$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft File: afotkTN0HoMAQ-tA5A0ivzU4684.mft (raw, json) Hash identifier: Fgw2ufwbOI0EJ6tAHzlqIVl7OaN7+iFXOGpYz8my5R0= Subject key identifier: E7:11:3E:62:BC:03:E9:C0:34:A4:56:05:60:6D:14:45:0E:08:F8:48 Authority key identifier: 69:FA:2D:91:33:74:1E:83:00:43:EB:40:E4:0D:22:BF:35:38:EB:CE Certificate issuer: /CN=A91CCB81/serialNumber=69FA2D9133741E830043EB40E40D22BF3538EBCE Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/afotkTN0HoMAQ-tA5A0ivzU4684.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft Manifest number: 40 Signing time: Wed 13 May 2026 08:40:06 +0000 Manifest this update: Wed 13 May 2026 08:40:05 +0000 Manifest next update: Wed 20 May 2026 08:40:05 +0000 Files and hashes: 1: afotkTN0HoMAQ-tA5A0ivzU4684.crl (hash: d7tttOr0RRZF8qLYlKsKa8J4acFMyVDf9dEqD/OMO8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.crl rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/afotkTN0HoMAQ-tA5A0ivzU4684.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 08:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCB81, serialNumber=69FA2D9133741E830043EB40E40D22BF3538EBCE Validity Not Before: May 13 08:40:05 2026 GMT Not After : May 20 08:40:05 2026 GMT Subject: CN=6a0438e5-c6f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e8:17:68:68:07:5e:c2:84:99:b4:a4:da:f1: 80:e2:4e:af:4a:ef:0c:ed:05:0c:f1:4a:b0:a2:b9: 1d:bc:39:e4:c2:1c:31:3c:31:8e:96:62:34:29:b9: 2b:fe:92:6a:cc:9d:b7:d9:8b:27:b5:8d:c9:10:bb: 39:c0:36:e6:38:f9:ef:e8:de:4f:9d:1b:8a:93:4a: 09:bc:03:1f:3f:f3:c7:fa:b9:1b:05:02:96:59:47: ad:97:2f:ac:1a:bd:fd:47:57:06:a0:13:fe:b1:19: 3a:73:f6:a8:07:7e:0b:36:ff:81:a8:bf:0d:49:07: 78:54:9c:02:83:17:63:8f:93:0a:ee:61:65:b9:6b: c3:de:75:07:5f:e7:9a:89:60:05:19:2d:b1:54:d0: f7:1d:4b:e8:6b:1e:2f:dc:11:e6:ed:73:a0:68:56: 54:50:95:d1:52:01:66:ea:25:34:d9:ff:3e:1c:9d: f7:32:7e:77:7f:bd:50:80:63:89:5f:c5:74:96:8c: 5b:f6:1e:40:13:78:8c:61:c0:a7:57:cf:08:d8:60: 57:46:28:87:ec:f3:a7:01:d5:76:ba:73:0b:b9:48: ff:4d:82:78:e6:c5:96:30:d8:68:af:17:61:7f:fc: 7a:e4:98:93:77:52:5a:a7:ce:a8:e2:72:64:aa:84: fc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:11:3E:62:BC:03:E9:C0:34:A4:56:05:60:6D:14:45:0E:08:F8:48 X509v3 Authority Key Identifier: keyid:69:FA:2D:91:33:74:1E:83:00:43:EB:40:E4:0D:22:BF:35:38:EB:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/afotkTN0HoMAQ-tA5A0ivzU4684.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCB81/2861E496F86A11F0B4BBAF3C4A6F56BC/afotkTN0HoMAQ-tA5A0ivzU4684.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:ac:47:f8:a4:4f:5b:82:1f:83:5e:97:39:58:f9:02:70:6e: 45:c0:94:da:5d:21:ec:53:b8:87:08:69:6c:b1:43:a1:18:8a: a8:7f:ae:1e:1d:62:0d:01:4f:3e:20:79:83:17:6d:f7:9c:7c: c4:9b:d8:1b:50:b8:0e:ec:1f:85:ec:82:67:3e:0b:57:62:4b: cb:1b:74:21:89:8e:7c:5a:9c:d4:00:98:ae:8d:55:4e:74:98: 21:d3:5a:fe:94:c3:fa:56:2a:9a:de:6f:61:8d:bd:c8:5e:50: d0:8e:64:a2:78:ff:ea:86:77:2d:db:47:47:c2:68:92:af:bf: 5f:c0:01:0f:97:ca:ec:a3:a3:bf:f2:ad:05:7a:77:53:42:75: 6f:31:13:1a:5c:a6:9e:bd:8c:28:0f:32:71:2a:64:03:1c:73: c9:3a:3b:d7:d4:4a:20:bf:01:70:1d:a7:23:80:b8:f4:fe:e3: 7f:42:fb:28:06:4b:70:e3:22:1b:78:8a:24:d6:12:18:68:c7: 52:a0:a2:a5:29:b5:05:e1:1c:29:c2:ac:4f:70:1a:1f:c1:72: 85:0e:b9:6b:d7:06:6e:ab:f4:f4:9a:68:56:d4:18:67:f2:2f: 0c:fd:b4:07:b4:20:82:bb:83:99:e4:31:ec:be:a8:2d:6b:3c: 96:67:3e:45 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0I4MTExMC8GA1UEBRMoNjlGQTJEOTEzMzc0MUU4MzAwNDNFQjQwRTQwRDIyQkYz NTM4RUJDRTAeFw0yNjA1MTMwODQwMDVaFw0yNjA1MjAwODQwMDVaMBgxFjAUBgNV BAMTDTZhMDQzOGU1LWM2ZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC16BdoaAdewoSZtKTa8YDiTq9K7wztBQzxSrCiuR28OeTCHDE8MY6WYjQpuSv+ kmrMnbfZiye1jckQuznANuY4+e/o3k+dG4qTSgm8Ax8/88f6uRsFApZZR62XL6wa vf1HVwagE/6xGTpz9qgHfgs2/4Govw1JB3hUnAKDF2OPkwruYWW5a8PedQdf55qJ YAUZLbFU0PcdS+hrHi/cEebtc6BoVlRQldFSAWbqJTTZ/z4cnfcyfnd/vVCAY4lf xXSWjFv2HkATeIxhwKdXzwjYYFdGKIfs86cB1Xa6cwu5SP9NgnjmxZYw2GivF2F/ /HrkmJN3UlqnzqjicmSqhPx1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5xE+YrwD 6cA0pFYFYG0URQ4I+EgwHwYDVR0jBBgwFoAUafotkTN0HoMAQ+tA5A0ivzU4684w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDQjgxLzI4NjFFNDk2Rjg2 QTExRjBCNEJCQUYzQzRBNkY1NkJDL2Fmb3RrVE4wSG9NQVEtdEE1QTBpdnpVNDY4 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWZvdGtUTjBIb01BUS10QTVBMGl2elU0Njg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND QjgxLzI4NjFFNDk2Rjg2QTExRjBCNEJCQUYzQzRBNkY1NkJDL2Fmb3RrVE4wSG9N QVEtdEE1QTBpdnpVNDY4NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBcrEf4pE9bgh+DXpc5WPkCcG5FwJTaXSHsU7iHCGlssUOhGIqof64eHWINAU8+ IHmDF233nHzEm9gbULgO7B+F7IJnPgtXYkvLG3QhiY58WpzUAJiujVVOdJgh01r+ lMP6Viqa3m9hjb3IXlDQjmSieP/qhnct20dHwmiSr79fwAEPl8rso6O/8q0FendT QnVvMRMaXKaevYwoDzJxKmQDHHPJOjvX1EogvwFwHacjgLj0/uN/QvsoBktw4yIb eIok1hIYaMdSoKKlKbUF4RwpwqxPcBofwXKFDrlr1wZuq/T0mmhW1Bhn8i8M/bQH tCCCu4OZ5DHsvqgtazyWZz5F -----END CERTIFICATE-----Generated at Wed May 13 11:40:48 2026 by rpki-client