$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft File: ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft (raw, json) Hash identifier: NwDvbaPeHyJCbiqIXmylMQbaV9nlyWnzgbQ02TQlyd4= Subject key identifier: 4E:EE:BD:AC:A3:E5:D1:02:C9:6E:32:4C:D1:A4:DC:52:B0:89:85:29 Authority key identifier: 8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 Certificate issuer: /CN=A91AC4FA/serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Certificate serial: 029E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft Manifest number: 028E Signing time: Wed 13 May 2026 01:50:32 +0000 Manifest this update: Wed 13 May 2026 01:50:31 +0000 Manifest next update: Wed 20 May 2026 01:50:31 +0000 Files and hashes: 1: ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl (hash: tRJDdtXvKrLDs8oJ1CvaFJKOOqa9b0aNqgUibYSOPLc=) 2: 2A40C41C6EC511ED9672CB40C4F9AE02.roa (hash: Unh6vvgI1wlU5PdNLje9/sZrH6mvqXrjcdflctfvmwM=) 3: 0B1C46B26C8E11EDA1402673C4F9AE02.roa (hash: UWH1x8giA5CUDbuKn5hiEaz+aWmWPo/dG0Iot9P77PQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 01:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 670 (0x29e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4FA, serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Validity Not Before: May 13 01:50:31 2026 GMT Not After : May 20 01:50:31 2026 GMT Subject: CN=6a03d8e7-24bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f7:c2:93:7b:2d:e8:b3:58:9d:3a:54:5c:58: 1d:71:e1:13:0f:c5:a1:68:f9:75:45:8e:27:43:c2: 63:0f:6c:b6:a2:02:c1:79:31:3b:73:7d:2a:ab:5a: b2:f1:bf:41:6c:8d:9c:c3:80:a2:10:b3:d4:e0:10: af:bc:70:6c:8b:f3:00:03:f6:c6:9d:e6:61:c5:66: 94:35:e1:77:d4:d8:6f:5f:56:0c:33:b2:86:ef:ef: b9:a1:b5:3d:46:1c:76:4c:f6:b6:c7:51:19:22:7a: 77:a9:75:8b:0c:46:27:25:8f:2a:b1:8a:80:00:95: a0:6f:c5:51:d1:8b:cb:99:28:f5:15:0b:53:bb:d1: 88:d0:12:e8:64:60:7b:e8:3d:4f:89:de:00:87:70: c3:00:2d:b8:31:02:ca:3b:0f:58:f5:ad:05:f9:af: d4:a7:23:d1:64:4d:37:f0:20:b4:85:fa:ce:d9:4b: 2e:ed:17:11:8a:1e:6b:59:1a:8a:b7:f8:93:95:1f: 17:fd:8b:61:53:3a:70:b0:5c:44:52:50:87:34:31: e7:ab:b2:f8:ed:82:f3:15:4f:4a:0c:8f:ba:d1:1c: 5b:01:c0:4c:39:01:a2:b5:2d:1e:0b:13:8a:15:23: 27:52:48:30:82:b2:8f:eb:93:89:45:c3:63:b7:7e: 93:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:EE:BD:AC:A3:E5:D1:02:C9:6E:32:4C:D1:A4:DC:52:B0:89:85:29 X509v3 Authority Key Identifier: keyid:8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:b9:c1:46:09:5c:a2:5a:fa:ea:06:42:6f:5a:00:46:6e:9f: 0d:5b:ab:36:88:66:89:8b:7e:35:80:dd:3a:a6:cd:19:3c:02: a8:0d:8a:ec:65:a8:3c:9b:6a:c8:18:a2:aa:61:34:60:3e:d8: 68:93:fb:1e:f3:20:68:92:b6:57:64:1e:17:62:60:6b:4d:24: bb:4b:dc:c4:de:73:ed:45:ab:cc:a1:4c:5e:cf:fc:4b:9b:c7: be:0f:73:13:e6:2b:c3:c1:c1:a1:33:ff:be:f1:f9:ee:3d:4d: c7:6f:9b:bf:42:94:f5:01:4e:fc:26:29:22:6b:ff:d6:d6:7f: ee:26:a5:40:04:60:b3:28:30:73:53:2d:e4:10:55:0c:80:02: 29:93:56:69:c6:77:a5:40:5b:5b:66:07:cd:57:07:02:87:ef: 96:07:db:52:9e:16:ce:13:38:80:6e:ec:b2:b6:e3:ac:56:cc: b1:dc:34:b3:11:d6:08:95:62:13:ad:ef:af:63:ea:da:42:c4: 22:fc:d7:22:8e:54:cd:2f:bb:ea:7b:25:88:9e:b9:cf:d2:38: 61:01:53:c5:99:10:6e:c6:ef:8d:3f:06:e5:f9:f1:9c:0a:af: 6f:9a:5f:e3:f2:89:73:be:ad:21:46:5d:22:1a:f7:49:6c:1b: 0b:97:bd:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0RkExMTAvBgNVBAUTKDhBRjdEOEI4NjRGRDkwNDUyRkZENkRFOTNCNTE0NTZD NzlFRkIzQzcwHhcNMjYwNTEzMDE1MDMxWhcNMjYwNTIwMDE1MDMxWjAYMRYwFAYD VQQDEw02YTAzZDhlNy0yNGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/fCk3st6LNYnTpUXFgdceETD8WhaPl1RY4nQ8JjD2y2ogLBeTE7c30qq1qy 8b9BbI2cw4CiELPU4BCvvHBsi/MAA/bGneZhxWaUNeF31NhvX1YMM7KG7++5obU9 Rhx2TPa2x1EZInp3qXWLDEYnJY8qsYqAAJWgb8VR0YvLmSj1FQtTu9GI0BLoZGB7 6D1Pid4Ah3DDAC24MQLKOw9Y9a0F+a/UpyPRZE038CC0hfrO2Usu7RcRih5rWRqK t/iTlR8X/YthUzpwsFxEUlCHNDHnq7L47YLzFU9KDI+60RxbAcBMOQGitS0eCxOK FSMnUkgwgrKP65OJRcNjt36T0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE7uvayj 5dECyW4yTNGk3FKwiYUpMB8GA1UdIwQYMBaAFIr32Lhk/ZBFL/1t6TtRRWx577PH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzRGQS8zN0NCODc5ODZD OEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtFVXZfVzNwTzFGRmJIbnZz OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l2Zll1R1Q5a0VVdl9XM3BPMUZGYkhudnM4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzRGQS8zN0NCODc5ODZDOEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtF VXZfVzNwTzFGRmJIbnZzOGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiLnBRglcolr66gZCb1oARm6fDVurNohmiYt+NYDdOqbNGTwCqA2K7GWoPJtq yBiiqmE0YD7YaJP7HvMgaJK2V2QeF2Jga00ku0vcxN5z7UWrzKFMXs/8S5vHvg9z E+Yrw8HBoTP/vvH57j1Nx2+bv0KU9QFO/CYpImv/1tZ/7ialQARgsygwc1Mt5BBV DIACKZNWacZ3pUBbW2YHzVcHAofvlgfbUp4WzhM4gG7ssrbjrFbMsdw0sxHWCJVi E63vr2Pq2kLEIvzXIo5UzS+76nsliJ65z9I4YQFTxZkQbsbvjT8G5fnxnAqvb5pf 4/KJc76tIUZdIhr3SWwbC5e9QQ== -----END CERTIFICATE-----Generated at Wed May 13 04:07:26 2026 by rpki-client