$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft File: m505clsn1CAoE4UWNJL_dfFRE9o.mft (raw, json) Hash identifier: 8h7kioXOLioNmf47u2QU4lklfYh/5xED1yNbHvVpIPk= Subject key identifier: 8E:90:1C:CD:AF:6D:54:32:40:18:BA:63:41:39:BC:09:26:1E:51:27 Authority key identifier: 9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA Certificate issuer: /CN=A91C7EF2/serialNumber=9B9D39725B27D420281385163492FF75F15113DA Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft Manifest number: AF Signing time: Mon 11 May 2026 07:33:34 +0000 Manifest this update: Mon 11 May 2026 07:33:34 +0000 Manifest next update: Mon 18 May 2026 07:33:34 +0000 Files and hashes: 1: m505clsn1CAoE4UWNJL_dfFRE9o.crl (hash: sovg2tSUZ7AuUcIPx+8JO9OOPmD83BbVrMJzd7h/X3o=) 2: C4BE139C1AE211F1803B92B5413D8C67.roa (hash: VzCemJ05XamlG2jC7L0XFu1bU7etE5348AhdfPH2ivQ=) 3: 14201780319711F18CC67F1EAC833773.roa (hash: rmQmGHW+PcZ7eabQimG8Wo2e37zYIDwJm/8G4jj1kT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.crl rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 07:33:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7EF2, serialNumber=9B9D39725B27D420281385163492FF75F15113DA Validity Not Before: May 11 07:33:34 2026 GMT Not After : May 18 07:33:34 2026 GMT Subject: CN=6a01864e-68da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f7:79:af:f7:a1:0a:1f:1f:b8:6b:67:81:ed: 34:f4:3b:03:a0:fa:4b:19:a7:38:91:e9:da:cf:c5: a6:00:32:ed:ec:95:76:45:d9:c1:8c:19:e4:69:74: 3c:f2:a7:0f:15:57:16:34:2a:50:3b:3c:28:60:1a: 9f:8d:11:61:db:14:94:d7:b5:42:60:38:e3:49:2c: e1:cc:33:d9:31:cd:07:8c:e4:e8:2d:ec:4f:d0:fe: 94:6e:b5:76:3a:3e:05:62:56:c8:be:9e:bb:5a:09: ec:b9:bc:c1:5d:34:b3:95:d6:8d:67:92:3b:44:ee: b2:70:cc:6c:29:96:07:1b:ac:1d:1c:5f:bb:05:cd: 2b:05:97:9a:99:dc:be:5a:1a:d4:0e:34:a3:71:49: 6b:b3:2b:98:02:a6:55:3d:f1:57:ef:36:61:2f:4f: 6c:a8:bc:0c:d3:6d:5e:68:8d:7d:06:16:84:9a:11: f5:30:5b:20:3f:ef:c5:d5:01:6b:a0:36:1c:8d:4c: 44:d9:97:d5:a1:98:1a:70:5c:3a:95:71:97:aa:0e: 0a:56:1e:e4:ca:b3:ec:7f:95:56:c1:ae:e5:d8:22: 83:f3:ed:49:04:46:01:d6:67:b4:63:40:06:12:70: 40:d4:ab:0b:ba:b9:11:a9:2f:27:3b:5a:60:2a:9c: 11:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:90:1C:CD:AF:6D:54:32:40:18:BA:63:41:39:BC:09:26:1E:51:27 X509v3 Authority Key Identifier: keyid:9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:d1:10:52:e4:6a:a2:1e:fe:f2:9d:6d:f5:5f:40:1c:c3:75: 0c:4b:ff:56:16:21:fa:55:ab:85:ac:d6:e6:81:10:cb:19:43: 04:86:cd:4d:43:fb:d0:59:6e:de:88:bf:5e:fa:72:92:e8:a2: 42:63:10:f8:c2:0a:f6:6b:78:1b:56:9c:74:ef:fa:88:69:74: 7e:10:76:ba:13:ba:bf:19:c9:3f:35:e1:52:2e:a9:0c:d4:27: 28:cc:9d:09:89:f2:dd:2a:94:a2:df:76:60:27:30:cd:5f:46: 89:f2:70:8c:34:7d:1c:fe:13:1c:4b:c1:87:41:de:ea:ac:ec: a9:3d:78:cd:c9:47:fe:98:ec:36:2d:2a:54:8c:01:83:8a:96: 26:5d:af:d4:20:e1:e1:cb:08:ce:a0:6e:a7:72:8b:38:d7:f9: 79:1f:52:26:f1:37:53:24:61:f4:c8:87:4c:89:39:91:80:d5: 92:36:73:17:20:f1:c3:f8:61:37:d6:d9:15:b0:f8:ab:45:3e: 1b:94:4f:4d:3a:2b:46:37:e4:3a:fe:91:fa:b5:f8:ba:61:55: b5:fc:fb:44:98:e8:1e:af:ee:93:97:34:58:52:02:f6:d1:9f: 49:8d:cd:9f:6e:0e:2d:93:3e:3c:89:d9:78:f0:e3:be:82:96: eb:ba:d8:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdFRjIxMTAvBgNVBAUTKDlCOUQzOTcyNUIyN0Q0MjAyODEzODUxNjM0OTJGRjc1 RjE1MTEzREEwHhcNMjYwNTExMDczMzM0WhcNMjYwNTE4MDczMzM0WjAYMRYwFAYD VQQDEw02YTAxODY0ZS02OGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvd5r/ehCh8fuGtnge009DsDoPpLGac4kenaz8WmADLt7JV2RdnBjBnkaXQ8 8qcPFVcWNCpQOzwoYBqfjRFh2xSU17VCYDjjSSzhzDPZMc0HjOToLexP0P6UbrV2 Oj4FYlbIvp67WgnsubzBXTSzldaNZ5I7RO6ycMxsKZYHG6wdHF+7Bc0rBZeamdy+ WhrUDjSjcUlrsyuYAqZVPfFX7zZhL09sqLwM021eaI19BhaEmhH1MFsgP+/F1QFr oDYcjUxE2ZfVoZgacFw6lXGXqg4KVh7kyrPsf5VWwa7l2CKD8+1JBEYB1me0Y0AG EnBA1KsLurkRqS8nO1pgKpwRhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI6QHM2v bVQyQBi6Y0E5vAkmHlEnMB8GA1UdIwQYMBaAFJudOXJbJ9QgKBOFFjSS/3XxURPa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0VGMi82MjI2QzkzNjYz ODExMUYwQTMzRDIzNjRDNEY5QUUwMi9tNTA1Y2xzbjFDQW9FNFVXTkpMX2RmRlJF OW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL201MDVjbHNuMUNBb0U0VVdOSkxfZGZGUkU5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0VGMi82MjI2QzkzNjYzODExMUYwQTMzRDIzNjRDNEY5QUUwMi9tNTA1Y2xzbjFD QW9FNFVXTkpMX2RmRlJFOW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaNEQUuRqoh7+8p1t9V9AHMN1DEv/VhYh+lWrhazW5oEQyxlDBIbNTUP70Flu 3oi/XvpykuiiQmMQ+MIK9mt4G1acdO/6iGl0fhB2uhO6vxnJPzXhUi6pDNQnKMyd CYny3SqUot92YCcwzV9GifJwjDR9HP4THEvBh0He6qzsqT14zclH/pjsNi0qVIwB g4qWJl2v1CDh4csIzqBup3KLONf5eR9SJvE3UyRh9MiHTIk5kYDVkjZzFyDxw/hh N9bZFbD4q0U+G5RPTTorRjfkOv6R+rX4umFVtfz7RJjoHq/uk5c0WFIC9tGfSY3N n24OLZM+PInZePDjvoKW67rYjw== -----END CERTIFICATE-----Generated at Wed May 13 03:41:20 2026 by rpki-client