$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft File: CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft (raw, json) Hash identifier: 6YtQb3kP7VEJ9YYWmZ3krRAYuG+g/bVszImIezto4Aw= Subject key identifier: 87:A2:C9:30:66:D9:58:35:42:B9:F8:0B:9A:FE:0F:BC:9A:18:FA:13 Authority key identifier: 08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F Certificate issuer: /CN=A91B8D33/serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F Certificate serial: 0217 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft Manifest number: 0204 Signing time: Wed 13 May 2026 03:13:45 +0000 Manifest this update: Wed 13 May 2026 03:13:44 +0000 Manifest next update: Wed 20 May 2026 03:13:44 +0000 Files and hashes: 1: CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl (hash: gcvItakYTzbkm9ISgKtCV3rZrQUkMQRpSQin8khPk2w=) 2: C698E13ED1BD11EF9C00D867C4F9AE02.roa (hash: gcd1uORIwB588IprBp+ptXbcFbF7rS1AehPmjHP27TY=) 3: E62F8796D1BD11EFBCCC0B68C4F9AE02.roa (hash: C+zKPU7xS4ZOCm7vmpXaLXUhKiAqHKCATTbpyOC3iPI=) 4: 86D7DAE6D1C211EF9AA9410EC4F9AE02.roa (hash: w4ebJqxqcYTakZgYgczYh31d+UQ4emy9J0fYQLqlsn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8D33, serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F Validity Not Before: May 13 03:13:44 2026 GMT Not After : May 20 03:13:44 2026 GMT Subject: CN=6a03ec68-e9c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:01:78:86:18:b1:13:04:77:b1:4b:76:e4:ab: 85:e0:e9:84:f6:fa:4f:7a:26:2a:4a:1b:2b:55:ab: 48:ec:b6:48:c3:16:f7:a5:ce:47:e4:bf:4c:ac:43: 37:0a:e3:ec:07:33:91:6a:cf:95:ee:2d:8c:a6:a1: 33:60:38:c3:d3:5d:75:c7:97:d5:39:27:64:53:62: c9:9e:62:84:f6:23:c7:47:94:98:5f:f1:99:66:03: 44:17:55:9d:57:9c:ff:9f:51:52:2f:7b:d6:da:1b: 80:69:a3:76:66:57:c8:8e:b0:5f:33:91:21:69:e4: b5:1c:9e:5f:4a:ff:7d:c8:97:a7:86:6d:aa:d0:e0: 42:07:82:8f:1d:23:9e:68:7d:1a:36:d5:c3:a9:2d: ea:de:45:7d:b1:03:40:99:dd:ba:aa:b6:d2:17:d9: 22:d0:2f:9d:29:88:af:9d:4c:44:fe:32:a1:ad:fa: 4d:01:8a:c2:31:62:4b:c6:4c:9b:59:19:6d:1e:90: e2:d1:68:14:11:98:1a:6e:a1:14:60:68:bd:a3:cf: 17:3f:1f:70:85:17:a9:3c:8a:81:13:ef:93:2b:43: 24:62:fe:9a:1a:44:d8:89:67:ad:ea:a4:11:94:f8: d1:b2:7c:25:b1:98:ec:1c:3d:a9:75:52:ce:ec:65: 04:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A2:C9:30:66:D9:58:35:42:B9:F8:0B:9A:FE:0F:BC:9A:18:FA:13 X509v3 Authority Key Identifier: keyid:08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:17:92:dd:2a:9f:62:b8:9b:8c:69:9f:de:fd:6f:5a:04:aa: c2:c4:43:cb:29:0d:8a:b5:87:d0:15:94:d7:56:b0:7b:5f:67: 98:27:be:93:72:8e:c6:a0:da:45:de:71:48:be:28:d3:cd:06: 00:25:b9:3b:11:55:21:ac:ac:74:8b:cd:10:bb:23:e0:26:14: 2a:73:ef:bd:54:2f:39:d2:c6:31:65:56:e8:ab:83:d5:50:36: 2c:16:7c:46:e6:b8:a5:4c:d0:5d:92:73:dc:a2:33:a9:bd:cf: 83:5b:7e:67:3f:35:af:6e:c9:a8:4d:08:f1:f4:af:c1:cb:87: cd:65:89:99:3f:f7:23:07:32:34:d7:cd:30:4f:ab:41:71:ac: c2:3a:65:46:55:7e:1f:c6:d3:e9:07:96:78:64:be:c3:d8:af: ea:8d:77:21:b0:bc:64:6d:b1:ce:56:12:76:37:20:92:55:aa: 2b:39:b7:ae:37:b5:bd:74:a5:80:78:c0:ed:c8:d8:94:1b:76: b8:72:c1:d3:9e:e4:c9:df:96:8e:ee:61:7f:68:73:52:5f:98: 35:f4:b7:f1:54:0e:4a:8f:d2:dd:5e:b7:c5:fe:a9:24:3b:b4: a4:31:90:ab:34:f7:c7:a0:3b:6a:c7:9f:97:bb:8e:8f:ab:ed: ed:19:f9:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhEMzMxMTAvBgNVBAUTKDA4RDY4Q0Y0NTAwNzQ1Mzc1RkYyQ0M1ODRCQTVGQkU1 NzdCRUUzM0YwHhcNMjYwNTEzMDMxMzQ0WhcNMjYwNTIwMDMxMzQ0WjAYMRYwFAYD VQQDEw02YTAzZWM2OC1lOWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQF4hhixEwR3sUt25KuF4OmE9vpPeiYqShsrVatI7LZIwxb3pc5H5L9MrEM3 CuPsBzORas+V7i2MpqEzYDjD0111x5fVOSdkU2LJnmKE9iPHR5SYX/GZZgNEF1Wd V5z/n1FSL3vW2huAaaN2ZlfIjrBfM5EhaeS1HJ5fSv99yJenhm2q0OBCB4KPHSOe aH0aNtXDqS3q3kV9sQNAmd26qrbSF9ki0C+dKYivnUxE/jKhrfpNAYrCMWJLxkyb WRltHpDi0WgUEZgabqEUYGi9o88XPx9whRepPIqBE++TK0MkYv6aGkTYiWet6qQR lPjRsnwlsZjsHD2pdVLO7GUEfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIeiyTBm 2Vg1Qrn4C5r+D7yaGPoTMB8GA1UdIwQYMBaAFAjWjPRQB0U3X/LMWEul++V3vuM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEQzMy81OTYyNjcxMDQ3 NzcxMUVFQTZCRDUzN0VDNEY5QUUwMi9DTmFNOUZBSFJUZGY4c3hZUzZYNzVYZS00 ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOYU05RkFIUlRkZjhzeFlTNlg3NVhlLTR6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEQzMy81OTYyNjcxMDQ3NzcxMUVFQTZCRDUzN0VDNEY5QUUwMi9DTmFNOUZBSFJU ZGY4c3hZUzZYNzVYZS00ejgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtReS3SqfYribjGmf3v1vWgSqwsRDyykNirWH0BWU11awe19nmCe+k3KOxqDa Rd5xSL4o080GACW5OxFVIaysdIvNELsj4CYUKnPvvVQvOdLGMWVW6KuD1VA2LBZ8 Rua4pUzQXZJz3KIzqb3Pg1t+Zz81r27JqE0I8fSvwcuHzWWJmT/3IwcyNNfNME+r QXGswjplRlV+H8bT6QeWeGS+w9iv6o13IbC8ZG2xzlYSdjcgklWqKzm3rje1vXSl gHjA7cjYlBt2uHLB057kyd+Wju5hf2hzUl+YNfS38VQOSo/S3V63xf6pJDu0pDGQ qzT3x6A7asefl7uOj6vt7Rn5DQ== -----END CERTIFICATE-----Generated at Wed May 13 06:46:34 2026 by rpki-client