$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.mft File: nEKLhAc-vngu7TP5LkDdc2GgnKo.mft (raw, json) Hash identifier: 0wljxX5m7r4ugPEysJ91ZYOFBbDlE+TycLbxeMbryiQ= Subject key identifier: 78:10:05:D4:00:7D:1B:40:6F:7E:69:55:F7:1B:E8:77:DD:E0:0D:C3 Authority key identifier: 9C:42:8B:84:07:3E:BE:78:2E:ED:33:F9:2E:40:DD:73:61:A0:9C:AA Certificate issuer: /CN=A91D8B6F/serialNumber=9C428B84073EBE782EED33F92E40DD7361A09CAA Certificate serial: 0925 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nEKLhAc-vngu7TP5LkDdc2GgnKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.mft Manifest number: 091D Signing time: Tue 12 May 2026 20:18:18 +0000 Manifest this update: Tue 12 May 2026 20:18:17 +0000 Manifest next update: Tue 19 May 2026 20:18:17 +0000 Files and hashes: 1: nEKLhAc-vngu7TP5LkDdc2GgnKo.crl (hash: c/fQ5TthzVzJGohDhJ7IDONnt1dACOAQQG7VfFMuW2M=) 2: FE60ECB0879311EB84047577C4F9AE02.roa (hash: z8K9NFfgSR+lYBTmglUzfygULgy/XVJpR7AJN5E7qvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.crl rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nEKLhAc-vngu7TP5LkDdc2GgnKo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2341 (0x925) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8B6F, serialNumber=9C428B84073EBE782EED33F92E40DD7361A09CAA Validity Not Before: May 12 20:18:17 2026 GMT Not After : May 19 20:18:17 2026 GMT Subject: CN=6a038b0a-ad83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:63:50:92:c4:e6:5f:1c:26:df:5b:6d:64:17: b2:2d:74:7b:a6:c9:7f:8c:06:03:f7:86:43:8d:75: 7a:fe:73:ea:a8:6c:4b:e6:aa:65:86:53:6b:dd:72: c6:a2:e9:4b:bf:4f:d2:e5:f7:56:22:39:58:d0:a1: 28:a6:dc:de:ff:69:9a:06:6d:8e:52:8e:33:be:ae: 37:17:75:23:13:7b:e3:5e:45:70:93:fb:18:19:c6: c6:25:81:a7:56:74:82:b3:98:a0:e6:c1:82:5c:3f: b6:ea:8d:90:55:33:48:b9:57:b4:ef:84:ad:3c:73: e3:06:ed:54:e9:05:9b:04:6d:b6:a6:74:dd:c3:03: 8b:02:3c:ee:8c:99:ac:4c:4d:a7:ca:ba:c0:a4:83: 29:c4:c7:af:ac:fd:4e:94:ad:52:86:a0:48:24:41: fa:3b:d3:42:62:c7:f3:4b:ff:91:dc:f6:51:94:f9: 93:72:a6:0f:77:8c:6e:f3:41:23:0e:3c:99:57:90: b6:dc:f7:83:45:07:a2:e7:5a:13:04:c3:9d:7b:03: 7c:a7:ef:8e:99:5f:dd:32:82:95:89:07:25:82:72: 17:2d:6a:1f:3d:da:63:a7:32:2b:ae:6a:07:9b:62: 7e:bd:44:d4:24:6d:d0:aa:bb:0f:b2:52:34:91:87: 94:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:10:05:D4:00:7D:1B:40:6F:7E:69:55:F7:1B:E8:77:DD:E0:0D:C3 X509v3 Authority Key Identifier: keyid:9C:42:8B:84:07:3E:BE:78:2E:ED:33:F9:2E:40:DD:73:61:A0:9C:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nEKLhAc-vngu7TP5LkDdc2GgnKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:7d:ea:da:31:b3:2f:eb:d2:7e:08:c6:60:d1:66:ea:91:a6: 44:64:e6:3a:ad:d8:02:d8:96:17:40:5c:10:91:b9:be:0c:9b: b5:74:79:a4:d2:11:cd:f7:b1:1b:ad:c8:5b:62:b6:0a:04:d6: 04:57:f3:fc:ce:9f:05:5a:73:d7:04:86:08:be:ed:43:99:2f: 6b:31:8d:cf:b7:a7:65:3f:b0:e0:d5:c0:3d:a2:6c:d5:fb:b8: a2:be:62:78:b3:80:52:92:b4:26:d3:09:13:c4:ff:e9:4c:9e: 1d:2e:db:6e:15:8f:ac:0f:b8:2b:d1:59:22:db:4c:76:00:15: 00:86:8e:15:f8:a7:5a:39:52:f0:8f:a2:27:2a:fa:9c:10:f9: d7:cc:36:cd:ea:df:b6:38:42:70:24:46:a7:fc:ff:da:6f:b7: ad:41:4c:36:e0:d1:bc:40:a0:a8:c7:fd:ed:10:8f:3e:8f:97: 1d:33:1f:99:d6:8b:9e:2c:d7:62:78:04:c0:01:58:05:62:54: d0:2d:01:99:77:e7:42:54:63:79:11:d8:3a:04:60:a7:93:af: 97:90:61:6f:71:85:82:f1:35:49:82:97:72:e2:5d:8b:c8:6f: 09:ed:29:c9:cf:e9:2c:60:8b:50:e8:71:e0:a2:4e:e9:74:12: d2:89:6a:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhCNkYxMTAvBgNVBAUTKDlDNDI4Qjg0MDczRUJFNzgyRUVEMzNGOTJFNDBERDcz NjFBMDlDQUEwHhcNMjYwNTEyMjAxODE3WhcNMjYwNTE5MjAxODE3WjAYMRYwFAYD VQQDEw02YTAzOGIwYS1hZDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2NQksTmXxwm31ttZBeyLXR7psl/jAYD94ZDjXV6/nPqqGxL5qplhlNr3XLG oulLv0/S5fdWIjlY0KEoptze/2maBm2OUo4zvq43F3UjE3vjXkVwk/sYGcbGJYGn VnSCs5ig5sGCXD+26o2QVTNIuVe074StPHPjBu1U6QWbBG22pnTdwwOLAjzujJms TE2nyrrApIMpxMevrP1OlK1ShqBIJEH6O9NCYsfzS/+R3PZRlPmTcqYPd4xu80Ej DjyZV5C23PeDRQei51oTBMOdewN8p++OmV/dMoKViQclgnIXLWofPdpjpzIrrmoH m2J+vUTUJG3QqrsPslI0kYeU8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHgQBdQA fRtAb35pVfcb6Hfd4A3DMB8GA1UdIwQYMBaAFJxCi4QHPr54Lu0z+S5A3XNhoJyq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEI2Ri9FNDQ4QkYxOEM0 RUYxMUVBODdGNDM4MTBDNEY5QUUwMi9uRUtMaEFjLXZuZ3U3VFA1TGtEZGMyR2du S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25FS0xoQWMtdm5ndTdUUDVMa0RkYzJHZ25Lby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEI2Ri9FNDQ4QkYxOEM0RUYxMUVBODdGNDM4MTBDNEY5QUUwMi9uRUtMaEFjLXZu Z3U3VFA1TGtEZGMyR2duS28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVn3q2jGzL+vSfgjGYNFm6pGmRGTmOq3YAtiWF0BcEJG5vgybtXR5pNIRzfex G63IW2K2CgTWBFfz/M6fBVpz1wSGCL7tQ5kvazGNz7enZT+w4NXAPaJs1fu4or5i eLOAUpK0JtMJE8T/6UyeHS7bbhWPrA+4K9FZIttMdgAVAIaOFfinWjlS8I+iJyr6 nBD518w2zerftjhCcCRGp/z/2m+3rUFMNuDRvECgqMf97RCPPo+XHTMfmdaLnizX YngEwAFYBWJU0C0BmXfnQlRjeRHYOgRgp5Ovl5Bhb3GFgvE1SYKXcuJdi8hvCe0p yc/pLGCLUOhx4KJO6XQS0olqSA== -----END CERTIFICATE-----Generated at Wed May 13 05:33:14 2026 by rpki-client