$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft File: -J0aOgEq7dJ69ICrnjbpKOaPiUI.mft (raw, json) Hash identifier: OEEx0QqBobIpL50+H165TnAlEZpHTbKoUJ7LquHmpjQ= Subject key identifier: 6E:1F:6C:50:6E:08:C7:7C:B0:59:F1:05:2E:48:9C:74:82:71:29:BD Authority key identifier: F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42 Certificate issuer: /CN=A91DBC93/serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942 Certificate serial: 1FD1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft Manifest number: 1FC9 Signing time: Tue 12 May 2026 15:58:45 +0000 Manifest this update: Tue 12 May 2026 15:58:45 +0000 Manifest next update: Tue 19 May 2026 15:58:45 +0000 Files and hashes: 1: -J0aOgEq7dJ69ICrnjbpKOaPiUI.crl (hash: +r+bmw1acxyQSsWA22V4T9f+2F6drDjFI2Y440S9QXU=) 2: A423811CAF8511F081CFDB4FC4F9AE02.roa (hash: t9f19zC5S/IYriertqckeC3YEvgJ+JaLXV3b4hj/fXo=) 3: 91AC7FEAAF8311F0AA3DB580C4F9AE02.roa (hash: GjOMUfWbv01wGvJ1FvR6+5UWkPxfCYmtbqRruiSURbE=) 4: 911C2670AF8311F0AA3DB580C4F9AE02.roa (hash: RZhjBvcmyXIMzlb/8UlxgzJQXUre9xl2GZfQAX/t0EM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 15:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8145 (0x1fd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBC93, serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942 Validity Not Before: May 12 15:58:45 2026 GMT Not After : May 19 15:58:45 2026 GMT Subject: CN=6a034e35-3843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:94:da:31:d2:e6:63:27:a5:81:13:69:e5:b6: 7c:d0:e5:38:f7:a4:19:0a:15:11:87:34:d3:19:ae: 45:13:15:aa:ac:9f:d0:ea:cd:c3:fe:d3:df:99:d0: 5e:c9:02:86:de:d5:f9:a5:50:21:89:2c:b1:ef:47: 43:05:48:b6:ac:23:24:fa:09:10:59:94:29:7c:28: b4:f4:25:35:22:36:34:f4:e7:13:ae:60:4b:e4:f3: 5b:2f:a8:9c:d0:d0:e2:fd:6b:b2:00:40:69:a5:75: 7f:2d:8c:19:bc:63:8e:4e:17:66:2a:39:3b:89:eb: ec:90:51:13:c9:3e:15:79:7a:f1:98:35:83:93:be: 69:42:15:bf:d2:08:ed:58:f7:83:e5:4f:92:27:ab: 8e:88:a1:de:bd:64:eb:aa:42:66:06:e4:2a:a9:f4: 17:21:fa:23:d0:18:a4:2b:b4:6f:d6:68:c3:14:1c: 1f:9c:ce:ed:c1:92:38:5e:41:27:d2:d3:8f:f2:79: 13:5b:95:66:76:17:6c:d7:f8:70:51:bb:18:c1:e4: 13:35:f6:63:f3:87:11:fb:58:81:17:53:9e:12:cf: 8d:e2:96:b3:c9:20:76:72:95:2b:19:d1:54:76:8f: c1:ad:8c:90:43:0e:f1:2e:19:e4:fa:bb:b4:cd:a0: e3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:1F:6C:50:6E:08:C7:7C:B0:59:F1:05:2E:48:9C:74:82:71:29:BD X509v3 Authority Key Identifier: keyid:F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:ea:f7:86:a6:75:ad:f3:40:03:92:ef:e8:e3:c8:81:dc:11: 15:af:f0:b8:66:d1:57:35:95:49:7f:c0:bc:7b:e9:60:7b:34: 46:10:43:20:68:42:bb:06:f2:de:8a:97:e0:7d:ad:2a:08:4c: 78:96:71:7c:e3:8b:25:f8:95:f3:a7:7d:c6:99:0a:71:aa:7c: 69:70:21:9a:e0:fc:a5:12:f4:84:70:bc:d4:08:58:a6:ad:b4: 6a:e4:d6:6f:8b:97:c1:4f:91:45:5e:6b:fb:96:56:89:24:15: ff:78:7e:a0:d6:3d:21:a2:9a:37:f3:25:da:55:b4:ed:91:7c: 28:ea:c6:49:b9:59:eb:af:4e:8f:25:05:1b:d2:6d:1f:a9:39: 89:48:dc:b1:38:87:e7:7c:5e:c4:f7:9c:11:d9:75:42:a0:76: f1:24:3c:84:09:2b:ab:ab:e6:99:56:6c:ce:bf:79:39:62:78: c5:26:ac:c0:ef:f1:27:a6:b8:bf:ec:a7:7a:4c:1d:c0:25:f5: 47:eb:17:b6:d4:b7:6d:d0:39:29:08:6e:73:93:ea:0b:e2:1d: 05:84:22:17:28:db:20:6c:37:ac:23:ae:99:6e:70:ec:04:a0: 80:be:f8:17:9b:72:d4:25:31:76:78:69:bd:b8:a0:a0:b0:a9: 94:c1:06:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICH9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJDOTMxMTAvBgNVBAUTKEY4OUQxQTNBMDEyQUVERDI3QUY0ODBBQjlFMzZFOTI4 RTY4Rjg5NDIwHhcNMjYwNTEyMTU1ODQ1WhcNMjYwNTE5MTU1ODQ1WjAYMRYwFAYD VQQDEw02YTAzNGUzNS0zODQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnZTaMdLmYyelgRNp5bZ80OU496QZChURhzTTGa5FExWqrJ/Q6s3D/tPfmdBe yQKG3tX5pVAhiSyx70dDBUi2rCMk+gkQWZQpfCi09CU1IjY09OcTrmBL5PNbL6ic 0NDi/WuyAEBppXV/LYwZvGOOThdmKjk7ievskFETyT4VeXrxmDWDk75pQhW/0gjt WPeD5U+SJ6uOiKHevWTrqkJmBuQqqfQXIfoj0BikK7Rv1mjDFBwfnM7twZI4XkEn 0tOP8nkTW5Vmdhds1/hwUbsYweQTNfZj84cR+1iBF1OeEs+N4pazySB2cpUrGdFU do/BrYyQQw7xLhnk+ru0zaDjRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG4fbFBu CMd8sFnxBS5InHSCcSm9MB8GA1UdIwQYMBaAFPidGjoBKu3SevSAq5426Sjmj4lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkM5My84RkI0OEJCNjUz NzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdkSjY5SUNybmpicEtPYVBp VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KMGFPZ0VxN2RKNjlJQ3JuamJwS09hUGlVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkM5My84RkI0OEJCNjUzNzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdk SjY5SUNybmpicEtPYVBpVUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANOr3hqZ1rfNAA5Lv6OPIgdwRFa/wuGbRVzWVSX/AvHvpYHs0RhBDIGhCuwby 3oqX4H2tKghMeJZxfOOLJfiV86d9xpkKcap8aXAhmuD8pRL0hHC81AhYpq20auTW b4uXwU+RRV5r+5ZWiSQV/3h+oNY9IaKaN/Ml2lW07ZF8KOrGSblZ669OjyUFG9Jt H6k5iUjcsTiH53xexPecEdl1QqB28SQ8hAkrq6vmmVZszr95OWJ4xSaswO/xJ6a4 v+ynekwdwCX1R+sXttS3bdA5KQhuc5PqC+IdBYQiFyjbIGw3rCOumW5w7ASggL74 F5ty1CUxdnhpvbigoLCplMEG/g== -----END CERTIFICATE-----Generated at Wed May 13 01:15:41 2026 by rpki-client