$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft File: aXYgUV57Huisfz9tE76uumLE7ak.mft (raw, json) Hash identifier: 071opyr2iz2MEI/MnRU6/YQFsTSYIE656LxwLSjyYO0= Subject key identifier: E8:96:6F:EF:97:90:E2:F9:C5:19:AE:6D:4D:B5:3C:B1:4E:04:EA:49 Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 Certificate issuer: /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Certificate serial: 02AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft Manifest number: 028C Signing time: Wed 13 May 2026 02:02:48 +0000 Manifest this update: Wed 13 May 2026 02:02:48 +0000 Manifest next update: Wed 20 May 2026 02:02:48 +0000 Files and hashes: 1: aXYgUV57Huisfz9tE76uumLE7ak.crl (hash: xflhXusePQT0VFUszQzTIlBh2+vjoq+ItHo6ihkCMEQ=) 2: 38E45CE08C2511EDB64DB410C4F9AE02.roa (hash: Hb11VPodi8i0P+rMM2y+1RDJ6AN+xMk67SgHzAaL58I=) 3: F3B716768F2F11EE86964D62C4F9AE02.roa (hash: lzyN5MNSEZnDugz21KoEYtAxenHtxzzxEPsQqNcKc4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 686 (0x2ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2AE, serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Validity Not Before: May 13 02:02:48 2026 GMT Not After : May 20 02:02:48 2026 GMT Subject: CN=6a03dbc8-8cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f2:31:6e:66:43:f1:66:b7:f7:6e:ff:a5:0e: 46:98:ed:22:c1:90:68:8b:3a:4c:77:49:02:24:23: 95:2b:95:92:c5:9d:f9:9b:c1:a9:8c:f8:8d:ad:f1: 23:bb:1b:94:7c:a3:72:7a:86:0f:dc:40:4a:e1:e4: e3:c9:98:eb:64:61:a5:a3:d7:e3:15:91:5d:d9:e4: ef:14:2b:a1:d5:41:12:e2:36:c8:6a:13:8e:b1:1f: 02:6f:d9:ab:55:8f:47:1f:4f:f9:af:73:0a:21:b6: 8a:9b:e0:e1:f3:fc:1e:02:0d:fa:3a:8a:bd:ef:34: 6a:a4:a0:be:82:3f:fa:86:43:45:bf:7b:bf:57:45: 08:e8:b9:bf:d7:40:b2:71:67:6c:bc:d0:ea:8d:76: 0d:d2:c1:f0:c5:a2:36:b1:5b:80:f8:c3:5f:45:93: a0:dc:cb:22:b9:72:91:c1:bd:55:fa:0c:12:3e:18: fa:62:38:e6:7e:1f:c6:27:97:c2:57:39:48:83:18: ad:cb:bf:1d:6d:9d:92:bb:3d:68:58:0c:00:7c:63: 95:b2:6f:5a:ef:fb:c0:cb:4f:ec:bc:d4:df:8e:f9: 27:1d:85:c2:c0:ba:12:35:23:87:79:91:8c:2a:99: c8:f6:bd:ce:bb:ce:2e:95:04:4f:37:4e:3c:e6:52: 7c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:96:6F:EF:97:90:E2:F9:C5:19:AE:6D:4D:B5:3C:B1:4E:04:EA:49 X509v3 Authority Key Identifier: keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:b3:5b:1c:34:ed:79:cc:4b:ba:75:b7:b5:9d:de:d5:d3:eb: 5d:d7:4a:df:5c:46:49:e3:c2:c4:33:7b:90:52:a0:62:6b:cc: 1b:6b:f9:f0:42:ac:12:82:75:bf:10:a5:8b:05:f0:4e:0d:62: 06:bb:d4:29:77:4c:b2:a0:52:e3:f5:42:39:34:14:3b:a4:e2: 51:c3:5c:c3:ea:17:07:e4:0a:ed:1a:c4:14:0d:a7:6b:d6:9b: 56:5b:28:e8:d5:84:47:3a:5d:1f:43:a3:5f:c7:07:90:3f:0d: c5:46:03:dd:e5:76:5e:d4:c5:32:b5:62:e1:4f:83:9c:f2:c0: 9a:9c:87:1e:e0:65:c5:fd:70:34:f1:55:70:a2:f7:0d:06:c1: a8:ca:5c:3c:7f:b8:b2:21:b0:25:ea:25:43:5c:26:7a:05:af: 45:bc:38:de:19:c4:b6:b1:84:a3:24:71:46:2f:4c:39:49:8e: 9d:33:a1:ac:58:f1:14:62:13:7f:d5:9f:54:a1:4f:cc:ea:e5: 59:0f:93:59:1d:91:98:b6:56:2c:73:7c:9d:fc:ce:8d:73:f4: fa:f0:b3:b0:e4:6e:96:9f:bc:f2:e1:85:fc:4e:ca:b8:63:86: 61:0a:24:2a:a5:97:ec:1b:e1:97:76:5a:61:98:88:23:bc:d6: 54:85:33:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQUUxMTAvBgNVBAUTKDY5NzYyMDUxNUU3QjFFRThBQzdGM0Y2RDEzQkVBRUJB NjJDNEVEQTkwHhcNMjYwNTEzMDIwMjQ4WhcNMjYwNTIwMDIwMjQ4WjAYMRYwFAYD VQQDEw02YTAzZGJjOC04Y2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8vIxbmZD8Wa3927/pQ5GmO0iwZBoizpMd0kCJCOVK5WSxZ35m8GpjPiNrfEj uxuUfKNyeoYP3EBK4eTjyZjrZGGlo9fjFZFd2eTvFCuh1UES4jbIahOOsR8Cb9mr VY9HH0/5r3MKIbaKm+Dh8/weAg36Ooq97zRqpKC+gj/6hkNFv3u/V0UI6Lm/10Cy cWdsvNDqjXYN0sHwxaI2sVuA+MNfRZOg3MsiuXKRwb1V+gwSPhj6Yjjmfh/GJ5fC VzlIgxity78dbZ2Suz1oWAwAfGOVsm9a7/vAy0/svNTfjvknHYXCwLoSNSOHeZGM KpnI9r3Ou84ulQRPN0485lJ8HwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOiWb++X kOL5xRmubU21PLFOBOpJMB8GA1UdIwQYMBaAFGl2IFFeex7orH8/bRO+rrpixO2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJBRS9DNzBGRUEyQThD MjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1aXNmejl0RTc2dXVtTEU3 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FYWWdVVjU3SHVpc2Z6OXRFNzZ1dW1MRTdhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTJBRS9DNzBGRUEyQThDMjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1 aXNmejl0RTc2dXVtTEU3YWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU7NbHDTtecxLunW3tZ3e1dPrXddK31xGSePCxDN7kFKgYmvMG2v58EKsEoJ1 vxCliwXwTg1iBrvUKXdMsqBS4/VCOTQUO6TiUcNcw+oXB+QK7RrEFA2na9abVlso 6NWERzpdH0OjX8cHkD8NxUYD3eV2XtTFMrVi4U+DnPLAmpyHHuBlxf1wNPFVcKL3 DQbBqMpcPH+4siGwJeolQ1wmegWvRbw43hnEtrGEoyRxRi9MOUmOnTOhrFjxFGIT f9WfVKFPzOrlWQ+TWR2RmLZWLHN8nfzOjXP0+vCzsORulp+88uGF/E7KuGOGYQok KqWX7Bvhl3ZaYZiII7zWVIUzRg== -----END CERTIFICATE-----Generated at Wed May 13 07:53:23 2026 by rpki-client