$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft File: Soo5XlVsx_Garmqwav8GeUSVa0Y.mft (raw, json) Hash identifier: lj+u7E0FqHYorokuBo/9pzMwr8Mvk2bDnZ0abufmVmA= Subject key identifier: A2:DA:CC:59:BC:49:92:19:69:DE:AC:0E:CF:F4:11:09:71:3C:2A:EE Authority key identifier: 4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46 Certificate issuer: /CN=A91CFD5A/serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46 Certificate serial: 01BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft Manifest number: 01B9 Signing time: Wed 13 May 2026 04:04:47 +0000 Manifest this update: Wed 13 May 2026 04:04:47 +0000 Manifest next update: Wed 20 May 2026 04:04:47 +0000 Files and hashes: 1: Soo5XlVsx_Garmqwav8GeUSVa0Y.crl (hash: lW85PxEt+kwc2nze1SfVdZgLok82udKY3ivuXSRfFyc=) 2: D60B1BCCB9AF11EE97EEDB49C4F9AE02.roa (hash: wK1+Edckckm18V5hHREZQkXgnFJR1vbGMuvkctbUg7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 04:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 447 (0x1bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFD5A, serialNumber=4A8A395E556CC7F19AAE6AB06AFF067944956B46 Validity Not Before: May 13 04:04:47 2026 GMT Not After : May 20 04:04:47 2026 GMT Subject: CN=6a03f85f-91a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8a:07:ca:ca:4c:81:36:f6:4d:51:c9:4d:c6: ab:61:ca:01:77:3c:0f:a3:b8:2d:b2:df:31:74:e0: e3:d1:dd:a6:1b:9a:a2:6f:cc:2a:18:e9:b0:56:ca: 35:84:86:b8:a1:d6:ec:fe:6d:9b:d0:9c:4c:5c:a1: e8:1f:7f:a2:ae:f7:e6:79:29:f4:2a:94:6f:ce:c2: ee:93:6c:a5:ae:be:e8:ef:8f:61:37:0b:25:7b:0b: ee:d8:68:f3:35:6f:fb:ed:3b:9d:32:b6:5e:3b:1b: 67:96:71:49:68:59:b5:38:38:3c:9b:19:7c:cc:54: 9c:96:22:2d:39:15:c5:e1:e2:e3:00:7a:c5:b0:92: e3:2b:5d:92:be:4c:84:f0:55:c4:18:c1:45:10:b5: d5:65:eb:94:9e:b5:85:f8:ee:26:02:bf:60:1f:a2: ed:a3:09:fd:01:2e:0b:31:3d:c5:e9:e3:55:28:e9: bf:d1:ca:41:6c:66:e9:0a:76:ac:13:c8:e2:ea:65: 64:81:99:1c:a1:83:14:89:dc:2e:fd:a9:57:e0:44: e0:37:56:35:08:cf:22:7c:95:f7:8e:d3:5a:66:74: c3:10:9c:d2:66:55:fc:3f:af:3a:53:34:74:55:78: f9:af:bf:e9:5a:e0:8b:3d:ba:06:20:a2:63:00:3b: 1e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:DA:CC:59:BC:49:92:19:69:DE:AC:0E:CF:F4:11:09:71:3C:2A:EE X509v3 Authority Key Identifier: keyid:4A:8A:39:5E:55:6C:C7:F1:9A:AE:6A:B0:6A:FF:06:79:44:95:6B:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Soo5XlVsx_Garmqwav8GeUSVa0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/2375B306B94511EEBB818834C4F9AE02/Soo5XlVsx_Garmqwav8GeUSVa0Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:5b:ba:f9:c9:15:45:1e:9e:8d:42:08:aa:7d:34:e8:83:22: a1:17:1c:14:67:d6:d6:76:7a:02:65:b8:ef:d2:83:69:7a:4b: d4:13:0b:4a:a0:b7:16:ea:a7:b7:e3:b9:6d:c4:07:19:6b:1c: 05:05:a7:be:36:00:dc:6e:0c:9b:c2:1e:d8:72:86:2d:66:27: 30:ea:21:1c:66:af:48:11:a4:74:d3:a0:ed:6a:42:57:ac:9d: fc:fd:22:8d:0a:d1:8b:99:68:a0:ba:00:2e:2c:88:5a:6f:7c: f5:39:c6:40:1f:04:54:bb:35:1b:58:cb:dd:f3:10:16:4c:6d: b2:f2:e9:87:21:56:7b:16:92:cc:9d:9a:11:85:5a:f6:be:e5: 54:53:d5:9a:8b:24:98:d3:47:9c:0d:69:4b:1f:78:b4:34:26: 86:5f:34:91:c2:fa:94:f7:f1:d9:47:e7:49:3b:42:34:65:35: ec:28:1d:1b:e5:0a:3e:45:d9:7f:7c:86:5d:79:2e:22:f2:ca: 16:36:a6:a8:cc:75:78:12:f3:96:0c:27:1f:bc:67:f6:2c:fd: 6c:27:6e:e6:24:a4:07:ba:b1:47:ed:3c:20:c0:ba:a3:8c:15: be:0e:61:41:73:d8:a2:88:bf:1c:d2:ae:0f:b3:74:1f:53:94: 10:b1:66:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZENUExMTAvBgNVBAUTKDRBOEEzOTVFNTU2Q0M3RjE5QUFFNkFCMDZBRkYwNjc5 NDQ5NTZCNDYwHhcNMjYwNTEzMDQwNDQ3WhcNMjYwNTIwMDQwNDQ3WjAYMRYwFAYD VQQDEw02YTAzZjg1Zi05MWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIoHyspMgTb2TVHJTcarYcoBdzwPo7gtst8xdODj0d2mG5qib8wqGOmwVso1 hIa4odbs/m2b0JxMXKHoH3+irvfmeSn0KpRvzsLuk2ylrr7o749hNwslewvu2Gjz NW/77TudMrZeOxtnlnFJaFm1ODg8mxl8zFScliItORXF4eLjAHrFsJLjK12SvkyE 8FXEGMFFELXVZeuUnrWF+O4mAr9gH6Ltown9AS4LMT3F6eNVKOm/0cpBbGbpCnas E8ji6mVkgZkcoYMUidwu/alX4ETgN1Y1CM8ifJX3jtNaZnTDEJzSZlX8P686UzR0 VXj5r7/pWuCLPboGIKJjADseZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKLazFm8 SZIZad6sDs/0EQlxPCruMB8GA1UdIwQYMBaAFEqKOV5VbMfxmq5qsGr/BnlElWtG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkQ1QS8yMzc1QjMwNkI5 NDUxMUVFQkI4MTg4MzRDNEY5QUUwMi9Tb281WGxWc3hfR2FybXF3YXY4R2VVU1Zh MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NvbzVYbFZzeF9HYXJtcXdhdjhHZVVTVmEwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkQ1QS8yMzc1QjMwNkI5NDUxMUVFQkI4MTg4MzRDNEY5QUUwMi9Tb281WGxWc3hf R2FybXF3YXY4R2VVU1ZhMFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnlu6+ckVRR6ejUIIqn006IMioRccFGfW1nZ6AmW479KDaXpL1BMLSqC3Fuqn t+O5bcQHGWscBQWnvjYA3G4Mm8Ie2HKGLWYnMOohHGavSBGkdNOg7WpCV6yd/P0i jQrRi5looLoALiyIWm989TnGQB8EVLs1G1jL3fMQFkxtsvLphyFWexaSzJ2aEYVa 9r7lVFPVmoskmNNHnA1pSx94tDQmhl80kcL6lPfx2UfnSTtCNGU17CgdG+UKPkXZ f3yGXXkuIvLKFjamqMx1eBLzlgwnH7xn9iz9bCdu5iSkB7qxR+08IMC6o4wVvg5h QXPYooi/HNKuD7N0H1OUELFmCg== -----END CERTIFICATE-----Generated at Wed May 13 11:17:49 2026 by rpki-client