$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft File: SDhChq65tguzQoR_K6dhL4TbQ7I.mft (raw, json) Hash identifier: u1PxaojOfvV7r669NwiaUjV6NMB/+VTH+2Pc+ZjNzjk= Subject key identifier: 43:B6:30:AE:AA:FA:CA:D6:14:6D:CF:6A:77:6C:85:5C:E5:F8:8D:24 Authority key identifier: 48:38:42:86:AE:B9:B6:0B:B3:42:84:7F:2B:A7:61:2F:84:DB:43:B2 Certificate issuer: /CN=A91E6369/serialNumber=48384286AEB9B60BB342847F2BA7612F84DB43B2 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SDhChq65tguzQoR_K6dhL4TbQ7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft Manifest number: 3D Signing time: Wed 13 May 2026 08:51:04 +0000 Manifest this update: Wed 13 May 2026 08:51:04 +0000 Manifest next update: Wed 20 May 2026 08:51:04 +0000 Files and hashes: 1: SDhChq65tguzQoR_K6dhL4TbQ7I.crl (hash: 3RqcloYkC4mvV2wGcAzqccVPc+nruUPq5+fv+oDuP3w=) 2: 5CCD0A3C186B11F1A49ED6DE323D8C67.roa (hash: /T0qY7CsRtoFS+lodVUIgOp2mv9nPTD25O9ozCsvMyA=) 3: F85CEC2417BC11F1A40B39FC393D8C67.roa (hash: Lk3LIKj/GiDK4MdOByMKxwMl2tprlDsVLGGIsH3ZkXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.crl rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SDhChq65tguzQoR_K6dhL4TbQ7I.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6369, serialNumber=48384286AEB9B60BB342847F2BA7612F84DB43B2 Validity Not Before: May 13 08:51:04 2026 GMT Not After : May 20 08:51:04 2026 GMT Subject: CN=6a043b78-adef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:10:63:f5:4f:b8:b0:fd:fb:64:f9:b2:5a:e7: 09:bd:e1:0e:bb:e2:77:05:76:32:7d:67:09:af:d4: 18:4f:80:90:5a:9b:58:e2:d0:aa:e0:53:51:bd:f5: f6:0f:b8:7d:b0:47:c4:56:7c:61:1d:bc:be:e7:f0: bb:78:2b:f3:9e:9b:ae:b8:4b:f7:d5:d6:3e:15:43: 7e:aa:ca:67:31:67:e0:59:a6:13:6f:19:21:ef:28: 69:d2:4f:c7:e9:0c:c3:d9:bf:a5:64:b9:7a:e5:39: 10:27:88:6c:21:1d:bc:5d:6c:ba:d0:69:6d:b0:aa: eb:d6:ed:61:df:64:67:0e:33:19:8e:e9:97:94:92: 0e:a8:72:2f:ac:33:c9:ef:84:1b:63:91:35:82:87: 83:30:e6:7f:c9:a4:be:87:c0:b4:cb:82:44:88:54: 38:54:2b:7b:13:e8:9f:0f:ab:dc:9f:cb:b2:b3:52: 4c:1a:eb:97:15:26:88:b4:40:27:53:77:b2:0f:ea: 41:b1:6e:42:61:e5:a5:30:4c:63:69:d4:26:43:89: b0:1d:7c:9b:2b:8e:8e:da:20:be:05:4d:5d:c9:f1: 4d:7a:2e:74:e1:7c:43:04:ab:80:0d:26:39:b8:99: 0d:a8:27:60:fb:ed:d1:0a:ff:71:b6:1e:e3:a7:59: f6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B6:30:AE:AA:FA:CA:D6:14:6D:CF:6A:77:6C:85:5C:E5:F8:8D:24 X509v3 Authority Key Identifier: keyid:48:38:42:86:AE:B9:B6:0B:B3:42:84:7F:2B:A7:61:2F:84:DB:43:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SDhChq65tguzQoR_K6dhL4TbQ7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:64:09:8c:0e:ee:8f:31:b0:2d:89:d2:0c:c6:94:15:10:35: 20:ba:ab:51:6d:d4:0f:bb:54:80:7c:2c:c3:99:f1:51:e5:7d: 2a:53:b2:4f:4e:f0:71:db:3f:aa:8c:a8:b4:54:28:73:50:9d: 93:78:96:8e:3e:13:23:36:43:64:ef:7a:11:16:5c:ef:02:9c: 89:ca:58:4f:e6:92:10:18:c1:1b:dc:d8:99:97:50:dd:d1:66: 38:d0:31:5a:ff:30:22:9b:ec:ea:9f:3d:5c:00:f7:63:e7:9f: 63:46:61:df:fe:14:d1:e2:7c:6d:47:e3:ce:66:6f:6b:9d:38: 04:92:6d:08:9c:7f:8b:55:1c:de:65:b3:b0:38:14:6b:87:fd: 16:d4:0a:be:35:2a:39:a1:a3:07:8a:b6:fa:72:99:6c:87:a6: b0:5a:b9:43:71:81:c8:c2:c7:5f:0c:12:81:46:94:be:57:81: 59:77:85:df:d8:a4:e0:5a:a3:70:e6:82:b8:5a:e9:d7:20:30: 08:f5:00:e4:08:eb:34:87:d7:61:ec:4a:9e:a3:19:ee:a0:86: 1b:6d:b8:d5:76:4c:1e:b8:39:70:dc:19:6f:43:67:c9:1d:2b: 1d:54:89:da:10:55:f0:56:63:4b:8b:df:04:34:af:6a:72:55: 74:c2:46:c0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NjM2OTExMC8GA1UEBRMoNDgzODQyODZBRUI5QjYwQkIzNDI4NDdGMkJBNzYxMkY4 NERCNDNCMjAeFw0yNjA1MTMwODUxMDRaFw0yNjA1MjAwODUxMDRaMBgxFjAUBgNV BAMTDTZhMDQzYjc4LWFkZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuEGP1T7iw/ftk+bJa5wm94Q674ncFdjJ9Zwmv1BhPgJBam1ji0KrgU1G99fYP uH2wR8RWfGEdvL7n8Lt4K/Oem664S/fV1j4VQ36qymcxZ+BZphNvGSHvKGnST8fp DMPZv6VkuXrlORAniGwhHbxdbLrQaW2wquvW7WHfZGcOMxmO6ZeUkg6oci+sM8nv hBtjkTWCh4Mw5n/JpL6HwLTLgkSIVDhUK3sT6J8Pq9yfy7KzUkwa65cVJoi0QCdT d7IP6kGxbkJh5aUwTGNp1CZDibAdfJsrjo7aIL4FTV3J8U16LnThfEMEq4ANJjm4 mQ2oJ2D77dEK/3G2HuOnWfaJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQ7Ywrqr6 ytYUbc9qd2yFXOX4jSQwHwYDVR0jBBgwFoAUSDhChq65tguzQoR/K6dhL4TbQ7Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2MzY5Lzc2N0E4RThBMEM3 OTExRjFCMThBMEMwRTFDM0Q4QzY3L1NEaENocTY1dGd1elFvUl9LNmRoTDRUYlE3 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvU0RoQ2hxNjV0Z3V6UW9SX0s2ZGhMNFRiUTdJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 MzY5Lzc2N0E4RThBMEM3OTExRjFCMThBMEMwRTFDM0Q4QzY3L1NEaENocTY1dGd1 elFvUl9LNmRoTDRUYlE3SS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCaZAmMDu6PMbAtidIMxpQVEDUguqtRbdQPu1SAfCzDmfFR5X0qU7JPTvBx2z+q jKi0VChzUJ2TeJaOPhMjNkNk73oRFlzvApyJylhP5pIQGMEb3NiZl1Dd0WY40DFa /zAim+zqnz1cAPdj559jRmHf/hTR4nxtR+POZm9rnTgEkm0InH+LVRzeZbOwOBRr h/0W1Aq+NSo5oaMHirb6cplsh6awWrlDcYHIwsdfDBKBRpS+V4FZd4Xf2KTgWqNw 5oK4WunXIDAI9QDkCOs0h9dh7EqeoxnuoIYbbbjVdkweuDlw3BlvQ2fJHSsdVIna EFXwVmNLi98ENK9qclV0wkbA -----END CERTIFICATE-----Generated at Wed May 13 14:32:46 2026 by rpki-client