$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft File: 0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft (raw, json) Hash identifier: sbGU/r0AMwHpwzXE2j75SE7ZiYGhBzrIO4rt/T2VkfY= Subject key identifier: 20:B5:36:66:7F:D8:BA:C7:99:0D:D0:01:FD:15:85:CA:B3:D0:FE:E0 Authority key identifier: D2:C4:67:BC:3C:62:6B:C5:E6:AE:1B:2A:4D:23:57:11:D8:19:CA:E4 Certificate issuer: /CN=A91D6C43/serialNumber=D2C467BC3C626BC5E6AE1B2A4D235711D819CAE4 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0sRnvDxia8XmrhsqTSNXEdgZyuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft Manifest number: 2F Signing time: Mon 11 May 2026 08:55:39 +0000 Manifest this update: Mon 11 May 2026 08:55:39 +0000 Manifest next update: Mon 18 May 2026 08:55:39 +0000 Files and hashes: 1: 0sRnvDxia8XmrhsqTSNXEdgZyuQ.crl (hash: whXHwpP33J/zBCrdcRROvOruDiNjmq5s/HAUB5w1srs=) 2: DF277BF6108811F191FBC4DC323D8C67.roa (hash: kvVPZoMA2NCQIEL7Qt23JRtXW0EGzPWXpSZ3FwVtIdw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.crl rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0sRnvDxia8XmrhsqTSNXEdgZyuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:55:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6C43, serialNumber=D2C467BC3C626BC5E6AE1B2A4D235711D819CAE4 Validity Not Before: May 11 08:55:39 2026 GMT Not After : May 18 08:55:39 2026 GMT Subject: CN=6a01998b-e1ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:51:97:06:3f:e2:89:d9:36:38:d8:d7:7c:f3: 19:12:ae:43:dc:a7:3e:66:29:e9:bc:0a:03:2d:0a: 5c:2c:be:39:ae:1c:be:f1:2a:4a:eb:26:18:d7:7c: 80:65:a1:23:76:6b:fe:a7:b6:ac:bc:17:91:01:23: c8:b3:81:b5:73:2f:ae:28:68:5d:bc:e9:11:d3:58: 13:d9:d1:a9:55:52:d1:4f:2d:21:bd:f6:0d:62:df: a9:34:87:cb:48:59:9f:06:8a:b4:f5:4e:cf:84:23: 9e:b8:39:80:b7:51:92:3c:fd:a5:f0:d9:1a:cc:b1: f5:06:57:b8:58:8e:7c:60:73:b3:3c:19:80:00:79: ce:66:8d:9c:c3:65:0b:4a:45:ac:a2:b1:57:ac:3c: 90:03:7d:33:e6:49:8b:91:14:85:3a:c5:a1:d2:93: 72:5e:bc:7b:4e:bf:20:a8:af:71:ae:f0:2e:25:88: e2:2d:ea:13:39:9e:ba:30:ae:1f:0b:bf:84:c6:d5: c1:17:54:2f:27:c0:0d:21:88:72:5a:f6:38:55:d3: 22:02:c0:cc:52:71:e1:7d:38:04:6c:3f:58:07:a8: 98:ec:1d:82:46:f3:01:57:21:cb:9c:c7:8f:84:0f: 45:d2:3c:85:86:03:49:a6:f8:89:05:89:0c:cc:e2: e8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B5:36:66:7F:D8:BA:C7:99:0D:D0:01:FD:15:85:CA:B3:D0:FE:E0 X509v3 Authority Key Identifier: keyid:D2:C4:67:BC:3C:62:6B:C5:E6:AE:1B:2A:4D:23:57:11:D8:19:CA:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0sRnvDxia8XmrhsqTSNXEdgZyuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:fb:e1:d5:17:76:61:e8:1f:ec:14:16:be:dc:bf:12:df:05: f8:c5:fa:61:59:04:1a:03:45:d7:1d:a6:31:6a:ac:0c:aa:ce: 24:20:5f:3c:ec:e6:f9:07:4f:67:c4:47:21:46:35:f5:ff:6f: ac:87:60:5a:f6:e5:5e:01:bc:eb:df:f9:52:d5:30:d8:24:57: 4c:90:dd:59:17:6b:29:ef:ef:df:79:70:70:cf:82:52:63:b8: d0:fa:3b:73:f0:23:da:d9:37:2c:4c:10:cc:cd:1d:85:56:ed: b7:28:94:a2:d9:80:d3:2b:07:63:a0:22:bc:08:4c:fc:4b:93: 88:0c:13:c4:06:79:13:3a:92:d2:25:50:18:ea:6f:1a:a0:bc: 02:2a:1d:00:3f:c6:d0:de:67:5b:38:53:88:b6:ee:39:e1:21: 5f:f7:d5:a0:3a:9b:c7:00:b0:aa:ec:ee:5c:39:05:9c:b4:e1: 23:8c:17:24:4e:06:4a:c7:37:f0:8d:f3:5a:42:fe:a8:be:f2: 67:40:56:c7:8a:6d:f0:97:0e:3c:d1:a7:80:aa:c0:40:8e:25: 94:a2:17:29:91:a5:7e:4d:2a:4a:17:9e:79:c7:dd:d8:26:f5: 17:15:23:83:59:3a:54:e8:47:4d:a8:83:f1:e0:f0:59:94:71: 9d:7c:46:93 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NkM0MzExMC8GA1UEBRMoRDJDNDY3QkMzQzYyNkJDNUU2QUUxQjJBNEQyMzU3MTFE ODE5Q0FFNDAeFw0yNjA1MTEwODU1MzlaFw0yNjA1MTgwODU1MzlaMBgxFjAUBgNV BAMTDTZhMDE5OThiLWUxZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUUZcGP+KJ2TY42Nd88xkSrkPcpz5mKem8CgMtClwsvjmuHL7xKkrrJhjXfIBl oSN2a/6ntqy8F5EBI8izgbVzL64oaF286RHTWBPZ0alVUtFPLSG99g1i36k0h8tI WZ8GirT1Ts+EI564OYC3UZI8/aXw2RrMsfUGV7hYjnxgc7M8GYAAec5mjZzDZQtK RayisVesPJADfTPmSYuRFIU6xaHSk3JevHtOvyCor3Gu8C4liOIt6hM5nrowrh8L v4TG1cEXVC8nwA0hiHJa9jhV0yICwMxSceF9OARsP1gHqJjsHYJG8wFXIcucx4+E D0XSPIWGA0mm+IkFiQzM4ugDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUILU2Zn/Y useZDdAB/RWFyrPQ/uAwHwYDVR0jBBgwFoAU0sRnvDxia8XmrhsqTSNXEdgZyuQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2QzQzL0M4MDlCOEYwMTA4 NjExRjFBMTk0N0Y3MjMxM0Q4QzY3LzBzUm52RHhpYThYbXJoc3FUU05YRWRnWnl1 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMHNSbnZEeGlhOFhtcmhzcVRTTlhFZGdaeXVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2 QzQzL0M4MDlCOEYwMTA4NjExRjFBMTk0N0Y3MjMxM0Q4QzY3LzBzUm52RHhpYThY bXJoc3FUU05YRWRnWnl1US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBd++HVF3Zh6B/sFBa+3L8S3wX4xfphWQQaA0XXHaYxaqwMqs4kIF887Ob5B09n xEchRjX1/2+sh2Ba9uVeAbzr3/lS1TDYJFdMkN1ZF2sp7+/feXBwz4JSY7jQ+jtz 8CPa2TcsTBDMzR2FVu23KJSi2YDTKwdjoCK8CEz8S5OIDBPEBnkTOpLSJVAY6m8a oLwCKh0AP8bQ3mdbOFOItu454SFf99WgOpvHALCq7O5cOQWctOEjjBckTgZKxzfw jfNaQv6ovvJnQFbHim3wlw480aeAqsBAjiWUohcpkaV+TSpKF555x93YJvUXFSOD WTpU6EdNqIPx4PBZlHGdfEaT -----END CERTIFICATE-----Generated at Wed May 13 10:45:08 2026 by rpki-client