$ rpki-client -vvf rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft File: r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft (raw, json) Hash identifier: RUhxdVPmb+FTErot/7ZXP1iCUZMq8orc0ciaCTdyv/E= Subject key identifier: 7F:18:DE:16:62:FB:FF:6C:84:7C:AD:8A:C6:8C:A6:25:B7:72:F3:F6 Authority key identifier: AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A Certificate issuer: /CN=A91C064C/serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A Certificate serial: 01F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft Manifest number: 01E7 Signing time: Mon 11 May 2026 03:25:16 +0000 Manifest this update: Mon 11 May 2026 03:25:15 +0000 Manifest next update: Mon 18 May 2026 03:25:15 +0000 Files and hashes: 1: r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl (hash: JV91pxBBzh3+coJUPERnSxzvIQsrKrYBdldWZVN//bY=) 2: 583FA34E672E11EEB31AC02CC4F9AE02.roa (hash: hUBkgyOeFfHyusrHl5Ul+wkZZtAL0ghWlOjjJyvQSKc=) 3: 810B798472CC11EEA1A5574DC4F9AE02.roa (hash: WjgNxbDbrb74XmE1Jk0QE3DXYeIptytiMEIutAQrgFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 03:25:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 497 (0x1f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C064C, serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A Validity Not Before: May 11 03:25:15 2026 GMT Not After : May 18 03:25:15 2026 GMT Subject: CN=6a014c1c-f207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:17:69:e8:c4:3a:31:2d:43:ff:29:77:fb:79: ff:9e:4b:db:04:bf:7b:27:ad:e2:db:15:14:18:13: b4:66:7c:77:a7:8a:87:25:cb:44:f4:bb:f5:2f:e0: f3:4a:e3:97:a0:66:c0:63:f0:f0:a4:0a:37:f2:17: 1a:a4:d5:35:80:96:6b:0a:94:97:6e:41:65:32:b8: e4:e4:dd:75:1f:81:0e:d6:e5:61:a3:20:7c:70:c8: 38:a3:38:fc:12:73:43:aa:d6:96:92:7f:d1:0d:79: 05:77:ab:35:1a:91:b0:a5:02:28:00:a8:60:2a:5f: b5:f2:db:22:4f:e0:70:7c:a3:2a:08:6b:b7:5b:f9: a9:e2:d6:47:d9:99:75:1b:9e:1f:5f:a4:80:6a:65: f2:82:18:52:3a:93:4e:cb:5a:ec:a9:da:72:39:fd: 5f:39:c4:62:98:05:78:42:4e:95:7d:6c:1a:04:03: c6:bf:52:46:dd:12:2d:c0:14:ad:c3:ff:14:1a:20: 83:c4:f0:bf:d6:9a:d7:4b:70:3d:51:7e:46:55:6d: 46:65:d0:ae:92:af:6a:b4:18:9b:eb:06:bb:6f:95: 4e:3d:ee:4d:ad:9c:8e:27:5a:a0:ae:df:9b:89:c2: bb:fc:2e:03:ec:3b:88:25:4a:fe:05:cb:f1:56:2e: f5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:18:DE:16:62:FB:FF:6C:84:7C:AD:8A:C6:8C:A6:25:B7:72:F3:F6 X509v3 Authority Key Identifier: keyid:AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:df:25:83:9c:74:87:f6:76:d6:70:59:ab:3f:4f:77:90:39: 16:2e:4d:ed:9b:6e:8e:29:82:77:28:4c:73:a3:e2:d7:c5:90: 75:29:75:00:5e:74:73:85:ed:0e:de:e7:20:7d:be:3d:6f:71: 88:da:6f:41:90:32:d0:61:b8:36:e8:6e:a4:34:2e:8d:7c:b8: ce:03:f1:8e:b4:84:b2:40:d7:07:82:41:5f:a9:5a:bd:bb:8b: 85:50:1a:9b:55:e8:e8:d6:ae:e8:20:b5:e8:0d:1a:1f:3c:b1: 15:bb:51:06:22:d6:25:d1:30:8c:d4:bd:60:0e:e1:35:c4:26: 75:b9:51:dd:6e:9b:0c:02:c1:9e:ad:23:70:be:ac:3b:3b:16: e4:24:28:64:ae:7a:6d:30:2c:50:fc:f8:0d:fc:ad:4d:52:ed: 3a:7a:0c:2f:6f:60:62:a7:4f:df:c2:16:30:c8:53:c4:22:60: 85:92:b2:90:60:fe:b8:28:3a:2d:00:06:df:66:7e:6c:cb:27: cc:eb:18:81:bb:b9:a0:d1:a9:7c:86:65:ad:23:d9:1a:55:3b: e9:2a:a4:3d:87:88:4b:0f:04:89:fd:25:02:a0:ed:c8:d9:8e: 89:61:18:d4:b0:ef:e6:0b:56:f5:39:7a:cb:3c:dd:89:95:b8: 39:d0:82:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA2NEMxMTAvBgNVBAUTKEFGQzMxNzQ3NjdFNEVBRkM0REVFMEY0OTI1QTFDNjVD REM1OUZBMkEwHhcNMjYwNTExMDMyNTE1WhcNMjYwNTE4MDMyNTE1WjAYMRYwFAYD VQQDEw02YTAxNGMxYy1mMjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjxdp6MQ6MS1D/yl3+3n/nkvbBL97J63i2xUUGBO0Znx3p4qHJctE9Lv1L+Dz SuOXoGbAY/DwpAo38hcapNU1gJZrCpSXbkFlMrjk5N11H4EO1uVhoyB8cMg4ozj8 EnNDqtaWkn/RDXkFd6s1GpGwpQIoAKhgKl+18tsiT+BwfKMqCGu3W/mp4tZH2Zl1 G54fX6SAamXyghhSOpNOy1rsqdpyOf1fOcRimAV4Qk6VfWwaBAPGv1JG3RItwBSt w/8UGiCDxPC/1prXS3A9UX5GVW1GZdCukq9qtBib6wa7b5VOPe5NrZyOJ1qgrt+b icK7/C4D7DuIJUr+BcvxVi71wwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH8Y3hZi +/9shHytisaMpiW3cvP2MB8GA1UdIwQYMBaAFK/DF0dn5Or8Te4PSSWhxlzcWfoq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDY0Qy82ODNDOUQ5ODY3 MkQxMUVFOUM4MDlGMTJDNEY5QUUwMi9yOE1YUjJmazZ2eE43ZzlKSmFIR1hOeFot aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I4TVhSMmZrNnZ4TjdnOUpKYUhHWE54Wi1pby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDY0Qy82ODNDOUQ5ODY3MkQxMUVFOUM4MDlGMTJDNEY5QUUwMi9yOE1YUjJmazZ2 eE43ZzlKSmFIR1hOeFotaW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm98lg5x0h/Z21nBZqz9Pd5A5Fi5N7ZtujimCdyhMc6Pi18WQdSl1AF50c4Xt Dt7nIH2+PW9xiNpvQZAy0GG4NuhupDQujXy4zgPxjrSEskDXB4JBX6lavbuLhVAa m1Xo6Nau6CC16A0aHzyxFbtRBiLWJdEwjNS9YA7hNcQmdblR3W6bDALBnq0jcL6s OzsW5CQoZK56bTAsUPz4DfytTVLtOnoML29gYqdP38IWMMhTxCJghZKykGD+uCg6 LQAG32Z+bMsnzOsYgbu5oNGpfIZlrSPZGlU76SqkPYeISw8Eif0lAqDtyNmOiWEY 1LDv5gtW9Tl6yzzdiZW4OdCCYA== -----END CERTIFICATE-----Generated at Wed May 13 04:18:16 2026 by rpki-client