$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft File: SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft (raw, json) Hash identifier: H6KkN0/uA4+kH0sDQReEFlLsju7gDjNCvR/aicBhyk8= Subject key identifier: F3:AB:C6:30:F1:32:6D:82:73:52:E6:60:E8:B7:6D:65:F1:14:37:0F Authority key identifier: 49:9D:69:1B:0F:73:2D:90:06:E9:51:3C:60:B7:36:6B:4E:69:04:00 Certificate issuer: /CN=A91D2B9A/serialNumber=499D691B0F732D9006E9513C60B7366B4E690400 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft Manifest number: 43 Signing time: Mon 11 May 2026 08:38:49 +0000 Manifest this update: Mon 11 May 2026 08:38:49 +0000 Manifest next update: Mon 18 May 2026 08:38:49 +0000 Files and hashes: 1: SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl (hash: Nby3YRMPljHb7I8rysfEVPr8gGcwYYfKw9Ca1yG3vQY=) 2: 75BE67B2F12311F09E054F8D4F6F56BC.roa (hash: QeHn1agdKxmdJdH278JH44lkIuCADGys4RpsqprN2FU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2B9A, serialNumber=499D691B0F732D9006E9513C60B7366B4E690400 Validity Not Before: May 11 08:38:49 2026 GMT Not After : May 18 08:38:49 2026 GMT Subject: CN=6a019599-137a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:46:d0:b9:fe:bb:7a:a5:04:fa:84:ff:0d:b7: 6a:18:52:1a:29:0d:40:9e:e9:7f:aa:2f:a7:a9:66: 0f:5a:04:64:e0:ea:eb:31:78:33:59:03:2f:3f:6f: d4:b8:13:5a:4c:8e:e3:8a:3a:36:7e:d0:79:cb:f7: 0a:52:61:44:95:07:02:a6:98:56:b0:74:0f:eb:10: e0:9b:57:ac:5e:ff:42:45:f3:41:06:2c:12:15:27: 1d:c7:07:c9:db:b5:d1:5a:59:15:66:a5:be:fc:46: df:3b:e1:36:71:64:61:4b:d9:f1:2c:dd:a8:39:2b: 24:f5:d9:f3:ab:08:fe:19:81:08:fd:79:e8:b8:a8: da:c4:35:98:4b:97:e6:15:73:b5:bc:59:7c:f1:ae: 89:4c:9f:35:c1:25:12:fe:e5:8b:f1:e1:0d:d1:c6: 94:9d:c4:f8:d5:5b:68:ac:e8:45:9d:10:a4:d8:b5: 6c:9f:bf:ee:a1:bf:bb:d0:4f:f4:90:02:14:b3:a5: f1:6a:b0:67:86:48:c4:30:5e:c3:78:b9:73:f5:f1: cf:94:cb:7f:04:b2:6e:70:5f:93:d0:58:4d:78:78: 30:ba:d8:84:27:10:af:12:85:38:da:4a:86:79:86: 12:b1:be:05:da:b8:83:0f:c6:d6:0a:9b:f0:10:cd: 41:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AB:C6:30:F1:32:6D:82:73:52:E6:60:E8:B7:6D:65:F1:14:37:0F X509v3 Authority Key Identifier: keyid:49:9D:69:1B:0F:73:2D:90:06:E9:51:3C:60:B7:36:6B:4E:69:04:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SZ1pGw9zLZAG6VE8YLc2a05pBAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B9A/77969B8CF12211F0AC5CDA7E4E6F56BC/SZ1pGw9zLZAG6VE8YLc2a05pBAA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:54:0d:c3:36:87:e9:dc:4d:51:d1:e8:7d:de:52:80:84:79: 27:6d:a8:ea:54:e2:07:aa:8b:85:13:4e:50:23:66:29:26:b9: f3:59:1d:d0:68:b4:26:3a:e0:de:dc:06:62:32:c5:1c:00:38: b1:a0:7b:4a:09:9b:38:bd:48:b9:be:13:0a:9f:32:c2:d8:cf: a8:76:5c:be:1e:7f:cc:07:3f:eb:37:80:cd:a1:bd:24:2c:c9: 40:a5:bf:25:59:42:6d:a4:11:e5:4a:c2:f7:d3:2f:af:fc:22: d0:7b:d1:b6:fe:64:73:f9:0f:91:f6:b8:99:44:36:ca:65:a7: 81:23:42:8a:c0:a5:84:62:28:3a:a0:5b:07:bc:01:e3:58:8c: 6e:83:9f:dc:cc:bb:44:be:37:38:34:cc:4f:20:1f:05:5b:3f: e7:27:b7:f6:cf:7b:d9:ba:7f:00:14:fc:c4:5c:af:0b:00:25: 9d:26:a0:67:d6:08:42:85:64:28:2a:07:87:3d:b2:87:d2:a4: b4:61:fe:c4:00:82:8d:65:79:0d:29:5b:3a:6f:a6:fd:09:2b: 21:86:7a:59:86:f1:ab:15:04:57:a4:db:64:d4:2a:94:eb:0e: 62:e3:b1:ac:7c:4a:09:c6:af:20:aa:d5:82:4e:56:ac:19:07: 08:7c:ce:88 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkI5QTExMC8GA1UEBRMoNDk5RDY5MUIwRjczMkQ5MDA2RTk1MTNDNjBCNzM2NkI0 RTY5MDQwMDAeFw0yNjA1MTEwODM4NDlaFw0yNjA1MTgwODM4NDlaMBgxFjAUBgNV BAMTDTZhMDE5NTk5LTEzN2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrRtC5/rt6pQT6hP8Nt2oYUhopDUCe6X+qL6epZg9aBGTg6usxeDNZAy8/b9S4 E1pMjuOKOjZ+0HnL9wpSYUSVBwKmmFawdA/rEOCbV6xe/0JF80EGLBIVJx3HB8nb tdFaWRVmpb78Rt874TZxZGFL2fEs3ag5KyT12fOrCP4ZgQj9eei4qNrENZhLl+YV c7W8WXzxrolMnzXBJRL+5Yvx4Q3RxpSdxPjVW2is6EWdEKTYtWyfv+6hv7vQT/SQ AhSzpfFqsGeGSMQwXsN4uXP18c+Uy38Esm5wX5PQWE14eDC62IQnEK8ShTjaSoZ5 hhKxvgXauIMPxtYKm/AQzUFxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU86vGMPEy bYJzUuZg6LdtZfEUNw8wHwYDVR0jBBgwFoAUSZ1pGw9zLZAG6VE8YLc2a05pBAAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQjlBLzc3OTY5QjhDRjEy MjExRjBBQzVDREE3RTRFNkY1NkJDL1NaMXBHdzl6TFpBRzZWRThZTGMyYTA1cEJB QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvU1oxcEd3OXpMWkFHNlZFOFlMYzJhMDVwQkFBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy QjlBLzc3OTY5QjhDRjEyMjExRjBBQzVDREE3RTRFNkY1NkJDL1NaMXBHdzl6TFpB RzZWRThZTGMyYTA1cEJBQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCfVA3DNofp3E1R0eh93lKAhHknbajqVOIHqouFE05QI2YpJrnzWR3QaLQmOuDe 3AZiMsUcADixoHtKCZs4vUi5vhMKnzLC2M+odly+Hn/MBz/rN4DNob0kLMlApb8l WUJtpBHlSsL30y+v/CLQe9G2/mRz+Q+R9riZRDbKZaeBI0KKwKWEYig6oFsHvAHj WIxug5/czLtEvjc4NMxPIB8FWz/nJ7f2z3vZun8AFPzEXK8LACWdJqBn1ghChWQo KgeHPbKH0qS0Yf7EAIKNZXkNKVs6b6b9CSshhnpZhvGrFQRXpNtk1CqU6w5i47Gs fEoJxq8gqtWCTlasGQcIfM6I -----END CERTIFICATE-----Generated at Wed May 13 05:10:40 2026 by rpki-client