$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft File: ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft (raw, json) Hash identifier: atkExz/ClK+iEqWxh/RYg0Fn2f7u47Z91iXNUAEuO4I= Subject key identifier: 3B:83:97:FD:8A:6A:EE:33:03:75:C8:23:F0:12:CC:37:91:05:36:98 Authority key identifier: 6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE Certificate issuer: /CN=A91CE978/serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE Certificate serial: 3609 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft Manifest number: 3598 Signing time: Tue 12 May 2026 15:13:17 +0000 Manifest this update: Tue 12 May 2026 15:13:16 +0000 Manifest next update: Tue 19 May 2026 15:13:16 +0000 Files and hashes: 1: ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl (hash: LqKgOroyiu7Tc6OxwJ+2YCaCEAfKq6wSlrjnhH23aeU=) 2: D1EE6884F06C11EEA5BAA656C4F9AE02.roa (hash: poNMGSGrpTAPCrqfdK25sN3Vft9NfKGAwiYy9nIgFS0=) 3: D79607EEDCDD11EE85DBEB12C4F9AE02.roa (hash: 8+4nPBH0mKjruMVqsF1eFTkdvjJp7WM7Sk6y7pERmRQ=) 4: 29F7413CBB6011EEB59E5D81C4F9AE02.roa (hash: 5d46M17tPjCDpGTGqDqbIScbNZIYW2F1SqaVmxxIbOY=) 5: DDF4B0D2F08C11EEB70A1F76C4F9AE02.roa (hash: 9wXfax8XfEz0WLGCBKAePLKNXcUyi15PNn60ZKYLt68=) 6: 64E2B628BE4911EE897F291BC4F9AE02.roa (hash: mK73bfSEN6zR8+iXpbDtVPOlbDMpY+j7LIX++cafcEE=) 7: E6F73E22B99E11EEBF189021C4F9AE02.roa (hash: 8S+zuChDcqGL9ZeLsJ6JHvqala1ytBwLnGv387U8Cx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 15:13:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13833 (0x3609) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE978, serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE Validity Not Before: May 12 15:13:16 2026 GMT Not After : May 19 15:13:16 2026 GMT Subject: CN=6a03438c-cabc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:71:ed:12:9a:20:ab:fd:ac:54:4b:b8:9e:a9: 51:7f:d3:f4:db:b1:57:a2:49:ab:7e:08:28:36:ab: d0:3d:76:1b:6b:3f:d2:53:11:4f:e7:40:55:eb:85: e5:4f:16:59:53:bc:08:e2:bd:8e:13:ea:df:ae:66: 5d:0d:2a:85:69:bd:5b:48:3e:5c:fd:b0:23:14:c3: 1c:01:59:98:03:42:8d:72:e6:11:dd:49:e0:f7:3d: f2:b0:56:12:3f:03:ad:21:b4:fb:36:4d:be:5d:54: 82:f4:3d:2b:23:b0:b0:1f:cd:73:fe:6a:54:50:ef: 28:bb:b6:97:fb:60:43:2d:95:24:3c:e6:63:dc:ba: 5a:90:eb:3c:97:be:4d:7c:db:a7:75:64:a8:a2:78: 10:4f:8b:fa:a9:74:3a:a9:41:25:13:a1:6a:ba:b6: be:86:bc:3f:0e:7c:7b:7d:f0:34:da:58:d7:ab:66: a7:b5:87:30:e0:b2:48:5a:4f:02:31:4b:f2:5f:3d: f0:ba:2f:82:67:23:ef:7a:33:71:18:37:41:99:31: 7d:82:83:d2:74:37:37:97:4d:c5:eb:f8:14:a8:7d: db:92:89:14:d3:01:4f:83:9a:c0:e3:c5:6f:48:a7: 42:5a:bf:3e:96:23:93:f2:51:c8:32:1f:f4:31:44: dd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:83:97:FD:8A:6A:EE:33:03:75:C8:23:F0:12:CC:37:91:05:36:98 X509v3 Authority Key Identifier: keyid:6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:5f:29:31:db:eb:85:c4:0e:c5:90:9c:4e:f6:60:33:b8:03: 26:a5:0f:60:31:d5:8c:a5:81:72:e6:75:da:d1:3e:f2:c9:a6: 64:80:1b:7f:18:cb:62:27:39:70:d3:a1:02:21:db:1e:82:08: a7:ce:4d:6a:2c:de:0e:f3:dc:86:08:66:2c:b1:53:d7:10:f7: 4f:c4:36:ff:ab:b3:30:d5:7f:e2:da:49:7a:55:a8:42:d2:ad: ad:a3:0b:4d:98:b7:6c:ce:9c:ac:c4:7b:fa:2e:76:9f:1a:9d: ab:09:e7:44:1f:ee:f2:80:9e:34:9d:e6:ce:01:c4:c2:c4:ff: f1:c5:58:3a:e3:13:a9:ee:ee:42:da:f5:dc:f1:96:d4:71:1d: d3:83:cc:34:ca:91:3d:da:5f:ec:3b:6d:b4:be:b1:80:10:f6: 4a:13:46:4f:69:3c:be:7f:4a:6d:14:10:0e:0b:54:9e:2f:89: 94:84:18:23:31:5c:e1:91:f2:b2:44:b9:8f:ec:26:11:ac:dc: 3d:37:bb:2e:61:df:e6:20:78:cb:7c:d2:df:8c:1f:cd:89:88: 17:50:39:a0:78:9a:58:0f:ca:93:7b:6a:f0:e9:f3:5f:9c:e9: 64:99:66:61:70:fa:32:01:03:00:40:92:49:22:9f:79:dc:87: 4a:cc:a4:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U5NzgxMTAvBgNVBAUTKDZBMUU0RjcyODQ3RUIzNjk5NTIyQzkzRDI2NzczRjBE RjgzOTZFQkUwHhcNMjYwNTEyMTUxMzE2WhcNMjYwNTE5MTUxMzE2WjAYMRYwFAYD VQQDEw02YTAzNDM4Yy1jYWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk3HtEpogq/2sVEu4nqlRf9P027FXokmrfggoNqvQPXYbaz/SUxFP50BV64Xl TxZZU7wI4r2OE+rfrmZdDSqFab1bSD5c/bAjFMMcAVmYA0KNcuYR3Ung9z3ysFYS PwOtIbT7Nk2+XVSC9D0rI7CwH81z/mpUUO8ou7aX+2BDLZUkPOZj3LpakOs8l75N fNundWSoongQT4v6qXQ6qUElE6Fqura+hrw/Dnx7ffA02ljXq2antYcw4LJIWk8C MUvyXz3wui+CZyPvejNxGDdBmTF9goPSdDc3l03F6/gUqH3bkokU0wFPg5rA48Vv SKdCWr8+liOT8lHIMh/0MUTdSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDuDl/2K au4zA3XII/ASzDeRBTaYMB8GA1UdIwQYMBaAFGoeT3KEfrNplSLJPSZ3Pw34OW6+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTk3OC8zMjIzRjM1RTFE OTgxMUUyOEE4QzJFODIwOEIwMkNEMi9haDVQY29SLXMybVZJc2s5Sm5jX0RmZzVi cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FoNVBjb1ItczJtVklzazlKbmNfRGZnNWJyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTk3OC8zMjIzRjM1RTFEOTgxMUUyOEE4QzJFODIwOEIwMkNEMi9haDVQY29SLXMy bVZJc2s5Sm5jX0RmZzVicjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlF8pMdvrhcQOxZCcTvZgM7gDJqUPYDHVjKWBcuZ12tE+8smmZIAbfxjLYic5 cNOhAiHbHoIIp85NaizeDvPchghmLLFT1xD3T8Q2/6uzMNV/4tpJelWoQtKtraML TZi3bM6crMR7+i52nxqdqwnnRB/u8oCeNJ3mzgHEwsT/8cVYOuMTqe7uQtr13PGW 1HEd04PMNMqRPdpf7DtttL6xgBD2ShNGT2k8vn9KbRQQDgtUni+JlIQYIzFc4ZHy skS5j+wmEazcPTe7LmHf5iB4y3zS34wfzYmIF1A5oHiaWA/Kk3tq8OnzX5zpZJlm YXD6MgEDAECSSSKfedyHSsykcA== -----END CERTIFICATE-----Generated at Wed May 13 01:31:10 2026 by rpki-client