$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft File: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft (raw, json) Hash identifier: h4Z9BaZkO0ObA+qZTo+ap75+wZJupid3Ts2+K2HkmGc= Subject key identifier: 4E:12:94:7C:2B:C1:11:43:29:42:72:97:52:DF:61:79:63:DC:8D:BB Authority key identifier: 63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 Certificate issuer: /CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Certificate serial: 3233 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft Manifest number: 3211 Signing time: Tue 12 May 2026 15:25:56 +0000 Manifest this update: Tue 12 May 2026 15:25:55 +0000 Manifest next update: Tue 19 May 2026 15:25:55 +0000 Files and hashes: 1: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl (hash: 439A6bObbBryvCL4dqS92KZLIuXGvy2EgLJ8N52ZydM=) 2: 4B7CAC36F78411F08F54609B4C6F56BC.roa (hash: US+hos1bmco+xwNoQ4VJkFhsWCF6u/dd+loCwDLc9o4=) 3: 31CCE602BCE311EA953FBB5EC4F9AE02.roa (hash: cyouCRCr7CZPOwDKg7kIiYNdpRMlLTwclgYJQS5JDvs=) 4: 4BEF9ED0F78411F08F54609B4C6F56BC.roa (hash: XwB9QjCYwbuRP43YSeYiFY0GoKDk5ANAOxQN+pyPBGM=) 5: 4B019258F78411F08F54609B4C6F56BC.roa (hash: Jv0wj3aaY+NUxNWRmp1eqBldB83wzCf6HePkKdo3y5I=) 6: 858F2428399511F18707CD8AA2833773.roa (hash: uwaiiJymHClHqRMbzHiH7AVtt8/cGV/JP3CdpR9bs70=) 7: 32538B4EBCE311EA953FBB5EC4F9AE02.roa (hash: QqncPmQ+MTjJkRRgLJA4ctdRvr1q1n2VS0I4uFV/Q7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 15:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12851 (0x3233) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1461, serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Validity Not Before: May 12 15:25:55 2026 GMT Not After : May 19 15:25:55 2026 GMT Subject: CN=6a034683-64c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e0:7d:77:b3:33:7e:29:11:0b:fc:12:31:ae: 6b:00:7e:c0:4e:ee:ff:4d:38:63:d8:0c:4e:61:e3: c6:82:90:82:56:a4:af:8c:55:34:ef:ae:1e:94:9f: 1b:fb:40:9a:70:d2:53:49:85:34:61:cb:54:9e:94: e6:d3:ea:88:dc:b3:75:23:1f:6a:e5:0f:50:17:76: 50:0b:f9:77:01:7d:47:e7:47:ea:02:f8:37:82:a3: e3:c8:17:48:e5:9f:bf:2e:22:a3:bf:e4:90:58:1c: 3c:59:75:bc:2d:b9:48:c8:71:1c:21:70:0a:79:65: 66:4a:2b:23:b1:78:5e:18:50:e6:df:58:dc:75:b9: ec:52:51:63:ab:d3:a5:9b:14:50:4f:fa:7b:29:37: a5:11:b3:ba:e8:48:bb:ba:1f:9f:10:e0:94:7f:56: 6c:ca:d9:92:19:f6:9f:c3:37:44:ac:6e:4b:e7:36: 4a:6d:47:b8:be:09:f0:75:53:7a:32:07:5f:ae:37: 67:64:e5:8f:7f:73:12:95:42:08:aa:b9:84:df:4d: e0:20:7f:7f:bc:fb:92:02:30:aa:10:06:3f:2a:db: c3:61:c3:20:06:b7:80:b8:d4:6e:e0:e0:37:96:a1: 43:34:4d:42:cb:3f:83:d3:44:7f:37:7c:d6:26:d2: 0f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:12:94:7C:2B:C1:11:43:29:42:72:97:52:DF:61:79:63:DC:8D:BB X509v3 Authority Key Identifier: keyid:63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:70:29:1c:b8:3d:1e:c6:4e:d2:60:fb:e7:83:5e:c0:b9:57: 79:0d:49:8d:ac:02:2d:1d:1b:de:60:e2:46:0d:1c:e0:1f:04: 31:92:64:3b:ff:83:86:2f:b9:a0:92:f7:0c:ae:22:79:5d:83: fa:49:c3:a2:79:d6:63:bc:e7:1a:a3:07:f0:c5:36:74:3f:8f: d8:ca:88:20:54:c3:80:5d:22:0e:94:d6:fb:30:e7:52:2c:ee: 17:e7:0d:dc:de:3d:b9:3e:3b:e1:a1:54:52:6c:e7:da:34:c2: 5f:8b:86:d8:b5:5f:2a:ce:a1:28:77:8a:c9:ff:43:99:8d:67: 83:35:a1:cc:09:8d:d1:7f:1a:44:86:2e:44:ca:77:db:d0:e6: 88:af:e6:40:b5:3b:d9:25:f2:63:c9:03:11:94:ab:f4:88:c5: 3d:fa:cd:9d:9f:02:95:76:59:04:75:ed:6f:f6:49:62:29:b2: 55:7b:eb:6c:bd:60:29:1a:e8:b3:95:92:2d:63:3f:c9:3e:85: 2e:4b:6d:ed:4d:b4:16:f1:a9:c2:6e:bf:d5:6e:d3:f6:ec:5a: 20:e4:ea:93:a2:a6:c3:a6:0a:f9:80:11:fc:b1:00:ba:35:37: 0c:32:a3:41:88:aa:3b:10:07:51:43:1e:84:fe:e3:53:38:0c: f0:6f:81:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICMjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE0NjExMTAvBgNVBAUTKDYzN0VEMTQxRkZFMDI1RkQwNTE5OTQ1Q0VENDhFNzRG OEJEMEY1QzkwHhcNMjYwNTEyMTUyNTU1WhcNMjYwNTE5MTUyNTU1WjAYMRYwFAYD VQQDEw02YTAzNDY4My02NGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4eB9d7MzfikRC/wSMa5rAH7ATu7/TThj2AxOYePGgpCCVqSvjFU0764elJ8b +0CacNJTSYU0YctUnpTm0+qI3LN1Ix9q5Q9QF3ZQC/l3AX1H50fqAvg3gqPjyBdI 5Z+/LiKjv+SQWBw8WXW8LblIyHEcIXAKeWVmSisjsXheGFDm31jcdbnsUlFjq9Ol mxRQT/p7KTelEbO66Ei7uh+fEOCUf1ZsytmSGfafwzdErG5L5zZKbUe4vgnwdVN6 MgdfrjdnZOWPf3MSlUIIqrmE303gIH9/vPuSAjCqEAY/KtvDYcMgBreAuNRu4OA3 lqFDNE1Cyz+D00R/N3zWJtIP+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE4SlHwr wRFDKUJyl1LfYXlj3I27MB8GA1UdIwQYMBaAFGN+0UH/4CX9BRmUXO1I50+L0PXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTQ2MS9GQ0U5QTY4MEJE RjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pmMEZHWlJjN1VqblQ0dlE5 Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kzN1JRZl9nSmYwRkdaUmM3VWpuVDR2UTljay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTQ2MS9GQ0U5QTY4MEJERjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pm MEZHWlJjN1VqblQ0dlE5Y2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl3ApHLg9HsZO0mD754NewLlXeQ1JjawCLR0b3mDiRg0c4B8EMZJkO/+Dhi+5 oJL3DK4ieV2D+knDonnWY7znGqMH8MU2dD+P2MqIIFTDgF0iDpTW+zDnUizuF+cN 3N49uT474aFUUmzn2jTCX4uG2LVfKs6hKHeKyf9DmY1ngzWhzAmN0X8aRIYuRMp3 29DmiK/mQLU72SXyY8kDEZSr9IjFPfrNnZ8ClXZZBHXtb/ZJYimyVXvrbL1gKRro s5WSLWM/yT6FLktt7U20FvGpwm6/1W7T9uxaIOTqk6Kmw6YK+YAR/LEAujU3DDKj QYiqOxAHUUMehP7jUzgM8G+BuQ== -----END CERTIFICATE-----Generated at Wed May 13 04:14:03 2026 by rpki-client