$ rpki-client -vvf rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft File: 2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft (raw, json) Hash identifier: UoQy/XGgm0lKxMTnLOwnxcdkt0ZoszLlNmxXQAGXSuE= Subject key identifier: 72:9B:7F:60:1C:BF:15:41:C5:76:AC:57:02:64:76:DC:0B:91:D4:CD Authority key identifier: D8:07:38:03:EE:CF:F4:F1:9E:FF:99:57:C7:14:7A:FC:CA:A0:19:F5 Certificate issuer: /CN=A91C08C0/serialNumber=D8073803EECFF4F19EFF9957C7147AFCCAA019F5 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft Manifest number: 25 Signing time: Wed 13 May 2026 09:00:50 +0000 Manifest this update: Wed 13 May 2026 09:00:50 +0000 Manifest next update: Wed 20 May 2026 09:00:50 +0000 Files and hashes: 1: 2Ac4A-7P9PGe_5lXxxR6_MqgGfU.crl (hash: TBexv3fbWxT6SAH7zo8X5nitC3kEnHLUsS/vFO5Ssqw=) 2: 265F78EA49D011F1B6650068A7833773.roa (hash: Pb8GRg+2QK/pDLdjYcRQRnOk0/4KIoPV1es6I+jWSI4=) 3: 7E0A2AD822E611F1A3C138F6CC833773.roa (hash: z0RXPVTLkvsIzF0pOhO2UmlkU0gKTzJ6WJ2WACgPdDM=) 4: EA9A11EA214C11F1A100880B383D8C67.roa (hash: eeD6uCbIvlHKsgpeKIC0IXAVj8jY3ITgO5O6p0iRhic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.crl rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 09:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C08C0, serialNumber=D8073803EECFF4F19EFF9957C7147AFCCAA019F5 Validity Not Before: May 13 09:00:50 2026 GMT Not After : May 20 09:00:50 2026 GMT Subject: CN=6a043dc2-8809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d2:fb:d7:3e:9f:0e:fb:67:61:aa:85:9d:b1: 46:21:8d:dc:ee:8b:63:a1:9c:5a:1f:02:4a:42:d7: 0f:54:8e:cb:28:2c:90:4b:55:16:b7:35:c3:f4:fc: 9b:c8:53:a3:43:63:61:a0:c3:d1:b9:d8:8d:70:1c: 8a:a3:ed:a1:ca:31:fe:2a:14:a9:2d:a7:ec:da:9c: e3:af:d4:d2:78:b1:30:cf:99:1a:96:a9:b3:77:8c: 7a:dd:77:c4:88:5d:44:8a:3a:53:df:6d:31:76:8a: f8:34:d9:ba:b7:30:63:2e:09:26:78:19:99:5b:d3: bf:2b:4b:98:23:92:bf:e8:11:71:7e:2f:11:06:29: 24:51:0a:bc:d8:fe:1e:13:c1:b4:ac:0c:aa:6a:70: 45:3b:47:6d:ce:2f:6f:6e:8d:e4:81:8c:fc:99:ca: 1a:58:be:1a:95:8c:f1:3d:7d:2a:21:af:e7:6e:05: bf:e4:aa:bb:f2:c7:c6:bb:b9:6f:68:5c:97:25:06: fc:3c:c8:e5:f4:d7:c7:0d:a3:f9:1a:12:22:af:9f: b8:bf:90:db:87:fb:8a:d7:a5:db:78:4f:cf:34:73: 4a:48:f7:52:e2:5d:35:6e:70:bc:af:33:8f:a5:1c: 27:ee:d9:2d:05:62:a6:8e:f3:f1:34:10:f3:27:82: 56:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:9B:7F:60:1C:BF:15:41:C5:76:AC:57:02:64:76:DC:0B:91:D4:CD X509v3 Authority Key Identifier: keyid:D8:07:38:03:EE:CF:F4:F1:9E:FF:99:57:C7:14:7A:FC:CA:A0:19:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:8e:2f:ea:22:51:f7:9a:73:21:db:33:34:1b:df:c2:94:29: 10:e3:69:6b:ab:42:00:64:17:e6:4a:62:4f:1a:2e:83:5e:ab: 5e:b0:42:e1:77:74:57:ed:70:b9:b0:1b:c6:f4:78:6d:43:c3: d0:1c:6d:5c:3c:8d:68:1a:22:d5:19:28:1c:4d:ea:cb:e9:a8: 6c:da:6f:99:6c:9a:33:02:46:51:44:80:64:60:d7:7e:53:f6: e2:eb:02:54:7f:12:06:fe:f6:47:34:f2:3f:a8:bc:d1:c0:0f: c5:e5:ef:f4:de:c8:94:f6:6a:d7:30:1f:c4:8e:8a:ab:fd:30: c2:f1:cf:c0:47:bf:46:39:05:6a:fc:3e:2a:7e:06:0a:b0:09: 54:c3:15:55:a6:48:88:65:b8:1d:c7:a1:f2:80:5e:fd:7c:fb: e7:60:30:1f:d5:7d:0a:00:6f:bc:b6:f1:61:69:5e:5c:37:d9: f7:52:07:e7:4a:f0:71:3f:20:b1:b2:28:59:8a:38:c8:ab:4e: a9:be:52:71:09:44:6b:0d:e8:da:50:47:28:2a:e8:5d:87:1b: c7:b5:ab:fe:c8:00:28:c5:63:73:e9:03:41:2e:4c:b5:6e:29: b7:a8:8f:5f:4e:6f:75:77:6d:0c:e3:56:78:f3:4e:23:b1:89: cd:af:f9:5d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MDhDMDExMC8GA1UEBRMoRDgwNzM4MDNFRUNGRjRGMTlFRkY5OTU3QzcxNDdBRkND QUEwMTlGNTAeFw0yNjA1MTMwOTAwNTBaFw0yNjA1MjAwOTAwNTBaMBgxFjAUBgNV BAMTDTZhMDQzZGMyLTg4MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/0vvXPp8O+2dhqoWdsUYhjdzui2OhnFofAkpC1w9UjssoLJBLVRa3NcP0/JvI U6NDY2Ggw9G52I1wHIqj7aHKMf4qFKktp+zanOOv1NJ4sTDPmRqWqbN3jHrdd8SI XUSKOlPfbTF2ivg02bq3MGMuCSZ4GZlb078rS5gjkr/oEXF+LxEGKSRRCrzY/h4T wbSsDKpqcEU7R23OL29ujeSBjPyZyhpYvhqVjPE9fSohr+duBb/kqrvyx8a7uW9o XJclBvw8yOX018cNo/kaEiKvn7i/kNuH+4rXpdt4T880c0pI91LiXTVucLyvM4+l HCfu2S0FYqaO8/E0EPMnglaPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUcpt/YBy/ FUHFdqxXAmR23AuR1M0wHwYDVR0jBBgwFoAU2Ac4A+7P9PGe/5lXxxR6/MqgGfUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwOEMwLzc5NkFBMTQyMjE0 QzExRjFBMzZDQTFBNTM3M0Q4QzY3LzJBYzRBLTdQOVBHZV81bFh4eFI2X01xZ0dm VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMkFjNEEtN1A5UEdlXzVsWHh4UjZfTXFnR2ZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMw OEMwLzc5NkFBMTQyMjE0QzExRjFBMzZDQTFBNTM3M0Q4QzY3LzJBYzRBLTdQOVBH ZV81bFh4eFI2X01xZ0dmVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA/ji/qIlH3mnMh2zM0G9/ClCkQ42lrq0IAZBfmSmJPGi6DXqtesELhd3RX7XC5 sBvG9HhtQ8PQHG1cPI1oGiLVGSgcTerL6ahs2m+ZbJozAkZRRIBkYNd+U/bi6wJU fxIG/vZHNPI/qLzRwA/F5e/03siU9mrXMB/Ejoqr/TDC8c/AR79GOQVq/D4qfgYK sAlUwxVVpkiIZbgdx6HygF79fPvnYDAf1X0KAG+8tvFhaV5cN9n3UgfnSvBxPyCx sihZijjIq06pvlJxCURrDejaUEcoKuhdhxvHtav+yAAoxWNz6QNBLky1bim3qI9f Tm91d20M41Z4804jsYnNr/ld -----END CERTIFICATE-----Generated at Wed May 13 14:12:46 2026 by rpki-client