$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft File: SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft (raw, json) Hash identifier: WjIU8HulMBeX+OUwjWfwXSjzlnudpDqIzNGgRVXH7ic= Subject key identifier: B9:47:E1:6F:34:83:9A:2B:B1:04:C5:3F:24:32:10:D5:18:6F:BE:45 Authority key identifier: 49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 Certificate issuer: /CN=A91DA10A/serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Certificate serial: 08D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft Manifest number: 08A1 Signing time: Tue 12 May 2026 20:39:55 +0000 Manifest this update: Tue 12 May 2026 20:39:55 +0000 Manifest next update: Tue 19 May 2026 20:39:55 +0000 Files and hashes: 1: SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl (hash: MDu/d1tlr2hTkvSSfmrh2HnldZ1i5KGrFjwU69zWknE=) 2: 13279E2C124011ED9E430A4CC4F9AE02.roa (hash: 1BxQB/90BOAp9PRDMceVIt4omBUpX65e17xrsW9Ey98=) 3: 67FF0960076911EF8569F157C4F9AE02.roa (hash: OgjXzdyKLb9e3ER0qSH5PPgDrGrIXmxcmLjxocZP9q0=) 4: 42CC52ECC68111EFAE49FF5FC4F9AE02.roa (hash: 2qHKJj29Stc4i29leTShILZcyf4Ep+Zzk1ZPI4rXDjo=) 5: 2F220BBA95AA11ED84962E13C4F9AE02.roa (hash: C/gCcxezA3MWUMIZZfARocJWxFwgULaiK11HqUVAJI8=) 6: 68C5CFBE076911EF8569F157C4F9AE02.roa (hash: BCGlhRLPOFUBZ5h3/NBuifkyt/vUvXmkmcPgcapZGk0=) 7: DDBCA666F18911EAA922EB1FC4F9AE02.roa (hash: YfrxXGO42q+6/ia+oj0y9mxJpbnGoWuIY/TIKAzAdhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:39:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2265 (0x8d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA10A, serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Validity Not Before: May 12 20:39:55 2026 GMT Not After : May 19 20:39:55 2026 GMT Subject: CN=6a03901b-c8c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ef:8c:94:38:e0:39:39:cc:6d:20:7c:b7:c5: 19:28:39:31:09:f3:2e:79:d1:a3:b1:0b:bf:9d:e6: 04:74:86:22:18:85:8d:d3:bb:83:aa:2f:69:7a:f2: 2a:a6:75:69:26:48:d7:75:7e:34:01:39:14:a4:58: 13:7e:db:97:8b:c2:e7:b5:05:43:27:57:18:dc:e9: d1:27:f4:76:85:d3:5a:6b:3f:c4:b0:67:8a:3e:e5: ba:ff:c1:ac:d1:d1:fb:0f:41:ca:4c:e8:f7:5e:9c: d1:1d:82:42:5d:ab:23:c2:e4:2f:d6:19:e4:20:64: 66:47:6b:ed:a4:9a:25:14:3e:57:65:8b:ac:f5:08: 7b:83:5f:81:a0:58:af:7e:fc:86:95:6e:81:e3:88: 1a:25:f6:40:1b:96:24:94:ef:6c:d4:4c:b1:7f:7c: 2f:ed:76:5a:5a:ba:6a:7d:0a:9c:87:4a:3b:38:c0: d2:5d:66:2b:ac:f6:1b:11:1f:b8:b6:83:62:b6:95: 61:7b:6f:11:a4:b7:83:7f:52:c3:ad:3b:d1:13:d6: 7b:02:48:05:1b:e9:c5:69:fd:78:ef:9f:21:69:fc: 38:0f:dc:e2:35:4b:39:fe:d1:43:64:f5:d0:84:43: 1d:84:d4:6c:d7:94:1b:b3:dc:69:c1:de:c3:b6:11: cc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:47:E1:6F:34:83:9A:2B:B1:04:C5:3F:24:32:10:D5:18:6F:BE:45 X509v3 Authority Key Identifier: keyid:49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:0f:f5:34:fa:93:02:c4:46:98:79:46:71:ea:25:5e:25:68: d4:9f:4f:b5:47:6a:d4:be:26:d6:f8:c5:f9:b8:13:f4:b9:02: 95:a0:bd:a2:42:fb:96:b6:13:4f:e2:16:3b:37:4f:a4:cc:18: 02:05:75:16:48:3d:27:15:a4:b8:ac:2e:42:ac:35:2f:3c:20: b9:84:c5:ee:c4:1f:9a:b9:b6:b5:84:e1:29:81:fd:a5:db:70: 40:0d:9b:a2:bc:6f:4c:35:5e:f4:fd:ed:1b:a3:5d:c2:52:4d: 8b:21:29:05:4b:de:fe:61:45:90:95:4c:25:0c:c2:7e:2a:cf: d9:ac:aa:02:fa:87:5b:ef:d0:b9:78:7b:5d:07:69:d3:87:ed: 93:f5:97:58:52:37:00:0d:b7:92:7f:43:53:d1:87:be:14:ef: bb:d5:44:7e:47:c5:5d:81:d9:f0:28:99:34:8f:e8:05:14:f3: 6d:7b:65:14:85:ab:02:d8:70:d4:75:0f:fb:14:c6:09:40:a3: af:63:62:06:d1:b4:ac:24:7b:69:30:77:71:1f:a7:09:69:9b: 99:3d:06:5b:5f:51:f1:01:90:00:e3:2a:73:50:51:12:c2:71: 89:39:b6:52:24:98:7a:6a:2b:c5:53:b7:07:50:04:95:79:1b: 95:1f:b5:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExMEExMTAvBgNVBAUTKDQ5QjVBNDY0NjNFM0EyQjcwQTMzNDQ2MDE0RUJGNDBF NUM5RUZFNzQwHhcNMjYwNTEyMjAzOTU1WhcNMjYwNTE5MjAzOTU1WjAYMRYwFAYD VQQDEw02YTAzOTAxYi1jOGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuu+MlDjgOTnMbSB8t8UZKDkxCfMuedGjsQu/neYEdIYiGIWN07uDqi9pevIq pnVpJkjXdX40ATkUpFgTftuXi8LntQVDJ1cY3OnRJ/R2hdNaaz/EsGeKPuW6/8Gs 0dH7D0HKTOj3XpzRHYJCXasjwuQv1hnkIGRmR2vtpJolFD5XZYus9Qh7g1+BoFiv fvyGlW6B44gaJfZAG5YklO9s1Eyxf3wv7XZaWrpqfQqch0o7OMDSXWYrrPYbER+4 toNitpVhe28RpLeDf1LDrTvRE9Z7AkgFG+nFaf14758hafw4D9ziNUs5/tFDZPXQ hEMdhNRs15Qbs9xpwd7DthHMzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLlH4W80 g5orsQTFPyQyENUYb75FMB8GA1UdIwQYMBaAFEm1pGRj46K3CjNEYBTr9A5cnv50 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEwQS9FMzQwMjA0Q0Yx ODcxMUVBQjk3MzRCMUNDNEY5QUUwMi9TYldrWkdQam9yY0tNMFJnRk92MERseWVf blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NiV2taR1Bqb3JjS00wUmdGT3YwRGx5ZV9uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEwQS9FMzQwMjA0Q0YxODcxMUVBQjk3MzRCMUNDNEY5QUUwMi9TYldrWkdQam9y Y0tNMFJnRk92MERseWVfblEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXA/1NPqTAsRGmHlGceolXiVo1J9PtUdq1L4m1vjF+bgT9LkClaC9okL7lrYT T+IWOzdPpMwYAgV1Fkg9JxWkuKwuQqw1LzwguYTF7sQfmrm2tYThKYH9pdtwQA2b orxvTDVe9P3tG6NdwlJNiyEpBUve/mFFkJVMJQzCfirP2ayqAvqHW+/QuXh7XQdp 04ftk/WXWFI3AA23kn9DU9GHvhTvu9VEfkfFXYHZ8CiZNI/oBRTzbXtlFIWrAthw 1HUP+xTGCUCjr2NiBtG0rCR7aTB3cR+nCWmbmT0GW19R8QGQAOMqc1BREsJxiTm2 UiSYemorxVO3B1AElXkblR+1CQ== -----END CERTIFICATE-----Generated at Wed May 13 07:33:35 2026 by rpki-client