$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft File: MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft (raw, json) Hash identifier: KTejbM5ey0DzU8DHmd0emyaAReGZIZv6giG/RDc8GYA= Subject key identifier: CA:BF:C8:B1:3D:5E:69:10:07:6C:7C:F9:AA:64:45:EA:16:EC:9C:76 Authority key identifier: 31:6D:89:64:7F:0D:0C:B0:6B:37:32:07:8A:42:30:AF:11:56:53:34 Certificate issuer: /CN=A91E3441/serialNumber=316D89647F0D0CB06B3732078A4230AF11565334 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MW2JZH8NDLBrNzIHikIwrxFWUzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft Manifest number: 42 Signing time: Wed 13 May 2026 08:34:16 +0000 Manifest this update: Wed 13 May 2026 08:34:16 +0000 Manifest next update: Wed 20 May 2026 08:34:16 +0000 Files and hashes: 1: MW2JZH8NDLBrNzIHikIwrxFWUzQ.crl (hash: G9rSyh57+sGWl5ciqI7jWBRYbf6v/7DxbsiodDAs5WY=) 2: 3954E33CEE9E11F0B32FB2E5666F56BC.roa (hash: 91UfSDMa7uQJKbxkjWHGuOg640JuLtPHQKq29mthHYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.crl rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MW2JZH8NDLBrNzIHikIwrxFWUzQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 06:14:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3441, serialNumber=316D89647F0D0CB06B3732078A4230AF11565334 Validity Not Before: May 13 08:34:16 2026 GMT Not After : May 20 08:34:16 2026 GMT Subject: CN=6a043788-eaff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9f:c4:18:f2:e4:4b:73:0d:a7:e4:8c:f0:91: 90:2c:f8:56:ec:2a:7d:f7:54:26:b8:38:53:4d:30: a6:ff:47:79:d4:07:8c:36:96:ad:44:7d:24:67:36: 51:d9:06:b8:63:3c:24:35:0b:83:c2:21:bf:01:6f: c1:e6:a1:49:7d:94:bb:47:3f:7c:98:4f:c0:37:e3: 57:8c:3c:79:3e:a2:31:f3:57:2d:bd:8c:9d:7f:8d: 10:23:e5:46:26:8b:49:73:dd:c8:01:8c:8e:24:da: d7:f2:f1:ee:80:06:b3:be:7f:a9:74:9e:55:a4:fb: 7f:ea:29:ba:68:9d:8a:70:25:ae:e0:75:1b:75:c3: b4:ee:54:2c:bc:dd:d8:7d:f6:7d:b7:3a:dd:f9:ac: 2d:eb:98:c2:6f:14:5c:0c:ba:d4:9a:2f:fc:cb:96: cb:56:07:3f:17:bf:4c:14:18:fb:df:f9:b9:5d:cd: d3:ba:f1:5a:1b:2c:0f:a9:32:e8:8f:9a:bc:30:ab: 6c:e2:16:d3:e2:af:ef:54:75:b0:de:da:4c:b4:7f: a5:6e:a3:cc:2c:75:72:cb:5b:37:39:d2:db:42:8a: 7b:1b:8f:e4:5d:7e:01:a0:7f:a9:fe:0c:e6:0f:0c: 96:37:c3:2a:b0:f3:ef:df:50:5a:4d:b9:75:21:d1: 27:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:BF:C8:B1:3D:5E:69:10:07:6C:7C:F9:AA:64:45:EA:16:EC:9C:76 X509v3 Authority Key Identifier: keyid:31:6D:89:64:7F:0D:0C:B0:6B:37:32:07:8A:42:30:AF:11:56:53:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MW2JZH8NDLBrNzIHikIwrxFWUzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3441/E081A60AEE9D11F0ACE25C9D666F56BC/MW2JZH8NDLBrNzIHikIwrxFWUzQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:84:dc:c1:12:b4:70:9f:10:fe:10:b3:9e:73:d1:42:52:4f: 7b:e8:01:4a:dd:7f:1c:48:93:58:06:8b:c2:ed:65:53:56:9f: fe:d6:2c:34:f9:b4:76:b4:ba:32:eb:a5:74:4a:3c:5e:0a:ec: 12:42:1f:70:30:6b:8d:ce:11:7b:62:04:ac:3c:0d:5b:00:45: 84:8d:e0:b6:4e:23:4f:f1:f4:45:2f:11:fc:be:e0:83:87:2c: 03:ad:e4:fa:41:cd:7c:e1:6f:27:f6:e5:80:fc:4d:bc:94:19: 1d:f2:53:85:76:42:8a:da:60:12:00:bf:34:f8:f9:2d:76:89: 3b:1c:14:14:2d:67:c2:dd:a4:01:77:b0:b8:35:af:a7:5d:92: 1d:b9:75:e4:ce:e0:69:4a:6a:5b:4e:29:df:df:ce:54:88:28: 61:b6:d9:df:74:06:bb:21:86:31:5a:c1:ef:e4:e8:07:72:9e: 6c:29:0a:dd:23:3a:85:aa:39:a2:95:8b:a3:c9:37:b9:b6:60: b2:4e:b7:20:59:7e:26:ce:b1:d6:ac:4e:39:99:72:4c:e3:1c: fa:55:22:aa:24:88:20:aa:4c:42:df:0e:ee:85:3b:3d:9f:e4: b9:eb:5f:8c:7c:6c:42:a5:13:94:4a:ec:e8:ed:18:59:68:52: 28:6b:2c:97 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzQ0MTExMC8GA1UEBRMoMzE2RDg5NjQ3RjBEMENCMDZCMzczMjA3OEE0MjMwQUYx MTU2NTMzNDAeFw0yNjA1MTMwODM0MTZaFw0yNjA1MjAwODM0MTZaMBgxFjAUBgNV BAMTDTZhMDQzNzg4LWVhZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxn8QY8uRLcw2n5IzwkZAs+FbsKn33VCa4OFNNMKb/R3nUB4w2lq1EfSRnNlHZ BrhjPCQ1C4PCIb8Bb8HmoUl9lLtHP3yYT8A341eMPHk+ojHzVy29jJ1/jRAj5UYm i0lz3cgBjI4k2tfy8e6ABrO+f6l0nlWk+3/qKbponYpwJa7gdRt1w7TuVCy83dh9 9n23Ot35rC3rmMJvFFwMutSaL/zLlstWBz8Xv0wUGPvf+bldzdO68VobLA+pMuiP mrwwq2ziFtPir+9UdbDe2ky0f6Vuo8wsdXLLWzc50ttCinsbj+RdfgGgf6n+DOYP DJY3wyqw8+/fUFpNuXUh0Sc1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUyr/IsT1e aRAHbHz5qmRF6hbsnHYwHwYDVR0jBBgwFoAUMW2JZH8NDLBrNzIHikIwrxFWUzQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzNDQxL0UwODFBNjBBRUU5 RDExRjBBQ0UyNUM5RDY2NkY1NkJDL01XMkpaSDhORExCck56SUhpa0l3cnhGV1V6 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVcySlpIOE5ETEJyTnpJSGlrSXdyeEZXVXpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz NDQxL0UwODFBNjBBRUU5RDExRjBBQ0UyNUM5RDY2NkY1NkJDL01XMkpaSDhORExC ck56SUhpa0l3cnhGV1V6US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAKhNzBErRwnxD+ELOec9FCUk976AFK3X8cSJNYBovC7WVTVp/+1iw0+bR2tLoy 66V0SjxeCuwSQh9wMGuNzhF7YgSsPA1bAEWEjeC2TiNP8fRFLxH8vuCDhywDreT6 Qc184W8n9uWA/E28lBkd8lOFdkKK2mASAL80+Pktdok7HBQULWfC3aQBd7C4Na+n XZIduXXkzuBpSmpbTinf385UiChhttnfdAa7IYYxWsHv5OgHcp5sKQrdIzqFqjmi lYujyTe5tmCyTrcgWX4mzrHWrE45mXJM4xz6VSKqJIggqkxC3w7uhTs9n+S561+M fGxCpROUSuzo7RhZaFIoayyX -----END CERTIFICATE-----Generated at Wed May 13 12:09:35 2026 by rpki-client