$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft File: PN9D1xf8WEnyOpTimncrKKXXAeM.mft (raw, json) Hash identifier: 7/yVj/0gZcjDkypTdMac+0nvFd2oT+IB73ua/79V+yQ= Subject key identifier: D7:03:4E:69:37:6F:90:58:A3:CD:D8:8F:FF:31:E8:50:C0:B5:1F:86 Authority key identifier: 3C:DF:43:D7:17:FC:58:49:F2:3A:94:E2:9A:77:2B:28:A5:D7:01:E3 Certificate issuer: /CN=A91E3BB3/serialNumber=3CDF43D717FC5849F23A94E29A772B28A5D701E3 Certificate serial: 0907 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN9D1xf8WEnyOpTimncrKKXXAeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft Manifest number: 08FC Signing time: Tue 12 May 2026 20:22:39 +0000 Manifest this update: Tue 12 May 2026 20:22:39 +0000 Manifest next update: Tue 19 May 2026 20:22:39 +0000 Files and hashes: 1: PN9D1xf8WEnyOpTimncrKKXXAeM.crl (hash: 2A0/KQcPBXX+HA//6eivcJLeAuZIFkNgVD0/mblW+CQ=) 2: D0CF108ED85111EF9DC0826CC4F9AE02.roa (hash: wbC8vyImx6v6ewZMr1D8zOdi43W+XjTwWRTdg25wKL8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.crl rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN9D1xf8WEnyOpTimncrKKXXAeM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2311 (0x907) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3BB3, serialNumber=3CDF43D717FC5849F23A94E29A772B28A5D701E3 Validity Not Before: May 12 20:22:39 2026 GMT Not After : May 19 20:22:39 2026 GMT Subject: CN=6a038c0f-52c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d0:da:73:66:e4:1f:c7:b5:16:83:4c:e3:d7: 94:28:9a:23:ef:1d:0b:73:07:7b:e5:d6:ec:4f:2d: be:93:73:0b:71:e7:0d:e9:82:2d:3a:3b:1c:01:ab: ed:a2:4f:51:70:7e:c9:99:69:eb:49:96:cf:ba:fb: 80:26:fa:84:cc:73:3d:a5:f2:a0:eb:8d:fb:10:60: 5a:72:68:61:43:e2:46:a3:ec:87:6f:f6:8f:2d:ce: 1e:dc:f0:a6:ee:2c:18:47:7c:c8:6a:66:c9:84:f1: 23:62:f2:85:46:d6:7b:35:82:41:b2:b1:c4:62:8b: 55:50:49:ef:97:87:52:9d:ab:57:f8:d7:ac:57:9f: 67:be:78:bf:3d:76:52:ff:e0:52:cb:1a:66:cd:e7: b2:6d:8c:63:f0:0b:1c:61:07:5d:21:38:36:1b:90: 60:8b:34:71:21:6d:cb:39:8d:15:7e:b5:5a:12:23: e1:a8:57:c9:88:60:bb:a8:28:07:85:08:3e:6a:c8: 8b:30:80:f9:c5:27:80:17:6c:86:1a:f9:f3:d9:10: 02:e1:9c:1a:e7:b8:09:e6:ea:fa:ed:69:b7:61:17: 7b:da:af:92:5d:ce:2a:29:68:a7:43:40:7f:d0:6e: 06:54:9b:90:1f:da:71:4e:61:d6:81:4f:19:49:1c: 4c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:03:4E:69:37:6F:90:58:A3:CD:D8:8F:FF:31:E8:50:C0:B5:1F:86 X509v3 Authority Key Identifier: keyid:3C:DF:43:D7:17:FC:58:49:F2:3A:94:E2:9A:77:2B:28:A5:D7:01:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN9D1xf8WEnyOpTimncrKKXXAeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:ef:88:c2:99:a5:c5:15:6b:26:e6:b3:bf:ce:50:a5:dc:f0: 67:24:d1:ff:d9:28:c8:6d:d4:80:19:2e:ba:2d:23:22:7f:1a: 51:33:60:7e:88:b0:aa:ad:3b:57:bb:ad:c1:4f:88:75:73:8a: 2e:0d:a6:c2:c2:58:b9:3e:03:7a:fc:15:ba:20:29:4a:70:de: f2:19:95:1e:75:69:ae:8e:17:ab:4c:7b:dc:d2:3a:93:c9:e7: c5:d8:20:7e:b0:90:ab:3a:6a:3f:62:06:ab:a5:3f:bb:ca:b7: a6:76:36:cd:21:11:bd:52:36:de:26:a6:3f:2c:26:ee:e5:10: aa:49:99:ff:ce:0f:45:f0:6c:ab:f9:89:98:35:6b:50:39:6d: d6:75:8b:ec:d7:e0:f4:ec:ac:e3:4c:b1:1c:a3:d4:c8:12:50: c2:65:e5:ec:e8:c9:7d:4c:e7:6f:d0:4f:5f:b9:5a:30:cf:23: 63:32:0d:c8:ad:a2:7a:c4:31:f0:bb:c1:0b:f2:01:eb:00:b4: 05:76:2b:e2:7a:91:b4:55:d8:8f:54:96:b0:c3:d2:f8:5c:4d: 96:62:f4:b4:12:58:9c:98:62:8a:19:2e:56:65:85:9f:6d:08: 24:16:40:dc:f2:69:b5:90:1d:63:0f:51:0e:7f:7d:8b:97:a8: 97:50:4e:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCQjMxMTAvBgNVBAUTKDNDREY0M0Q3MTdGQzU4NDlGMjNBOTRFMjlBNzcyQjI4 QTVENzAxRTMwHhcNMjYwNTEyMjAyMjM5WhcNMjYwNTE5MjAyMjM5WjAYMRYwFAYD VQQDEw02YTAzOGMwZi01MmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydDac2bkH8e1FoNM49eUKJoj7x0Lcwd75dbsTy2+k3MLcecN6YItOjscAavt ok9RcH7JmWnrSZbPuvuAJvqEzHM9pfKg6437EGBacmhhQ+JGo+yHb/aPLc4e3PCm 7iwYR3zIambJhPEjYvKFRtZ7NYJBsrHEYotVUEnvl4dSnatX+NesV59nvni/PXZS /+BSyxpmzeeybYxj8AscYQddITg2G5BgizRxIW3LOY0VfrVaEiPhqFfJiGC7qCgH hQg+asiLMID5xSeAF2yGGvnz2RAC4Zwa57gJ5ur67Wm3YRd72q+SXc4qKWinQ0B/ 0G4GVJuQH9pxTmHWgU8ZSRxMgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNcDTmk3 b5BYo83Yj/8x6FDAtR+GMB8GA1UdIwQYMBaAFDzfQ9cX/FhJ8jqU4pp3Kyil1wHj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0JCMy85NUFFQTlFOENC RTQxMUVBODA2QTRBNzVDNEY5QUUwMi9QTjlEMXhmOFdFbnlPcFRpbW5jcktLWFhB ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BOOUQxeGY4V0VueU9wVGltbmNyS0tYWEFlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0JCMy85NUFFQTlFOENCRTQxMUVBODA2QTRBNzVDNEY5QUUwMi9QTjlEMXhmOFdF bnlPcFRpbW5jcktLWFhBZU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASO+IwpmlxRVrJuazv85QpdzwZyTR/9koyG3UgBkuui0jIn8aUTNgfoiwqq07 V7utwU+IdXOKLg2mwsJYuT4DevwVuiApSnDe8hmVHnVpro4Xq0x73NI6k8nnxdgg frCQqzpqP2IGq6U/u8q3pnY2zSERvVI23iamPywm7uUQqkmZ/84PRfBsq/mJmDVr UDlt1nWL7Nfg9Oys40yxHKPUyBJQwmXl7OjJfUznb9BPX7laMM8jYzINyK2iesQx 8LvBC/IB6wC0BXYr4nqRtFXYj1SWsMPS+FxNlmL0tBJYnJhiihkuVmWFn20IJBZA 3PJptZAdYw9RDn99i5eol1BOSA== -----END CERTIFICATE-----Generated at Wed May 13 15:38:14 2026 by rpki-client