$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft File: -Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft (raw, json) Hash identifier: Rn1sLP/aK9XoVHhjla6yoh+7E3Ims8lSJfdJbe/Mrow= Subject key identifier: 2A:97:E3:E2:F4:D4:8A:A2:E9:AB:9F:2F:A8:27:55:6F:F4:FC:BA:5B Authority key identifier: F9:1A:3A:98:31:43:84:C4:03:A8:FF:22:A4:53:BC:A1:A3:BA:6C:D8 Certificate issuer: /CN=A91D3102/serialNumber=F91A3A98314384C403A8FF22A453BCA1A3BA6CD8 Certificate serial: 2E95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft Manifest number: 2E76 Signing time: Tue 12 May 2026 15:29:33 +0000 Manifest this update: Tue 12 May 2026 15:29:33 +0000 Manifest next update: Tue 19 May 2026 15:29:33 +0000 Files and hashes: 1: -Ro6mDFDhMQDqP8ipFO8oaO6bNg.crl (hash: cRfSW+SSSlEpPLCd0SsMTpggTEegFVioe6ToCMsE9LE=) 2: 611D8094B13D11E59299870AC4F9AE02.roa (hash: 6f1TkFWNlMl/F/acGbghOLoUP+OqCJaMnvA5r+odhLo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.crl rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 15:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11925 (0x2e95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3102, serialNumber=F91A3A98314384C403A8FF22A453BCA1A3BA6CD8 Validity Not Before: May 12 15:29:33 2026 GMT Not After : May 19 15:29:33 2026 GMT Subject: CN=6a03475d-a234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8c:16:a4:d9:d3:42:01:75:7e:c8:80:26:f0: c8:ed:61:a8:18:48:1a:14:d7:39:09:0b:51:a7:80: 22:37:98:2b:73:4f:cb:2a:4c:3e:67:eb:ac:f3:fd: 24:9e:de:f0:bf:b6:9c:7b:ee:95:27:f7:89:07:88: 61:6f:da:13:91:79:c1:3a:f5:5f:14:f2:9d:85:d5: 15:de:41:d8:32:62:6c:fb:37:e3:f7:5a:4f:62:9e: ef:d3:ae:65:80:e6:f4:b1:ff:23:b4:f1:d3:1a:d5: 13:9e:c8:bc:9a:60:48:57:58:3d:f0:b5:65:28:91: c6:5a:bd:de:b3:8c:54:dc:30:bc:99:2b:b6:a2:10: 3f:d9:44:a1:fe:67:c2:83:f7:59:07:c3:06:44:36: 3c:0a:35:b1:47:de:7f:bc:72:e2:1b:6d:49:4e:83: ff:f9:db:b3:97:99:04:c1:c7:c9:75:1e:45:0d:de: 4a:fe:c5:2b:c0:a5:96:7d:2b:14:64:16:e1:27:95: eb:44:c1:8d:bd:1d:b4:aa:2c:6d:c1:94:b9:63:29: b3:59:23:72:34:e9:f0:88:05:09:99:b4:72:ff:0c: ed:50:c7:39:40:dd:5e:7d:1f:79:56:54:19:04:b7: 4e:65:8f:de:70:0d:55:60:ea:de:b7:42:eb:62:14: 81:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:97:E3:E2:F4:D4:8A:A2:E9:AB:9F:2F:A8:27:55:6F:F4:FC:BA:5B X509v3 Authority Key Identifier: keyid:F9:1A:3A:98:31:43:84:C4:03:A8:FF:22:A4:53:BC:A1:A3:BA:6C:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:59:25:27:7b:d2:e0:2c:d2:5d:52:25:a2:1b:21:49:e5:a8: f9:dd:82:16:67:a5:74:ee:bb:09:cb:b3:58:1e:a4:c0:2d:1a: 77:08:8b:e5:bc:30:0e:5f:ee:8d:7c:6c:ca:9e:02:7f:c3:fb: ca:f8:9f:17:af:64:32:56:fe:9f:c3:20:59:eb:cf:94:6d:1e: 10:2b:8b:c6:64:0a:dd:ed:2b:06:9a:6e:dd:20:23:57:b7:ef: cd:21:38:e2:56:68:6b:92:ee:68:8f:d6:0d:9a:92:b1:cc:fd: f4:5f:da:73:fe:f1:15:3c:f7:80:da:a6:49:45:11:98:d9:ca: e1:fd:ea:83:75:f8:a0:32:09:59:0c:1d:8c:31:91:00:a1:35: 02:7a:10:35:b2:8c:d1:44:4a:40:e3:a6:1d:1a:81:ed:4a:e7: 12:c6:b9:02:bd:45:b2:bb:0e:c0:a0:65:70:7b:59:fb:c7:76: fa:8a:3d:f2:3f:8f:30:a3:cb:c6:e0:a5:64:03:b1:18:7b:c4: 5f:62:98:80:3a:be:8f:ca:50:50:10:99:23:58:4f:39:11:df: 82:0d:fd:c2:60:4c:55:f6:a4:66:08:6a:18:c3:b7:b0:26:bc: 81:b5:37:86:6a:71:28:ff:cb:05:6d:48:89:b0:cf:05:d7:ce: d0:54:0d:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMxMDIxMTAvBgNVBAUTKEY5MUEzQTk4MzE0Mzg0QzQwM0E4RkYyMkE0NTNCQ0Ex QTNCQTZDRDgwHhcNMjYwNTEyMTUyOTMzWhcNMjYwNTE5MTUyOTMzWjAYMRYwFAYD VQQDEw02YTAzNDc1ZC1hMjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArIwWpNnTQgF1fsiAJvDI7WGoGEgaFNc5CQtRp4AiN5grc0/LKkw+Z+us8/0k nt7wv7ace+6VJ/eJB4hhb9oTkXnBOvVfFPKdhdUV3kHYMmJs+zfj91pPYp7v065l gOb0sf8jtPHTGtUTnsi8mmBIV1g98LVlKJHGWr3es4xU3DC8mSu2ohA/2USh/mfC g/dZB8MGRDY8CjWxR95/vHLiG21JToP/+duzl5kEwcfJdR5FDd5K/sUrwKWWfSsU ZBbhJ5XrRMGNvR20qixtwZS5YymzWSNyNOnwiAUJmbRy/wztUMc5QN1efR95VlQZ BLdOZY/ecA1VYOret0LrYhSBkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCqX4+L0 1Iqi6aufL6gnVW/0/LpbMB8GA1UdIwQYMBaAFPkaOpgxQ4TEA6j/IqRTvKGjumzY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzEwMi9ENEFFRTJDODc2 OEUxMUUzOTlBOTU3NDU1OTExRUEzMi8tUm82bURGRGhNUURxUDhpcEZPOG9hTzZi TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1SbzZtREZEaE1RRHFQOGlwRk84b2FPNmJOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzEwMi9ENEFFRTJDODc2OEUxMUUzOTlBOTU3NDU1OTExRUEzMi8tUm82bURGRGhN UURxUDhpcEZPOG9hTzZiTmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYVklJ3vS4CzSXVIlohshSeWo+d2CFmeldO67CcuzWB6kwC0adwiL5bwwDl/u jXxsyp4Cf8P7yvifF69kMlb+n8MgWevPlG0eECuLxmQK3e0rBppu3SAjV7fvzSE4 4lZoa5LuaI/WDZqSscz99F/ac/7xFTz3gNqmSUURmNnK4f3qg3X4oDIJWQwdjDGR AKE1AnoQNbKM0URKQOOmHRqB7UrnEsa5Ar1FsrsOwKBlcHtZ+8d2+oo98j+PMKPL xuClZAOxGHvEX2KYgDq+j8pQUBCZI1hPORHfgg39wmBMVfakZghqGMO3sCa8gbU3 hmpxKP/LBW1IibDPBdfO0FQNVw== -----END CERTIFICATE-----Generated at Wed May 13 12:19:42 2026 by rpki-client