$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft File: b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft (raw, json) Hash identifier: SMxZh8DwkOc+YEqXyP2dC4c/7djxdjpFIJU21E9e01w= Subject key identifier: 47:DA:DB:F6:B2:0C:8E:83:D2:3A:85:01:AF:8C:51:0F:85:27:6D:BE Authority key identifier: 6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3 Certificate issuer: /CN=A91CBE4E/serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3 Certificate serial: 0207 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft Manifest number: 01FA Signing time: Wed 13 May 2026 03:18:45 +0000 Manifest this update: Wed 13 May 2026 03:18:45 +0000 Manifest next update: Wed 20 May 2026 03:18:45 +0000 Files and hashes: 1: b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl (hash: fwZX6ggl9GRDVcMNWKmAznbsBXCzCXt7NlYxYm2bGuo=) 2: 273A3FAAF3FC11EFB697C52FC4F9AE02.roa (hash: mhjbk4CN2+rPJc7zvgeaO7bX0mHh9qBVgN/f8ar/U0w=) 3: 13713EBA7CF011F0A1556D56C4F9AE02.roa (hash: J1ocAT03CSbRpODB0RRAKFgJGRB6ade57V3/kum0InU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 03:18:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 519 (0x207) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBE4E, serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3 Validity Not Before: May 13 03:18:45 2026 GMT Not After : May 20 03:18:45 2026 GMT Subject: CN=6a03ed95-fb98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:df:bc:10:bf:f7:82:11:e1:7e:54:c8:6e:1d: 47:61:9c:a3:e8:65:cc:2d:42:1c:e4:78:7c:52:ec: 07:2a:d1:2a:21:52:41:55:21:83:2f:eb:63:17:ea: 05:6e:d4:4c:bd:e5:79:cd:f1:f8:3f:83:04:55:4c: 13:a7:1c:38:d3:05:ad:6e:0c:c9:d0:dd:56:e0:4e: 89:2c:89:05:7f:22:fe:91:22:33:17:fe:6b:fa:2c: 52:6b:da:0c:db:87:d3:9a:87:c7:28:67:a3:bd:15: 72:c0:78:60:e9:e1:eb:87:c9:a7:2e:b1:2c:3c:a3: ad:21:7e:75:77:90:cd:8a:fb:54:96:8d:1e:82:3d: ab:bd:6a:90:6d:0b:65:b7:07:b2:88:85:10:98:f8: 4a:b0:3d:9a:03:a9:83:1e:d5:30:a7:36:a7:b8:ee: 43:24:39:49:03:03:4f:12:83:6e:a7:0c:83:bf:a2: e6:ff:23:76:53:66:6a:bf:0a:af:a6:4e:80:e5:3b: fc:59:53:e2:b9:0f:86:31:e5:4a:91:6c:25:12:f4: 87:c0:ee:e9:6f:46:8c:e5:5f:c7:2e:9b:68:2b:e3: 7b:12:c5:7b:00:b5:66:11:8d:6f:61:5b:0e:fa:b2: 70:32:74:98:a5:35:21:58:18:db:68:a4:98:74:dd: 9d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:DA:DB:F6:B2:0C:8E:83:D2:3A:85:01:AF:8C:51:0F:85:27:6D:BE X509v3 Authority Key Identifier: keyid:6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:f6:4e:62:55:15:bb:0d:30:0e:d5:f5:5d:74:45:bd:02:e4: 86:b9:74:1b:69:8e:a9:be:d0:4e:4f:ae:36:bf:79:9f:58:a8: 4d:92:68:95:b7:c4:9d:82:c8:2f:b4:a2:71:c1:9c:5e:a2:a3: d1:f2:70:0e:fb:2f:93:ee:8e:b6:62:d1:7b:e8:a9:e7:4d:dd: 61:0f:16:87:81:25:63:03:d2:6c:91:bc:5c:58:9c:80:08:72: 29:b9:fb:17:83:8f:2c:70:8a:a8:be:11:5e:8e:5a:59:73:5d: 91:55:2f:d8:98:df:fb:77:ea:b2:50:d5:03:9f:b4:d3:17:b4: f7:20:ed:68:99:e2:58:1e:0c:c0:f6:6b:98:21:42:15:b3:1a: ee:3a:69:7c:c9:11:9f:c3:80:26:ec:39:c8:21:84:e1:f6:c9: 43:60:c1:fc:85:7c:d2:62:55:39:cd:5e:31:15:d0:1f:99:41: 75:63:f4:17:66:88:65:86:08:99:f8:4b:e9:9e:12:2e:62:68: 78:f1:8a:f9:b0:70:6a:b6:b6:ae:8f:5a:d2:c4:8b:95:4c:31: d4:29:fd:12:b0:23:c6:84:c2:b9:75:65:90:82:e2:a7:39:c2: a9:90:a7:b5:fb:36:4b:bf:2c:f2:bd:45:14:37:7f:0a:84:b7: cb:b5:b3:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JFNEUxMTAvBgNVBAUTKDZGRjFBMjRFN0Y1NEYyRUYwQzYwNUUwRTA2RkM4QTQ2 QzU0NEQ2RDMwHhcNMjYwNTEzMDMxODQ1WhcNMjYwNTIwMDMxODQ1WjAYMRYwFAYD VQQDEw02YTAzZWQ5NS1mYjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAud+8EL/3ghHhflTIbh1HYZyj6GXMLUIc5Hh8UuwHKtEqIVJBVSGDL+tjF+oF btRMveV5zfH4P4MEVUwTpxw40wWtbgzJ0N1W4E6JLIkFfyL+kSIzF/5r+ixSa9oM 24fTmofHKGejvRVywHhg6eHrh8mnLrEsPKOtIX51d5DNivtUlo0egj2rvWqQbQtl tweyiIUQmPhKsD2aA6mDHtUwpzanuO5DJDlJAwNPEoNupwyDv6Lm/yN2U2Zqvwqv pk6A5Tv8WVPiuQ+GMeVKkWwlEvSHwO7pb0aM5V/HLptoK+N7EsV7ALVmEY1vYVsO +rJwMnSYpTUhWBjbaKSYdN2djwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEfa2/ay DI6D0jqFAa+MUQ+FJ22+MB8GA1UdIwQYMBaAFG/xok5/VPLvDGBeDgb8ikbFRNbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkU0RS9EQjAzRjY1QTUy QzkxMUVFOTAzMjhGMTRDNEY5QUUwMi9iX0dpVG45VTh1OE1ZRjRPQnZ5S1JzVkUx dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfR2lUbjlVOHU4TVlGNE9CdnlLUnNWRTF0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkU0RS9EQjAzRjY1QTUyQzkxMUVFOTAzMjhGMTRDNEY5QUUwMi9iX0dpVG45VTh1 OE1ZRjRPQnZ5S1JzVkUxdE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhfZOYlUVuw0wDtX1XXRFvQLkhrl0G2mOqb7QTk+uNr95n1ioTZJolbfEnYLI L7SiccGcXqKj0fJwDvsvk+6OtmLRe+ip503dYQ8Wh4ElYwPSbJG8XFicgAhyKbn7 F4OPLHCKqL4RXo5aWXNdkVUv2Jjf+3fqslDVA5+00xe09yDtaJniWB4MwPZrmCFC FbMa7jppfMkRn8OAJuw5yCGE4fbJQ2DB/IV80mJVOc1eMRXQH5lBdWP0F2aIZYYI mfhL6Z4SLmJoePGK+bBwara2ro9a0sSLlUwx1Cn9ErAjxoTCuXVlkILipznCqZCn tfs2S78s8r1FFDd/CoS3y7Wz4w== -----END CERTIFICATE-----Generated at Wed May 13 10:46:34 2026 by rpki-client