$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7425/5267DE6E430411F1BAAFDF3B9A833773/dsy3G8ONvsj1s1rnufdOprg25Qg.mft File: dsy3G8ONvsj1s1rnufdOprg25Qg.mft (raw, json) Hash identifier: xeWKesbad3cpEX+Rb+ix+O6o9P2umCqAcreRzJlL71Y= Subject key identifier: 3B:7C:64:2C:37:64:CA:F9:A6:97:6B:44:AC:98:06:76:7F:4C:78:ED Authority key identifier: 76:CC:B7:1B:C3:8D:BE:C8:F5:B3:5A:E7:B9:F7:4E:A6:B8:36:E5:08 Certificate issuer: /CN=A91C7425/serialNumber=76CCB71BC38DBEC8F5B35AE7B9F74EA6B836E508 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsy3G8ONvsj1s1rnufdOprg25Qg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7425/5267DE6E430411F1BAAFDF3B9A833773/dsy3G8ONvsj1s1rnufdOprg25Qg.mft Manifest number: 0A Signing time: Mon 11 May 2026 09:21:49 +0000 Manifest this update: Mon 11 May 2026 09:21:48 +0000 Manifest next update: Mon 18 May 2026 09:21:48 +0000 Files and hashes: 1: dsy3G8ONvsj1s1rnufdOprg25Qg.crl (hash: MHbWmwRNSfC70AhgESaRW8dthG89+YbF+X+ff7A2Vc8=) 2: 8A11628E49A511F1AC5B8E7699833773.roa (hash: niJhKfV+ouFK6sQjUZt4n5DTxe39SMX+kn/MPEsu8wg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7425/5267DE6E430411F1BAAFDF3B9A833773/dsy3G8ONvsj1s1rnufdOprg25Qg.crl rsync://rpki.apnic.net/member_repository/A91C7425/5267DE6E430411F1BAAFDF3B9A833773/dsy3G8ONvsj1s1rnufdOprg25Qg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsy3G8ONvsj1s1rnufdOprg25Qg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 09:21:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7425, serialNumber=76CCB71BC38DBEC8F5B35AE7B9F74EA6B836E508 Validity Not Before: May 11 09:21:48 2026 GMT Not After : May 18 09:21:48 2026 GMT Subject: CN=6a019fac-61c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f6:64:4a:92:4e:0a:4f:64:c3:17:89:f4:da: 27:bb:59:cc:a7:a4:0b:98:8c:0b:d6:da:9e:ed:ee: 88:1f:9d:a6:83:84:b9:94:67:83:68:2e:29:e3:e1: 90:ca:f1:ca:1c:63:d3:ed:a2:2a:ef:e5:a9:45:61: 3b:a5:cc:57:22:8f:77:e7:59:37:ff:e8:f7:57:27: 44:7f:aa:f4:54:a2:0c:68:7e:4c:e7:6c:b3:5a:9f: cf:46:05:cb:8e:cb:e8:0f:17:b2:0a:52:0f:94:d0: 80:4b:29:a3:cc:c1:ae:10:d8:7f:4d:00:94:d3:4e: e8:88:2d:c2:bb:72:ee:23:5b:9c:df:84:ae:53:ee: 3b:20:0c:e1:eb:32:e6:b7:76:af:1c:45:ec:90:36: 25:30:06:dd:d8:89:29:7b:d4:94:35:80:b2:2c:5a: 33:d4:8a:c1:b3:c6:b6:1f:06:35:21:1f:9d:c8:39: 60:a5:f7:be:84:59:50:3e:15:c7:cf:11:4d:65:2b: f8:29:b8:b0:c2:01:5f:6c:85:10:40:2b:32:6b:bf: ed:58:08:b3:ac:24:f2:71:cd:e3:6c:e9:1c:ca:77: d2:21:56:fe:8c:e6:3f:01:aa:ee:54:01:9d:e1:31: 4a:41:dd:b9:44:0d:47:36:83:6c:dd:bd:08:23:78: b2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:7C:64:2C:37:64:CA:F9:A6:97:6B:44:AC:98:06:76:7F:4C:78:ED X509v3 Authority Key Identifier: keyid:76:CC:B7:1B:C3:8D:BE:C8:F5:B3:5A:E7:B9:F7:4E:A6:B8:36:E5:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7425/5267DE6E430411F1BAAFDF3B9A833773/dsy3G8ONvsj1s1rnufdOprg25Qg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsy3G8ONvsj1s1rnufdOprg25Qg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7425/5267DE6E430411F1BAAFDF3B9A833773/dsy3G8ONvsj1s1rnufdOprg25Qg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:19:56:04:90:2b:36:77:2a:89:93:12:8d:31:52:bf:60:82: 90:4c:21:87:c3:80:9b:b3:52:52:63:2b:11:8f:43:5e:c0:bf: 7e:20:eb:e9:7d:19:b7:36:db:3a:bc:ee:10:5b:fe:a6:e1:f2: e3:ea:df:c8:da:24:34:f3:b6:93:40:8a:8e:8d:46:13:db:46: 27:ed:2d:fd:ba:4e:84:10:29:4b:d5:eb:fb:be:a2:c2:0c:5f: c3:73:c3:14:a9:f4:4d:03:1b:2a:6c:d2:9f:e7:79:97:f8:6b: 9a:81:e4:df:52:42:99:64:9b:32:1c:62:5f:32:53:e3:83:28: c2:be:b6:70:41:19:27:c9:c7:4c:88:17:0b:fb:fc:8f:85:1a: 2c:b5:15:1b:79:22:c1:1b:ef:cb:cb:04:cb:74:a2:ae:75:ab: 2d:e7:68:d8:d4:e6:1a:0f:4e:17:31:a5:37:61:6e:f9:af:ca: ae:cf:ab:91:31:4a:2d:96:d5:b0:e8:10:f0:f7:ca:b7:cd:1e: 43:3c:92:21:a6:eb:bf:1b:ed:44:43:fa:3c:bb:79:72:41:4d: 9d:2a:ce:b7:d4:94:6e:ab:b7:e5:3d:38:c9:18:51:ae:f4:99: 6c:e3:83:08:98:c9:fa:5e:a0:3c:ec:f1:2f:0d:28:a2:8d:62: 82:f4:c1:32 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzQyNTExMC8GA1UEBRMoNzZDQ0I3MUJDMzhEQkVDOEY1QjM1QUU3QjlGNzRFQTZC ODM2RTUwODAeFw0yNjA1MTEwOTIxNDhaFw0yNjA1MTgwOTIxNDhaMBgxFjAUBgNV BAMTDTZhMDE5ZmFjLTYxYzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCr9mRKkk4KT2TDF4n02ie7WcynpAuYjAvW2p7t7ogfnaaDhLmUZ4NoLinj4ZDK 8cocY9Ptoirv5alFYTulzFcij3fnWTf/6PdXJ0R/qvRUogxofkznbLNan89GBcuO y+gPF7IKUg+U0IBLKaPMwa4Q2H9NAJTTTuiILcK7cu4jW5zfhK5T7jsgDOHrMua3 dq8cReyQNiUwBt3YiSl71JQ1gLIsWjPUisGzxrYfBjUhH53IOWCl976EWVA+FcfP EU1lK/gpuLDCAV9shRBAKzJrv+1YCLOsJPJxzeNs6RzKd9IhVv6M5j8Bqu5UAZ3h MUpB3blEDUc2g2zdvQgjeLL9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUO3xkLDdk yvmml2tErJgGdn9MeO0wHwYDVR0jBBgwFoAUdsy3G8ONvsj1s1rnufdOprg25Qgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3NDI1LzUyNjdERTZFNDMw NDExRjFCQUFGREYzQjlBODMzNzczL2RzeTNHOE9OdnNqMXMxcm51ZmRPcHJnMjVR Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZHN5M0c4T052c2oxczFybnVmZE9wcmcyNVFnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 NDI1LzUyNjdERTZFNDMwNDExRjFCQUFGREYzQjlBODMzNzczL2RzeTNHOE9OdnNq MXMxcm51ZmRPcHJnMjVRZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB9GVYEkCs2dyqJkxKNMVK/YIKQTCGHw4Cbs1JSYysRj0NewL9+IOvpfRm3Nts6 vO4QW/6m4fLj6t/I2iQ087aTQIqOjUYT20Yn7S39uk6EEClL1ev7vqLCDF/Dc8MU qfRNAxsqbNKf53mX+GuageTfUkKZZJsyHGJfMlPjgyjCvrZwQRknycdMiBcL+/yP hRostRUbeSLBG+/LywTLdKKudast52jY1OYaD04XMaU3YW75r8quz6uRMUotltWw 6BDw98q3zR5DPJIhpuu/G+1EQ/o8u3lyQU2dKs631JRuq7flPTjJGFGu9Jls44MI mMn6XqA87PEvDSiijWKC9MEy -----END CERTIFICATE-----Generated at Wed May 13 10:20:38 2026 by rpki-client