$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft File: Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft (raw, json) Hash identifier: fMERncwkyDeTN8xDao0TFF1VB8611DvfSQxTdRjqOtQ= Subject key identifier: 62:60:6B:7A:1E:6F:46:71:E2:F9:5A:1A:99:B6:82:9F:86:58:39:E3 Authority key identifier: 0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F Certificate issuer: /CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F Certificate serial: 068B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft Manifest number: 0678 Signing time: Tue 12 May 2026 22:41:54 +0000 Manifest this update: Tue 12 May 2026 22:41:54 +0000 Manifest next update: Tue 19 May 2026 22:41:54 +0000 Files and hashes: 1: Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl (hash: TgyUCJeZuYXeT2XTdOCKHHc2W78tpsc+NHlEUZirPOg=) 2: 4D38774A86E611EF9D6F5581C4F9AE02.roa (hash: nnDH6rvORkwCmJUa2SHMfnPNgo7zw9YFjWX6Zaktv3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 22:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1675 (0x68b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF5F7, serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F Validity Not Before: May 12 22:41:54 2026 GMT Not After : May 19 22:41:54 2026 GMT Subject: CN=6a03acb2-a12a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:79:a7:51:af:6e:a1:49:ce:34:de:31:b5:b9: 06:ed:66:89:fb:c1:8d:a2:f2:b0:17:88:1a:44:f5: 2c:d4:87:4c:57:ee:a8:4a:17:34:ba:47:b5:41:4c: d9:08:d7:eb:6f:ef:2a:f0:75:3d:63:d0:3d:f2:21: a6:e4:cd:12:0d:af:11:f0:2c:d8:e4:cf:f2:69:57: 4e:bd:fe:38:c0:52:3d:f1:cc:57:d6:e1:0c:73:8f: 5c:23:f9:36:2d:0a:84:70:0a:e9:ea:bb:0f:fe:26: 4a:47:2f:33:d9:19:45:4c:85:33:10:cb:10:fe:f4: 38:0d:f7:47:4f:42:06:b4:a5:05:69:14:7e:26:d7: 61:19:30:af:9f:92:b2:72:4b:a9:e6:ca:bf:4f:ae: d6:c0:60:97:97:14:53:8e:48:3e:02:c4:87:d0:63: 0a:ee:71:ca:47:4a:9c:24:80:2a:00:dc:58:1f:8c: 3f:58:bb:ca:d9:ca:00:72:cd:43:49:b5:bd:fc:0d: 8a:07:4a:9d:1b:74:a6:d9:25:a6:c2:d5:42:eb:7b: 9e:57:de:e2:c4:7b:1a:1c:5f:25:c7:30:00:09:92: 5d:b1:09:80:1f:a8:86:4f:47:e2:51:db:6e:d3:92: 16:83:83:08:bd:59:e4:3b:8c:e3:82:68:c4:0d:cb: 4e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:60:6B:7A:1E:6F:46:71:E2:F9:5A:1A:99:B6:82:9F:86:58:39:E3 X509v3 Authority Key Identifier: keyid:0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:6e:80:48:4a:1e:82:57:04:04:c1:6d:c9:2d:0e:1b:d7:cb: 80:53:03:da:64:1b:60:57:d9:12:90:cd:96:f4:25:7f:3b:b2: 81:09:85:1b:df:c8:29:33:69:5b:52:ef:d4:d4:c9:b6:55:6b: 4d:06:cf:7c:f1:01:e2:22:c3:2c:c0:e8:36:d1:d6:44:c7:e7: 23:26:64:78:8c:05:34:f9:6c:a4:4e:18:a5:19:57:3a:f0:d0: 74:e4:72:86:cf:27:7c:2d:e5:89:02:6c:f3:b2:c1:70:e7:59: 95:6b:ec:a9:ec:db:ae:75:7d:a3:da:70:cc:3e:67:d2:19:57: 94:1f:d9:fa:d5:c6:48:ae:f3:56:3e:26:f7:1e:79:bf:db:34: 66:31:0f:ff:da:ac:77:2e:db:af:a3:a6:30:4f:bd:4a:6f:da: 05:ae:e5:9e:c3:cf:77:ef:26:db:00:fd:df:df:fe:d5:d8:f5: ee:8b:f8:1e:80:2a:24:bc:b2:70:75:07:5f:c0:b7:5b:08:54: 22:63:67:0a:78:57:a6:ee:da:6e:5c:ef:a4:a1:8f:49:53:e1: 0c:0e:09:37:7b:94:dc:f4:4f:47:a4:f4:ef:b5:af:ec:55:0c: ce:d5:77:9f:43:e0:c2:e0:e4:35:ab:1e:1d:55:d5:73:95:9f: 21:91:fe:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY1RjcxMTAvBgNVBAUTKDBBMjc3RDI2QTlDMjQwMkI4QTFDRDQ1Nzc5MzVFNEYz QzI1OUMxOUYwHhcNMjYwNTEyMjI0MTU0WhcNMjYwNTE5MjI0MTU0WjAYMRYwFAYD VQQDEw02YTAzYWNiMi1hMTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp3mnUa9uoUnONN4xtbkG7WaJ+8GNovKwF4gaRPUs1IdMV+6oShc0uke1QUzZ CNfrb+8q8HU9Y9A98iGm5M0SDa8R8CzY5M/yaVdOvf44wFI98cxX1uEMc49cI/k2 LQqEcArp6rsP/iZKRy8z2RlFTIUzEMsQ/vQ4DfdHT0IGtKUFaRR+JtdhGTCvn5Ky ckup5sq/T67WwGCXlxRTjkg+AsSH0GMK7nHKR0qcJIAqANxYH4w/WLvK2coAcs1D SbW9/A2KB0qdG3Sm2SWmwtVC63ueV97ixHsaHF8lxzAACZJdsQmAH6iGT0fiUdtu 05IWg4MIvVnkO4zjgmjEDctOlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGJga3oe b0Zx4vlaGpm2gp+GWDnjMB8GA1UdIwQYMBaAFAonfSapwkArihzUV3k15PPCWcGf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjVGNy80NEZDRTU2OEM3 ODQxMUVCQUQ0Qzk2NTlDNEY5QUUwMi9DaWQ5SnFuQ1FDdUtITlJYZVRYazg4Slp3 WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NpZDlKcW5DUUN1S0hOUlhlVFhrODhKWndaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjVGNy80NEZDRTU2OEM3ODQxMUVCQUQ0Qzk2NTlDNEY5QUUwMi9DaWQ5SnFuQ1FD dUtITlJYZVRYazg4Slp3WjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKG6ASEoeglcEBMFtyS0OG9fLgFMD2mQbYFfZEpDNlvQlfzuygQmFG9/IKTNp W1Lv1NTJtlVrTQbPfPEB4iLDLMDoNtHWRMfnIyZkeIwFNPlspE4YpRlXOvDQdORy hs8nfC3liQJs87LBcOdZlWvsqezbrnV9o9pwzD5n0hlXlB/Z+tXGSK7zVj4m9x55 v9s0ZjEP/9qsdy7br6OmME+9Sm/aBa7lnsPPd+8m2wD939/+1dj17ov4HoAqJLyy cHUHX8C3WwhUImNnCnhXpu7ablzvpKGPSVPhDA4JN3uU3PRPR6T077Wv7FUMztV3 n0PgwuDkNaseHVXVc5WfIZH+/w== -----END CERTIFICATE-----Generated at Wed May 13 08:01:56 2026 by rpki-client