$ rpki-client -vvf rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.mft File: 9fW2D5FdvXIk_85g8fnQXoNwLvM.mft (raw, json) Hash identifier: 88j8SzIgYlvIlHwiBeOyZTDQ1FRH6BHZKYgXILdBc24= Subject key identifier: 86:D4:D8:56:5D:5E:17:F9:78:29:B2:EB:44:01:FF:F5:14:A7:62:B9 Authority key identifier: F5:F5:B6:0F:91:5D:BD:72:24:FF:CE:60:F1:F9:D0:5E:83:70:2E:F3 Certificate issuer: /CN=A91E585B/serialNumber=F5F5B60F915DBD7224FFCE60F1F9D05E83702EF3 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fW2D5FdvXIk_85g8fnQXoNwLvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.mft Manifest number: 3F Signing time: Mon 11 May 2026 08:40:06 +0000 Manifest this update: Mon 11 May 2026 08:40:05 +0000 Manifest next update: Mon 18 May 2026 08:40:05 +0000 Files and hashes: 1: 9fW2D5FdvXIk_85g8fnQXoNwLvM.crl (hash: ZPzNHI1Zvs1guLlsusGlfMVW165EeV8/IdeQ8yOVHCE=) 2: F59E9504F20611F0B4D6054A4A6F56BC.roa (hash: fJ10i1I3CVn/cq/HNYJ87da7lOqBMrG/ft9ahjiVUac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.crl rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fW2D5FdvXIk_85g8fnQXoNwLvM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 08:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E585B, serialNumber=F5F5B60F915DBD7224FFCE60F1F9D05E83702EF3 Validity Not Before: May 11 08:40:05 2026 GMT Not After : May 18 08:40:05 2026 GMT Subject: CN=6a0195e6-44ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d1:d3:eb:03:81:86:3c:81:6d:90:cd:26:69: 61:54:a8:41:9e:77:ab:60:3e:2c:50:d0:dd:00:5e: cd:3f:72:db:74:e0:ec:a2:d3:d9:86:09:0e:eb:31: e4:be:88:f6:65:9e:b4:14:49:c9:78:a5:be:f8:dc: 2d:92:17:80:f8:3f:cd:fe:77:5b:61:44:c4:ce:ce: 13:8f:cb:ac:fe:b6:3a:27:e1:57:bc:30:f4:77:1e: ef:c7:9e:3b:cb:2a:a9:d0:c9:f6:3d:6d:4a:5a:d0: 5d:81:c0:46:20:66:e7:70:8c:a5:1d:ce:00:d6:22: 72:0e:19:ed:c9:ec:11:c5:3a:88:8a:a6:21:75:45: 51:a7:fb:7b:cb:7a:60:6d:6c:01:db:71:e5:ce:22: f5:d4:af:80:02:5b:0a:5f:64:4a:44:c9:5a:0d:c4: 96:69:8b:77:c8:d6:2a:fc:70:9d:0d:3b:f1:1c:70: 13:cd:93:e5:0c:49:b1:03:03:d7:d1:97:2e:a1:87: 1b:e1:69:12:37:ed:84:ea:f2:80:ff:38:3e:50:16: ba:a5:12:ec:e6:f9:4f:96:59:07:59:77:59:1e:7c: e4:3a:d0:06:83:98:4e:3f:59:68:85:f5:a9:e5:e3: 39:01:6a:2b:4e:61:ae:aa:28:35:91:b0:20:31:2b: 3c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D4:D8:56:5D:5E:17:F9:78:29:B2:EB:44:01:FF:F5:14:A7:62:B9 X509v3 Authority Key Identifier: keyid:F5:F5:B6:0F:91:5D:BD:72:24:FF:CE:60:F1:F9:D0:5E:83:70:2E:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fW2D5FdvXIk_85g8fnQXoNwLvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E585B/B86CCF58F20511F0818B77324A6F56BC/9fW2D5FdvXIk_85g8fnQXoNwLvM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:9b:e0:84:86:5a:09:e0:3b:5c:a8:4e:03:dc:b2:29:9d:e0: 64:7a:a7:9a:9c:91:5e:b6:0a:ae:36:fc:30:03:9c:3d:96:e5: 26:bc:ec:c0:1b:c0:9a:54:f7:3e:1f:59:2d:1b:2a:a1:f6:0a: 99:71:6f:7c:c7:82:2c:05:31:7f:f7:fe:6b:f9:e8:f2:af:ea: bd:c0:9c:50:15:c0:97:51:73:2e:af:37:9d:86:ef:92:b0:50: 2a:a9:f0:d4:81:f9:14:b0:1c:35:40:ba:3d:2d:3e:4c:15:d3: b4:4f:dd:09:c8:63:3c:e8:3c:e2:d7:4c:91:9d:be:8f:b3:0f: ee:02:ab:0f:77:f0:78:cc:59:ff:d8:ca:42:4e:68:90:8c:4d: c3:50:5f:bf:f3:bf:0f:21:05:a6:b1:39:3e:77:a0:eb:04:4b: 4a:8f:ad:2a:83:19:f7:be:92:80:f7:f9:a8:8c:cd:14:77:75: 41:73:70:ad:55:51:24:aa:90:c9:8b:b1:3e:c0:83:73:98:df: a0:14:d6:c4:bc:f4:68:54:3d:bc:dc:92:72:9a:6b:2d:13:41: 59:2e:13:59:43:f8:55:a8:db:6a:cb:f6:ca:bf:06:68:6d:7e: 07:a3:37:21:78:25:22:47:25:42:bc:7e:81:ca:5d:5e:37:7f: 22:cb:f5:02 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NTg1QjExMC8GA1UEBRMoRjVGNUI2MEY5MTVEQkQ3MjI0RkZDRTYwRjFGOUQwNUU4 MzcwMkVGMzAeFw0yNjA1MTEwODQwMDVaFw0yNjA1MTgwODQwMDVaMBgxFjAUBgNV BAMTDTZhMDE5NWU2LTQ0ZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDF0dPrA4GGPIFtkM0maWFUqEGed6tgPixQ0N0AXs0/ctt04Oyi09mGCQ7rMeS+ iPZlnrQUScl4pb743C2SF4D4P83+d1thRMTOzhOPy6z+tjon4Ve8MPR3Hu/HnjvL KqnQyfY9bUpa0F2BwEYgZudwjKUdzgDWInIOGe3J7BHFOoiKpiF1RVGn+3vLemBt bAHbceXOIvXUr4ACWwpfZEpEyVoNxJZpi3fI1ir8cJ0NO/EccBPNk+UMSbEDA9fR ly6hhxvhaRI37YTq8oD/OD5QFrqlEuzm+U+WWQdZd1kefOQ60AaDmE4/WWiF9anl 4zkBaitOYa6qKDWRsCAxKzwdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhtTYVl1e F/l4KbLrRAH/9RSnYrkwHwYDVR0jBBgwFoAU9fW2D5FdvXIk/85g8fnQXoNwLvMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1ODVCL0I4NkNDRjU4RjIw NTExRjA4MThCNzczMjRBNkY1NkJDLzlmVzJENUZkdlhJa184NWc4Zm5RWG9Od0x2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOWZXMkQ1RmR2WElrXzg1ZzhmblFYb053THZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 ODVCL0I4NkNDRjU4RjIwNTExRjA4MThCNzczMjRBNkY1NkJDLzlmVzJENUZkdlhJ a184NWc4Zm5RWG9Od0x2TS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAWm+CEhloJ4DtcqE4D3LIpneBkeqeanJFetgquNvwwA5w9luUmvOzAG8CaVPc+ H1ktGyqh9gqZcW98x4IsBTF/9/5r+ejyr+q9wJxQFcCXUXMurzedhu+SsFAqqfDU gfkUsBw1QLo9LT5MFdO0T90JyGM86Dzi10yRnb6Psw/uAqsPd/B4zFn/2MpCTmiQ jE3DUF+/878PIQWmsTk+d6DrBEtKj60qgxn3vpKA9/mojM0Ud3VBc3CtVVEkqpDJ i7E+wINzmN+gFNbEvPRoVD283JJymmstE0FZLhNZQ/hVqNtqy/bKvwZobX4Hozch eCUiRyVCvH6Byl1eN38iy/UC -----END CERTIFICATE-----Generated at Wed May 13 07:54:34 2026 by rpki-client