$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft File: n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft (raw, json) Hash identifier: Aq7y6aWF9du+fDpdpjjPlBS/EvoMpMXOUdBCnoaE5H0= Subject key identifier: 9A:7C:8E:86:F1:2B:47:8E:41:91:AC:40:0B:1E:98:3E:88:07:15:C7 Authority key identifier: 9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5 Certificate issuer: /CN=A91D7578/serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5 Certificate serial: 0249 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft Manifest number: 0247 Signing time: Tue 12 May 2026 22:35:53 +0000 Manifest this update: Tue 12 May 2026 22:35:52 +0000 Manifest next update: Tue 19 May 2026 22:35:52 +0000 Files and hashes: 1: n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl (hash: bhUMlZQGMAj7FxPBk5/fXk8hMrUzojU6LjR/fSz3DY8=) 2: 15F2CAD0D0AD11F08058D727C4F9AE02.roa (hash: YLMA9nTAlWfeJbokNuZSOeyCNtPrV//prQQ6jsVgAzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 22:35:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 585 (0x249) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7578, serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5 Validity Not Before: May 12 22:35:52 2026 GMT Not After : May 19 22:35:52 2026 GMT Subject: CN=6a03ab48-3fa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a8:a3:5e:a0:72:24:63:8f:0c:7a:71:53:a2: fe:96:09:ba:33:e3:b9:46:58:ae:16:08:b3:78:55: 82:c3:56:ae:ff:68:4c:c6:0b:ed:d2:04:6a:f4:cd: 1f:0b:99:8d:98:fe:cd:ae:67:d6:27:b0:43:90:fa: a7:61:52:81:ce:88:07:81:28:cc:61:d5:d9:99:4f: 21:42:14:3c:0d:01:49:fb:15:ea:b9:59:0c:b1:6b: b7:eb:f4:e5:42:e7:2d:99:56:f3:b2:44:b6:8c:ae: c3:4a:03:08:76:f7:99:3c:eb:8a:6a:4b:23:99:7d: ec:5c:57:6f:8f:7e:1a:87:18:6b:ce:e1:47:c9:2a: ad:9d:3c:07:fe:54:f8:1f:11:a0:8e:c8:5b:06:e6: 34:b2:b5:4a:8d:89:0b:58:f3:61:8e:03:00:0d:b2: c6:b4:de:b6:f9:da:92:2e:ee:2a:fb:51:22:9e:b6: ef:7d:36:8c:43:7d:c7:45:8e:fc:cc:11:4e:68:71: 15:50:a9:a8:6e:c8:61:77:43:5c:b3:8d:c7:7f:d1: 0d:f2:0b:54:e8:d9:19:05:a5:ba:ae:bb:e0:c2:43: d5:9f:07:d6:2b:e8:d2:0d:79:a3:f0:0c:16:a2:e8: f4:e4:40:5e:7c:a0:5d:df:3e:1b:76:07:e2:0b:7f: 04:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:7C:8E:86:F1:2B:47:8E:41:91:AC:40:0B:1E:98:3E:88:07:15:C7 X509v3 Authority Key Identifier: keyid:9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:29:2d:ea:be:d2:1c:25:05:a6:f2:a3:75:24:93:ac:34:fb: 63:4d:0c:39:e5:d8:4f:4d:e9:9e:86:8f:cc:7e:04:3d:d9:6c: 30:d6:b3:33:36:ed:68:3a:73:e1:c8:4f:45:d1:ea:f1:b4:d7: 1a:31:85:5c:33:de:10:37:a0:e3:72:71:f7:4d:ae:9f:f8:85: ae:e9:b8:d2:87:84:23:aa:e7:47:a1:aa:67:b8:02:a4:58:e2: 36:17:28:f5:2b:75:6a:e3:40:e8:19:0a:19:55:f6:b3:f6:ac: 82:a1:12:f8:df:f8:08:ba:65:38:12:51:f0:a1:df:2d:a9:93: 67:c7:fc:c8:e7:2d:ff:cc:f1:76:25:78:0d:44:14:c8:a1:ee: 54:f1:54:26:c6:06:f5:7c:50:e2:51:91:01:6b:22:ac:7e:a7: 82:10:4c:9f:29:d9:6b:e9:6e:b4:57:a3:79:1d:d0:63:87:ad: 3c:0a:f0:ed:cf:10:34:16:c5:aa:97:ff:e8:07:b8:0e:aa:57: ec:61:94:7d:25:ab:49:74:96:a4:2e:7a:d1:ba:1a:4b:b2:ef: 6e:fa:8b:a8:fc:3f:c8:e3:c0:1a:2b:88:80:bf:1a:57:58:32: 9b:70:73:a7:c0:b5:c3:7f:67:ac:88:d6:8c:43:17:ac:db:61: bc:56:7c:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc1NzgxMTAvBgNVBAUTKDlGRTAwQzE5Q0UwQjhGOTZFQ0Y4OUEzNTdGN0QxQUY1 NThGOTZGRjUwHhcNMjYwNTEyMjIzNTUyWhcNMjYwNTE5MjIzNTUyWjAYMRYwFAYD VQQDEw02YTAzYWI0OC0zZmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6ijXqByJGOPDHpxU6L+lgm6M+O5RliuFgizeFWCw1au/2hMxgvt0gRq9M0f C5mNmP7NrmfWJ7BDkPqnYVKBzogHgSjMYdXZmU8hQhQ8DQFJ+xXquVkMsWu36/Tl QuctmVbzskS2jK7DSgMIdveZPOuKaksjmX3sXFdvj34ahxhrzuFHySqtnTwH/lT4 HxGgjshbBuY0srVKjYkLWPNhjgMADbLGtN62+dqSLu4q+1EinrbvfTaMQ33HRY78 zBFOaHEVUKmobshhd0Ncs43Hf9EN8gtU6NkZBaW6rrvgwkPVnwfWK+jSDXmj8AwW ouj05EBefKBd3z4bdgfiC38EIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJp8jobx K0eOQZGsQAsemD6IBxXHMB8GA1UdIwQYMBaAFJ/gDBnOC4+W7PiaNX99GvVY+W/1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzU3OC82NzAwNThCNERG RjgxMUVEOTUxNTNEMzFDNEY5QUUwMi9uLUFNR2M0TGo1YnMtSm8xZjMwYTlWajVi X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL24tQU1HYzRMajVicy1KbzFmMzBhOVZqNWJfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzU3OC82NzAwNThCNERGRjgxMUVEOTUxNTNEMzFDNEY5QUUwMi9uLUFNR2M0TGo1 YnMtSm8xZjMwYTlWajViX1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHykt6r7SHCUFpvKjdSSTrDT7Y00MOeXYT03pnoaPzH4EPdlsMNazMzbtaDpz 4chPRdHq8bTXGjGFXDPeEDeg43Jx902un/iFrum40oeEI6rnR6GqZ7gCpFjiNhco 9St1auNA6BkKGVX2s/asgqES+N/4CLplOBJR8KHfLamTZ8f8yOct/8zxdiV4DUQU yKHuVPFUJsYG9XxQ4lGRAWsirH6nghBMnynZa+lutFejeR3QY4etPArw7c8QNBbF qpf/6Ae4DqpX7GGUfSWrSXSWpC560boaS7LvbvqLqPw/yOPAGiuIgL8aV1gym3Bz p8C1w39nrIjWjEMXrNthvFZ8yw== -----END CERTIFICATE-----Generated at Wed May 13 06:40:16 2026 by rpki-client