$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft File: AaQS70FsiE9vY38b2oAOtu9nttY.mft (raw, json) Hash identifier: 8HyVykRXB3rCo5dCB+++9rwfpiAJnxXwzYHqATIJUVE= Subject key identifier: 5A:F3:74:5E:95:E0:DE:CA:35:B3:31:17:BE:58:4D:85:EB:CE:97:0B Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 Certificate issuer: /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Certificate serial: 2315 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft Manifest number: 22C0 Signing time: Tue 12 May 2026 15:51:40 +0000 Manifest this update: Tue 12 May 2026 15:51:40 +0000 Manifest next update: Tue 19 May 2026 15:51:40 +0000 Files and hashes: 1: AaQS70FsiE9vY38b2oAOtu9nttY.crl (hash: INIlkVbsf8hmnAw+NcPuRtsI8eYtgD0wXk6nA4EWRMo=) 2: 0ECE3EC6F36011F0BF2DB960646F56BC.roa (hash: QtoNirbotX7R4qD1r9ev9ywMdIdpJySoQAcu/MYpiqg=) 3: 11D9E3F865DB11F0A01C3E60C4F9AE02.roa (hash: fekDwvX/Pg2YZ9Fe3QZAnU92TpFpbncEnNKE83KMH+M=) 4: F4B9363CD97C11F0998DA3C49DD3641D.roa (hash: VfJC1uL3SDtxI0jb1ThMloxDt/b6TXqC47eyeyvo+WI=) 5: D128F6A2366111F19FA677FACA833773.roa (hash: ZY7Vk9qpQDHcmIYTowz44r/Aadjt59khWHwSNvAaAYk=) 6: 05302944D38811F096791A31C4F9AE02.roa (hash: 0TpazCbbP+eq5jbcmOC+QEukwM8XRQa407MbLaS5Vso=) 7: 114016CE65DB11F0A01C3E60C4F9AE02.roa (hash: qG9igdUpXB7wk8yx/k2tOuq/gYueDRGW4t5eH6cDkms=) 8: E049BA50335911F193981E57CA833773.roa (hash: ccrqPCbKxkHUXLuFhP49NrNOV6bbgxDvMbrEYPU0/70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 15:51:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8981 (0x2315) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Validity Not Before: May 12 15:51:40 2026 GMT Not After : May 19 15:51:40 2026 GMT Subject: CN=6a034c8c-2761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:38:27:0a:89:00:25:a8:68:71:75:75:3b:bb: d3:2e:81:60:78:a8:50:29:8b:a7:17:a8:9e:4b:28: 8c:10:65:16:b5:eb:39:cf:0c:e5:e3:41:dd:64:04: 92:2d:82:0a:31:f1:7c:a4:0f:41:82:f9:d9:d0:6e: e4:dc:e2:03:2b:1c:0f:e3:dc:f5:57:2d:08:51:2e: b5:23:db:be:4e:1a:94:a8:b1:8b:5b:26:f1:45:7f: 74:95:ab:54:e5:79:97:20:9c:56:3b:54:8d:d9:79: 8e:04:55:3c:4a:43:00:b9:c9:31:5f:e6:67:c7:ab: 9d:86:73:3c:2a:7d:5d:68:13:9c:57:c8:74:ab:9a: 0b:cc:f9:b8:8b:58:0f:58:3a:ac:05:f0:86:84:ec: bf:d7:bc:8f:0f:e3:26:13:2d:15:cb:cd:a3:10:0d: 36:4e:60:e4:37:c7:da:92:fb:25:2f:64:e6:61:da: 75:f1:b2:64:6b:52:02:01:06:09:80:7d:70:87:af: cb:fc:44:7b:ba:23:81:00:23:0a:97:1c:aa:ce:e3: 06:79:be:6f:ee:c5:ff:b3:f3:96:22:d7:2e:ff:2d: 12:51:e3:ad:bc:f8:a5:64:8d:1c:3d:86:7b:80:36: 32:42:a3:45:9d:8a:6e:10:6c:c6:7b:da:9a:d0:c8: d9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F3:74:5E:95:E0:DE:CA:35:B3:31:17:BE:58:4D:85:EB:CE:97:0B X509v3 Authority Key Identifier: keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:b8:88:65:75:f5:21:01:1e:5e:f6:8f:86:a1:2a:20:89:15: af:97:7b:6f:c8:d9:2d:78:df:67:57:d2:6d:e3:c5:b8:11:92: 8d:f9:2b:4e:0e:1b:05:e5:d1:5a:7b:71:d0:41:05:b1:1d:50: ab:d3:be:33:72:d6:5d:28:8c:5c:f2:2b:39:8e:29:f1:03:d5: ee:5b:2a:db:11:39:94:29:46:50:65:5e:95:5b:f7:ef:54:60: ba:39:89:57:51:94:0c:fe:11:83:ef:cf:13:94:39:dc:cf:15: b2:e7:32:a1:d8:57:4a:aa:4e:6a:42:ef:47:55:53:99:a6:7b: 35:ec:be:a8:32:8c:47:a8:68:7b:10:c5:c2:8d:29:35:cb:a3: 28:79:ea:61:d5:e6:8d:5d:28:f3:98:6e:9c:a1:1b:be:b7:6e: 66:28:e2:6a:89:02:53:80:e3:3e:c7:54:00:f8:a2:a7:cc:8e: 96:85:e0:6c:ec:ab:16:4e:e4:b5:61:84:2f:79:a6:06:a2:08: a4:19:01:b2:19:e4:bb:4e:45:f2:d2:dc:b4:4d:02:18:ee:d2: ef:dd:f8:e7:68:f5:c1:95:0c:a7:92:9b:ca:56:33:ac:f1:c6: e3:07:23:a1:47:ec:e7:c5:aa:23:b5:53:f1:08:27:3c:64:9b: 7d:dd:f2:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ4NDUxMTAvBgNVBAUTKDAxQTQxMkVGNDE2Qzg4NEY2RjYzN0YxQkRBODAwRUI2 RUY2N0I2RDYwHhcNMjYwNTEyMTU1MTQwWhcNMjYwNTE5MTU1MTQwWjAYMRYwFAYD VQQDEw02YTAzNGM4Yy0yNzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszgnCokAJahocXV1O7vTLoFgeKhQKYunF6ieSyiMEGUWtes5zwzl40HdZASS LYIKMfF8pA9BgvnZ0G7k3OIDKxwP49z1Vy0IUS61I9u+ThqUqLGLWybxRX90latU 5XmXIJxWO1SN2XmOBFU8SkMAuckxX+Znx6udhnM8Kn1daBOcV8h0q5oLzPm4i1gP WDqsBfCGhOy/17yPD+MmEy0Vy82jEA02TmDkN8fakvslL2TmYdp18bJka1ICAQYJ gH1wh6/L/ER7uiOBACMKlxyqzuMGeb5v7sX/s/OWItcu/y0SUeOtvPilZI0cPYZ7 gDYyQqNFnYpuEGzGe9qa0MjZzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFrzdF6V 4N7KNbMxF75YTYXrzpcLMB8GA1UdIwQYMBaAFAGkEu9BbIhPb2N/G9qADrbvZ7bW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDg0NS80MDAxNTNCNkQy RUIxMUU1QjREMTVBNEVDNEY5QUUwMi9BYVFTNzBGc2lFOXZZMzhiMm9BT3R1OW50 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FhUVM3MEZzaUU5dlkzOGIyb0FPdHU5bnR0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDg0NS80MDAxNTNCNkQyRUIxMUU1QjREMTVBNEVDNEY5QUUwMi9BYVFTNzBGc2lF OXZZMzhiMm9BT3R1OW50dFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAibiIZXX1IQEeXvaPhqEqIIkVr5d7b8jZLXjfZ1fSbePFuBGSjfkrTg4bBeXR Wntx0EEFsR1Qq9O+M3LWXSiMXPIrOY4p8QPV7lsq2xE5lClGUGVelVv371RgujmJ V1GUDP4Rg+/PE5Q53M8VsucyodhXSqpOakLvR1VTmaZ7Ney+qDKMR6hoexDFwo0p NcujKHnqYdXmjV0o85hunKEbvrduZijiaokCU4DjPsdUAPiip8yOloXgbOyrFk7k tWGEL3mmBqIIpBkBshnku05F8tLctE0CGO7S793452j1wZUMp5KbylYzrPHG4wcj oUfs58WqI7VT8QgnPGSbfd3yeA== -----END CERTIFICATE-----Generated at Wed May 13 05:09:46 2026 by rpki-client