$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft File: T-9lB7JV2AZqDaP_J9OVRosVLTg.mft (raw, json) Hash identifier: 1mfqAF5BJ8wILPSPy489ns7yzkFaBsLWd+OM8cJys/M= Subject key identifier: 7E:FF:7E:10:7A:A7:5C:2F:82:5F:03:0A:DB:5E:D4:54:EB:08:D2:EE Authority key identifier: 4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38 Certificate issuer: /CN=A91E3C42/serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38 Certificate serial: 0D54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft Manifest number: 0D4A Signing time: Tue 12 May 2026 18:04:06 +0000 Manifest this update: Tue 12 May 2026 18:04:05 +0000 Manifest next update: Tue 19 May 2026 18:04:05 +0000 Files and hashes: 1: T-9lB7JV2AZqDaP_J9OVRosVLTg.crl (hash: nrda4SAnw8tWM2Z9XQXwQSkPZ+WQd9f2xz1M3THnoSQ=) 2: C41C9EFEF55A11E9BF182559C4F9AE02.roa (hash: glrqd12FYLCjxlnpQQmc9rytFHslPrUcTMQsV2ywiP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:04:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3412 (0xd54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C42, serialNumber=4FEF6507B255D8066A0DA3FF27D395468B152D38 Validity Not Before: May 12 18:04:05 2026 GMT Not After : May 19 18:04:05 2026 GMT Subject: CN=6a036b95-56d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:59:e9:43:7e:c8:22:95:cc:a8:ca:76:0d:90: cc:ac:e7:f3:4b:91:d3:70:8f:17:13:54:4f:95:2e: 4e:bf:aa:46:b6:3f:db:ee:a1:a4:0b:bf:ff:01:40: d8:c3:ab:48:60:e9:0c:ec:50:51:41:75:db:a9:a2: 67:f5:1f:25:b5:b8:fb:78:cf:23:c8:d2:39:7f:95: 67:e8:87:5a:0a:8c:51:76:00:8d:11:3d:66:fe:67: 47:50:63:b2:f1:ec:e2:d3:ff:a7:36:e1:7f:a7:e0: 3a:9f:88:da:91:67:30:cd:9d:13:d5:9d:ef:87:72: 6a:6b:98:f4:e5:d1:cd:86:aa:09:00:c1:3e:0a:de: 2a:8d:ee:1a:b7:63:66:a3:4d:e2:a0:27:5e:55:91: 39:a2:c4:58:7f:d2:f5:03:5e:b2:05:5b:e9:62:24: 53:c8:c0:c5:c9:cd:9c:5f:fd:ba:bc:17:e2:7a:8d: 1b:9d:5d:f3:c8:3c:28:71:3e:93:b2:91:13:49:b3: 0f:75:01:94:b9:2d:4f:46:66:2f:fc:1f:e8:33:a1: 99:0c:14:a7:5d:a6:9a:1a:74:6c:a6:b7:ba:22:78: 87:07:92:5d:80:e7:63:2f:39:5a:1a:12:07:73:f3: 56:20:e5:f3:84:b1:13:6e:59:a8:7c:c4:11:a8:1e: 9b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:FF:7E:10:7A:A7:5C:2F:82:5F:03:0A:DB:5E:D4:54:EB:08:D2:EE X509v3 Authority Key Identifier: keyid:4F:EF:65:07:B2:55:D8:06:6A:0D:A3:FF:27:D3:95:46:8B:15:2D:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-9lB7JV2AZqDaP_J9OVRosVLTg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C42/3FB3B8D8F55911E9B7574956C4F9AE02/T-9lB7JV2AZqDaP_J9OVRosVLTg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:2d:46:bb:66:92:39:50:5a:b0:5b:3e:ea:ba:21:5c:a2:a9: 30:cb:78:c9:cb:81:c4:41:b6:07:47:18:54:ec:0f:ac:bf:ef: f7:e0:0d:17:2d:6d:9b:de:47:e8:0c:9d:ab:fc:72:1c:d7:a1: 1a:9d:8f:b5:ab:41:32:3e:21:77:a2:e6:b5:5b:76:11:d2:80: 39:35:e2:87:c4:de:67:e3:c4:8f:39:ca:3a:76:63:94:92:ce: 77:c2:d5:81:e7:68:fd:ef:c3:ff:c7:e2:90:ad:9d:dd:2c:4e: 0a:57:83:16:f6:f6:ee:46:6f:56:54:80:63:df:e6:b9:fa:b6: 83:93:51:b0:7d:6b:1b:af:67:08:93:a0:0a:21:73:ea:88:7b: 81:c9:8e:e9:80:4e:80:24:a9:56:e8:01:c8:95:cf:2b:7c:27: e0:e6:35:a7:c8:85:76:e0:bb:f8:f2:b5:3b:0c:e0:89:fa:e0: d1:e6:de:62:1f:35:6f:cc:74:8d:ab:13:3b:59:66:09:21:c8: 44:38:6f:35:23:cb:45:18:25:3d:48:17:6e:25:cc:af:75:63: 3c:4b:1b:9a:ba:07:a5:69:a0:68:6a:0d:0f:1c:1f:ad:fb:c2: e5:eb:63:2b:f6:f6:53:ba:59:66:cd:6e:61:38:a9:e7:a4:87: 51:c9:b0:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDNDIxMTAvBgNVBAUTKDRGRUY2NTA3QjI1NUQ4MDY2QTBEQTNGRjI3RDM5NTQ2 OEIxNTJEMzgwHhcNMjYwNTEyMTgwNDA1WhcNMjYwNTE5MTgwNDA1WjAYMRYwFAYD VQQDEw02YTAzNmI5NS01NmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoFnpQ37IIpXMqMp2DZDMrOfzS5HTcI8XE1RPlS5Ov6pGtj/b7qGkC7//AUDY w6tIYOkM7FBRQXXbqaJn9R8ltbj7eM8jyNI5f5Vn6IdaCoxRdgCNET1m/mdHUGOy 8ezi0/+nNuF/p+A6n4jakWcwzZ0T1Z3vh3Jqa5j05dHNhqoJAME+Ct4qje4at2Nm o03ioCdeVZE5osRYf9L1A16yBVvpYiRTyMDFyc2cX/26vBfieo0bnV3zyDwocT6T spETSbMPdQGUuS1PRmYv/B/oM6GZDBSnXaaaGnRspre6IniHB5JdgOdjLzlaGhIH c/NWIOXzhLETblmofMQRqB6bVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH7/fhB6 p1wvgl8DCtte1FTrCNLuMB8GA1UdIwQYMBaAFE/vZQeyVdgGag2j/yfTlUaLFS04 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M0Mi8zRkIzQjhEOEY1 NTkxMUU5Qjc1NzQ5NTZDNEY5QUUwMi9ULTlsQjdKVjJBWnFEYVBfSjlPVlJvc1ZM VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtOWxCN0pWMkFacURhUF9KOU9WUm9zVkxUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M0Mi8zRkIzQjhEOEY1NTkxMUU5Qjc1NzQ5NTZDNEY5QUUwMi9ULTlsQjdKVjJB WnFEYVBfSjlPVlJvc1ZMVGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACi1Gu2aSOVBasFs+6rohXKKpMMt4ycuBxEG2B0cYVOwPrL/v9+ANFy1tm95H 6Aydq/xyHNehGp2PtatBMj4hd6LmtVt2EdKAOTXih8TeZ+PEjznKOnZjlJLOd8LV gedo/e/D/8fikK2d3SxOCleDFvb27kZvVlSAY9/mufq2g5NRsH1rG69nCJOgCiFz 6oh7gcmO6YBOgCSpVugByJXPK3wn4OY1p8iFduC7+PK1Owzgifrg0ebeYh81b8x0 jasTO1lmCSHIRDhvNSPLRRglPUgXbiXMr3VjPEsbmroHpWmgaGoNDxwfrfvC5etj K/b2U7pZZs1uYTip56SHUcmwMA== -----END CERTIFICATE-----Generated at Wed May 13 06:23:19 2026 by rpki-client