$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft File: aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft (raw, json) Hash identifier: IluVDyoYYkGaLFuxlhg8+EbKZ/IYRiUDmRhQ+QY8M6c= Subject key identifier: F2:6E:16:49:39:E8:23:86:F2:46:4F:5B:3E:00:5D:87:8E:AE:B2:41 Authority key identifier: 69:9F:55:44:D0:78:A9:0A:F5:AA:60:41:2E:1A:D3:F1:FB:DE:4C:D6 Certificate issuer: /CN=A91B9690/serialNumber=699F5544D078A90AF5AA60412E1AD3F1FBDE4CD6 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft Manifest number: 39 Signing time: Wed 13 May 2026 08:48:02 +0000 Manifest this update: Wed 13 May 2026 08:48:01 +0000 Manifest next update: Wed 20 May 2026 08:48:01 +0000 Files and hashes: 1: aZ9VRNB4qQr1qmBBLhrT8fveTNY.crl (hash: Da2p/NwvT/rQbSNAFFTDg5LbKWDoX64Tlw3sYplvlFA=) 2: 131D50EC03B511F1B33AD351023D8C67.roa (hash: xqonfLO8pGFGJqrL6Ubam0r8pA6SA2doL9TBCfFtqWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.crl rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 08:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9690, serialNumber=699F5544D078A90AF5AA60412E1AD3F1FBDE4CD6 Validity Not Before: May 13 08:48:01 2026 GMT Not After : May 20 08:48:01 2026 GMT Subject: CN=6a043ac1-671f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7b:7b:71:95:4f:33:60:56:36:78:66:f2:58: eb:bf:68:42:45:52:2c:08:e6:d3:51:3d:86:44:c7: e9:17:c2:7c:f9:75:39:fa:87:7b:30:b7:1a:a6:e4: a6:01:52:cb:8b:36:4f:36:25:f7:2e:ba:f6:e5:19: 6a:82:97:73:fd:83:c7:86:26:97:e7:ab:89:da:03: 11:42:3d:76:9a:77:0e:8d:89:fd:ed:d8:6e:de:05: ee:2b:d7:99:e3:ab:23:02:94:d1:f5:2b:77:66:0b: f6:34:4b:5b:f3:83:8a:05:c2:3d:f6:f7:94:bc:12: b4:68:df:9a:0a:ce:94:9a:9b:d1:95:c5:85:aa:2f: f9:75:56:91:38:07:67:ff:dd:31:74:92:82:ef:82: f0:0e:72:93:28:62:71:d5:84:f9:65:8a:69:07:11: 06:e1:1c:0f:9d:a6:7a:b9:f5:00:fa:ae:28:79:a4: d9:00:3c:7e:f7:4d:45:44:a4:b4:42:a0:40:b4:6e: ac:e0:a4:87:36:8c:27:06:ee:9f:93:52:30:e4:7c: 61:7c:bb:2f:31:49:6f:5a:11:87:b6:c4:c3:63:64: 14:66:13:a6:fc:91:6c:0c:d1:98:05:bd:5c:21:28: e2:ac:4b:59:f2:00:3f:a3:a8:26:5a:2d:f2:fe:29: 21:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:6E:16:49:39:E8:23:86:F2:46:4F:5B:3E:00:5D:87:8E:AE:B2:41 X509v3 Authority Key Identifier: keyid:69:9F:55:44:D0:78:A9:0A:F5:AA:60:41:2E:1A:D3:F1:FB:DE:4C:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9VRNB4qQr1qmBBLhrT8fveTNY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9690/A6694B3C03B311F1BED791F2413D8C67/aZ9VRNB4qQr1qmBBLhrT8fveTNY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:65:38:73:1f:f3:3f:b4:f2:b8:0f:1b:61:5d:95:71:8c:da: 3d:63:75:91:12:19:3f:3a:5b:6a:99:42:2c:8c:5b:5b:b2:39: c2:a2:49:ed:ce:4d:19:8c:ba:69:c0:5c:78:2e:98:bf:fd:19: d6:72:7c:a4:1a:5f:cc:60:8c:4c:64:8c:eb:c5:b7:5b:76:80: 91:b9:09:0c:e0:4a:ba:f7:31:57:e1:8c:4c:7d:41:29:42:05: 69:44:ef:2d:a5:68:2b:ea:8b:17:7d:df:51:da:31:8a:55:9a: 32:a9:54:1c:e0:a0:58:6e:d3:b5:04:67:db:1d:e8:e7:5f:04: 26:50:5f:d2:03:e3:09:8d:b1:b4:65:09:22:7b:e3:c9:52:84: 83:fd:bd:af:b0:60:f5:d1:cb:da:7e:ef:8b:87:fa:00:47:92: b1:ba:a3:f0:75:74:e5:b4:69:72:77:ad:8c:20:8f:2a:28:a8: 06:95:18:8f:41:0c:f3:b3:2b:28:72:80:17:0d:44:46:2f:65: e0:4f:ea:c4:5c:96:f9:40:93:3c:c9:b8:b2:b9:93:5c:4d:b8: 53:7f:0f:9b:2f:7e:50:46:ba:a9:40:fd:7b:f2:e8:6a:5a:7a: ba:82:87:a3:a7:f3:94:4c:30:eb:24:e9:b1:04:b5:93:0e:fb: 52:63:29:ea -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OTY5MDExMC8GA1UEBRMoNjk5RjU1NDREMDc4QTkwQUY1QUE2MDQxMkUxQUQzRjFG QkRFNENENjAeFw0yNjA1MTMwODQ4MDFaFw0yNjA1MjAwODQ4MDFaMBgxFjAUBgNV BAMTDTZhMDQzYWMxLTY3MWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCae3txlU8zYFY2eGbyWOu/aEJFUiwI5tNRPYZEx+kXwnz5dTn6h3swtxqm5KYB UsuLNk82JfcuuvblGWqCl3P9g8eGJpfnq4naAxFCPXaadw6Nif3t2G7eBe4r15nj qyMClNH1K3dmC/Y0S1vzg4oFwj3295S8ErRo35oKzpSam9GVxYWqL/l1VpE4B2f/ 3TF0koLvgvAOcpMoYnHVhPllimkHEQbhHA+dpnq59QD6rih5pNkAPH73TUVEpLRC oEC0bqzgpIc2jCcG7p+TUjDkfGF8uy8xSW9aEYe2xMNjZBRmE6b8kWwM0ZgFvVwh KOKsS1nyAD+jqCZaLfL+KSHlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8m4WSTno I4byRk9bPgBdh46uskEwHwYDVR0jBBgwFoAUaZ9VRNB4qQr1qmBBLhrT8fveTNYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI5NjkwL0E2Njk0QjNDMDNC MzExRjFCRUQ3OTFGMjQxM0Q4QzY3L2FaOVZSTkI0cVFyMXFtQkJMaHJUOGZ2ZVRO WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYVo5VlJOQjRxUXIxcW1CQkxoclQ4ZnZlVE5ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI5 NjkwL0E2Njk0QjNDMDNCMzExRjFCRUQ3OTFGMjQxM0Q4QzY3L2FaOVZSTkI0cVFy MXFtQkJMaHJUOGZ2ZVROWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAoZThzH/M/tPK4DxthXZVxjNo9Y3WREhk/OltqmUIsjFtbsjnCokntzk0ZjLpp wFx4Lpi//RnWcnykGl/MYIxMZIzrxbdbdoCRuQkM4Eq69zFX4YxMfUEpQgVpRO8t pWgr6osXfd9R2jGKVZoyqVQc4KBYbtO1BGfbHejnXwQmUF/SA+MJjbG0ZQkie+PJ UoSD/b2vsGD10cvafu+Lh/oAR5KxuqPwdXTltGlyd62MII8qKKgGlRiPQQzzsyso coAXDURGL2XgT+rEXJb5QJM8ybiyuZNcTbhTfw+bL35QRrqpQP178uhqWnq6goej p/OUTDDrJOmxBLWTDvtSYynq -----END CERTIFICATE-----Generated at Wed May 13 14:38:19 2026 by rpki-client