6c:d5:56:9c:a0:4d:bd:b5:19:a9:96:a7:49:1b:6b: c9:59:b1:cf:d9:f0:c1:13:f6:69:36:5b:55:3e:04: cb:5a:df:bc:fc:b4:6d:45:e0:ff:34:42:ce:01:80: 66:c4:bd:bf:fa:e8:dc:21:e7:6d:57:75:55:a6:9f: df:bf:0d:1d:39:b7:bf:d3:cb:f3:d1:c2:71:ee:2d: f8:5a:89:53:3d:4b:47:8d:bd:5c:f0:33:4c:a0:9d: ff:f6:ac:f3:c1:6c:1b:e0:d6:d2:b8:a7:98:5c:11: 58:50:80:dd:63:7c:0f:69:db:63:b9:f9:69:d4:43: 3a:10:15:3d:9c:a8:31:2b:12:af:8b:8a:8c:d6:b4: 5c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:12:38:B8:2C:93:53:9C:FF:60:00:A0:7E:EA:01:BA:D1:66:90:89 X509v3 Authority Key Identifier: keyid:83:8A:94:ED:25:24:09:59:AA:6F:15:49:10:03:AC:6E:6D:03:95:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4qU7SUkCVmqbxVJEAOsbm0DlX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:49:22:6c:5a:f5:9e:e2:4f:a3:a5:7f:9b:c3:be:14:96:0f: 08:01:0a:96:25:77:80:fc:4d:2e:35:cd:28:a8:24:6a:d8:ca: 80:99:3d:0f:16:e6:41:b6:7b:a9:16:64:d9:91:c3:d7:a1:b6: 71:61:cc:95:00:6b:27:fb:44:c1:df:ce:53:d1:6f:9b:c4:d2: be:c5:d2:45:e7:b2:71:b3:25:74:d0:0e:b4:cd:39:1d:e9:84: 78:14:c3:65:e0:17:27:cb:f7:ac:a3:f9:24:e7:74:e9:c5:ef: 2d:5b:09:5f:a4:54:d8:c1:e1:1b:8a:47:03:c7:94:27:08:bc: 67:7c:bf:16:55:38:0d:2b:87:68:98:5e:86:9c:80:ad:c3:4a: e9:b0:7e:db:00:af:67:8b:e7:1c:ec:a0:80:d3:52:f9:b4:85: 32:3c:35:98:18:aa:d6:00:8b:b3:65:5d:74:2e:38:df:56:47: 01:44:c4:03:9c:24:f3:b2:19:d1:95:a7:fa:fe:79:0e:30:63: 5e:70:3e:98:0e:5d:40:cf:ce:1b:c0:da:0d:9a:d4:12:e8:76: 50:50:03:d2:43:37:a0:f2:34:cd:ff:00:65:ff:4c:6a:37:fb: 9d:21:44:43:a7:18:6b:bc:06:2a:50:e4:9e:9b:bd:5f:2e:10: 16:02:4c:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdDREQxMTAvBgNVBAUTKDgzOEE5NEVEMjUyNDA5NTlBQTZGMTU0OTEwMDNBQzZF NkQwMzk1N0UwHhcNMjYwNTEzMDQyMDQyWhcNMjYwNTIwMDQyMDQyWjAYMRYwFAYD VQQDEw02YTAzZmMxYi1iOTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+51rak6hdUKmz4JL5h0XcZUtcb91GZ+r3msIKGmAnHcNEk7P4zw1Owx+EKwx xVpBRZ80RkqU6ISzXppF7uvVzbL+wukrI9kLF7dMh97q1Tum83hDLMT0A07/wDI8 SEpImerfdxG3UZ0+s9akHEvkuLnT3C8+x75s1VacoE29tRmplqdJG2vJWbHP2fDB E/ZpNltVPgTLWt+8/LRtReD/NELOAYBmxL2/+ujcIedtV3VVpp/fvw0dObe/08vz 0cJx7i34WolTPUtHjb1c8DNMoJ3/9qzzwWwb4NbSuKeYXBFYUIDdY3wPadtjuflp 1EM6EBU9nKgxKxKvi4qM1rRcWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEkSOLgs k1Oc/2AAoH7qAbrRZpCJMB8GA1UdIwQYMBaAFIOKlO0lJAlZqm8VSRADrG5tA5V+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0NERC84QTIzQTZGOERE MEQxMUVFOUQyOTJENkFDNEY5QUUwMi9nNHFVN1NVa0NWbXFieFZKRUFPc2JtMERs WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2c0cVU3U1VrQ1ZtcWJ4VkpFQU9zYm0wRGxYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0NERC84QTIzQTZGOEREMEQxMUVFOUQyOTJENkFDNEY5QUUwMi9nNHFVN1NVa0NW bXFieFZKRUFPc2JtMERsWDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQkkibFr1nuJPo6V/m8O+FJYPCAEKliV3gPxNLjXNKKgkatjKgJk9DxbmQbZ7 qRZk2ZHD16G2cWHMlQBrJ/tEwd/OU9Fvm8TSvsXSReeycbMldNAOtM05HemEeBTD ZeAXJ8v3rKP5JOd06cXvLVsJX6RU2MHhG4pHA8eUJwi8Z3y/FlU4DSuHaJhehpyA rcNK6bB+2wCvZ4vnHOyggNNS+bSFMjw1mBiq1gCLs2VddC4431ZHAUTEA5wk87IZ 0ZWn+v55DjBjXnA+mA5dQM/OG8DaDZrUEuh2UFAD0kM3oPI0zf8AZf9Majf7nSFE Q6cYa7wGKlDknpu9Xy4QFgJMCA== -----END CERTIFICATE-----Generated at Wed May 13 11:42:13 2026 by rpki-client