$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft File: D6tO-YKPSvJnwW2K1HEKjuybu64.mft (raw, json) Hash identifier: GEVAWNacWyJ27ga3Wp+3fpOXhlwuVfDjRzD8QxAKXHw= Subject key identifier: 51:16:32:87:D0:A0:26:79:AD:1E:06:7D:9C:DE:0E:7D:DA:37:29:C9 Authority key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE Certificate issuer: /CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Certificate serial: 023D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft Manifest number: 022C Signing time: Wed 13 May 2026 02:42:57 +0000 Manifest this update: Wed 13 May 2026 02:42:57 +0000 Manifest next update: Wed 20 May 2026 02:42:57 +0000 Files and hashes: 1: D6tO-YKPSvJnwW2K1HEKjuybu64.crl (hash: zwj1gDEThOhVZUDyokYqIxpdQkASO6e2VCmZmUQRbvw=) 2: A1C0742EFDF811EEA4D57274C4F9AE02.roa (hash: weDayyeYutvx0b8e1SLUbhE0mFruNtfvUzk0Kx4AkzY=) 3: A16366C6FDF811EEA4D57274C4F9AE02.roa (hash: d03oC9NyvqRx8U/l5SE7fqdhkjTewkYgCSF6lgvXCMc=) 4: A0DEDD52FDF811EEA4D57274C4F9AE02.roa (hash: hT0A2KRW/3QOLTyxBn8Un7aA6iluT3rc/l0TDSw8688=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:42:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEBE9, serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Validity Not Before: May 13 02:42:57 2026 GMT Not After : May 20 02:42:57 2026 GMT Subject: CN=6a03e531-a3da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:63:c6:5b:46:5a:6b:1c:af:49:00:9e:83:e6: 4b:d1:98:f1:d3:e4:a5:62:87:f6:3d:06:93:6d:41: 60:9c:e3:99:c0:98:56:db:24:e5:4a:da:b8:b4:f6: 59:43:ce:de:ac:94:04:9d:61:1a:ad:3b:cb:02:c6: c5:cc:27:8c:47:70:b2:81:9a:b3:c1:ad:42:da:7e: fa:99:f9:e2:88:77:9f:61:23:7a:bf:e2:91:3b:8a: 75:cc:d4:77:1e:b5:77:c6:7a:e1:c9:57:9a:31:8a: b8:1f:78:50:e6:b7:3b:52:a9:49:5a:42:87:f0:c9: c9:3a:a1:96:0f:52:9f:fa:2f:d1:7c:35:27:55:17: 88:0d:38:4f:2b:2d:79:b1:c2:ae:31:e1:ee:7d:71: de:2a:27:9b:75:09:98:7d:4e:c0:2b:0f:52:ea:24: 7d:4b:55:7c:69:3a:f2:a0:1b:4a:f0:1b:b9:6b:ab: 29:3a:2d:fd:aa:57:09:e7:cf:bc:72:db:99:9a:95: 4d:c9:7e:2f:28:28:46:6b:19:bd:25:07:3b:b1:7b: ed:8c:00:89:82:66:c6:50:be:29:83:b2:cc:97:6f: d3:94:01:97:37:ae:67:b0:5b:09:c7:59:e2:84:72: 61:7a:68:47:50:c6:59:67:eb:4d:0c:89:a0:b3:e5: 99:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:16:32:87:D0:A0:26:79:AD:1E:06:7D:9C:DE:0E:7D:DA:37:29:C9 X509v3 Authority Key Identifier: keyid:0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:6d:26:c4:e4:d2:27:48:66:ce:d4:4d:35:9b:d3:20:fb:9e: 8b:66:60:b3:00:ae:c0:24:08:b5:1f:e5:de:58:aa:bd:f4:c4: fd:2b:5e:36:f3:a8:9e:55:ef:3a:fc:f6:fd:5d:70:4f:74:73: e2:ec:b1:f8:43:84:1f:fd:ec:ee:1c:14:7a:a7:16:f5:54:45: 9f:35:95:bb:d5:cc:eb:0b:75:b6:5d:8c:4e:95:59:35:57:e0: 0e:c5:c4:d6:b6:dc:af:d2:ed:6a:2f:1e:83:85:ed:8d:d4:95: 8e:86:9f:44:80:80:e4:73:cb:51:40:52:a0:17:77:a0:25:2c: c9:3e:3d:31:68:67:aa:78:d9:a2:ad:d7:21:fe:47:bd:be:1b: 89:cc:25:bd:b4:82:56:9f:36:33:43:db:b6:a4:39:ac:b1:4b: 9a:46:b8:14:ac:06:29:33:90:ba:78:88:b0:c0:f2:64:27:11: 97:8b:fd:da:41:24:29:0d:73:60:0c:3d:c8:86:f2:4f:f0:cd: e0:bb:3a:d1:d4:be:59:0d:e3:bb:96:1e:d1:c7:ec:65:f2:73: 8c:87:46:b4:0b:ce:65:6f:86:f0:03:9f:b2:7d:d8:5f:b3:9d: 75:26:18:6e:fa:ec:10:4e:97:8f:4c:04:ed:a6:13:76:97:b6: 20:58:89:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCRTkxMTAvBgNVBAUTKDBGQUI0RUY5ODI4RjRBRjI2N0MxNkQ4QUQ0NzEwQThF RUM5QkJCQUUwHhcNMjYwNTEzMDI0MjU3WhcNMjYwNTIwMDI0MjU3WjAYMRYwFAYD VQQDEw02YTAzZTUzMS1hM2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWPGW0ZaaxyvSQCeg+ZL0Zjx0+SlYof2PQaTbUFgnOOZwJhW2yTlStq4tPZZ Q87erJQEnWEarTvLAsbFzCeMR3CygZqzwa1C2n76mfniiHefYSN6v+KRO4p1zNR3 HrV3xnrhyVeaMYq4H3hQ5rc7UqlJWkKH8MnJOqGWD1Kf+i/RfDUnVReIDThPKy15 scKuMeHufXHeKiebdQmYfU7AKw9S6iR9S1V8aTryoBtK8Bu5a6spOi39qlcJ58+8 ctuZmpVNyX4vKChGaxm9JQc7sXvtjACJgmbGUL4pg7LMl2/TlAGXN65nsFsJx1ni hHJhemhHUMZZZ+tNDImgs+WZ9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFEWMofQ oCZ5rR4GfZzeDn3aNynJMB8GA1UdIwQYMBaAFA+rTvmCj0ryZ8FtitRxCo7sm7uu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJFOS85NEM5Qjg3ODAw NUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2Sm53VzJLMUhFS2p1eWJ1 NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q2dE8tWUtQU3ZKbndXMksxSEVLanV5YnU2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUJFOS85NEM5Qjg3ODAwNUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2 Sm53VzJLMUhFS2p1eWJ1NjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaG0mxOTSJ0hmztRNNZvTIPuei2ZgswCuwCQItR/l3liqvfTE/SteNvOonlXv Ovz2/V1wT3Rz4uyx+EOEH/3s7hwUeqcW9VRFnzWVu9XM6wt1tl2MTpVZNVfgDsXE 1rbcr9Ltai8eg4XtjdSVjoafRICA5HPLUUBSoBd3oCUsyT49MWhnqnjZoq3XIf5H vb4bicwlvbSCVp82M0PbtqQ5rLFLmka4FKwGKTOQuniIsMDyZCcRl4v92kEkKQ1z YAw9yIbyT/DN4Ls60dS+WQ3ju5Ye0cfsZfJzjIdGtAvOZW+G8AOfsn3YX7OddSYY bvrsEE6Xj0wE7aYTdpe2IFiJWg== -----END CERTIFICATE-----Generated at Wed May 13 10:01:52 2026 by rpki-client