$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft File: De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft (raw, json) Hash identifier: 7G7przCQKiw5d0YCYT5cjXzuf3c6YXYpEvKxu5AnwV4= Subject key identifier: 95:19:0A:AC:C1:E8:DC:39:B7:C7:6D:29:5B:60:BC:9B:D6:6D:61:EB Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 Certificate issuer: /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Certificate serial: 13F7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft Manifest number: 13DC Signing time: Tue 12 May 2026 16:57:51 +0000 Manifest this update: Tue 12 May 2026 16:57:50 +0000 Manifest next update: Tue 19 May 2026 16:57:50 +0000 Files and hashes: 1: De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl (hash: 3nl5qv911/+yjxEA/T9HcZALE9QrlfLC2lxmEUSY/D4=) 2: 7677A43AF8C511EBA498E771C4F9AE02.roa (hash: M2Is52Wa86uDs+DSqcpShPrDtjRDZ0zOUga6AJANsq8=) 3: B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa (hash: BWEm8D7sFlvcEVtQhqLjMN5S3jhBuXaJAzjBNUqp7Bk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5111 (0x13f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1FA8, serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Validity Not Before: May 12 16:57:50 2026 GMT Not After : May 19 16:57:50 2026 GMT Subject: CN=6a035c0f-fb5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:eb:ed:5f:27:11:e3:a8:43:12:35:1c:cd:38: 39:41:cc:77:e3:54:f3:52:e2:62:8a:1b:63:d2:00: 35:1c:12:d6:7a:af:94:61:e9:3f:bd:64:55:19:9f: 20:92:43:3c:72:84:43:02:0a:98:f0:b6:ef:47:bf: 20:51:9c:a1:75:48:0c:fe:09:59:36:ec:a4:9d:bd: db:b6:bf:f7:fa:80:b7:2f:c2:0f:cc:46:63:be:18: fa:b1:fd:5f:1b:11:80:cc:11:4f:ff:e9:85:a3:14: 9b:4b:33:aa:84:d2:ce:60:de:a5:bc:ed:e5:70:38: ac:c1:19:55:8b:66:ee:73:27:0d:48:d7:12:95:fd: e8:21:5a:51:bc:cf:9a:d8:c2:e5:48:c7:19:d2:43: 3e:ca:17:7c:6d:79:7b:e9:92:73:8e:bc:3f:31:b7: 64:26:0f:91:80:67:67:33:98:8e:d9:45:d2:30:44: bc:0a:b6:cf:fc:c3:90:57:82:0b:82:b7:84:54:d5: 9e:c9:db:29:2a:69:7c:97:31:c3:12:8d:00:9b:d3: e8:1a:a8:d9:f7:5c:64:20:6b:ba:79:6c:1e:58:05: 9a:b1:36:c6:86:e4:47:ba:33:53:97:f0:ae:0d:c4: 3d:b8:09:a8:a8:d8:78:06:3a:fa:63:19:f3:1a:25: ec:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:19:0A:AC:C1:E8:DC:39:B7:C7:6D:29:5B:60:BC:9B:D6:6D:61:EB X509v3 Authority Key Identifier: keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:6d:9c:fa:52:4b:20:4e:0b:b5:20:52:b8:dc:dd:c3:cf:0e: 11:e9:1f:00:f5:cf:ce:d7:c7:28:56:05:23:c8:aa:17:0a:ce: 2c:24:30:9f:e4:a5:db:e0:02:f2:53:3c:e2:f7:8e:fe:6c:e4: 97:dc:13:cc:7c:19:9d:be:14:8a:3a:89:06:59:6b:f2:41:04: 05:b7:43:a4:f8:cb:90:c2:cf:27:b2:87:6c:56:cd:75:84:c4: 42:7a:2c:80:73:45:37:7d:16:b1:62:e1:a2:c6:f9:c9:80:6c: 7f:48:71:9a:23:5e:76:de:9d:f3:92:0d:a1:b4:fd:0f:eb:cb: 3b:d4:d6:b2:de:23:c8:65:63:87:a0:fe:e7:c6:10:f7:a8:34: 5d:4a:bb:a0:8a:f9:40:40:28:75:a7:3b:fd:a1:1b:ef:3d:6b: ab:3b:4d:99:12:39:ee:f0:ad:75:65:ff:ab:ec:5e:ce:63:75: 9c:b6:9d:52:f8:c6:a7:bc:d1:11:f5:12:d2:2c:b7:fc:b2:2d: d1:85:20:fe:14:c7:57:1b:da:20:18:01:dd:73:6a:72:02:66: 71:91:54:e7:c6:98:58:21:93:e8:ba:51:d1:45:3b:7f:8a:52: 8b:c4:ba:97:c5:7c:64:a3:6d:c6:64:43:b0:d0:94:58:c7:3f: 5f:05:77:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGQTgxMTAvBgNVBAUTKDBERUVFRDEzNjIxNDNDMzYyRjI0Rjk3QzY3QzhFNEVD RTJDN0E1NjEwHhcNMjYwNTEyMTY1NzUwWhcNMjYwNTE5MTY1NzUwWjAYMRYwFAYD VQQDEw02YTAzNWMwZi1mYjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzuvtXycR46hDEjUczTg5Qcx341TzUuJiihtj0gA1HBLWeq+UYek/vWRVGZ8g kkM8coRDAgqY8LbvR78gUZyhdUgM/glZNuyknb3btr/3+oC3L8IPzEZjvhj6sf1f GxGAzBFP/+mFoxSbSzOqhNLOYN6lvO3lcDiswRlVi2bucycNSNcSlf3oIVpRvM+a 2MLlSMcZ0kM+yhd8bXl76ZJzjrw/MbdkJg+RgGdnM5iO2UXSMES8CrbP/MOQV4IL greEVNWeydspKml8lzHDEo0Am9PoGqjZ91xkIGu6eWweWAWasTbGhuRHujNTl/Cu DcQ9uAmoqNh4Bjr6YxnzGiXsCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJUZCqzB 6Nw5t8dtKVtgvJvWbWHrMB8GA1UdIwQYMBaAFA3u7RNiFDw2LyT5fGfI5Ozix6Vh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUZBOC9ERjQ3MDkwMkFG RDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBEWXZKUGw4WjhqazdPTEhw V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RlN3RFMklVUERZdkpQbDhaOGprN09MSHBXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUZBOC9ERjQ3MDkwMkFGRDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBE WXZKUGw4WjhqazdPTEhwV0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsG2c+lJLIE4LtSBSuNzdw88OEekfAPXPztfHKFYFI8iqFwrOLCQwn+Sl2+AC 8lM84veO/mzkl9wTzHwZnb4UijqJBllr8kEEBbdDpPjLkMLPJ7KHbFbNdYTEQnos gHNFN30WsWLhosb5yYBsf0hxmiNedt6d85INobT9D+vLO9TWst4jyGVjh6D+58YQ 96g0XUq7oIr5QEAodac7/aEb7z1rqztNmRI57vCtdWX/q+xezmN1nLadUvjGp7zR EfUS0iy3/LIt0YUg/hTHVxvaIBgB3XNqcgJmcZFU58aYWCGT6LpR0UU7f4pSi8S6 l8V8ZKNtxmRDsNCUWMc/XwV3ug== -----END CERTIFICATE-----Generated at Wed May 13 01:13:34 2026 by rpki-client