$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.mft File: MTDg-yrjCHHxtEx3xUL__P4dl0A.mft (raw, json) Hash identifier: 2h9/CqKsQGsypGgSA9EzntyIJK1RoPoV+rxktSXWXdk= Subject key identifier: 66:5C:05:52:B9:47:2D:2F:24:0A:15:74:E0:BD:65:5C:04:84:97:D3 Authority key identifier: 31:30:E0:FB:2A:E3:08:71:F1:B4:4C:77:C5:42:FF:FC:FE:1D:97:40 Certificate issuer: /CN=A91B8833/serialNumber=3130E0FB2AE30871F1B44C77C542FFFCFE1D9740 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MTDg-yrjCHHxtEx3xUL__P4dl0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.mft Manifest number: 23 Signing time: Mon 11 May 2026 09:01:34 +0000 Manifest this update: Mon 11 May 2026 09:01:33 +0000 Manifest next update: Mon 18 May 2026 09:01:33 +0000 Files and hashes: 1: MTDg-yrjCHHxtEx3xUL__P4dl0A.crl (hash: JFIr0Nf0D99v98/BgO2f1kGBX5zsPQo6ehlS4CcbI3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.crl rsync://rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MTDg-yrjCHHxtEx3xUL__P4dl0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 09:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8833, serialNumber=3130E0FB2AE30871F1B44C77C542FFFCFE1D9740 Validity Not Before: May 11 09:01:33 2026 GMT Not After : May 18 09:01:33 2026 GMT Subject: CN=6a019aed-1571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:84:89:9d:61:fe:c8:79:2e:3e:27:25:8b:70: b1:23:5f:da:3c:ac:7f:62:1a:4c:ce:44:33:da:ab: cb:b8:1f:7b:4e:77:c4:e4:49:df:e2:5c:4e:3f:41: e1:ba:d8:be:61:0c:6f:2b:de:9a:a3:4c:f4:74:6b: ab:b6:10:6b:9e:1a:33:7f:bc:b7:1c:87:47:a8:1f: 2c:76:2a:9b:cc:9d:2f:4a:b5:2e:3d:54:23:0e:03: 62:cc:e3:39:d7:40:d3:42:81:b3:12:c7:7c:cd:ec: 6b:4d:90:28:11:6f:5c:6c:e7:2f:16:1f:9f:3e:c4: c8:ae:c7:6f:ac:f3:d5:21:a1:93:5d:e2:88:c4:cd: 10:05:95:17:37:d2:e4:80:3a:fb:e6:d9:ab:1a:b8: f3:56:a9:79:fa:0d:31:29:86:77:94:ac:29:1e:fe: 93:70:09:a8:88:03:dd:51:2c:61:0b:5e:70:86:b8: 32:c8:63:4c:61:be:ab:c0:f5:3d:76:97:1e:41:4e: 15:2e:b2:4a:b8:b4:9d:94:ec:a7:de:69:ba:42:8f: a2:fb:3a:39:a4:87:0a:7b:5d:6c:fd:fe:ae:90:1d: c7:e9:b2:a0:31:d6:92:f0:ae:18:dc:7e:52:ad:5c: 1e:9d:28:91:77:a8:a3:bf:e1:b0:38:0b:67:c6:ea: 0e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:5C:05:52:B9:47:2D:2F:24:0A:15:74:E0:BD:65:5C:04:84:97:D3 X509v3 Authority Key Identifier: keyid:31:30:E0:FB:2A:E3:08:71:F1:B4:4C:77:C5:42:FF:FC:FE:1D:97:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MTDg-yrjCHHxtEx3xUL__P4dl0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:30:b4:c8:f1:94:df:5b:80:c2:00:48:ce:d9:0e:43:30:e3: cd:fc:c2:2a:ec:f4:93:6e:d0:ca:13:1c:25:bd:bc:ea:85:17: dd:f8:03:db:83:59:a9:d1:e0:cf:6d:a6:94:af:d2:a0:2f:87: 74:76:53:dd:b5:02:c7:e1:08:06:30:ea:80:9d:85:00:66:a5: 75:93:b0:7c:bf:f0:fe:f7:e4:95:bf:db:07:ba:cd:f0:dd:4c: 12:b8:17:61:ed:87:ec:ae:87:12:15:ef:5f:1e:0c:0a:8c:4c: 60:b8:d2:7d:2d:64:0b:e3:23:63:0e:0f:31:56:da:d0:15:bd: 38:48:fa:92:13:95:aa:10:2c:2a:9e:17:a8:f9:7e:8c:34:b9: b9:50:5c:e3:68:e9:21:b5:a9:5a:ef:09:46:6a:cd:24:7e:75: 57:ff:0c:43:e0:04:7b:cc:a9:d4:7c:54:be:3c:1c:28:6a:9f: 63:16:67:c0:90:d4:d1:09:87:91:2d:37:a6:92:58:81:44:a7: b9:39:7a:6e:a9:3c:85:cf:33:c4:98:ef:e7:90:b1:c9:7d:fa: 22:93:06:40:1d:fa:87:c5:e7:01:a9:f1:73:3b:94:e4:d1:97: 24:4e:be:99:82:50:a9:b4:fc:0f:e4:a2:ad:a8:ed:66:d7:5c: 62:fe:4b:1c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC ODgzMzExMC8GA1UEBRMoMzEzMEUwRkIyQUUzMDg3MUYxQjQ0Qzc3QzU0MkZGRkNG RTFEOTc0MDAeFw0yNjA1MTEwOTAxMzNaFw0yNjA1MTgwOTAxMzNaMBgxFjAUBgNV BAMTDTZhMDE5YWVkLTE1NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIhImdYf7IeS4+JyWLcLEjX9o8rH9iGkzORDPaq8u4H3tOd8TkSd/iXE4/QeG6 2L5hDG8r3pqjTPR0a6u2EGueGjN/vLcch0eoHyx2KpvMnS9KtS49VCMOA2LM4znX QNNCgbMSx3zN7GtNkCgRb1xs5y8WH58+xMiux2+s89UhoZNd4ojEzRAFlRc30uSA Ovvm2asauPNWqXn6DTEphneUrCke/pNwCaiIA91RLGELXnCGuDLIY0xhvqvA9T12 lx5BThUuskq4tJ2U7KfeabpCj6L7Ojmkhwp7XWz9/q6QHcfpsqAx1pLwrhjcflKt XB6dKJF3qKO/4bA4C2fG6g7DAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZlwFUrlH LS8kChV04L1lXASEl9MwHwYDVR0jBBgwFoAUMTDg+yrjCHHxtEx3xUL//P4dl0Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4ODMzL0UyMjEwQ0M0MUFC RTExRjFCNjlFQzE0MDM2M0Q4QzY3L01URGcteXJqQ0hIeHRFeDN4VUxfX1A0ZGww QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTVREZy15cmpDSEh4dEV4M3hVTF9fUDRkbDBBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 ODMzL0UyMjEwQ0M0MUFCRTExRjFCNjlFQzE0MDM2M0Q4QzY3L01URGcteXJqQ0hI eHRFeDN4VUxfX1A0ZGwwQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDbMLTI8ZTfW4DCAEjO2Q5DMOPN/MIq7PSTbtDKExwlvbzqhRfd+APbg1mp0eDP baaUr9KgL4d0dlPdtQLH4QgGMOqAnYUAZqV1k7B8v/D+9+SVv9sHus3w3UwSuBdh 7YfsrocSFe9fHgwKjExguNJ9LWQL4yNjDg8xVtrQFb04SPqSE5WqECwqnheo+X6M NLm5UFzjaOkhtala7wlGas0kfnVX/wxD4AR7zKnUfFS+PBwoap9jFmfAkNTRCYeR LTemkliBRKe5OXpuqTyFzzPEmO/nkLHJffoikwZAHfqHxecBqfFzO5Tk0ZckTr6Z glCptPwP5KKtqO1m11xi/ksc -----END CERTIFICATE-----Generated at Wed May 13 05:41:53 2026 by rpki-client