$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft File: D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft (raw, json) Hash identifier: r/pqBPYelpWo2ZMeyGMJeRSudGZHtjO+UGLgp4bx4KM= Subject key identifier: 08:48:55:5E:33:97:49:9E:AC:8E:AB:9C:04:F0:E7:50:5D:69:27:E0 Authority key identifier: 0F:54:67:A9:D1:EB:09:8B:52:CC:13:9D:57:43:B4:74:5B:F5:90:75 Certificate issuer: /CN=A91A9720/serialNumber=0F5467A9D1EB098B52CC139D5743B4745BF59075 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft Manifest number: 49 Signing time: Wed 13 May 2026 08:30:24 +0000 Manifest this update: Wed 13 May 2026 08:30:23 +0000 Manifest next update: Wed 20 May 2026 08:30:23 +0000 Files and hashes: 1: D1RnqdHrCYtSzBOdV0O0dFv1kHU.crl (hash: oryaWRKVvty5j+ZpBlYRFeTNVTE7TogOVRLzs+wBikg=) 2: 88128B34E55A11F0A78CF268396F56BC.roa (hash: rkDeFlmd5GKow5toLJKpXkhy9It1msy7eliFypTprmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.crl rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 06:14:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9720, serialNumber=0F5467A9D1EB098B52CC139D5743B4745BF59075 Validity Not Before: May 13 08:30:23 2026 GMT Not After : May 20 08:30:23 2026 GMT Subject: CN=6a04369f-de2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:47:d8:03:25:27:a0:f7:d4:e2:b3:53:92:8c: 8b:ea:4d:a5:c8:1f:b4:34:10:4f:6b:97:cf:23:71: c1:e9:3f:eb:94:17:d0:17:03:81:1b:c3:b3:6d:68: 6f:1f:08:f8:f5:86:15:79:e4:c5:9b:9c:e1:a8:0f: b1:47:f5:fe:c4:82:8e:f8:ea:a6:f8:61:b3:36:8b: 6c:2a:32:3e:0c:85:96:4c:42:fb:0f:80:9b:92:ff: 38:f7:a0:03:e0:09:57:1e:ff:ea:af:60:22:d8:a3: 56:55:b5:29:89:f9:6e:99:8d:c6:a7:6c:91:31:fa: 3d:5a:27:d8:3e:74:14:72:ed:5a:1a:1c:de:8c:58: de:29:99:74:dd:fa:af:36:85:75:ff:e8:67:4e:bc: cc:50:8b:7c:fe:e3:9b:31:f9:51:2b:50:6e:23:6d: c2:57:85:2f:b3:a5:e5:00:1d:88:99:02:0f:d4:63: c8:84:62:67:8c:ac:09:0d:56:fa:c1:07:98:9c:58: 42:bc:76:82:f5:e2:08:dc:9c:f5:98:7e:65:a5:b8: 68:e2:c6:18:a6:de:e9:3d:8a:08:90:fd:d2:62:00: 4d:52:96:bb:3a:65:c0:48:8b:d9:2a:e2:33:00:13: a2:90:ad:09:2a:19:82:2e:9a:b2:00:b1:cd:31:1c: 9c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:48:55:5E:33:97:49:9E:AC:8E:AB:9C:04:F0:E7:50:5D:69:27:E0 X509v3 Authority Key Identifier: keyid:0F:54:67:A9:D1:EB:09:8B:52:CC:13:9D:57:43:B4:74:5B:F5:90:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D1RnqdHrCYtSzBOdV0O0dFv1kHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9720/519C104EE55911F0B2288958386F56BC/D1RnqdHrCYtSzBOdV0O0dFv1kHU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:f7:81:4c:f9:50:44:11:78:cd:da:b2:b9:48:c8:0c:8b:2b: 16:4a:a9:4c:0e:3d:9b:64:bb:e6:5f:6f:63:34:73:b5:c2:c6: 35:a6:e7:c8:8b:13:90:ed:6d:02:de:50:7c:1c:6f:a0:72:42: eb:cd:09:16:e8:2f:3d:28:1d:9d:e1:7b:df:60:62:6e:e8:25: f2:58:5c:25:0c:dc:5e:95:aa:7f:29:a6:e4:ea:73:78:cf:25: 37:e3:ed:d0:d1:48:ba:03:15:ac:df:f3:2c:d1:24:4d:d1:59: f3:52:a2:7b:81:1d:ce:bc:2f:69:68:6f:7c:ad:ae:15:27:91: f8:35:37:b6:99:5b:ed:ac:15:9c:90:b9:8b:95:1d:ae:7c:15: a4:da:45:e4:4f:73:e7:6e:61:77:f2:bf:eb:0f:03:61:9c:a0: ae:b7:33:62:e1:0b:6a:f6:1a:df:3c:aa:60:e4:bc:3e:22:bb: e4:22:4e:8f:be:f2:81:9f:f6:3f:73:b6:53:3e:e3:8c:bf:b0: bc:eb:53:6c:d6:6c:87:68:ba:bc:bf:8b:ea:2b:83:35:d0:a2: 26:ef:5c:1b:1e:33:e5:38:e3:1a:ae:3b:68:7d:54:fc:c2:56: a3:97:68:31:57:c4:fc:aa:d2:a8:5f:86:3c:0e:02:42:e1:98: 55:f6:71:b0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTcyMDExMC8GA1UEBRMoMEY1NDY3QTlEMUVCMDk4QjUyQ0MxMzlENTc0M0I0NzQ1 QkY1OTA3NTAeFw0yNjA1MTMwODMwMjNaFw0yNjA1MjAwODMwMjNaMBgxFjAUBgNV BAMTDTZhMDQzNjlmLWRlMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIR9gDJSeg99Tis1OSjIvqTaXIH7Q0EE9rl88jccHpP+uUF9AXA4Ebw7NtaG8f CPj1hhV55MWbnOGoD7FH9f7Ego746qb4YbM2i2wqMj4MhZZMQvsPgJuS/zj3oAPg CVce/+qvYCLYo1ZVtSmJ+W6ZjcanbJEx+j1aJ9g+dBRy7VoaHN6MWN4pmXTd+q82 hXX/6GdOvMxQi3z+45sx+VErUG4jbcJXhS+zpeUAHYiZAg/UY8iEYmeMrAkNVvrB B5icWEK8doL14gjcnPWYfmWluGjixhim3uk9igiQ/dJiAE1Slrs6ZcBIi9kq4jMA E6KQrQkqGYIumrIAsc0xHJzFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUCEhVXjOX SZ6sjqucBPDnUF1pJ+AwHwYDVR0jBBgwFoAUD1RnqdHrCYtSzBOdV0O0dFv1kHUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5NzIwLzUxOUMxMDRFRTU1 OTExRjBCMjI4ODk1ODM4NkY1NkJDL0QxUm5xZEhyQ1l0U3pCT2RWME8wZEZ2MWtI VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRDFSbnFkSHJDWXRTekJPZFYwTzBkRnYxa0hVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 NzIwLzUxOUMxMDRFRTU1OTExRjBCMjI4ODk1ODM4NkY1NkJDL0QxUm5xZEhyQ1l0 U3pCT2RWME8wZEZ2MWtIVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAF94FM+VBEEXjN2rK5SMgMiysWSqlMDj2bZLvmX29jNHO1wsY1pufIixOQ7W0C 3lB8HG+gckLrzQkW6C89KB2d4XvfYGJu6CXyWFwlDNxelap/Kabk6nN4zyU34+3Q 0Ui6AxWs3/Ms0SRN0VnzUqJ7gR3OvC9paG98ra4VJ5H4NTe2mVvtrBWckLmLlR2u fBWk2kXkT3PnbmF38r/rDwNhnKCutzNi4Qtq9hrfPKpg5Lw+IrvkIk6PvvKBn/Y/ c7ZTPuOMv7C861Ns1myHaLq8v4vqK4M10KIm71wbHjPlOOMarjtofVT8wlajl2gx V8T8qtKoX4Y8DgJC4ZhV9nGw -----END CERTIFICATE-----Generated at Wed May 13 13:49:47 2026 by rpki-client