$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft File: mj2guGjFidoYRBoqcOBRSsl8QE0.mft (raw, json) Hash identifier: jM2+aDZ5Pzq+R1AoIQQLw2mVGOYR3jq5Zk3o/f2u7G0= Subject key identifier: 80:C4:D1:44:85:08:75:FC:FD:C7:80:44:22:2C:55:58:91:05:E9:01 Authority key identifier: 9A:3D:A0:B8:68:C5:89:DA:18:44:1A:2A:70:E0:51:4A:C9:7C:40:4D Certificate issuer: /CN=A91AC6B1/serialNumber=9A3DA0B868C589DA18441A2A70E0514AC97C404D Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj2guGjFidoYRBoqcOBRSsl8QE0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft Manifest number: 32 Signing time: Wed 13 May 2026 08:49:37 +0000 Manifest this update: Wed 13 May 2026 08:49:36 +0000 Manifest next update: Wed 20 May 2026 08:49:36 +0000 Files and hashes: 1: mj2guGjFidoYRBoqcOBRSsl8QE0.crl (hash: MwL65N0bngBGX+rDSQ1c7VqlBmGrWvXG5V0CL5MyYoQ=) 2: 920A3E000E0611F1A3BA1443083D8C67.roa (hash: b9zTdqNPieWG5+8wmYAln2q07Z28/oicnZ6JHHByN/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.crl rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj2guGjFidoYRBoqcOBRSsl8QE0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 08:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC6B1, serialNumber=9A3DA0B868C589DA18441A2A70E0514AC97C404D Validity Not Before: May 13 08:49:36 2026 GMT Not After : May 20 08:49:36 2026 GMT Subject: CN=6a043b21-f8aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:39:65:8a:29:3d:96:25:1b:27:c6:9e:14:80: bf:92:22:7a:80:70:6b:03:bb:1d:e6:bb:60:33:fa: 8b:7e:2f:ce:7a:42:6b:25:ad:61:8e:f1:0c:6b:a2: ae:ea:33:ab:b2:5f:c2:43:52:34:83:c7:96:b5:a7: 47:bd:7a:fe:fe:3f:83:1e:43:67:d9:75:a9:2d:45: 04:55:05:34:63:70:ae:e1:e4:a3:c1:be:e2:36:c0: 78:9c:20:87:3f:75:12:7e:f4:66:15:34:52:ee:a5: 76:d3:ca:35:2a:84:0f:b8:8e:97:36:8b:59:7a:56: b9:ac:a1:dd:e9:32:b0:6f:a0:9c:78:bd:4a:9b:f4: ba:4e:e2:89:62:93:1d:95:f4:39:9a:32:3f:31:67: e2:fe:36:30:cb:15:32:26:33:ce:8e:8b:7e:05:23: 51:e6:89:f0:f6:70:77:0d:25:60:ea:2d:d5:67:47: 0d:4b:48:e5:cc:fc:9f:c7:1b:8b:04:ad:13:67:4b: 02:7c:44:e0:77:0c:b7:aa:01:09:91:f4:01:9f:0d: 3c:f2:31:60:36:15:6c:fc:d7:e4:a7:3d:41:87:eb: 5b:73:db:17:ca:3b:37:59:2d:60:bc:e8:0b:be:f6: 65:63:5b:f6:e5:b7:36:3d:27:ea:48:24:aa:77:8e: 64:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C4:D1:44:85:08:75:FC:FD:C7:80:44:22:2C:55:58:91:05:E9:01 X509v3 Authority Key Identifier: keyid:9A:3D:A0:B8:68:C5:89:DA:18:44:1A:2A:70:E0:51:4A:C9:7C:40:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj2guGjFidoYRBoqcOBRSsl8QE0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:ae:f5:59:39:4c:cd:2f:0e:eb:5e:28:99:ab:ad:02:62:fd: 36:d2:a0:b3:62:5f:79:8d:b7:b9:eb:bb:27:f9:23:90:73:10: c9:0d:7e:51:00:9c:ca:ef:df:18:e1:4e:36:a7:76:9d:7b:da: de:38:10:23:5e:19:03:04:cb:4a:a2:b3:c7:34:91:d1:17:7d: d5:a8:f9:b4:b7:4a:d4:96:8c:bb:5d:3d:f5:ec:04:bf:49:9d: 57:f8:24:8d:11:dc:cf:2c:5f:61:b6:d1:7f:ff:0e:4b:b5:5f: ff:18:d9:5a:a7:77:09:7b:72:a6:82:b4:71:3d:cc:3b:fd:b2: fd:c5:c4:2f:25:77:6b:3d:de:70:ba:1c:ee:48:07:19:31:4f: 53:8c:be:8d:e5:6a:98:05:ba:06:0e:9c:94:18:46:2b:83:8f: 14:94:de:af:fc:40:89:7e:76:34:39:52:c7:15:e4:da:d8:93: 46:89:a1:12:2c:9c:9d:31:42:2b:12:c6:10:97:94:c2:84:11: 60:88:ef:4f:16:55:f3:b3:99:26:24:72:02:4b:e6:7c:4e:0d: e9:9e:2b:19:cb:4b:2e:94:0b:4b:5b:d6:d1:78:86:b6:0a:cd: 88:a5:e7:62:28:32:7f:9e:d6:80:0a:42:74:17:eb:e9:52:09: 4e:d8:48:2d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QzZCMTExMC8GA1UEBRMoOUEzREEwQjg2OEM1ODlEQTE4NDQxQTJBNzBFMDUxNEFD OTdDNDA0RDAeFw0yNjA1MTMwODQ5MzZaFw0yNjA1MjAwODQ5MzZaMBgxFjAUBgNV BAMTDTZhMDQzYjIxLWY4YWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4OWWKKT2WJRsnxp4UgL+SInqAcGsDux3mu2Az+ot+L856QmslrWGO8Qxroq7q M6uyX8JDUjSDx5a1p0e9ev7+P4MeQ2fZdaktRQRVBTRjcK7h5KPBvuI2wHicIIc/ dRJ+9GYVNFLupXbTyjUqhA+4jpc2i1l6Vrmsod3pMrBvoJx4vUqb9LpO4olikx2V 9DmaMj8xZ+L+NjDLFTImM86Oi34FI1HmifD2cHcNJWDqLdVnRw1LSOXM/J/HG4sE rRNnSwJ8ROB3DLeqAQmR9AGfDTzyMWA2FWz81+SnPUGH61tz2xfKOzdZLWC86Au+ 9mVjW/bltzY9J+pIJKp3jmQNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUgMTRRIUI dfz9x4BEIixVWJEF6QEwHwYDVR0jBBgwFoAUmj2guGjFidoYRBoqcOBRSsl8QE0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDNkIxL0Y0QTkxNTdBMDg4 QjExRjFCQ0IxNTNFNzBGM0Q4QzY3L21qMmd1R2pGaWRvWVJCb3FjT0JSU3NsOFFF MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWoyZ3VHakZpZG9ZUkJvcWNPQlJTc2w4UUUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD NkIxL0Y0QTkxNTdBMDg4QjExRjFCQ0IxNTNFNzBGM0Q4QzY3L21qMmd1R2pGaWRv WVJCb3FjT0JSU3NsOFFFMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAUrvVZOUzNLw7rXiiZq60CYv020qCzYl95jbe567sn+SOQcxDJDX5RAJzK798Y 4U42p3ade9reOBAjXhkDBMtKorPHNJHRF33VqPm0t0rUloy7XT317AS/SZ1X+CSN EdzPLF9httF//w5LtV//GNlap3cJe3KmgrRxPcw7/bL9xcQvJXdrPd5wuhzuSAcZ MU9TjL6N5WqYBboGDpyUGEYrg48UlN6v/ECJfnY0OVLHFeTa2JNGiaESLJydMUIr EsYQl5TChBFgiO9PFlXzs5kmJHICS+Z8Tg3pnisZy0sulAtLW9bReIa2Cs2Ipedi KDJ/ntaACkJ0F+vpUglO2Egt -----END CERTIFICATE-----Generated at Wed May 13 12:57:02 2026 by rpki-client