$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft File: ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft (raw, json) Hash identifier: +hNcwnd5jT6FfqRkkYhDyh/6VVdzZoND3Btdn3knbjo= Subject key identifier: E8:9A:61:AD:88:92:8A:3B:D8:8D:8F:6D:B0:8E:0E:7B:05:73:76:8E Authority key identifier: 72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7 Certificate issuer: /CN=A91CC1E9/serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7 Certificate serial: 0258 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft Manifest number: 0245 Signing time: Mon 11 May 2026 02:36:04 +0000 Manifest this update: Mon 11 May 2026 02:36:04 +0000 Manifest next update: Mon 18 May 2026 02:36:04 +0000 Files and hashes: 1: ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl (hash: vfdY08ihm2nWXvw4XGwaablCs4YqXXsLAK12cDi0XN4=) 2: 1333404E5A0D11EF8810E217C4F9AE02.roa (hash: 4mVa0DqBaCflYNU9bhCT5eYUo2wiGhZvFPJW9PpsrbY=) 3: 2AB990CAF0A911ED80D2CB35C4F9AE02.roa (hash: vqGdVaaDYf6gNLNH5VIBJ2NRjMzmVVMM9ASsA3cNz2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 02:36:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 600 (0x258) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC1E9, serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7 Validity Not Before: May 11 02:36:04 2026 GMT Not After : May 18 02:36:04 2026 GMT Subject: CN=6a014094-bd92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4e:fd:88:1e:21:64:21:ce:92:cf:60:a8:0c: ff:5a:9a:75:78:ca:cb:5f:ed:d4:57:ba:d5:5d:9b: 87:f6:bd:fa:2a:22:81:6e:6d:41:e2:ea:a8:6f:e5: 15:04:be:12:0c:98:57:4c:9e:14:9f:74:dd:2b:89: 4c:92:1a:a1:e6:9c:4c:9d:da:e0:c7:62:d8:c0:a5: 76:77:d5:30:b0:a3:6f:31:39:3d:2a:ef:f5:4e:57: 53:51:e8:97:a5:5b:a8:77:c8:d4:db:87:72:c1:81: ae:d9:6c:9e:01:0f:4a:76:c4:a9:60:fe:48:a1:dd: aa:3e:e1:7b:9b:89:88:ef:16:58:d9:4c:da:9a:42: e3:d4:8b:17:aa:98:be:7b:e9:28:ef:c9:3c:ef:e9: b9:6d:1f:e6:23:1b:4d:fd:d5:ed:ce:fd:89:1d:8c: 64:c9:23:56:51:bc:60:21:57:82:12:cc:64:24:63: 51:6d:23:58:e2:11:34:79:7d:15:b8:63:2d:a5:cd: bf:2e:d8:5f:b9:5a:5e:5f:17:bb:28:a7:22:96:d5: d3:c2:ba:19:a9:88:cd:69:c8:8b:09:77:4c:4d:bd: 54:75:ea:04:71:ad:97:7d:9a:63:e2:2e:c8:12:33: 77:36:ca:c9:0e:90:06:12:a9:26:5b:d1:cf:30:de: 48:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:9A:61:AD:88:92:8A:3B:D8:8D:8F:6D:B0:8E:0E:7B:05:73:76:8E X509v3 Authority Key Identifier: keyid:72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:55:2e:1a:57:ed:41:77:66:93:ff:6c:d7:d1:98:8e:60:ea: 38:3c:95:b2:d9:a7:41:c9:c1:d4:a0:58:39:54:bb:66:a9:e1: 75:b0:46:59:03:8d:94:a6:3e:d3:8b:48:dd:18:c5:be:7f:79: 36:8e:19:95:d4:3c:e4:38:07:2f:56:79:2b:c8:af:87:bb:e3: 57:dd:13:69:e5:12:fe:68:3c:ef:dc:b4:f6:88:ad:a6:8e:bd: e3:0c:aa:5c:0e:2f:9d:b4:d0:d0:88:87:1a:fe:07:2c:55:96: be:ab:1a:64:9c:75:8d:55:b8:70:e7:28:f9:fe:f6:3e:ad:bf: 11:36:22:27:b8:ec:54:3f:89:fa:ae:49:b2:e7:be:de:90:f6: 76:74:50:ef:36:85:49:65:30:1f:d5:0f:47:c0:94:9e:4d:21: 94:09:70:3f:63:a1:28:d6:0f:4c:42:33:14:d7:45:08:5e:ae: 09:20:ae:0a:c9:97:50:8d:a6:4d:f1:d3:00:e6:6e:c5:13:ac: 25:ac:07:41:b9:43:e3:d4:9c:9b:e5:fd:be:38:8b:75:99:1f: 48:a1:9b:6d:ee:2f:12:7d:42:1f:e5:d9:b3:92:93:48:3e:c0: d1:a3:79:c5:f5:da:f7:09:be:7b:e9:73:80:86:b8:ca:7f:d7: 55:02:25:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MxRTkxMTAvBgNVBAUTKDcyRDE1NzQzRjU5QzgzQTVDMTk1QTVFNkRCMUVBNDY0 NzYzNEJFRjcwHhcNMjYwNTExMDIzNjA0WhcNMjYwNTE4MDIzNjA0WjAYMRYwFAYD VQQDEw02YTAxNDA5NC1iZDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs079iB4hZCHOks9gqAz/Wpp1eMrLX+3UV7rVXZuH9r36KiKBbm1B4uqob+UV BL4SDJhXTJ4Un3TdK4lMkhqh5pxMndrgx2LYwKV2d9UwsKNvMTk9Ku/1TldTUeiX pVuod8jU24dywYGu2WyeAQ9KdsSpYP5Iod2qPuF7m4mI7xZY2UzamkLj1IsXqpi+ e+ko78k87+m5bR/mIxtN/dXtzv2JHYxkySNWUbxgIVeCEsxkJGNRbSNY4hE0eX0V uGMtpc2/LthfuVpeXxe7KKciltXTwroZqYjNaciLCXdMTb1UdeoEca2XfZpj4i7I EjN3NsrJDpAGEqkmW9HPMN5IQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOiaYa2I koo72I2PbbCODnsFc3aOMB8GA1UdIwQYMBaAFHLRV0P1nIOlwZWl5tsepGR2NL73 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzFFOS9CQkNENUQyQ0VG Q0MxMUVEQjI5QkIwNkNDNEY5QUUwMi9jdEZYUV9XY2c2WEJsYVhtMng2a1pIWTB2 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N0RlhRX1djZzZYQmxhWG0yeDZrWkhZMHZ2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzFFOS9CQkNENUQyQ0VGQ0MxMUVEQjI5QkIwNkNDNEY5QUUwMi9jdEZYUV9XY2c2 WEJsYVhtMng2a1pIWTB2dmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAVUuGlftQXdmk/9s19GYjmDqODyVstmnQcnB1KBYOVS7ZqnhdbBGWQONlKY+ 04tI3RjFvn95No4ZldQ85DgHL1Z5K8ivh7vjV90TaeUS/mg879y09oitpo694wyq XA4vnbTQ0IiHGv4HLFWWvqsaZJx1jVW4cOco+f72Pq2/ETYiJ7jsVD+J+q5Jsue+ 3pD2dnRQ7zaFSWUwH9UPR8CUnk0hlAlwP2OhKNYPTEIzFNdFCF6uCSCuCsmXUI2m TfHTAOZuxROsJawHQblD49Scm+X9vjiLdZkfSKGbbe4vEn1CH+XZs5KTSD7A0aN5 xfXa9wm+e+lzgIa4yn/XVQIluQ== -----END CERTIFICATE-----Generated at Wed May 13 00:53:15 2026 by rpki-client