$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.mft File: pGzkKxP6P2ujzZoxqfPRYSbK8Xg.mft (raw, json) Hash identifier: HcJtGvj3a2JqVEBn9s8bdIXjBFK6VOQvwvE+06EW0ho= Subject key identifier: AB:9F:BA:44:BA:DD:78:FF:66:7D:83:DD:D7:47:C6:89:50:BA:43:89 Authority key identifier: A4:6C:E4:2B:13:FA:3F:6B:A3:CD:9A:31:A9:F3:D1:61:26:CA:F1:78 Certificate issuer: /CN=A91D4FA2/serialNumber=A46CE42B13FA3F6BA3CD9A31A9F3D16126CAF178 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.mft Manifest number: 0D Signing time: Mon 11 May 2026 09:16:32 +0000 Manifest this update: Mon 11 May 2026 09:16:31 +0000 Manifest next update: Mon 18 May 2026 09:16:31 +0000 Files and hashes: 1: pGzkKxP6P2ujzZoxqfPRYSbK8Xg.crl (hash: cqX5R3yZXLf6fpNxzLlo9UCtOf85RanCJ+LqUH+6Z3E=) 2: 40719A6C3EF211F1A0C63BEFC0833773.roa (hash: trUCovE1yXz1mUR6+zodwcoApF1cfjXUeBQcGyK6Uxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.crl rsync://rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 09:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4FA2, serialNumber=A46CE42B13FA3F6BA3CD9A31A9F3D16126CAF178 Validity Not Before: May 11 09:16:31 2026 GMT Not After : May 18 09:16:31 2026 GMT Subject: CN=6a019e70-8248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:69:d3:fa:40:fe:1b:b0:45:c5:7c:60:86:73: ba:05:b9:b7:d7:ce:dd:eb:b0:a5:e9:b8:57:fe:68: f0:e8:ae:76:dd:a4:59:66:ad:05:54:7a:a3:ad:c3: 10:5e:85:f8:07:42:40:bb:44:ed:ba:10:2a:83:cb: 50:e2:85:8c:98:59:8b:57:47:af:b3:e1:0b:a8:aa: 2d:bf:d8:d6:9b:4d:1f:b7:32:85:43:c3:ed:5c:71: 5e:b3:c2:04:de:d6:80:0d:84:57:71:d8:88:17:cf: 55:4a:a7:5d:f3:5e:d9:b2:68:1f:3c:1b:72:00:b2: e3:3b:3f:22:c8:37:8a:cf:b5:1a:36:e6:97:7d:17: e2:c0:cb:77:dd:e5:57:67:a9:a0:2d:da:f0:c3:10: f5:f1:a5:f1:fe:0f:7b:88:37:da:2f:be:f8:50:7e: 7e:21:4d:e8:f6:87:c9:e5:b9:d4:ce:64:5c:68:d8: 46:5f:4f:0b:1b:68:cf:7a:38:68:e3:57:f1:85:bb: 61:ee:6d:3c:6b:15:99:6c:bb:7d:91:93:59:86:12: 1a:91:f2:15:bb:86:b7:a9:bd:68:89:3c:e6:18:c2: 70:75:63:e9:d6:3f:ab:3d:43:61:c2:e3:04:df:83: 19:12:37:a0:8c:ac:41:fc:f2:68:a4:ca:fc:3d:2a: f2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:9F:BA:44:BA:DD:78:FF:66:7D:83:DD:D7:47:C6:89:50:BA:43:89 X509v3 Authority Key Identifier: keyid:A4:6C:E4:2B:13:FA:3F:6B:A3:CD:9A:31:A9:F3:D1:61:26:CA:F1:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4FA2/87C4998E3E2D11F18A621C6DB7833773/pGzkKxP6P2ujzZoxqfPRYSbK8Xg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:47:33:72:7f:be:44:da:e1:2b:a8:a2:64:da:05:9e:36:3d: 53:d7:73:fd:fa:71:b5:30:ce:1e:1b:d2:bf:4e:f9:e4:f8:17: bc:ea:f3:22:54:75:f7:bf:8b:e7:78:a7:8f:f3:f8:71:67:53: 8c:7b:1a:98:b4:c3:ad:0b:a6:05:05:f3:a8:15:32:c4:39:5f: 40:ee:77:d8:5f:ed:dd:19:4f:92:a6:f8:bd:88:97:70:93:f4: 18:0b:a9:61:ca:5e:02:3e:e5:5a:20:c1:66:cc:8f:22:c1:d2: a6:d2:fa:dc:81:45:59:7e:cb:be:46:b5:ea:48:38:cf:aa:56: d6:7c:e9:0e:d7:b7:0c:ca:c2:28:e8:89:ae:b2:a3:1e:6a:6b: 9f:23:67:f7:df:3a:da:8e:da:7e:c2:5e:08:d9:38:ed:bc:f3: c0:33:9a:4a:f1:6c:46:96:ef:ab:50:47:86:c1:60:80:a2:2a: b0:3a:1e:f0:cf:57:71:a1:34:1b:9b:74:31:0e:da:aa:86:dc: b4:f2:24:55:c3:d0:39:d1:b1:21:9d:a6:d3:23:2a:fa:e7:3d: b5:8d:e4:de:33:eb:b7:c5:68:3b:62:58:06:d4:ad:2b:f5:98: 16:ab:6b:50:80:d4:4a:96:72:0a:02:fe:db:d8:88:93:8d:1b: 9a:cf:36:7a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NEZBMjExMC8GA1UEBRMoQTQ2Q0U0MkIxM0ZBM0Y2QkEzQ0Q5QTMxQTlGM0QxNjEy NkNBRjE3ODAeFw0yNjA1MTEwOTE2MzFaFw0yNjA1MTgwOTE2MzFaMBgxFjAUBgNV BAMTDTZhMDE5ZTcwLTgyNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDradP6QP4bsEXFfGCGc7oFubfXzt3rsKXpuFf+aPDornbdpFlmrQVUeqOtwxBe hfgHQkC7RO26ECqDy1DihYyYWYtXR6+z4Quoqi2/2NabTR+3MoVDw+1ccV6zwgTe 1oANhFdx2IgXz1VKp13zXtmyaB88G3IAsuM7PyLIN4rPtRo25pd9F+LAy3fd5Vdn qaAt2vDDEPXxpfH+D3uIN9ovvvhQfn4hTej2h8nludTOZFxo2EZfTwsbaM96OGjj V/GFu2HubTxrFZlsu32Rk1mGEhqR8hW7hrepvWiJPOYYwnB1Y+nWP6s9Q2HC4wTf gxkSN6CMrEH88mikyvw9KvJLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUq5+6RLrd eP9mfYPd10fGiVC6Q4kwHwYDVR0jBBgwFoAUpGzkKxP6P2ujzZoxqfPRYSbK8Xgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0RkEyLzg3QzQ5OThFM0Uy RDExRjE4QTYyMUM2REI3ODMzNzczL3BHemtLeFA2UDJ1anpab3hxZlBSWVNiSzhY Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcEd6a0t4UDZQMnVqelpveHFmUFJZU2JLOFhnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 RkEyLzg3QzQ5OThFM0UyRDExRjE4QTYyMUM2REI3ODMzNzczL3BHemtLeFA2UDJ1 anpab3hxZlBSWVNiSzhYZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCmRzNyf75E2uErqKJk2gWeNj1T13P9+nG1MM4eG9K/Tvnk+Be86vMiVHX3v4vn eKeP8/hxZ1OMexqYtMOtC6YFBfOoFTLEOV9A7nfYX+3dGU+Spvi9iJdwk/QYC6lh yl4CPuVaIMFmzI8iwdKm0vrcgUVZfsu+RrXqSDjPqlbWfOkO17cMysIo6ImusqMe amufI2f33zrajtp+wl4I2TjtvPPAM5pK8WxGlu+rUEeGwWCAoiqwOh7wz1dxoTQb m3QxDtqqhty08iRVw9A50bEhnabTIyr65z21jeTeM+u3xWg7YlgG1K0r9ZgWq2tQ gNRKlnIKAv7b2IiTjRuazzZ6 -----END CERTIFICATE-----Generated at Wed May 13 06:00:58 2026 by rpki-client