$ rpki-client -vvf rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft File: x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft (raw, json) Hash identifier: pmSnhROAVLrC58EkMNz7B7DguGSTRby/O8KZb95EOO8= Subject key identifier: 09:F7:52:66:F0:33:74:22:34:82:3E:F3:8F:92:7A:FB:4E:84:05:E7 Authority key identifier: C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09 Certificate issuer: /CN=A91C85E9/serialNumber=C7CF943E3A764F37C003CD435A2B8543BCE47609 Certificate serial: 1262 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft Manifest number: 124A Signing time: Tue 12 May 2026 17:07:41 +0000 Manifest this update: Tue 12 May 2026 17:07:40 +0000 Manifest next update: Tue 19 May 2026 17:07:40 +0000 Files and hashes: 1: x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl (hash: sPicbhDmXOoe0tAFR8tSyn6CYoUCyMLNWXMurGQdACg=) 2: 8446564EF96611E8BE431B17C4F9AE02.roa (hash: yX06bXibRyqYQ53QWArbh3lavUZOOzpp/mZPOnVc/hA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:07:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4706 (0x1262) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C85E9, serialNumber=C7CF943E3A764F37C003CD435A2B8543BCE47609 Validity Not Before: May 12 17:07:40 2026 GMT Not After : May 19 17:07:40 2026 GMT Subject: CN=6a035e5d-9a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:85:45:3e:52:cf:40:5c:58:b0:44:0f:6d:b7: 45:2c:b6:a0:f7:cc:85:3d:21:25:fa:e7:40:bb:8a: 60:5c:a1:b5:65:6a:07:d4:42:be:4b:05:89:03:73: b1:84:ae:e0:c2:a8:91:70:02:43:60:94:65:e1:b2: 10:8a:57:b3:4b:29:44:6c:8c:a9:3d:bc:6d:ab:78: cd:28:30:6d:64:1b:6a:18:ea:88:07:93:be:07:88: 14:46:bd:8d:93:d9:f4:2a:d2:91:00:30:36:7f:cf: 9d:18:7d:5a:82:96:25:69:39:7c:42:a0:9a:a6:a1: 7f:56:60:02:68:83:c5:af:fd:64:21:ab:2e:67:7f: d5:b8:8f:d4:ea:0b:31:cf:4f:28:af:04:01:0a:f0: 80:3f:cf:55:35:1d:6d:29:a1:89:3f:74:c0:d0:6c: 39:f9:df:a2:61:09:d8:93:e8:92:87:50:b5:09:c5: 06:08:03:0a:7e:fc:c9:f2:b2:e6:40:81:9f:46:e6: 37:d0:a8:57:bf:10:3d:be:5c:56:b0:39:e8:f2:07: ab:78:17:46:32:22:94:bd:16:b9:26:55:41:52:86: 8f:0b:2f:58:98:03:52:94:c1:f0:41:89:79:24:97: 1f:e7:f4:5c:8e:26:78:fd:32:99:54:79:c6:84:d0: 91:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F7:52:66:F0:33:74:22:34:82:3E:F3:8F:92:7A:FB:4E:84:05:E7 X509v3 Authority Key Identifier: keyid:C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:da:77:47:81:93:68:b7:4b:e7:45:95:75:ab:27:9e:05:a3: 7b:9c:97:81:e5:b2:af:11:15:84:a2:20:d6:40:ee:27:40:67: 4c:ff:fc:5d:94:be:5e:95:f1:7d:c8:31:34:4d:ce:ad:b0:fe: 9e:3e:51:2e:64:54:a2:a7:60:33:66:bc:b7:c2:ee:a3:80:f7: 74:13:9e:29:df:f9:09:57:ae:47:bf:de:67:84:54:24:3f:ef: 55:79:6d:87:e1:0c:ed:cd:ae:d9:20:b0:fb:dc:41:b7:3d:7c: eb:d3:54:b5:b7:cd:4e:79:79:dc:71:40:54:75:8b:31:98:cc: bb:fe:db:b4:16:89:eb:48:fa:68:8c:74:9f:1d:f0:08:30:d0: 01:80:97:e4:96:3f:1d:44:cb:02:70:3f:6b:9a:da:ad:e8:b4: 3c:26:fc:fc:e6:86:5b:9c:de:de:86:df:2b:01:f7:9b:87:13: 81:b1:b2:06:57:3a:b9:07:f8:47:09:9b:f2:87:84:d9:0b:95: 88:6f:7b:3f:83:8e:8e:b2:32:cd:7d:c3:9c:0f:5b:0a:a9:5b: a1:83:a9:7e:01:8d:c5:3a:3e:42:ca:74:cf:a4:7d:d4:e1:26: d7:13:b8:b2:da:90:71:eb:62:15:9b:79:44:fa:01:f5:65:08: 4a:5f:e4:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg1RTkxMTAvBgNVBAUTKEM3Q0Y5NDNFM0E3NjRGMzdDMDAzQ0Q0MzVBMkI4NTQz QkNFNDc2MDkwHhcNMjYwNTEyMTcwNzQwWhcNMjYwNTE5MTcwNzQwWjAYMRYwFAYD VQQDEw02YTAzNWU1ZC05YTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApYVFPlLPQFxYsEQPbbdFLLag98yFPSEl+udAu4pgXKG1ZWoH1EK+SwWJA3Ox hK7gwqiRcAJDYJRl4bIQilezSylEbIypPbxtq3jNKDBtZBtqGOqIB5O+B4gURr2N k9n0KtKRADA2f8+dGH1agpYlaTl8QqCapqF/VmACaIPFr/1kIasuZ3/VuI/U6gsx z08orwQBCvCAP89VNR1tKaGJP3TA0Gw5+d+iYQnYk+iSh1C1CcUGCAMKfvzJ8rLm QIGfRuY30KhXvxA9vlxWsDno8gereBdGMiKUvRa5JlVBUoaPCy9YmANSlMHwQYl5 JJcf5/RcjiZ4/TKZVHnGhNCRkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAn3Umbw M3QiNII+84+SevtOhAXnMB8GA1UdIwQYMBaAFMfPlD46dk83wAPNQ1orhUO85HYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODVFOS8wODI1MzhFQ0Y5 NjUxMUU4QkMwNTI0MTFDNEY5QUUwMi94OC1VUGpwMlR6ZkFBODFEV2l1RlE3emtk Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g4LVVQanAyVHpmQUE4MURXaXVGUTd6a2Rnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODVFOS8wODI1MzhFQ0Y5NjUxMUU4QkMwNTI0MTFDNEY5QUUwMi94OC1VUGpwMlR6 ZkFBODFEV2l1RlE3emtkZ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAatp3R4GTaLdL50WVdasnngWje5yXgeWyrxEVhKIg1kDuJ0BnTP/8XZS+XpXx fcgxNE3OrbD+nj5RLmRUoqdgM2a8t8Luo4D3dBOeKd/5CVeuR7/eZ4RUJD/vVXlt h+EM7c2u2SCw+9xBtz1869NUtbfNTnl53HFAVHWLMZjMu/7btBaJ60j6aIx0nx3w CDDQAYCX5JY/HUTLAnA/a5rarei0PCb8/OaGW5ze3obfKwH3m4cTgbGyBlc6uQf4 Rwmb8oeE2QuViG97P4OOjrIyzX3DnA9bCqlboYOpfgGNxTo+Qsp0z6R91OEm1xO4 stqQcetiFZt5RPoB9WUISl/kCg== -----END CERTIFICATE-----Generated at Wed May 13 04:39:49 2026 by rpki-client