$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft File: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft (raw, json) Hash identifier: KawclqbJBfNTml3reKQsYaCUmo5IFDUjZPXFXqS+ovU= Subject key identifier: 68:68:7F:D0:08:F7:80:C6:77:E2:FC:58:AE:E2:A6:4C:C5:A3:D2:AE Authority key identifier: 31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF Certificate issuer: /CN=A91C8203/serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft Manifest number: 0124 Signing time: Mon 11 May 2026 05:49:22 +0000 Manifest this update: Mon 11 May 2026 05:49:22 +0000 Manifest next update: Mon 18 May 2026 05:49:22 +0000 Files and hashes: 1: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl (hash: lGZvs4tLWmgEr68D8oyOT4oH8/b7f6EWYmvc1XAzpkY=) 2: BE48D4AA927D11EF9651FC4AC4F9AE02.roa (hash: MMlCyL0Z5gXZRhtwZCT1rQU/h+kkk4XV7uk2akYMz9M=) 3: D9BE56E2927D11EFB83ACB5CC4F9AE02.roa (hash: nelUbxnLDLGVDrJHYxOmJHcdHhK23+JstFe8bl+1cNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 05:49:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8203, serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF Validity Not Before: May 11 05:49:22 2026 GMT Not After : May 18 05:49:22 2026 GMT Subject: CN=6a016de2-104c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:1d:90:f4:e7:80:82:36:a4:73:da:9a:43:2a: 2c:25:2b:b8:99:ab:cd:f5:9d:b7:48:ce:be:35:c0: 47:8f:3d:c2:b7:90:16:02:e4:45:6e:10:78:63:80: 27:5a:ec:8f:0b:a5:c8:87:7b:76:cb:fd:bd:a2:8a: 86:74:2d:88:f8:32:16:9d:44:dc:09:ce:48:f6:6d: b9:74:42:8a:e0:de:de:34:1f:d5:9f:3d:a0:dd:fb: 33:e4:e7:54:d9:24:60:51:95:79:b4:6d:62:71:42: 54:ac:51:08:f1:78:f4:f2:69:40:6c:94:ce:f3:8d: 25:1b:d8:0e:c9:2c:65:cc:ec:3d:2f:0c:40:44:25: 3b:4c:32:d0:5d:ce:59:57:ab:ed:dd:0b:6e:cd:23: 23:90:b0:df:56:ec:a5:75:17:d8:42:e0:b8:89:a4: 83:29:5c:da:13:64:22:42:72:6f:e4:88:8f:7b:78: 57:bc:a7:6e:5b:e5:5e:e6:a8:60:82:9d:50:03:9a: 10:16:7a:ef:24:57:54:7b:6d:77:4d:ac:60:30:a0: 95:1f:6f:03:50:de:86:57:8f:e2:cd:5f:3f:76:3e: 43:e8:db:0e:26:aa:63:80:4b:fa:8f:e1:a4:75:a7: d5:08:3e:a8:fc:07:55:03:aa:99:95:8b:62:1e:f7: 17:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:68:7F:D0:08:F7:80:C6:77:E2:FC:58:AE:E2:A6:4C:C5:A3:D2:AE X509v3 Authority Key Identifier: keyid:31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:87:f3:3f:98:37:f2:3e:ca:d0:2c:51:5d:bd:40:1b:9e:97: e4:b5:b3:85:31:f6:a9:b2:82:98:70:07:d4:55:28:26:bb:21: ac:94:d1:4a:65:6d:b7:7d:49:2a:dd:1c:b9:ff:5f:77:ac:57: 4b:40:ae:c4:c9:3f:ae:bd:d8:ea:1c:cf:09:6b:f0:0c:a4:1e: 9a:25:de:33:8a:ca:6f:df:85:f7:a5:1a:0f:7d:d6:4a:54:df: 90:96:35:42:4c:f8:f4:bf:bd:c9:25:cf:b0:b5:76:25:6e:ab: 6b:5f:93:bc:41:a8:4b:8f:62:68:14:eb:64:e7:dd:d0:82:a0: a9:08:40:8e:a4:94:48:46:1c:87:3c:98:98:25:fa:0a:39:a1: fd:8d:b7:69:d2:48:48:fa:87:18:92:75:45:01:e6:f6:6d:d0: ca:76:83:c0:e7:fb:af:d2:c3:a7:80:fb:85:a8:79:8e:f0:98: c6:a8:3a:f3:0c:3d:08:b0:dc:8f:c2:ab:2d:f2:85:8a:c7:08: 6f:75:3a:b5:59:4d:c5:f5:c5:57:41:38:e7:98:dc:21:5c:f4: d1:26:51:08:24:bc:82:41:f4:d1:d4:cb:40:e3:af:0d:3f:06: 7a:cf:c7:7e:40:7d:36:1a:dd:56:b4:f7:59:e8:dc:ef:18:33: 41:3a:0c:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgyMDMxMTAvBgNVBAUTKDMxRDIxRDVDRUU1RkFDREVGM0M4QzFDODdEMEQ3Mzkx RjlGNzNBRkYwHhcNMjYwNTExMDU0OTIyWhcNMjYwNTE4MDU0OTIyWjAYMRYwFAYD VQQDEw02YTAxNmRlMi0xMDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+R2Q9OeAgjakc9qaQyosJSu4mavN9Z23SM6+NcBHjz3Ct5AWAuRFbhB4Y4An WuyPC6XIh3t2y/29ooqGdC2I+DIWnUTcCc5I9m25dEKK4N7eNB/Vnz2g3fsz5OdU 2SRgUZV5tG1icUJUrFEI8Xj08mlAbJTO840lG9gOySxlzOw9LwxARCU7TDLQXc5Z V6vt3QtuzSMjkLDfVuyldRfYQuC4iaSDKVzaE2QiQnJv5IiPe3hXvKduW+Ve5qhg gp1QA5oQFnrvJFdUe213TaxgMKCVH28DUN6GV4/izV8/dj5D6NsOJqpjgEv6j+Gk dafVCD6o/AdVA6qZlYtiHvcXJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGhof9AI 94DGd+L8WK7ipkzFo9KuMB8GA1UdIwQYMBaAFDHSHVzuX6ze88jByH0Nc5H59zr/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODIwMy9CQzUxNURBQTky N0ExMUVGQjU2NDNDNEVDNEY5QUUwMi9NZElkWE81ZnJON3p5TUhJZlExemtmbjNP djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01kSWRYTzVmck43enlNSElmUTF6a2ZuM092OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODIwMy9CQzUxNURBQTkyN0ExMUVGQjU2NDNDNEVDNEY5QUUwMi9NZElkWE81ZnJO N3p5TUhJZlExemtmbjNPdjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAy4fzP5g38j7K0CxRXb1AG56X5LWzhTH2qbKCmHAH1FUoJrshrJTRSmVtt31J Kt0cuf9fd6xXS0CuxMk/rr3Y6hzPCWvwDKQemiXeM4rKb9+F96UaD33WSlTfkJY1 Qkz49L+9ySXPsLV2JW6ra1+TvEGoS49iaBTrZOfd0IKgqQhAjqSUSEYchzyYmCX6 Cjmh/Y23adJISPqHGJJ1RQHm9m3QynaDwOf7r9LDp4D7hah5jvCYxqg68ww9CLDc j8KrLfKFiscIb3U6tVlNxfXFV0E455jcIVz00SZRCCS8gkH00dTLQOOvDT8Ges/H fkB9NhrdVrT3Wejc7xgzQToM2Q== -----END CERTIFICATE-----Generated at Wed May 13 07:48:21 2026 by rpki-client