$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft File: L8Qw8eIVy9fgjyZDiDcDUALeMak.mft (raw, json) Hash identifier: LdV3yiZI17LZJQOS0MHF2xlhMGulVFfEd1wlUT+UtCI= Subject key identifier: AF:ED:59:19:E0:6F:B0:69:15:59:39:61:1F:F4:A9:C5:D4:27:D8:75 Authority key identifier: 2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9 Certificate issuer: /CN=A91CB8A3/serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9 Certificate serial: 036D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft Manifest number: 035B Signing time: Mon 11 May 2026 01:00:17 +0000 Manifest this update: Mon 11 May 2026 01:00:16 +0000 Manifest next update: Mon 18 May 2026 01:00:16 +0000 Files and hashes: 1: L8Qw8eIVy9fgjyZDiDcDUALeMak.crl (hash: locfegrNAt4RICyqksUf//zbJKocft7RamyhrcqRdY0=) 2: 5E616E44841711F0B7A8C63CC4F9AE02.roa (hash: 2bSuW/W2EAJDExuMn72UQi0Hj4wXVmW13H/TPfYijPA=) 3: 36B29DDC841711F0AB46F416C4F9AE02.roa (hash: wgip0DQGeaZ0QNSC6Osjp3LdtBXVxXRo5X2o3r8AIKo=) 4: CC1ACE7A6BC711F098C3B76CC4F9AE02.roa (hash: BahbEschYMgJrMF0BLS9CUwIvpM5/L/G8tn8FPtp9ik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 01:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 877 (0x36d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8A3, serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9 Validity Not Before: May 11 01:00:16 2026 GMT Not After : May 18 01:00:16 2026 GMT Subject: CN=6a012a21-2bcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7e:02:00:f9:e4:d6:dc:e6:f5:07:17:42:c1: 19:1d:5f:7f:2a:0a:ef:c0:27:09:99:fd:79:6f:f7: df:9c:77:c0:0f:c2:18:ea:8b:6f:d7:1b:31:e4:cc: 6d:01:f0:50:a6:da:2c:db:da:56:f5:4a:4d:6c:51: bf:1a:3a:0d:94:dd:5b:59:a4:85:ad:c2:17:62:7f: b4:23:e1:83:09:67:d3:20:a9:89:5c:30:9e:59:e6: 39:5c:76:53:8a:ee:30:74:8a:31:73:45:47:1c:68: e1:f5:17:19:10:b5:f1:29:fe:8e:6d:32:55:59:63: 3b:89:3c:76:1a:ff:0f:2d:d8:a8:2f:e6:da:85:7f: 8d:f2:2b:c1:91:9d:90:e0:99:ab:e4:f6:15:d1:8d: e5:b4:90:a2:25:f0:6d:f7:66:9f:5c:49:e6:38:3f: ca:9b:89:94:40:0a:da:e9:aa:68:d8:67:eb:f3:4f: 8d:28:a5:1f:07:32:81:70:07:0f:00:b5:e2:eb:b0: 0c:b8:8d:30:25:aa:85:8a:59:fc:60:e6:2b:7d:1e: 8a:32:0d:03:08:63:15:d1:44:16:99:1f:f3:7c:f3: ab:53:a1:ce:2e:2b:9e:7b:c8:81:fe:62:15:2e:57: b3:81:66:c4:be:d1:fb:e3:31:28:bc:ca:dc:78:2d: df:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:ED:59:19:E0:6F:B0:69:15:59:39:61:1F:F4:A9:C5:D4:27:D8:75 X509v3 Authority Key Identifier: keyid:2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:ab:40:60:43:51:a0:86:8f:3f:98:d9:62:55:b6:47:f5:2d: 2f:83:d8:49:56:c2:2d:1b:0d:50:7d:a0:b3:49:a9:14:a2:74: 35:a9:fa:fa:77:81:49:fe:fb:81:52:05:b5:a9:2d:29:44:e9: de:60:29:a6:1c:99:60:7c:30:64:59:4b:f3:61:95:ce:72:24: 38:ac:49:41:7f:19:0f:7f:18:76:da:dc:9c:83:da:74:03:ac: 9d:b5:dd:b8:6f:2a:dc:5f:fc:f4:f6:25:33:48:d5:39:1a:97: 32:61:1c:14:6e:16:20:9b:d3:42:f0:d1:7e:0d:bf:3a:d9:39: 24:4e:1a:35:e5:91:5d:01:e7:8a:a0:45:e4:2d:29:1d:66:f4: c6:62:97:a9:b4:d4:de:2d:c4:3b:6d:4a:17:e4:b8:62:88:e5: 47:97:42:84:dc:bf:44:13:8b:3d:e1:2e:d8:e9:e5:d6:b5:d2: 95:e6:23:ab:ad:91:63:e8:35:d2:24:96:57:19:cf:00:e4:91: ed:ac:06:93:70:dc:1a:e2:2e:e1:e8:a2:02:80:fb:94:60:1d: 82:d0:9e:7e:29:d0:f8:8a:b9:4e:dc:9b:e2:75:2d:4e:7e:ed: 2d:92:9b:39:c3:ec:57:b4:c9:1f:9d:6f:50:8e:d4:3e:c6:a9: 41:17:d4:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QTMxMTAvBgNVBAUTKDJGQzQzMEYxRTIxNUNCRDdFMDhGMjY0Mzg4MzcwMzUw MDJERTMxQTkwHhcNMjYwNTExMDEwMDE2WhcNMjYwNTE4MDEwMDE2WjAYMRYwFAYD VQQDEw02YTAxMmEyMS0yYmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3n4CAPnk1tzm9QcXQsEZHV9/KgrvwCcJmf15b/ffnHfAD8IY6otv1xsx5Mxt AfBQptos29pW9UpNbFG/GjoNlN1bWaSFrcIXYn+0I+GDCWfTIKmJXDCeWeY5XHZT iu4wdIoxc0VHHGjh9RcZELXxKf6ObTJVWWM7iTx2Gv8PLdioL+bahX+N8ivBkZ2Q 4Jmr5PYV0Y3ltJCiJfBt92afXEnmOD/Km4mUQAra6apo2Gfr80+NKKUfBzKBcAcP ALXi67AMuI0wJaqFiln8YOYrfR6KMg0DCGMV0UQWmR/zfPOrU6HOLiuee8iB/mIV LlezgWbEvtH74zEovMrceC3fKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK/tWRng b7BpFVk5YR/0qcXUJ9h1MB8GA1UdIwQYMBaAFC/EMPHiFcvX4I8mQ4g3A1AC3jGp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhBMy85NjY1MEYzOEZE MTcxMUVDODI4OTgzNjVDNEY5QUUwMi9MOFF3OGVJVnk5ZmdqeVpEaURjRFVBTGVN YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w4UXc4ZUlWeTlmZ2p5WkRpRGNEVUFMZU1hay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjhBMy85NjY1MEYzOEZEMTcxMUVDODI4OTgzNjVDNEY5QUUwMi9MOFF3OGVJVnk5 ZmdqeVpEaURjRFVBTGVNYWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArqtAYENRoIaPP5jZYlW2R/UtL4PYSVbCLRsNUH2gs0mpFKJ0Nan6+neBSf77 gVIFtaktKUTp3mApphyZYHwwZFlL82GVznIkOKxJQX8ZD38YdtrcnIPadAOsnbXd uG8q3F/89PYlM0jVORqXMmEcFG4WIJvTQvDRfg2/Otk5JE4aNeWRXQHniqBF5C0p HWb0xmKXqbTU3i3EO21KF+S4YojlR5dChNy/RBOLPeEu2Onl1rXSleYjq62RY+g1 0iSWVxnPAOSR7awGk3DcGuIu4eiiAoD7lGAdgtCefinQ+Iq5Ttyb4nUtTn7tLZKb OcPsV7TJH51vUI7UPsapQRfU1Q== -----END CERTIFICATE-----Generated at Wed May 13 03:01:31 2026 by rpki-client