$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft File: 44pe3hloyTdeUVUfrpiIigu1RJA.mft (raw, json) Hash identifier: t1L3/i/jC+mZmtD404Gll8UldIx+Mbfe8ah6Vayjhc8= Subject key identifier: 7A:33:0A:A9:13:3A:92:F5:AA:FF:A9:A9:DB:88:E2:7E:86:E3:06:81 Authority key identifier: E3:8A:5E:DE:19:68:C9:37:5E:51:55:1F:AE:98:88:8A:0B:B5:44:90 Certificate issuer: /CN=A91AAC4B/serialNumber=E38A5EDE1968C9375E51551FAE98888A0BB54490 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft Manifest number: FE Signing time: Mon 11 May 2026 06:17:38 +0000 Manifest this update: Mon 11 May 2026 06:17:38 +0000 Manifest next update: Mon 18 May 2026 06:17:38 +0000 Files and hashes: 1: 44pe3hloyTdeUVUfrpiIigu1RJA.crl (hash: QfWPS9J/KM8lnrJIKkjAr3gTTb95OsTXrH2qnHS5hec=) 2: B6A31094CD7E11EFBBAE2137C4F9AE02.roa (hash: 7luqkxdAYhFDQ1cLdVYDxi4/1gyDCpg9yV33Rku64hI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.crl rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 06:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAC4B, serialNumber=E38A5EDE1968C9375E51551FAE98888A0BB54490 Validity Not Before: May 11 06:17:38 2026 GMT Not After : May 18 06:17:38 2026 GMT Subject: CN=6a017482-56f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:da:20:65:ef:03:9d:76:34:01:be:aa:db:89: 5d:15:df:86:ae:97:82:48:03:ad:f0:f8:03:93:9a: 70:21:3c:30:3d:2c:38:16:60:e0:05:53:f2:e3:5a: d5:f2:2b:4f:c6:97:4b:b4:b7:63:7b:12:2e:9b:9a: 1b:19:a0:9a:b9:52:b9:ab:de:05:be:8c:7f:1e:44: 37:15:c5:f8:4d:83:f3:0d:64:e7:42:bb:22:a0:ef: a8:be:e9:34:0c:b3:cd:cf:48:27:e0:8f:9b:c7:78: 03:d4:a4:db:ca:a7:5e:5b:19:93:de:a4:79:68:a2: 22:5c:4e:57:56:09:0d:9a:f7:65:65:e4:14:a7:42: c6:f5:c8:a9:f5:2f:12:2b:1e:ba:22:bd:b8:3e:08: 65:2a:8e:c8:bd:ef:6a:fe:03:ee:b5:74:1a:dd:8e: 1c:05:eb:23:dd:ed:03:45:cc:54:1b:07:10:ca:11: 1a:42:4e:41:b0:4a:a8:db:5f:5f:ec:c1:50:64:ed: 54:f6:bc:cd:41:d7:e2:50:37:4c:54:90:b5:50:88: 2e:23:c1:df:40:d4:45:de:15:56:61:76:d2:27:ef: b8:d3:e4:bb:d8:97:3e:aa:0d:8b:c8:d8:28:ba:50: c5:07:59:ae:7b:b3:73:6e:af:c2:49:cf:51:5f:2a: 85:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:33:0A:A9:13:3A:92:F5:AA:FF:A9:A9:DB:88:E2:7E:86:E3:06:81 X509v3 Authority Key Identifier: keyid:E3:8A:5E:DE:19:68:C9:37:5E:51:55:1F:AE:98:88:8A:0B:B5:44:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:59:17:d2:3e:72:4e:eb:15:39:bf:c4:32:02:87:21:0b:c6: 5a:f8:ce:14:17:74:f4:52:99:aa:f3:80:cd:af:f4:90:41:72: 5d:c7:83:0c:eb:4c:35:37:49:c7:23:15:47:e7:b9:f0:dd:66: c6:27:bc:e5:1c:c7:52:75:cc:2e:65:a7:57:60:62:3f:a2:88: cf:ef:5d:b7:56:af:a2:13:b7:69:3e:52:fb:d5:54:61:1b:4e: 6e:e0:28:a5:51:56:4d:e9:95:27:40:da:c0:e5:bf:e7:f9:39: f9:6f:04:04:c3:2f:2f:ec:1b:87:d7:6e:72:b0:fe:b6:a3:97: 1e:c6:a9:4b:9a:06:1a:f0:d6:3a:ae:65:f8:0d:03:26:94:95: ed:26:e4:3d:8e:b4:48:cb:5a:b8:17:dc:30:43:5f:7e:3b:a2: cc:f1:d4:12:e6:ca:e5:04:6a:14:c4:9d:52:58:20:fa:a2:1e: 4f:73:9f:ff:a0:38:9c:bf:64:59:3b:8f:68:09:b8:46:4d:45: 0a:95:cb:44:9e:e4:0d:8d:94:08:4f:6a:23:43:4e:a1:c5:25: 2f:81:df:98:36:15:01:7d:4e:0a:26:83:c4:c7:8f:bd:67:b7: 3b:ee:dc:18:92:04:ef:ec:1c:78:23:45:13:10:84:87:5f:97: 0c:dd:21:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFDNEIxMTAvBgNVBAUTKEUzOEE1RURFMTk2OEM5Mzc1RTUxNTUxRkFFOTg4ODhB MEJCNTQ0OTAwHhcNMjYwNTExMDYxNzM4WhcNMjYwNTE4MDYxNzM4WjAYMRYwFAYD VQQDEw02YTAxNzQ4Mi01NmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2NogZe8DnXY0Ab6q24ldFd+GrpeCSAOt8PgDk5pwITwwPSw4FmDgBVPy41rV 8itPxpdLtLdjexIum5obGaCauVK5q94Fvox/HkQ3FcX4TYPzDWTnQrsioO+ovuk0 DLPNz0gn4I+bx3gD1KTbyqdeWxmT3qR5aKIiXE5XVgkNmvdlZeQUp0LG9cip9S8S Kx66Ir24PghlKo7Ive9q/gPutXQa3Y4cBesj3e0DRcxUGwcQyhEaQk5BsEqo219f 7MFQZO1U9rzNQdfiUDdMVJC1UIguI8HfQNRF3hVWYXbSJ++40+S72Jc+qg2LyNgo ulDFB1mue7Nzbq/CSc9RXyqFawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHozCqkT OpL1qv+pqduI4n6G4waBMB8GA1UdIwQYMBaAFOOKXt4ZaMk3XlFVH66YiIoLtUSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUM0Qi9ERTNGODg5QUNE N0QxMUVGQUEwNzIzMEFDNEY5QUUwMi80NHBlM2hsb3lUZGVVVlVmcnBpSWlndTFS SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzQ0cGUzaGxveVRkZVVWVWZycGlJaWd1MVJKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUM0Qi9ERTNGODg5QUNEN0QxMUVGQUEwNzIzMEFDNEY5QUUwMi80NHBlM2hsb3lU ZGVVVlVmcnBpSWlndTFSSkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF1kX0j5yTusVOb/EMgKHIQvGWvjOFBd09FKZqvOAza/0kEFyXceDDOtMNTdJ xyMVR+e58N1mxie85RzHUnXMLmWnV2BiP6KIz+9dt1avohO3aT5S+9VUYRtObuAo pVFWTemVJ0DawOW/5/k5+W8EBMMvL+wbh9ducrD+tqOXHsapS5oGGvDWOq5l+A0D JpSV7SbkPY60SMtauBfcMENffjuizPHUEubK5QRqFMSdUlgg+qIeT3Of/6A4nL9k WTuPaAm4Rk1FCpXLRJ7kDY2UCE9qI0NOocUlL4HfmDYVAX1OCiaDxMePvWe3O+7c GJIE7+wceCNFExCEh1+XDN0hag== -----END CERTIFICATE-----Generated at Wed May 13 08:59:34 2026 by rpki-client