$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft File: raez5kKEQOUk2gaDhqHt8yH4gR4.mft (raw, json) Hash identifier: dQ9+j+HRUUbK3vNssldaAj8EiAvagt8qB/VMDj1Y4d4= Subject key identifier: 2A:E0:85:18:58:D3:A6:DD:FF:8D:6E:50:B0:BD:7E:3A:A8:4A:E5:76 Authority key identifier: AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E Certificate issuer: /CN=A91D7103/serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E Certificate serial: 0207 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft Manifest number: 01FF Signing time: Wed 13 May 2026 03:11:38 +0000 Manifest this update: Wed 13 May 2026 03:11:38 +0000 Manifest next update: Wed 20 May 2026 03:11:38 +0000 Files and hashes: 1: raez5kKEQOUk2gaDhqHt8yH4gR4.crl (hash: rO5DY2lmitzmaIYxboIYS8wfYA1c3ROhGAgSgbYsAhE=) 2: EFB54FEC42D211EE9D8A0832C4F9AE02.roa (hash: aOgdwHx4RJqFv06ROzYFXUkAb7MKRRzbQI1IYFIaGUs=) 3: 1E35039C42D511EEAE5F803AC4F9AE02.roa (hash: 5dJP/M//lcF+sbSnEZ913U8w49zktTAz2tqR2Ha8qBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 519 (0x207) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7103, serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E Validity Not Before: May 13 03:11:38 2026 GMT Not After : May 20 03:11:38 2026 GMT Subject: CN=6a03ebea-f7a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:33:a2:c3:a2:e7:a1:4c:89:3e:e5:cd:09:fc: f2:29:cb:7f:46:51:6a:6b:4a:5d:b8:37:4c:0a:93: e3:cb:b6:ed:d8:3f:a4:51:57:8b:c6:95:f1:0a:cf: cd:f3:7c:30:eb:78:19:00:54:7c:60:d2:bc:b7:6b: 12:59:d3:23:6a:94:bd:4b:90:56:aa:40:64:9b:e0: 2a:be:57:d5:4c:ee:a8:91:e1:13:e3:8b:ca:e7:ee: 62:9e:54:84:62:13:0c:5b:a6:e6:1f:ed:a0:33:df: a3:13:df:57:4c:92:c9:ed:41:d2:c8:26:00:a2:f8: e2:5f:49:3d:e1:ab:3d:bd:f2:c2:16:a8:eb:7d:25: e6:78:73:9c:ea:0e:3a:c7:d6:5a:bf:9e:48:2b:4d: e5:6f:4f:84:0c:99:92:bb:d0:4a:1e:72:1f:85:8b: d1:06:29:8d:c9:cf:4d:d9:e3:de:8a:b3:de:25:1b: 3d:40:4a:67:4b:92:c6:38:c6:e2:27:a6:9c:be:2e: 23:8b:bc:6d:a7:f4:eb:83:47:a5:f6:7c:27:bb:23: b0:ef:f1:65:1d:93:4b:66:b5:7e:af:56:f0:da:30: d4:fa:98:a7:57:6b:04:7a:fe:6b:b1:98:83:fc:b8: 50:1e:23:fb:22:63:2c:54:63:44:8b:8b:06:42:6d: 7f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E0:85:18:58:D3:A6:DD:FF:8D:6E:50:B0:BD:7E:3A:A8:4A:E5:76 X509v3 Authority Key Identifier: keyid:AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ee:3f:2f:0c:1c:5f:30:bb:7c:f7:52:82:b5:c6:17:c3:55:0a: 21:64:ae:9e:a2:c6:60:9c:ef:b3:a9:49:a9:f8:62:d1:25:71: 5b:9d:23:95:b4:cc:d3:7d:b3:3e:53:6b:74:b1:dc:47:42:71: bc:0b:89:27:b0:d3:47:f2:9e:a8:47:30:3a:b9:ae:db:ee:91: cd:41:7b:ca:f2:6d:d2:91:4d:bd:54:63:82:b1:a0:06:db:d2: 74:08:76:9e:a4:57:08:5e:0a:24:1c:a8:64:59:27:a4:75:db: 33:0d:a6:51:8f:5c:b8:46:3e:68:0b:22:09:6b:1b:f2:51:45: 7f:4f:64:b5:9d:07:77:6b:28:eb:01:5c:83:b3:33:cf:12:76: a5:a5:db:77:38:7b:1b:f9:ec:c6:5e:3a:0e:c7:0b:28:4b:c0: 53:d5:6d:db:05:eb:3b:d0:fb:8a:2e:97:1d:d3:2a:b5:78:94: 73:12:97:de:26:43:61:00:26:cd:07:7c:63:2c:fc:63:71:46: c8:de:fd:cb:81:4f:d5:f1:98:7c:5d:dc:a0:59:12:a2:24:93: 03:01:b9:c2:e4:d8:63:39:f0:9f:e6:ec:b8:28:93:62:db:28: cb:45:06:b2:0e:1d:41:6e:f3:87:ce:23:4e:6e:73:eb:14:66: f3:77:99:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDcxMDMxMTAvBgNVBAUTKEFEQTdCM0U2NDI4NDQwRTUyNERBMDY4Mzg2QTFFREYz MjFGODgxMUUwHhcNMjYwNTEzMDMxMTM4WhcNMjYwNTIwMDMxMTM4WjAYMRYwFAYD VQQDEw02YTAzZWJlYS1mN2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoDOiw6LnoUyJPuXNCfzyKct/RlFqa0pduDdMCpPjy7bt2D+kUVeLxpXxCs/N 83ww63gZAFR8YNK8t2sSWdMjapS9S5BWqkBkm+AqvlfVTO6okeET44vK5+5inlSE YhMMW6bmH+2gM9+jE99XTJLJ7UHSyCYAovjiX0k94as9vfLCFqjrfSXmeHOc6g46 x9Zav55IK03lb0+EDJmSu9BKHnIfhYvRBimNyc9N2ePeirPeJRs9QEpnS5LGOMbi J6acvi4ji7xtp/Trg0el9nwnuyOw7/FlHZNLZrV+r1bw2jDU+pinV2sEev5rsZiD /LhQHiP7ImMsVGNEi4sGQm1/OQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCrghRhY 06bd/41uULC9fjqoSuV2MB8GA1UdIwQYMBaAFK2ns+ZChEDlJNoGg4ah7fMh+IEe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzEwMy83QUI4MTEyQTQy RDIxMUVFQjdDNEQwMUVDNEY5QUUwMi9yYWV6NWtLRVFPVWsyZ2FEaHFIdDh5SDRn UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JhZXo1a0tFUU9VazJnYURocUh0OHlINGdSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzEwMy83QUI4MTEyQTQyRDIxMUVFQjdDNEQwMUVDNEY5QUUwMi9yYWV6NWtLRVFP VWsyZ2FEaHFIdDh5SDRnUjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA7j8vDBxfMLt891KCtcYXw1UKIWSunqLGYJzvs6lJqfhi0SVxW50jlbTM032z PlNrdLHcR0JxvAuJJ7DTR/KeqEcwOrmu2+6RzUF7yvJt0pFNvVRjgrGgBtvSdAh2 nqRXCF4KJByoZFknpHXbMw2mUY9cuEY+aAsiCWsb8lFFf09ktZ0Hd2so6wFcg7Mz zxJ2paXbdzh7G/nsxl46DscLKEvAU9Vt2wXrO9D7ii6XHdMqtXiUcxKX3iZDYQAm zQd8Yyz8Y3FGyN79y4FP1fGYfF3coFkSoiSTAwG5wuTYYznwn+bsuCiTYtsoy0UG sg4dQW7zh84jTm5z6xRm83eZcg== -----END CERTIFICATE-----Generated at Wed May 13 07:13:51 2026 by rpki-client