$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft File: 8NcRIKkqhY23KUlvzL8YJcnwPGM.mft (raw, json) Hash identifier: VQ0oUmQPGlsQvrgoBIo6lsQ46X/BQmD9QwTLQ3Ak1nI= Subject key identifier: C5:1E:0D:1C:ED:8B:DC:72:F5:57:6A:62:BC:5C:A1:1E:B6:D2:17:58 Authority key identifier: F0:D7:11:20:A9:2A:85:8D:B7:29:49:6F:CC:BF:18:25:C9:F0:3C:63 Certificate issuer: /CN=A91CCB81/serialNumber=F0D71120A92A858DB729496FCCBF1825C9F03C63 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft Manifest number: 41 Signing time: Mon 11 May 2026 08:42:38 +0000 Manifest this update: Mon 11 May 2026 08:42:37 +0000 Manifest next update: Mon 18 May 2026 08:42:37 +0000 Files and hashes: 1: 8NcRIKkqhY23KUlvzL8YJcnwPGM.crl (hash: UYskj0ULK/FjVq/KLOvMQ0edQ2Q1tbvi9tVB3n+pSBw=) 2: D1F15078FC1611F0AE51583B386F56BC.roa (hash: 61n9LD0EFYPI4g25iO6i+CiUTmOdvHxb8A3EJgzxdhg=) 3: 097C10E4F92B11F090A6283D396F56BC.roa (hash: WvPz4TjN9G7hZe9oGin0ZXtjETCsaK24q7BQUFzt1Xg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.crl rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:42:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCB81, serialNumber=F0D71120A92A858DB729496FCCBF1825C9F03C63 Validity Not Before: May 11 08:42:37 2026 GMT Not After : May 18 08:42:37 2026 GMT Subject: CN=6a01967e-db00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d1:31:34:03:6f:1c:ef:6f:25:8a:c8:69:ab: b5:28:b9:94:43:b0:e1:c4:db:86:02:ae:51:5d:9d: 41:7a:74:8e:5f:e7:5a:b5:5e:87:97:3b:0a:85:7e: 0f:63:fb:02:70:13:65:c2:a6:8d:8b:bf:6b:fe:97: ab:67:d0:a8:80:b8:da:d8:64:74:7b:47:1a:25:24: 26:dc:14:f6:1f:40:d5:48:13:a8:e3:16:6b:6c:d8: c7:f7:0d:a3:95:b4:ac:25:27:8a:82:2c:fc:82:5b: 95:16:34:6a:57:87:2c:30:c8:02:dc:68:52:ab:cb: 98:82:21:fa:93:ee:66:46:eb:b9:8b:93:d6:6e:02: 57:c2:2d:db:de:b0:0f:06:82:ca:36:d3:89:f2:82: 84:06:14:17:99:43:96:b3:b7:f5:97:9d:5d:71:a1: f1:9b:a2:a1:eb:16:9b:1a:b3:69:26:90:92:e7:18: 5a:80:72:e4:b3:f3:72:19:d2:e4:80:c1:f6:5a:10: 4f:be:c8:5a:6a:4c:40:37:de:33:c6:b7:b1:b7:b2: 0e:a4:33:97:26:7b:41:21:9a:16:e7:77:f3:8e:39: 5c:29:27:b7:00:a6:83:23:27:b7:1e:c3:a8:fa:ca: 70:b3:bf:86:ad:2f:43:7d:95:47:eb:34:f3:d9:07: 8f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:1E:0D:1C:ED:8B:DC:72:F5:57:6A:62:BC:5C:A1:1E:B6:D2:17:58 X509v3 Authority Key Identifier: keyid:F0:D7:11:20:A9:2A:85:8D:B7:29:49:6F:CC:BF:18:25:C9:F0:3C:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:7a:48:c6:ce:b9:11:07:a3:1c:0f:a9:ba:2b:19:e5:47:ff: 22:d2:0e:24:78:55:29:43:28:66:f9:43:67:5e:2e:04:63:b1: 5b:ad:81:07:91:c4:d3:6b:c5:7a:3f:07:01:c3:f8:5f:7f:04: 92:38:b4:70:b9:40:19:8e:5c:39:4a:70:07:46:56:7c:49:5a: 39:18:2f:0d:78:ae:67:a6:1c:70:35:ab:42:d1:ce:71:24:92: 70:f1:bc:87:89:c4:a5:b7:93:b9:dd:e2:b6:c7:ce:16:46:66: 29:4d:5c:ed:a8:21:98:ee:7e:47:b4:fc:a2:1c:b2:98:76:48: 2e:f8:e4:7a:6f:93:8c:bd:9f:4d:bd:1a:f8:ff:d4:3b:da:c1: cb:43:66:49:52:5c:fe:e3:fb:5f:65:9b:80:c3:88:bf:57:5c: 5f:e5:b2:9f:0b:ad:2a:c2:da:f8:de:6b:39:10:69:a3:06:59: 92:fd:9e:b2:14:54:70:25:9f:4e:36:72:39:fa:b5:ba:66:0c: d1:c8:37:29:eb:8c:7f:7d:0c:e9:81:28:d1:09:21:b9:ad:6f: 56:1b:de:30:a1:77:91:a7:36:66:cc:04:fd:fd:03:27:c8:1a: be:b0:68:c4:86:25:3a:f6:b3:e3:89:33:b7:02:76:7e:24:99: a1:5c:2f:d0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0I4MTExMC8GA1UEBRMoRjBENzExMjBBOTJBODU4REI3Mjk0OTZGQ0NCRjE4MjVD OUYwM0M2MzAeFw0yNjA1MTEwODQyMzdaFw0yNjA1MTgwODQyMzdaMBgxFjAUBgNV BAMTDTZhMDE5NjdlLWRiMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDR0TE0A28c728lishpq7UouZRDsOHE24YCrlFdnUF6dI5f51q1XoeXOwqFfg9j +wJwE2XCpo2Lv2v+l6tn0KiAuNrYZHR7RxolJCbcFPYfQNVIE6jjFmts2Mf3DaOV tKwlJ4qCLPyCW5UWNGpXhywwyALcaFKry5iCIfqT7mZG67mLk9ZuAlfCLdvesA8G gso204nygoQGFBeZQ5azt/WXnV1xofGboqHrFpsas2kmkJLnGFqAcuSz83IZ0uSA wfZaEE++yFpqTEA33jPGt7G3sg6kM5cme0Ehmhbnd/OOOVwpJ7cApoMjJ7cew6j6 ynCzv4atL0N9lUfrNPPZB48nAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUxR4NHO2L 3HL1V2pivFyhHrbSF1gwHwYDVR0jBBgwFoAU8NcRIKkqhY23KUlvzL8YJcnwPGMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDQjgxLzQxRkREMzg4Rjg2 QTExRjBCNEJCQUYzQzRBNkY1NkJDLzhOY1JJS2txaFkyM0tVbHZ6TDhZSmNud1BH TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvOE5jUklLa3FoWTIzS1VsdnpMOFlKY253UEdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND QjgxLzQxRkREMzg4Rjg2QTExRjBCNEJCQUYzQzRBNkY1NkJDLzhOY1JJS2txaFky M0tVbHZ6TDhZSmNud1BHTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCaekjGzrkRB6McD6m6KxnlR/8i0g4keFUpQyhm+UNnXi4EY7FbrYEHkcTTa8V6 PwcBw/hffwSSOLRwuUAZjlw5SnAHRlZ8SVo5GC8NeK5nphxwNatC0c5xJJJw8byH icSlt5O53eK2x84WRmYpTVztqCGY7n5HtPyiHLKYdkgu+OR6b5OMvZ9NvRr4/9Q7 2sHLQ2ZJUlz+4/tfZZuAw4i/V1xf5bKfC60qwtr43ms5EGmjBlmS/Z6yFFRwJZ9O NnI5+rW6ZgzRyDcp64x/fQzpgSjRCSG5rW9WG94woXeRpzZmzAT9/QMnyBq+sGjE hiU69rPjiTO3AnZ+JJmhXC/Q -----END CERTIFICATE-----Generated at Wed May 13 06:32:53 2026 by rpki-client