$ rpki-client -vvf rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft File: DxfzfbyUhNluGgq8eKT5ys1e2oo.mft (raw, json) Hash identifier: 4jJIqq/huFNrupRZBwXsmdxB4ttPmjY2WSS+WV3o+QA= Subject key identifier: 8C:A3:29:C1:26:2A:AB:8C:D4:4B:A5:0D:F2:FA:8E:60:D4:5E:C8:79 Authority key identifier: 0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A Certificate issuer: /CN=A91B036A/serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft Manifest number: 01D0 Signing time: Wed 13 May 2026 04:17:11 +0000 Manifest this update: Wed 13 May 2026 04:17:11 +0000 Manifest next update: Wed 20 May 2026 04:17:11 +0000 Files and hashes: 1: DxfzfbyUhNluGgq8eKT5ys1e2oo.crl (hash: CU00VLXL4ipXQr1xlwo0QfIig3fkNHOLQUclvlV6ZSk=) 2: B060FCD00E4311F1AA27A3801A3D8C67.roa (hash: /jHwnGcod93mkftOIXxHTA503k6CU3aAb5UZbSQZX9A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 04:17:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B036A, serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A Validity Not Before: May 13 04:17:11 2026 GMT Not After : May 20 04:17:11 2026 GMT Subject: CN=6a03fb47-401a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:23:c4:4c:8e:3a:2b:d3:85:44:31:c2:2b:88: 75:e8:58:7d:b4:cd:c2:71:12:00:18:8f:53:d3:b0: b0:06:49:9b:79:2c:d7:22:ba:56:bc:25:eb:4a:27: 59:85:56:4a:15:c7:12:7d:b5:75:8e:d0:3d:98:ce: 43:a7:66:8e:c4:16:16:6c:ae:df:76:7a:45:1f:ba: d7:7f:ca:e0:09:e2:d7:f6:9d:8f:34:7a:cc:48:c5: c3:b2:40:87:05:62:79:ba:ea:31:d7:ed:bb:99:01: d7:de:d7:46:0c:df:5d:9f:10:82:26:fa:1b:6e:fd: 6c:d0:a3:6b:97:ad:2b:43:97:f9:c8:f9:ed:f9:3e: 71:51:8c:01:58:38:4d:0f:8b:d6:6b:04:eb:ef:b0: 51:64:8b:16:f5:e1:04:3d:23:4d:fd:59:bb:18:18: 7e:d8:92:26:31:cd:11:d1:52:14:17:06:e6:af:22: 88:03:49:2f:0e:79:95:6e:d8:1a:79:fe:ff:39:bd: b1:42:da:06:67:83:9d:04:b0:10:28:7a:ce:9a:5e: e5:2b:01:63:45:d4:89:49:82:24:34:43:75:f8:6f: 41:12:05:53:a7:1d:94:4f:3d:f6:27:d4:6d:dd:9c: 6e:11:58:4f:ea:b0:cc:74:cc:03:ce:13:b2:44:36: 2d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A3:29:C1:26:2A:AB:8C:D4:4B:A5:0D:F2:FA:8E:60:D4:5E:C8:79 X509v3 Authority Key Identifier: keyid:0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:f0:0b:26:0f:6d:db:e5:ac:c0:3d:a2:6b:40:8d:c3:99:d9: 9a:06:03:62:11:fd:02:17:21:b6:83:41:d9:ee:dd:37:f6:0f: af:f4:94:ff:80:69:fc:9a:2d:f5:a6:f2:35:90:09:06:d4:f5: 82:5b:84:b9:04:42:d5:f8:17:55:b1:20:b4:89:c3:e1:c0:5f: 29:39:94:d1:d3:75:a8:91:d7:6d:65:d9:83:02:4c:34:98:9a: b6:54:c8:52:f6:43:ef:b5:a5:83:ba:0e:e9:bd:18:76:48:4f: 3d:32:25:b1:a5:63:0b:92:1f:86:df:bf:10:fe:ee:02:36:0f: 32:8b:3f:13:cb:ed:bb:0f:c9:b4:f0:46:98:87:4f:7c:12:9f: 0f:0f:09:93:a6:9e:09:f1:17:59:0b:ae:78:ed:d0:fa:69:e4: cc:4a:10:42:29:49:b6:6c:0b:99:4d:fe:05:15:dd:5e:03:38: a2:7f:76:d9:c5:61:de:e4:94:5b:91:d4:31:31:b4:79:54:86: eb:bb:02:ad:43:cb:02:f6:6f:94:ee:63:13:65:ac:93:99:8a: 8e:18:ad:7c:b0:e0:ca:15:db:c8:d6:9f:37:d1:fd:67:6d:0c: 9b:af:28:04:19:13:69:b9:76:9e:a0:51:a3:58:57:9d:84:70: c1:b5:11:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAzNkExMTAvBgNVBAUTKDBGMTdGMzdEQkM5NDg0RDk2RTFBMEFCQzc4QTRGOUNB Q0Q1RURBOEEwHhcNMjYwNTEzMDQxNzExWhcNMjYwNTIwMDQxNzExWjAYMRYwFAYD VQQDEw02YTAzZmI0Ny00MDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzyPETI46K9OFRDHCK4h16Fh9tM3CcRIAGI9T07CwBkmbeSzXIrpWvCXrSidZ hVZKFccSfbV1jtA9mM5Dp2aOxBYWbK7fdnpFH7rXf8rgCeLX9p2PNHrMSMXDskCH BWJ5uuox1+27mQHX3tdGDN9dnxCCJvobbv1s0KNrl60rQ5f5yPnt+T5xUYwBWDhN D4vWawTr77BRZIsW9eEEPSNN/Vm7GBh+2JImMc0R0VIUFwbmryKIA0kvDnmVbtga ef7/Ob2xQtoGZ4OdBLAQKHrOml7lKwFjRdSJSYIkNEN1+G9BEgVTpx2UTz32J9Rt 3ZxuEVhP6rDMdMwDzhOyRDYtgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIyjKcEm KquM1EulDfL6jmDUXsh5MB8GA1UdIwQYMBaAFA8X8328lITZbhoKvHik+crNXtqK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDM2QS9CQkMyRjc3NkQx RjExMUVFODYwNTFBNjFDNEY5QUUwMi9EeGZ6ZmJ5VWhObHVHZ3E4ZUtUNXlzMWUy b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R4ZnpmYnlVaE5sdUdncThlS1Q1eXMxZTJvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDM2QS9CQkMyRjc3NkQxRjExMUVFODYwNTFBNjFDNEY5QUUwMi9EeGZ6ZmJ5VWhO bHVHZ3E4ZUtUNXlzMWUyb28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhvALJg9t2+WswD2ia0CNw5nZmgYDYhH9AhchtoNB2e7dN/YPr/SU/4Bp/Jot 9abyNZAJBtT1gluEuQRC1fgXVbEgtInD4cBfKTmU0dN1qJHXbWXZgwJMNJiatlTI UvZD77Wlg7oO6b0YdkhPPTIlsaVjC5Ifht+/EP7uAjYPMos/E8vtuw/JtPBGmIdP fBKfDw8Jk6aeCfEXWQuueO3Q+mnkzEoQQilJtmwLmU3+BRXdXgM4on922cVh3uSU W5HUMTG0eVSG67sCrUPLAvZvlO5jE2Wsk5mKjhitfLDgyhXbyNafN9H9Z20Mm68o BBkTabl2nqBRo1hXnYRwwbURGw== -----END CERTIFICATE-----Generated at Wed May 13 07:53:47 2026 by rpki-client