$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft File: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft (raw, json) Hash identifier: hGC3LKtaKwZ5r6/qwq2gxVqay6gJj+Nza/m2J8mrxR8= Subject key identifier: 5A:A8:E1:6E:5C:7B:81:B2:8D:D8:81:85:22:B4:13:FE:0B:75:7D:BD Authority key identifier: D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89 Certificate issuer: /CN=A91A8B67/serialNumber=D459D267525234A0535EC38D8CCC8990194DE189 Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft Manifest number: 010E Signing time: Mon 11 May 2026 06:13:40 +0000 Manifest this update: Mon 11 May 2026 06:13:40 +0000 Manifest next update: Mon 18 May 2026 06:13:40 +0000 Files and hashes: 1: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl (hash: Mz9j6P0z//Wo9Z0yWR22kZUgLOloAd4Y5yqHHGH/rzE=) 2: E90F04F4114711F0B6E44E12C4F9AE02.roa (hash: wpQZ9n5tOzLHw2Dp8uE1s9PaRxpgXwgFNni9J4wuW/Y=) 3: 1363F5E60E8E11F082304B42C4F9AE02.roa (hash: /AunwFrvROT949ER300con7tMv9t6hnrAMstakDSUnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 06:13:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8B67, serialNumber=D459D267525234A0535EC38D8CCC8990194DE189 Validity Not Before: May 11 06:13:40 2026 GMT Not After : May 18 06:13:40 2026 GMT Subject: CN=6a017394-a5f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:4d:1f:c5:ba:6d:a3:09:fe:85:b1:2c:52:49: 9a:ae:db:ca:cb:ed:5f:97:c0:8f:86:85:be:25:e3: 78:e3:84:b3:c3:37:c1:f5:7e:41:01:bd:02:70:73: 13:f9:c2:1f:b2:54:23:9e:2b:4a:9a:53:e1:d2:65: a6:52:f2:06:c8:7e:e0:9b:75:2c:ac:09:7c:5f:5b: 3a:c6:50:e3:0d:08:0c:f2:4a:b6:cb:d4:52:02:bb: 78:0e:f7:01:2e:70:93:e9:8a:34:4a:a4:40:08:b0: 12:a6:9a:d1:a9:0a:23:87:14:a4:52:15:e9:11:ab: fa:d3:0c:c8:96:a8:d2:ce:b7:9a:b1:51:bc:0f:b5: 75:e2:54:c0:f6:9e:34:cd:16:b6:0f:8e:18:af:69: be:a6:d4:c4:8c:ee:9b:8b:27:d3:98:ca:ed:dc:91: b2:ec:56:2f:74:e8:78:cf:ab:6e:35:11:8c:0e:92: b0:22:b7:3b:45:eb:a3:29:17:8c:3b:8f:52:8d:c9: 30:35:e5:09:2d:07:90:2c:35:8c:90:f9:ce:6a:f8: 01:16:b0:d8:37:bc:1d:e4:ca:53:bc:fa:37:78:8f: 4e:dd:6f:20:35:68:f2:c7:26:95:44:51:85:d5:35: 35:1c:46:fd:d6:43:f5:1d:ad:e7:65:1f:91:16:aa: 02:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A8:E1:6E:5C:7B:81:B2:8D:D8:81:85:22:B4:13:FE:0B:75:7D:BD X509v3 Authority Key Identifier: keyid:D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:92:03:34:4c:f3:d5:e0:89:ef:a0:b2:fb:83:ec:b2:fc:76: 03:3c:7a:a8:e2:90:e0:f6:ca:9f:8c:57:d2:4d:e2:cc:a8:dc: 6c:46:74:f0:e4:09:a3:6e:e7:7c:a2:51:6a:04:90:40:20:4e: 1d:12:50:7b:6f:bf:76:ae:d6:93:b8:04:21:f4:93:c0:10:ce: 43:76:07:fb:8a:1d:df:6d:01:be:9a:4c:5b:fd:0d:20:8f:54: 60:3c:f1:41:f2:68:34:4f:cb:f4:3c:33:fb:b3:fc:92:54:95: fc:a9:80:d9:e8:6b:24:48:0d:39:5b:11:30:3f:4e:68:9b:44: 6c:ae:bb:44:af:5c:27:eb:b0:b1:58:c0:85:25:f6:bd:5a:44: c8:34:3e:f5:c8:19:66:30:54:4c:ef:d5:00:30:e9:fb:56:4a: b9:d7:12:b5:9d:a2:9a:94:c8:1c:69:20:43:d3:40:71:b7:b2: 23:82:3c:cf:91:20:d1:ab:66:59:77:55:97:92:6c:89:47:e5: cd:d4:72:4c:74:82:e7:28:d7:cb:02:1b:30:8a:ea:99:d5:65: a1:62:13:4f:04:df:43:58:75:53:0d:b8:e8:1c:a4:95:f8:f6: 33:76:1f:b8:a5:fc:06:c0:f8:3b:65:56:9e:39:19:fe:51:7e: 1b:82:ef:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThCNjcxMTAvBgNVBAUTKEQ0NTlEMjY3NTI1MjM0QTA1MzVFQzM4RDhDQ0M4OTkw MTk0REUxODkwHhcNMjYwNTExMDYxMzQwWhcNMjYwNTE4MDYxMzQwWjAYMRYwFAYD VQQDEw02YTAxNzM5NC1hNWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+E0fxbptown+hbEsUkmartvKy+1fl8CPhoW+JeN444SzwzfB9X5BAb0CcHMT +cIfslQjnitKmlPh0mWmUvIGyH7gm3UsrAl8X1s6xlDjDQgM8kq2y9RSArt4DvcB LnCT6Yo0SqRACLASpprRqQojhxSkUhXpEav60wzIlqjSzreasVG8D7V14lTA9p40 zRa2D44Yr2m+ptTEjO6biyfTmMrt3JGy7FYvdOh4z6tuNRGMDpKwIrc7ReujKReM O49SjckwNeUJLQeQLDWMkPnOavgBFrDYN7wd5MpTvPo3eI9O3W8gNWjyxyaVRFGF 1TU1HEb91kP1Ha3nZR+RFqoCvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFqo4W5c e4GyjdiBhSK0E/4LdX29MB8GA1UdIwQYMBaAFNRZ0mdSUjSgU17DjYzMiZAZTeGJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEI2Ny8yRkEwMEQzRUM2 QUExMUVGODRGQjBEMERDNEY5QUUwMi8xRm5TWjFKU05LQlRYc09Oak15SmtCbE40 WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFGblNaMUpTTktCVFhzT05qTXlKa0JsTjRZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEI2Ny8yRkEwMEQzRUM2QUExMUVGODRGQjBEMERDNEY5QUUwMi8xRm5TWjFKU05L QlRYc09Oak15SmtCbE40WWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACJIDNEzz1eCJ76Cy+4Pssvx2Azx6qOKQ4PbKn4xX0k3izKjcbEZ08OQJo27n fKJRagSQQCBOHRJQe2+/dq7Wk7gEIfSTwBDOQ3YH+4od320BvppMW/0NII9UYDzx QfJoNE/L9Dwz+7P8klSV/KmA2ehrJEgNOVsRMD9OaJtEbK67RK9cJ+uwsVjAhSX2 vVpEyDQ+9cgZZjBUTO/VADDp+1ZKudcStZ2impTIHGkgQ9NAcbeyI4I8z5Eg0atm WXdVl5JsiUflzdRyTHSC5yjXywIbMIrqmdVloWITTwTfQ1h1Uw246Byklfj2M3Yf uKX8BsD4O2VWnjkZ/lF+G4LvPw== -----END CERTIFICATE-----Generated at Wed May 13 06:50:57 2026 by rpki-client