$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft File: I3t9TKhKJtX8SVjUgZHzahS8ei8.mft (raw, json) Hash identifier: s0B+NZ0+MaVwOlpHBpjfhG0CUp/gUo69E01mj4nDqkM= Subject key identifier: 02:A9:A9:A9:92:C7:B9:DE:BB:19:36:00:FA:46:57:73:2F:F8:A2:AF Authority key identifier: 23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F Certificate issuer: /CN=A91DB6F8/serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Certificate serial: 02AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft Manifest number: 0299 Signing time: Wed 13 May 2026 01:53:42 +0000 Manifest this update: Wed 13 May 2026 01:53:42 +0000 Manifest next update: Wed 20 May 2026 01:53:42 +0000 Files and hashes: 1: I3t9TKhKJtX8SVjUgZHzahS8ei8.crl (hash: ExvA6vZ07iTduNJiaAV2frc5vUKDJS6uEiGshhVxkP8=) 2: 4E8695C04F6111F0AEF2037CC4F9AE02.roa (hash: ncn7Gjv5/K5v/CMdlLouui8Rvj7iaqS9f9pgwJ6xHLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 01:53:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 684 (0x2ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB6F8, serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Validity Not Before: May 13 01:53:42 2026 GMT Not After : May 20 01:53:42 2026 GMT Subject: CN=6a03d9a6-66b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3f:1b:f2:56:92:cb:40:c8:b7:e1:c7:96:22: 21:39:d7:67:55:1d:c8:c6:2a:e8:79:d4:4d:b5:77: f6:e3:e0:a7:be:98:0f:80:1f:35:ca:a3:53:88:bb: 62:09:7e:46:c4:b5:86:8e:85:2a:47:9d:fb:f5:d8: 37:f8:15:6a:bf:eb:d2:8b:ad:62:04:6b:d1:5d:e2: 46:af:ba:37:dc:b8:21:4d:6f:81:25:f0:42:36:dd: ee:1f:3e:f6:17:2a:44:90:69:66:f0:2f:07:49:7c: d5:eb:54:c3:f1:d3:88:bf:b4:66:fc:2e:2b:3a:14: c7:9d:72:28:0b:46:ef:d5:04:a4:6b:5f:13:46:40: 52:89:cf:90:82:11:7a:d8:31:75:bb:fa:fe:d2:b1: 33:b0:cc:8a:e6:2b:ab:78:92:9c:48:c5:8a:34:49: 6d:b6:da:f3:1b:c4:e0:7f:c7:3f:4c:08:2a:3b:22: 9d:2d:a7:6c:7c:f5:48:51:d0:fa:8c:78:30:ad:c0: 6f:6f:f6:56:19:77:65:af:16:21:51:1f:03:2b:4b: cc:1c:9d:87:a2:4c:31:38:d9:cf:74:49:bd:37:7c: 55:a4:54:67:dc:44:55:82:83:a1:4a:cb:b7:e9:a1: 6c:ac:92:05:d2:5e:a2:05:c5:00:46:53:14:14:fc: 8a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A9:A9:A9:92:C7:B9:DE:BB:19:36:00:FA:46:57:73:2F:F8:A2:AF X509v3 Authority Key Identifier: keyid:23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:de:35:b8:a4:da:95:05:73:72:d0:01:74:72:7b:0f:65:3d: f6:76:ff:ea:8d:24:cf:9d:bf:fe:64:f1:72:62:ef:3b:5b:f6: f2:f5:08:9d:11:69:c2:f1:e0:49:eb:66:af:cf:25:a2:38:ea: 84:ea:c0:5f:cf:e4:7f:26:d9:69:be:15:e7:9b:77:37:7e:b0: c6:19:5e:91:e0:a5:72:ca:1b:f3:af:1e:7b:df:96:05:da:8d: 08:cd:09:e1:4a:16:ed:0a:07:41:c6:7f:19:68:ad:b2:50:ab: 7f:96:f3:34:08:01:85:f8:33:20:f1:a7:a2:d7:03:b0:45:5f: a5:d2:81:6b:7b:9e:58:3c:e2:da:58:2f:b8:8d:1b:25:9e:ef: 46:f6:20:e2:19:0a:ee:da:b9:5c:f3:fb:41:70:f9:78:87:8b: 3c:c4:5d:07:6b:1c:79:ce:4b:12:d0:70:ff:46:bf:17:18:4a: a2:bc:08:87:3c:c1:79:61:5c:30:0b:d6:87:07:99:b2:91:00: 4e:7e:6a:4b:cc:f6:36:ec:1a:03:43:e0:3f:df:3a:34:ef:b2: 9e:75:0d:b8:b8:fc:00:47:af:68:b8:20:d0:62:a4:56:45:f9: ed:11:fa:e7:dd:a9:be:4d:9a:f8:8f:a0:b5:fd:d3:16:6a:0f: 63:cd:bc:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2RjgxMTAvBgNVBAUTKDIzN0I3RDRDQTg0QTI2RDVGQzQ5NThENDgxOTFGMzZB MTRCQzdBMkYwHhcNMjYwNTEzMDE1MzQyWhcNMjYwNTIwMDE1MzQyWjAYMRYwFAYD VQQDEw02YTAzZDlhNi02NmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3z8b8laSy0DIt+HHliIhOddnVR3IxiroedRNtXf24+CnvpgPgB81yqNTiLti CX5GxLWGjoUqR5379dg3+BVqv+vSi61iBGvRXeJGr7o33LghTW+BJfBCNt3uHz72 FypEkGlm8C8HSXzV61TD8dOIv7Rm/C4rOhTHnXIoC0bv1QSka18TRkBSic+QghF6 2DF1u/r+0rEzsMyK5iureJKcSMWKNEltttrzG8Tgf8c/TAgqOyKdLadsfPVIUdD6 jHgwrcBvb/ZWGXdlrxYhUR8DK0vMHJ2HokwxONnPdEm9N3xVpFRn3ERVgoOhSsu3 6aFsrJIF0l6iBcUARlMUFPyKWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAKpqamS x7neuxk2APpGV3Mv+KKvMB8GA1UdIwQYMBaAFCN7fUyoSibV/ElY1IGR82oUvHov MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjZGOC81NjJDM0NCNDcy NEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0WDhTVmpVZ1pIemFoUzhl aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzdDlUS2hLSnRYOFNWalVnWkh6YWhTOGVpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjZGOC81NjJDM0NCNDcyNEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0 WDhTVmpVZ1pIemFoUzhlaTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXt41uKTalQVzctABdHJ7D2U99nb/6o0kz52//mTxcmLvO1v28vUInRFpwvHg Setmr88lojjqhOrAX8/kfybZab4V55t3N36wxhlekeClcsob868ee9+WBdqNCM0J 4UoW7QoHQcZ/GWitslCrf5bzNAgBhfgzIPGnotcDsEVfpdKBa3ueWDzi2lgvuI0b JZ7vRvYg4hkK7tq5XPP7QXD5eIeLPMRdB2scec5LEtBw/0a/FxhKorwIhzzBeWFc MAvWhweZspEATn5qS8z2NuwaA0PgP986NO+ynnUNuLj8AEevaLgg0GKkVkX57RH6 592pvk2a+I+gtf3TFmoPY8283w== -----END CERTIFICATE-----Generated at Wed May 13 06:40:23 2026 by rpki-client