$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.mft File: aGr0G8M9rvgo-rSuSjoNWHutDT8.mft (raw, json) Hash identifier: SyxgPrMZjqgytt+dByMNwN5ceBoSr0mNSttt3iuAu/Q= Subject key identifier: 62:17:70:AD:81:A1:C8:C3:2E:38:C7:14:CD:3F:ED:E4:D1:39:9A:27 Authority key identifier: 68:6A:F4:1B:C3:3D:AE:F8:28:FA:B4:AE:4A:3A:0D:58:7B:AD:0D:3F Certificate issuer: /CN=A91E4D3D/serialNumber=686AF41BC33DAEF828FAB4AE4A3A0D587BAD0D3F Certificate serial: 0662 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aGr0G8M9rvgo-rSuSjoNWHutDT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.mft Manifest number: 064B Signing time: Tue 12 May 2026 22:48:35 +0000 Manifest this update: Tue 12 May 2026 22:48:34 +0000 Manifest next update: Tue 19 May 2026 22:48:34 +0000 Files and hashes: 1: aGr0G8M9rvgo-rSuSjoNWHutDT8.crl (hash: +Hd2xuefQ75nrEicph7EkvpsrSEZe0Fy1uIbkxFZZyw=) 2: 40310456D8D211EB97FF5586C4F9AE02.roa (hash: ljhzAAAHOEbQtw8/O2WirKoWv6XtLYHxhjuJKY3iiZM=) 3: 63FEB4F8D97411EBB8CC3F40C4F9AE02.roa (hash: GBummmykHnsRNOp2UTZVHW61aelGglaz1bE3tCnWo5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.crl rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aGr0G8M9rvgo-rSuSjoNWHutDT8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1634 (0x662) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4D3D, serialNumber=686AF41BC33DAEF828FAB4AE4A3A0D587BAD0D3F Validity Not Before: May 12 22:48:34 2026 GMT Not After : May 19 22:48:34 2026 GMT Subject: CN=6a03ae43-d6dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:09:3b:32:02:9f:f0:47:df:ec:b0:00:d5:5a: b2:8b:21:84:b8:ea:8a:24:cd:bc:d9:99:11:96:f1: 2c:3f:44:37:cc:94:9d:a2:66:68:c9:de:3b:2e:3b: 33:55:f9:73:61:c9:e7:40:b8:e9:22:2d:62:48:73: ab:aa:f3:86:3a:37:78:93:7e:b3:07:77:dd:73:c5: 60:53:81:8b:87:8d:f7:aa:06:e0:f2:ad:b7:d4:6b: 9e:b7:0c:77:57:7a:da:ec:c7:c6:7e:20:1b:3e:39: 57:9e:27:c6:7b:8e:e6:46:30:a7:c7:5b:10:5b:1a: d0:3b:d0:c0:5a:eb:14:54:29:c6:e1:da:8c:a3:d7: 73:2a:cb:18:04:00:93:9e:54:dc:b4:bb:44:09:a9: 93:f3:50:b5:fb:bb:80:64:12:30:ea:5d:bb:cd:ce: 2d:d6:09:2b:af:d9:4a:bc:ce:26:cd:35:48:6d:cd: 9d:29:c8:11:b0:5e:eb:e6:37:0d:0b:73:9e:f1:f3: ee:a5:f7:d7:cb:b2:f0:b9:21:ee:c6:2f:0f:a7:86: 92:cf:70:06:63:f7:29:ca:79:53:8e:78:81:25:02: e4:29:29:41:98:36:3d:99:d2:26:90:e9:78:b5:74: 33:c3:64:94:61:25:9a:e7:f4:66:34:49:81:63:92: 5e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:17:70:AD:81:A1:C8:C3:2E:38:C7:14:CD:3F:ED:E4:D1:39:9A:27 X509v3 Authority Key Identifier: keyid:68:6A:F4:1B:C3:3D:AE:F8:28:FA:B4:AE:4A:3A:0D:58:7B:AD:0D:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aGr0G8M9rvgo-rSuSjoNWHutDT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:b1:96:fc:5f:7a:88:f5:3a:e7:53:7a:ad:dc:2d:4f:3f:bf: 36:8f:68:be:3a:3a:4d:6c:18:c2:60:6a:d3:4b:61:a7:08:46: 19:06:1c:86:d5:74:6a:4b:37:f6:53:25:56:d3:99:fa:33:5e: 7a:e4:6c:a6:55:da:ff:32:c9:fe:70:21:62:30:81:45:df:8d: 90:e7:69:e6:e7:f7:56:f2:d4:9f:04:8b:8e:21:33:9c:ab:e4: 1e:25:6b:f3:9b:1c:8d:88:d8:f3:16:76:73:6f:5d:4e:08:0a: f8:0c:3c:a8:06:cf:6c:7f:1d:76:11:8a:a6:9d:9c:a5:81:28: d8:5b:be:2c:66:a9:0f:4c:e5:e8:36:79:01:cd:28:41:f9:de: 86:6c:f4:48:de:89:e3:05:ea:4f:b3:e1:ce:a1:bc:5d:a6:4c: 3a:15:48:67:d7:f1:b1:4e:36:c7:36:b2:d2:cf:75:80:48:79: 6f:ad:8b:47:bd:34:84:25:c7:8c:b2:39:89:53:06:64:a0:72: d2:7d:18:f7:12:5b:61:0f:91:4b:c8:5e:bc:9b:40:9f:3b:9c: fe:f5:47:c9:dd:74:89:8d:66:10:49:bb:c8:f6:20:c4:a7:dc: b0:94:4e:55:be:01:9f:74:86:b4:f2:7f:3c:12:b9:ac:fd:36: b2:a1:c7:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTREM0QxMTAvBgNVBAUTKDY4NkFGNDFCQzMzREFFRjgyOEZBQjRBRTRBM0EwRDU4 N0JBRDBEM0YwHhcNMjYwNTEyMjI0ODM0WhcNMjYwNTE5MjI0ODM0WjAYMRYwFAYD VQQDEw02YTAzYWU0My1kNmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6wk7MgKf8Eff7LAA1VqyiyGEuOqKJM282ZkRlvEsP0Q3zJSdomZoyd47Ljsz VflzYcnnQLjpIi1iSHOrqvOGOjd4k36zB3fdc8VgU4GLh433qgbg8q231Guetwx3 V3ra7MfGfiAbPjlXnifGe47mRjCnx1sQWxrQO9DAWusUVCnG4dqMo9dzKssYBACT nlTctLtECamT81C1+7uAZBIw6l27zc4t1gkrr9lKvM4mzTVIbc2dKcgRsF7r5jcN C3Oe8fPupffXy7LwuSHuxi8Pp4aSz3AGY/cpynlTjniBJQLkKSlBmDY9mdImkOl4 tXQzw2SUYSWa5/RmNEmBY5JeRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGIXcK2B ocjDLjjHFM0/7eTROZonMB8GA1UdIwQYMBaAFGhq9BvDPa74KPq0rko6DVh7rQ0/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEQzRC9BNzBBOEZFRUQ4 QjkxMUVCQUJDMUY0ODVDNEY5QUUwMi9hR3IwRzhNOXJ2Z28tclN1U2pvTldIdXRE VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FHcjBHOE05cnZnby1yU3VTam9OV0h1dERUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEQzRC9BNzBBOEZFRUQ4QjkxMUVCQUJDMUY0ODVDNEY5QUUwMi9hR3IwRzhNOXJ2 Z28tclN1U2pvTldIdXREVDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkrGW/F96iPU651N6rdwtTz+/No9ovjo6TWwYwmBq00thpwhGGQYchtV0aks3 9lMlVtOZ+jNeeuRsplXa/zLJ/nAhYjCBRd+NkOdp5uf3VvLUnwSLjiEznKvkHiVr 85scjYjY8xZ2c29dTggK+Aw8qAbPbH8ddhGKpp2cpYEo2Fu+LGapD0zl6DZ5Ac0o Qfnehmz0SN6J4wXqT7PhzqG8XaZMOhVIZ9fxsU42xzay0s91gEh5b62LR700hCXH jLI5iVMGZKBy0n0Y9xJbYQ+RS8hevJtAnzuc/vVHyd10iY1mEEm7yPYgxKfcsJRO Vb4Bn3SGtPJ/PBK5rP02sqHHgg== -----END CERTIFICATE-----Generated at Wed May 13 05:22:42 2026 by rpki-client