$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.mft File: We3oFpsKLDIUaf8RsWKL3gwfLEE.mft (raw, json) Hash identifier: a/FruB46VmShmAiRAZCXidSFkOFICV6AKjCOIKKB6Zs= Subject key identifier: C3:C7:9F:A3:A6:47:DE:E0:59:10:DA:D0:6F:65:5E:32:AC:61:1E:CB Authority key identifier: 59:ED:E8:16:9B:0A:2C:32:14:69:FF:11:B1:62:8B:DE:0C:1F:2C:41 Certificate issuer: /CN=A91DEFAF/serialNumber=59EDE8169B0A2C321469FF11B1628BDE0C1F2C41 Certificate serial: 07C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/We3oFpsKLDIUaf8RsWKL3gwfLEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.mft Manifest number: 07B4 Signing time: Tue 12 May 2026 21:33:11 +0000 Manifest this update: Tue 12 May 2026 21:33:10 +0000 Manifest next update: Tue 19 May 2026 21:33:10 +0000 Files and hashes: 1: We3oFpsKLDIUaf8RsWKL3gwfLEE.crl (hash: SunqhenXYFflOXjlpRbWzx12XJ1fzd6sVlIHFSkEAPY=) 2: FD9457225B1011F0A31EF763C4F9AE02.roa (hash: DHCrD/BmJiwChnMZypQOoV/NKOdhW+NSK0er3Q/6jx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.crl rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/We3oFpsKLDIUaf8RsWKL3gwfLEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 21:33:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1986 (0x7c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEFAF, serialNumber=59EDE8169B0A2C321469FF11B1628BDE0C1F2C41 Validity Not Before: May 12 21:33:10 2026 GMT Not After : May 19 21:33:10 2026 GMT Subject: CN=6a039c97-3918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9f:61:cf:75:61:3b:06:cf:f0:ea:73:43:9e: 1c:58:d6:fc:3c:d3:19:32:0f:0d:6a:3e:f8:f9:68: 66:89:a0:58:6f:d6:3b:73:34:18:f2:3b:72:81:64: 11:6e:d0:27:b6:41:7a:30:be:1b:db:99:5a:2d:b4: fd:61:5f:94:26:c9:cc:97:a3:f5:8b:8c:8f:7d:af: 6d:4c:66:15:3e:30:cf:fe:f1:d0:ef:3d:c6:cb:10: 6f:06:da:07:18:18:e7:86:c4:89:70:fd:d2:8e:19: dc:97:95:75:36:ac:22:34:51:a6:70:53:89:0f:92: 6b:c2:61:58:53:58:a0:e6:5e:a0:69:59:b7:fd:b9: 00:b5:c5:39:43:7d:13:7e:ca:9b:84:8e:f3:a7:d2: 36:70:9d:c3:9d:31:48:85:6d:8c:d4:2b:64:3a:67: d3:24:89:4c:c4:f9:5d:13:4e:43:55:cd:c0:59:a8: bc:c4:4c:12:99:66:e2:8c:49:70:b5:fd:81:ff:48: 9c:84:61:8f:c0:78:59:07:0f:6a:46:e5:bb:19:30: 68:28:a3:87:50:79:93:fc:d6:77:24:8a:3a:83:fe: 02:5e:97:48:dc:c1:be:f0:be:89:b5:1b:ce:4d:08: 27:1e:6c:22:f1:c6:5f:ff:ad:a0:37:7e:24:c7:b3: e3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C7:9F:A3:A6:47:DE:E0:59:10:DA:D0:6F:65:5E:32:AC:61:1E:CB X509v3 Authority Key Identifier: keyid:59:ED:E8:16:9B:0A:2C:32:14:69:FF:11:B1:62:8B:DE:0C:1F:2C:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/We3oFpsKLDIUaf8RsWKL3gwfLEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEFAF/07176240492C11EBA981BF52C4F9AE02/We3oFpsKLDIUaf8RsWKL3gwfLEE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:8b:24:4d:52:5e:97:60:ce:8f:98:00:b2:a5:8e:75:9f:6b: ba:d2:e2:ae:ba:ef:87:27:ec:dd:f4:12:98:07:bb:4d:3b:7f: f9:88:65:6d:80:ae:dc:6c:c0:28:0d:df:a0:d5:dc:c8:05:d7: 9a:7e:80:bf:42:45:fe:e2:4c:03:5e:2e:70:fa:8b:8a:92:14: 1e:03:bc:2e:96:57:2a:90:e0:a7:6d:86:a7:e0:fa:bb:55:a2: a3:64:1d:fd:d1:b6:81:fc:fa:de:29:28:64:59:88:27:b8:bc: 2f:f0:37:33:51:0f:cf:c2:24:e2:ee:2f:88:9a:96:b8:c4:0e: a9:44:da:55:e7:7b:95:07:dd:7b:d2:75:65:f3:f9:bd:05:8e: de:0a:eb:24:05:9a:4e:9f:69:64:7b:27:5d:a9:4b:65:63:15: e6:bf:bc:81:d7:f1:39:4f:db:52:e3:d7:ab:3e:69:a8:1a:a2: 91:aa:46:bb:52:f3:e6:42:29:fa:20:1a:a0:5e:30:5e:03:dd: 79:ab:98:32:90:85:3f:fc:2f:10:ed:53:e4:76:22:1d:69:63: f0:60:38:b6:0e:99:8f:e9:16:dd:02:e4:08:a9:ff:5d:d5:8a: 3a:82:98:47:5f:24:cb:ab:76:14:92:7f:fa:cc:25:c1:09:83: 95:02:b5:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVGQUYxMTAvBgNVBAUTKDU5RURFODE2OUIwQTJDMzIxNDY5RkYxMUIxNjI4QkRF MEMxRjJDNDEwHhcNMjYwNTEyMjEzMzEwWhcNMjYwNTE5MjEzMzEwWjAYMRYwFAYD VQQDEw02YTAzOWM5Ny0zOTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJ9hz3VhOwbP8OpzQ54cWNb8PNMZMg8Naj74+WhmiaBYb9Y7czQY8jtygWQR btAntkF6ML4b25laLbT9YV+UJsnMl6P1i4yPfa9tTGYVPjDP/vHQ7z3GyxBvBtoH GBjnhsSJcP3Sjhncl5V1NqwiNFGmcFOJD5JrwmFYU1ig5l6gaVm3/bkAtcU5Q30T fsqbhI7zp9I2cJ3DnTFIhW2M1CtkOmfTJIlMxPldE05DVc3AWai8xEwSmWbijElw tf2B/0ichGGPwHhZBw9qRuW7GTBoKKOHUHmT/NZ3JIo6g/4CXpdI3MG+8L6JtRvO TQgnHmwi8cZf/62gN34kx7Pj8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMPHn6Om R97gWRDa0G9lXjKsYR7LMB8GA1UdIwQYMBaAFFnt6BabCiwyFGn/EbFii94MHyxB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUZBRi8wNzE3NjI0MDQ5 MkMxMUVCQTk4MUJGNTJDNEY5QUUwMi9XZTNvRnBzS0xESVVhZjhSc1dLTDNnd2ZM RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dlM29GcHNLTERJVWFmOFJzV0tMM2d3ZkxFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUZBRi8wNzE3NjI0MDQ5MkMxMUVCQTk4MUJGNTJDNEY5QUUwMi9XZTNvRnBzS0xE SVVhZjhSc1dLTDNnd2ZMRUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm4skTVJel2DOj5gAsqWOdZ9rutLirrrvhyfs3fQSmAe7TTt/+YhlbYCu3GzA KA3foNXcyAXXmn6Av0JF/uJMA14ucPqLipIUHgO8LpZXKpDgp22Gp+D6u1Wio2Qd /dG2gfz63ikoZFmIJ7i8L/A3M1EPz8Ik4u4viJqWuMQOqUTaVed7lQfde9J1ZfP5 vQWO3grrJAWaTp9pZHsnXalLZWMV5r+8gdfxOU/bUuPXqz5pqBqikapGu1Lz5kIp +iAaoF4wXgPdeauYMpCFP/wvEO1T5HYiHWlj8GA4tg6Zj+kW3QLkCKn/XdWKOoKY R18ky6t2FJJ/+swlwQmDlQK1nA== -----END CERTIFICATE-----Generated at Wed May 13 09:25:59 2026 by rpki-client