$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft File: 9LfQRDuM_5tAmLuM7L7Yf86putI.mft (raw, json) Hash identifier: n4nlW+fDmtSlp/wxneqyGOejul6J93rodTcROLhGTic= Subject key identifier: 84:44:83:C7:2A:64:46:5B:23:50:72:9A:37:D0:0E:CD:E5:94:6F:8C Authority key identifier: F4:B7:D0:44:3B:8C:FF:9B:40:98:BB:8C:EC:BE:D8:7F:CE:A9:BA:D2 Certificate issuer: /CN=A91E5481/serialNumber=F4B7D0443B8CFF9B4098BB8CECBED87FCEA9BAD2 Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft Manifest number: BF Signing time: Mon 11 May 2026 07:04:49 +0000 Manifest this update: Mon 11 May 2026 07:04:49 +0000 Manifest next update: Mon 18 May 2026 07:04:49 +0000 Files and hashes: 1: 9LfQRDuM_5tAmLuM7L7Yf86putI.crl (hash: womyx9j8BZXVHwHcxj5Kxxx6Ld6apq6TrTIlhAdi6m0=) 2: 67F6AC6C2BD911F09AF6B821C4F9AE02.roa (hash: GMRoxaiJwQd4I9blwc313RSuAiLyK99JqZt/L1LzUaQ=) 3: 67818EF02BD911F09AF6B821C4F9AE02.roa (hash: KPvqeYEjrP3rW7z9OSGAJVN9ZK2zCwOeNm8vtT/hE1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.crl rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 07:04:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5481, serialNumber=F4B7D0443B8CFF9B4098BB8CECBED87FCEA9BAD2 Validity Not Before: May 11 07:04:49 2026 GMT Not After : May 18 07:04:49 2026 GMT Subject: CN=6a017f91-a42a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cc:e4:dc:6d:82:d8:c6:11:57:ed:b5:27:b8: a1:e2:2a:fe:39:40:f0:e3:1f:68:ba:b4:cb:4b:59: 36:0c:25:e9:ba:6a:b3:02:0e:66:d5:e3:43:a2:ae: 9c:a0:85:a9:e3:f2:89:48:2e:93:b8:b5:d2:d2:a6: 0e:07:85:0e:cb:d1:5f:a7:03:80:49:80:43:ef:29: 4d:7f:d1:49:ae:da:44:89:20:94:03:dd:44:b2:b4: 05:b4:23:35:8e:47:cd:3e:ac:5e:59:b2:63:cd:af: 05:8f:b1:05:43:24:de:bf:30:f1:a6:66:2f:37:9a: 42:eb:e1:8d:1f:bd:b9:a2:03:1a:10:8d:83:c0:0d: f2:5c:59:d8:05:d1:2b:bd:69:bd:6a:e1:3c:ec:2e: 93:d2:e1:bc:ce:11:2d:5e:1b:76:08:20:9f:02:c1: fa:5d:67:36:2d:b9:c0:21:59:60:fe:bc:d5:b9:d9: 1a:5c:24:8f:ae:66:02:5e:df:74:db:22:87:a0:9c: 03:4f:b8:c0:ae:98:82:6e:ce:f1:50:d8:7c:32:02: d7:e8:94:69:44:ae:9e:a9:c6:50:59:e2:60:10:38: ca:60:a0:9c:5c:32:66:cb:fa:63:42:c0:98:55:d7: 1f:6d:d9:ea:a4:c5:c2:bd:b2:a3:cc:0f:c6:0a:c8: 52:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:44:83:C7:2A:64:46:5B:23:50:72:9A:37:D0:0E:CD:E5:94:6F:8C X509v3 Authority Key Identifier: keyid:F4:B7:D0:44:3B:8C:FF:9B:40:98:BB:8C:EC:BE:D8:7F:CE:A9:BA:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:06:a7:95:8e:e0:35:04:14:bd:74:fc:77:55:71:a4:5e:f0: 59:59:08:c8:2a:5f:85:07:23:e1:5d:00:22:52:8a:8e:82:10: 0b:53:b8:c7:ab:30:2a:ee:ac:48:fd:42:c2:93:f9:12:0e:b5: 73:92:c0:a1:ba:d7:99:2e:1e:57:c0:ff:d8:7c:33:02:f4:85: 54:b3:30:b1:51:61:9b:e9:24:24:5a:6b:8c:4f:c1:0e:6e:fb: f6:6f:a0:34:e1:b0:ef:25:30:86:33:03:71:01:46:6d:cc:7f: c8:61:76:e5:a5:fc:c0:e0:8c:fd:55:a6:1f:14:72:6e:28:d8: 6d:4e:8f:0f:b6:e6:1e:f8:60:be:bb:65:85:20:fb:ce:43:8b: 58:fb:65:60:01:ce:cb:c7:99:6b:f1:b5:38:5c:5c:71:80:c1: 61:68:25:f3:85:ea:77:96:53:ac:64:75:c0:0a:66:e0:a1:71: 68:50:0a:30:e0:c6:bc:bf:24:ba:fa:54:4d:df:73:79:33:f8: b9:17:e9:bd:c5:5e:56:45:ec:f1:0a:b7:63:b9:56:ce:74:6d: 83:42:71:f5:e7:20:75:f4:50:de:e2:1c:9d:63:5a:58:8c:9a: bf:95:02:b5:f1:1e:a2:80:56:a2:32:25:e4:cb:6f:22:2a:54: ef:f3:c2:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU0ODExMTAvBgNVBAUTKEY0QjdEMDQ0M0I4Q0ZGOUI0MDk4QkI4Q0VDQkVEODdG Q0VBOUJBRDIwHhcNMjYwNTExMDcwNDQ5WhcNMjYwNTE4MDcwNDQ5WjAYMRYwFAYD VQQDEw02YTAxN2Y5MS1hNDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsczk3G2C2MYRV+21J7ih4ir+OUDw4x9ourTLS1k2DCXpumqzAg5m1eNDoq6c oIWp4/KJSC6TuLXS0qYOB4UOy9FfpwOASYBD7ylNf9FJrtpEiSCUA91EsrQFtCM1 jkfNPqxeWbJjza8Fj7EFQyTevzDxpmYvN5pC6+GNH725ogMaEI2DwA3yXFnYBdEr vWm9auE87C6T0uG8zhEtXht2CCCfAsH6XWc2LbnAIVlg/rzVudkaXCSPrmYCXt90 2yKHoJwDT7jArpiCbs7xUNh8MgLX6JRpRK6eqcZQWeJgEDjKYKCcXDJmy/pjQsCY VdcfbdnqpMXCvbKjzA/GCshStwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIREg8cq ZEZbI1BymjfQDs3llG+MMB8GA1UdIwQYMBaAFPS30EQ7jP+bQJi7jOy+2H/OqbrS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTQ4MS9BMTg1NERFMDJC RDgxMUYwQUI2MTczMjBDNEY5QUUwMi85TGZRUkR1TV81dEFtTHVNN0w3WWY4NnB1 dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlMZlFSRHVNXzV0QW1MdU03TDdZZjg2cHV0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTQ4MS9BMTg1NERFMDJCRDgxMUYwQUI2MTczMjBDNEY5QUUwMi85TGZRUkR1TV81 dEFtTHVNN0w3WWY4NnB1dEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVwanlY7gNQQUvXT8d1VxpF7wWVkIyCpfhQcj4V0AIlKKjoIQC1O4x6swKu6s SP1CwpP5Eg61c5LAobrXmS4eV8D/2HwzAvSFVLMwsVFhm+kkJFprjE/BDm779m+g NOGw7yUwhjMDcQFGbcx/yGF25aX8wOCM/VWmHxRybijYbU6PD7bmHvhgvrtlhSD7 zkOLWPtlYAHOy8eZa/G1OFxccYDBYWgl84Xqd5ZTrGR1wApm4KFxaFAKMODGvL8k uvpUTd9zeTP4uRfpvcVeVkXs8Qq3Y7lWznRtg0Jx9ecgdfRQ3uIcnWNaWIyav5UC tfEeooBWojIl5MtvIipU7/PC5Q== -----END CERTIFICATE-----Generated at Wed May 13 06:45:47 2026 by rpki-client