$ rpki-client -vvf rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft File: PykJw_UywAsCV7klbHbroxTc0A8.mft (raw, json) Hash identifier: advgHMzb4JoRgMkGKCdxwHWMTfoJzfIA+XMXzhscqto= Subject key identifier: 0A:FA:8D:C7:8B:17:F6:B2:28:51:28:11:F5:03:05:F4:FA:E1:80:3B Authority key identifier: 3F:29:09:C3:F5:32:C0:0B:02:57:B9:25:6C:76:EB:A3:14:DC:D0:0F Certificate issuer: /CN=A91C71A5/serialNumber=3F2909C3F532C00B0257B9256C76EBA314DCD00F Certificate serial: 0349 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft Manifest number: 0339 Signing time: Mon 11 May 2026 01:08:36 +0000 Manifest this update: Mon 11 May 2026 01:08:36 +0000 Manifest next update: Mon 18 May 2026 01:08:36 +0000 Files and hashes: 1: PykJw_UywAsCV7klbHbroxTc0A8.crl (hash: /1QgWV2VihOK3P6bv4tyanyw/l2a4A47BxRH4wui6oo=) 2: 99A7637060B311EEBA329E54C4F9AE02.roa (hash: O3Ls+9YBYFMKkyDDzAoAnYOjitWoJ58mnyLKpWOVBLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.crl rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 01:08:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 841 (0x349) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C71A5, serialNumber=3F2909C3F532C00B0257B9256C76EBA314DCD00F Validity Not Before: May 11 01:08:36 2026 GMT Not After : May 18 01:08:36 2026 GMT Subject: CN=6a012c14-9091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f2:28:98:03:32:cf:36:5f:ae:a2:e3:9e:04: 4e:f0:d3:a5:5c:f1:70:ad:47:4a:92:03:aa:5e:6b: d8:d6:f5:5c:fa:65:5e:0e:dd:35:6c:86:c6:50:3d: aa:a6:3d:c8:8e:dc:40:5d:fa:8c:26:7e:e6:1b:d8: 5a:9d:2f:64:ed:72:2d:af:00:6b:1a:8a:3f:56:d7: e0:e0:5a:06:c5:ed:f1:8c:87:d2:3a:d5:46:1f:a0: 81:7d:33:78:31:51:b6:78:e3:c6:1e:3e:14:de:66: 36:88:02:61:6c:9d:56:bc:1f:b9:10:11:ff:b6:bc: 80:1d:07:19:49:f4:9f:59:7a:45:93:2e:08:cf:04: be:d7:5a:c7:0b:25:41:6c:b4:1c:5d:ae:32:e6:cf: b9:02:37:32:56:79:c1:44:e8:30:bb:97:87:84:be: 83:11:ca:ba:72:01:90:ae:26:de:2e:5b:b9:2a:88: 5c:ce:cf:a3:8b:5d:1e:c3:d8:03:7e:de:ff:9a:6e: 72:2b:08:b9:b3:94:73:f9:90:c3:48:58:11:ba:fd: ee:79:1f:ab:c5:44:01:f7:91:e9:56:13:87:d1:ea: 69:c8:71:13:98:4c:06:09:75:20:7e:0d:fd:78:19: 84:14:c0:17:be:d3:46:0d:2f:df:b4:c5:37:5e:21: 4a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:FA:8D:C7:8B:17:F6:B2:28:51:28:11:F5:03:05:F4:FA:E1:80:3B X509v3 Authority Key Identifier: keyid:3F:29:09:C3:F5:32:C0:0B:02:57:B9:25:6C:76:EB:A3:14:DC:D0:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:01:b4:87:a1:d1:f7:dd:14:48:07:31:7e:eb:10:8b:b5:09: 72:51:db:86:e6:1d:f4:56:de:25:e5:08:d5:57:b3:57:54:e1: a3:fa:12:3f:d6:54:94:91:bd:12:81:5f:d7:97:91:99:4c:a1: 4a:b0:85:c8:7a:79:e7:7f:6b:24:d7:a6:7c:72:33:8f:8b:e3: 05:2d:a8:06:ad:e2:9a:a0:57:f7:84:e4:32:40:37:6d:71:75: da:7c:51:99:b1:cd:f8:2f:2a:f3:ea:34:e8:c1:76:ce:33:c5: 6f:af:91:0d:f6:6f:17:58:80:80:d6:18:fd:df:e4:3e:f3:90: f8:20:78:52:b9:4d:e5:e7:8c:4e:51:b7:d7:b8:c7:82:8b:c9: 66:79:96:20:75:06:2d:c9:d0:d0:a4:e1:0e:88:73:40:46:c7: eb:08:c5:f9:d0:7f:7a:be:bb:4d:d3:1a:bf:0d:14:6b:bb:5a: 63:f1:61:95:bd:4f:1e:7f:5a:63:46:a5:80:58:a9:fb:9d:21: c5:93:a7:16:1f:5e:ef:8c:ac:c6:48:c7:49:81:15:6b:8c:4b: af:12:30:d1:7f:1c:5c:fd:4f:e5:14:53:3a:b0:ef:9d:5b:f5: eb:74:0c:1e:81:f0:d8:85:8a:5d:fd:2c:49:4e:ec:ec:f3:5b: 63:d0:1f:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcxQTUxMTAvBgNVBAUTKDNGMjkwOUMzRjUzMkMwMEIwMjU3QjkyNTZDNzZFQkEz MTREQ0QwMEYwHhcNMjYwNTExMDEwODM2WhcNMjYwNTE4MDEwODM2WjAYMRYwFAYD VQQDEw02YTAxMmMxNC05MDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/IomAMyzzZfrqLjngRO8NOlXPFwrUdKkgOqXmvY1vVc+mVeDt01bIbGUD2q pj3IjtxAXfqMJn7mG9hanS9k7XItrwBrGoo/Vtfg4FoGxe3xjIfSOtVGH6CBfTN4 MVG2eOPGHj4U3mY2iAJhbJ1WvB+5EBH/tryAHQcZSfSfWXpFky4IzwS+11rHCyVB bLQcXa4y5s+5AjcyVnnBROgwu5eHhL6DEcq6cgGQribeLlu5Kohczs+ji10ew9gD ft7/mm5yKwi5s5Rz+ZDDSFgRuv3ueR+rxUQB95HpVhOH0eppyHETmEwGCXUgfg39 eBmEFMAXvtNGDS/ftMU3XiFK7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAr6jceL F/ayKFEoEfUDBfT64YA7MB8GA1UdIwQYMBaAFD8pCcP1MsALAle5JWx266MU3NAP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzFBNS8zQkZBMjgzNDBB ODMxMUVEOEQ2RDgzMkFDNEY5QUUwMi9QeWtKd19VeXdBc0NWN2tsYkhicm94VGMw QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B5a0p3X1V5d0FzQ1Y3a2xiSGJyb3hUYzBBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzFBNS8zQkZBMjgzNDBBODMxMUVEOEQ2RDgzMkFDNEY5QUUwMi9QeWtKd19VeXdB c0NWN2tsYkhicm94VGMwQTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATAG0h6HR990USAcxfusQi7UJclHbhuYd9FbeJeUI1VezV1Tho/oSP9ZUlJG9 EoFf15eRmUyhSrCFyHp5539rJNemfHIzj4vjBS2oBq3imqBX94TkMkA3bXF12nxR mbHN+C8q8+o06MF2zjPFb6+RDfZvF1iAgNYY/d/kPvOQ+CB4UrlN5eeMTlG317jH govJZnmWIHUGLcnQ0KThDohzQEbH6wjF+dB/er67TdMavw0Ua7taY/Fhlb1PHn9a Y0algFip+50hxZOnFh9e74ysxkjHSYEVa4xLrxIw0X8cXP1P5RRTOrDvnVv163QM HoHw2IWKXf0sSU7s7PNbY9Af1A== -----END CERTIFICATE-----Generated at Wed May 13 02:23:42 2026 by rpki-client