$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft File: T_-scXgTOS7hyHajIWceHWwqubQ.mft (raw, json) Hash identifier: IZpXZSK56dJGkX3JpcZz7NmIY7OhIeqF2t/nmheN+3Y= Subject key identifier: 4A:5E:68:8C:B5:C9:B0:A9:95:7E:5A:BD:F2:0A:CE:81:5F:47:72:E4 Authority key identifier: 4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4 Certificate issuer: /CN=A91CE39F/serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4 Certificate serial: 088E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft Manifest number: 0876 Signing time: Tue 12 May 2026 20:47:26 +0000 Manifest this update: Tue 12 May 2026 20:47:25 +0000 Manifest next update: Tue 19 May 2026 20:47:25 +0000 Files and hashes: 1: T_-scXgTOS7hyHajIWceHWwqubQ.crl (hash: eND2OC4Un3kk0S5fBkHYcE9dFP682eKQx1PXD1Q5sIw=) 2: CAF5CED2E1A511EC8AB72944C4F9AE02.roa (hash: ZEKagWdv0yeK8YKk4M4X2WCGHhhS2XrEDrg/1/ecl20=) 3: CC57D98CE1A511EC8AB72944C4F9AE02.roa (hash: W7VEuZ0XJHIgHkuqLntiZruVzDvsuhDDdtNUQSpIguA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:47:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2190 (0x88e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE39F, serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4 Validity Not Before: May 12 20:47:25 2026 GMT Not After : May 19 20:47:25 2026 GMT Subject: CN=6a0391de-72fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f2:37:1f:af:06:7b:58:a8:a5:88:07:3d:3c: 2d:fa:a9:12:d8:21:5b:e6:42:bc:62:41:33:2a:8d: f6:a0:b5:3c:fe:3d:b7:e2:72:cb:18:42:3a:18:f7: 15:1c:bd:4e:4b:3f:e7:b4:69:fc:80:a6:ef:c6:01: dd:ed:78:2d:6b:6b:2f:2a:2f:d5:99:4a:ec:0f:5a: 77:4c:1a:41:f7:20:39:34:34:a9:b3:9d:b7:f6:c5: b2:7e:58:dd:be:04:d7:4b:b1:88:ed:a7:17:95:db: a3:c5:30:5c:89:9a:7e:94:14:2b:25:4f:45:2b:b1: 6e:28:ed:60:81:ff:0f:1d:f2:77:9b:8f:c5:72:27: 4e:03:43:43:7e:c4:70:fe:d1:bc:f8:67:66:81:80: 16:b2:ed:21:1e:df:ad:2f:f7:e2:36:6b:46:51:35: 98:e7:3d:67:f5:a2:67:3b:1e:2f:5e:ec:4a:86:84: ff:a7:3f:25:3e:9b:28:56:7d:12:0c:88:3b:59:57: da:64:0a:e7:ec:ba:0c:0c:10:55:a2:6a:d9:9d:64: 32:54:a5:d2:a8:0d:df:0b:79:ec:4a:49:b2:bb:50: ae:f1:ce:cc:78:1a:91:7f:53:93:0f:26:fa:4a:b9: ee:2b:67:ac:d1:fd:8a:86:6e:e3:fb:4c:49:7a:b2: 3e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:5E:68:8C:B5:C9:B0:A9:95:7E:5A:BD:F2:0A:CE:81:5F:47:72:E4 X509v3 Authority Key Identifier: keyid:4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:e9:c4:5d:3d:af:dc:ea:23:d6:75:6a:7d:c2:75:26:42:a1: 8b:57:36:6f:7b:5b:96:a6:45:a9:25:fe:f9:05:8b:00:ba:24: 03:82:cc:d9:34:0b:24:85:16:1e:f1:64:62:49:dc:2f:aa:c7: a8:70:bf:6d:4c:6e:56:c9:e9:96:2b:08:52:d6:6c:22:93:e4: 3a:8f:46:8e:d9:02:d3:6c:22:97:8b:66:fb:3b:2b:44:ec:81: 2c:54:e3:7e:b1:7e:29:06:9a:4b:e8:29:1a:c6:5e:70:7d:c7: c0:69:d7:31:c5:21:50:9c:37:65:d6:06:47:6d:17:7b:0f:c0: 2f:e3:93:fd:cf:f0:f3:23:31:09:db:de:df:7d:1b:b0:18:64: 4c:38:aa:8d:5d:13:1e:1c:b4:80:3b:21:7e:87:77:8d:98:9d: 73:b9:66:eb:4a:b5:ea:c9:19:68:02:6a:b4:b3:b3:83:9c:30: fd:ea:22:64:b0:67:64:71:e7:1a:fa:95:7b:1a:e4:26:89:18: e8:0b:23:73:3d:ac:41:44:10:9c:65:42:bf:57:6a:16:f1:3e: 0d:f6:3d:a2:b7:ce:96:8c:5c:ff:72:2b:e3:01:6a:45:ff:9f: 06:5b:79:37:52:45:a4:2b:a2:09:b2:e0:60:cf:58:f7:09:39: f9:48:a9:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzOUYxMTAvBgNVBAUTKDRGRkZBQzcxNzgxMzM5MkVFMUM4NzZBMzIxNjcxRTFE NkMyQUI5QjQwHhcNMjYwNTEyMjA0NzI1WhcNMjYwNTE5MjA0NzI1WjAYMRYwFAYD VQQDEw02YTAzOTFkZS03MmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvI3H68Ge1iopYgHPTwt+qkS2CFb5kK8YkEzKo32oLU8/j234nLLGEI6GPcV HL1OSz/ntGn8gKbvxgHd7Xgta2svKi/VmUrsD1p3TBpB9yA5NDSps5239sWyfljd vgTXS7GI7acXldujxTBciZp+lBQrJU9FK7FuKO1ggf8PHfJ3m4/FcidOA0NDfsRw /tG8+GdmgYAWsu0hHt+tL/fiNmtGUTWY5z1n9aJnOx4vXuxKhoT/pz8lPpsoVn0S DIg7WVfaZArn7LoMDBBVomrZnWQyVKXSqA3fC3nsSkmyu1Cu8c7MeBqRf1OTDyb6 SrnuK2es0f2Khm7j+0xJerI+BwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEpeaIy1 ybCplX5avfIKzoFfR3LkMB8GA1UdIwQYMBaAFE//rHF4Ezku4ch2oyFnHh1sKrm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM5Ri9DMTVDNDFCNEZE NTcxMUVBQkMzQ0EyNERDNEY5QUUwMi9UXy1zY1hnVE9TN2h5SGFqSVdjZUhXd3F1 YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RfLXNjWGdUT1M3aHlIYWpJV2NlSFd3cXViUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTM5Ri9DMTVDNDFCNEZENTcxMUVBQkMzQ0EyNERDNEY5QUUwMi9UXy1zY1hnVE9T N2h5SGFqSVdjZUhXd3F1YlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuenEXT2v3Ooj1nVqfcJ1JkKhi1c2b3tblqZFqSX++QWLALokA4LM2TQLJIUW HvFkYkncL6rHqHC/bUxuVsnplisIUtZsIpPkOo9GjtkC02wil4tm+zsrROyBLFTj frF+KQaaS+gpGsZecH3HwGnXMcUhUJw3ZdYGR20Xew/AL+OT/c/w8yMxCdve330b sBhkTDiqjV0THhy0gDshfod3jZidc7lm60q16skZaAJqtLOzg5ww/eoiZLBnZHHn GvqVexrkJokY6Asjcz2sQUQQnGVCv1dqFvE+DfY9orfOloxc/3Ir4wFqRf+fBlt5 N1JFpCuiCbLgYM9Y9wk5+UipJQ== -----END CERTIFICATE-----Generated at Wed May 13 02:25:04 2026 by rpki-client