$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft File: FjMWdiEa7mdzSFtlIzxiw6RYev0.mft (raw, json) Hash identifier: F8dIS2DdqZc4ikwOO8HQQq2E8/z6nJ/z/1ElTkQ5UeU= Subject key identifier: 41:0A:19:22:85:20:57:72:E5:39:E7:0B:3B:38:60:24:45:B9:99:7F Authority key identifier: 16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD Certificate issuer: /CN=A91A86D0/serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Certificate serial: 0CF1 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft Manifest number: 0CDD Signing time: Tue 12 May 2026 17:29:43 +0000 Manifest this update: Tue 12 May 2026 17:29:43 +0000 Manifest next update: Tue 19 May 2026 17:29:43 +0000 Files and hashes: 1: FjMWdiEa7mdzSFtlIzxiw6RYev0.crl (hash: jPPvpHL20tlKV/idkCh2p3iFDIW3xv4NVUdhH8STD2I=) 2: CF1B3152CCE111EB90AF2C7AC4F9AE02.roa (hash: twJcU0dvcEBMbuiZq5Wi1cC3xSMhYlFvAN7WKpOcESs=) 3: DD004670C39711F0A241F86DC4F9AE02.roa (hash: ILb2f5MFl0hmYnyJlCFO6BUBR2uQox0knIxNniHNGBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3313 (0xcf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A86D0, serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Validity Not Before: May 12 17:29:43 2026 GMT Not After : May 19 17:29:43 2026 GMT Subject: CN=6a036387-ea50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:df:49:c3:91:68:cc:57:07:94:f3:3d:cb:c2: e8:58:36:80:7d:a4:ac:05:53:13:8a:d7:8e:bc:06: 57:c3:97:80:af:ef:3f:93:ee:1b:b2:37:a1:b3:09: a8:e7:65:86:bc:e3:83:62:b8:a5:d1:c7:a4:f3:3a: f4:bd:58:88:0f:31:d4:fa:a7:db:cc:53:60:ee:2d: d3:7c:1e:d4:c1:dd:a3:eb:8c:93:8a:06:65:55:84: 6d:5d:0b:c3:ac:4a:f8:cb:11:36:ce:c7:25:a6:fa: 5a:73:36:ed:23:5b:bd:98:6c:29:f8:7d:60:11:6c: ca:a1:cf:96:3d:ff:37:9f:53:84:79:b0:7e:c8:cc: d1:d0:c3:13:f7:a6:78:7b:a7:54:c4:24:c2:d3:f7: 18:01:62:32:2e:0f:5d:56:46:80:7c:18:3f:f6:16: 4a:4e:cf:7f:31:56:ad:65:06:90:3c:9f:b1:61:e0: df:ea:bd:ea:29:c2:80:0a:16:bb:5b:be:80:f9:7e: de:ca:90:58:80:b5:2c:26:20:0e:aa:f7:6c:37:91: 73:d5:bf:db:5b:7b:5a:ec:58:aa:4f:dd:38:e6:65: 2f:1b:bd:82:ae:e7:86:a5:e4:ec:7c:04:27:1a:cb: 97:1e:5c:94:fa:80:af:ff:b3:0c:0d:13:be:d1:2f: 75:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:0A:19:22:85:20:57:72:E5:39:E7:0B:3B:38:60:24:45:B9:99:7F X509v3 Authority Key Identifier: keyid:16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:6e:c6:7a:c5:d1:84:41:6d:c3:bc:1f:88:04:c1:0b:30:a2: c7:98:64:e4:bb:a8:13:34:df:61:7f:01:01:af:01:60:ed:f2: f0:c9:f5:54:35:67:a9:38:c8:ad:58:f2:d7:05:74:2f:2e:88: 4f:35:24:2a:21:dc:8a:2f:82:2f:00:31:01:12:4a:7a:07:cb: ec:3a:34:85:73:18:fd:8c:96:0d:da:52:66:f2:4c:da:6c:72: e5:93:ed:e4:b8:1c:f1:45:01:c2:94:d3:25:fb:a1:8a:c3:da: dd:df:f6:63:f2:5d:6a:92:01:eb:d5:26:3d:4a:6c:05:79:03: fa:57:95:4e:0f:aa:d9:51:38:f4:5f:b3:57:12:48:7a:6f:e2: 38:d8:95:46:40:36:17:c5:ef:46:93:e0:a0:e8:38:ee:7e:4a: ac:ab:94:ba:b3:61:81:bc:9c:18:e4:41:1f:d3:00:22:25:dc: a7:da:6e:b3:e2:bc:c0:42:67:c8:c1:b4:de:73:20:89:5f:38: 5f:d0:d5:3b:c7:fa:ba:13:46:88:2e:e4:70:92:f9:6d:f1:91: 95:f6:bb:8a:4a:5f:09:23:fa:b5:8b:ba:48:3f:39:ae:a0:14: d7:17:f6:8c:df:99:e8:6c:21:88:d3:5f:80:45:fd:a5:d8:50: 53:de:ff:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2RDAxMTAvBgNVBAUTKDE2MzMxNjc2MjExQUVFNjc3MzQ4NUI2NTIzM0M2MkMz QTQ1ODdBRkQwHhcNMjYwNTEyMTcyOTQzWhcNMjYwNTE5MTcyOTQzWjAYMRYwFAYD VQQDEw02YTAzNjM4Ny1lYTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuN9Jw5FozFcHlPM9y8LoWDaAfaSsBVMTiteOvAZXw5eAr+8/k+4bsjehswmo 52WGvOODYril0cek8zr0vViIDzHU+qfbzFNg7i3TfB7Uwd2j64yTigZlVYRtXQvD rEr4yxE2zsclpvpaczbtI1u9mGwp+H1gEWzKoc+WPf83n1OEebB+yMzR0MMT96Z4 e6dUxCTC0/cYAWIyLg9dVkaAfBg/9hZKTs9/MVatZQaQPJ+xYeDf6r3qKcKACha7 W76A+X7eypBYgLUsJiAOqvdsN5Fz1b/bW3ta7FiqT9045mUvG72CrueGpeTsfAQn GsuXHlyU+oCv/7MMDRO+0S910wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEEKGSKF IFdy5TnnCzs4YCRFuZl/MB8GA1UdIwQYMBaAFBYzFnYhGu5nc0hbZSM8YsOkWHr9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODZEMC84RDhGMEFCRTBC NUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdtZHpTRnRsSXp4aXc2Ulll djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0ZqTVdkaUVhN21kelNGdGxJenhpdzZSWWV2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODZEMC84RDhGMEFCRTBCNUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdt ZHpTRnRsSXp4aXc2UllldjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARW7GesXRhEFtw7wfiATBCzCix5hk5LuoEzTfYX8BAa8BYO3y8Mn1VDVnqTjI rVjy1wV0Ly6ITzUkKiHcii+CLwAxARJKegfL7Do0hXMY/YyWDdpSZvJM2mxy5ZPt 5Lgc8UUBwpTTJfuhisPa3d/2Y/JdapIB69UmPUpsBXkD+leVTg+q2VE49F+zVxJI em/iONiVRkA2F8XvRpPgoOg47n5KrKuUurNhgbycGORBH9MAIiXcp9pus+K8wEJn yMG03nMgiV84X9DVO8f6uhNGiC7kcJL5bfGRlfa7ikpfCSP6tYu6SD85rqAU1xf2 jN+Z6GwhiNNfgEX9pdhQU97/Nw== -----END CERTIFICATE-----Generated at Wed May 13 12:11:08 2026 by rpki-client