$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft File: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft (raw, json) Hash identifier: CxLk/YX8uod4F1VBw6MOd+Pyod540wPT5eyFVKngY10= Subject key identifier: FC:06:96:53:D7:94:0E:78:AB:5E:E4:D1:DC:42:62:5E:FD:B8:13:D7 Authority key identifier: 31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4 Certificate issuer: /CN=A91E72AB/serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4 Certificate serial: 0CE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft Manifest number: 0CD7 Signing time: Tue 12 May 2026 18:27:57 +0000 Manifest this update: Tue 12 May 2026 18:27:57 +0000 Manifest next update: Tue 19 May 2026 18:27:57 +0000 Files and hashes: 1: MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl (hash: hwNBgYd4cPZx1gDyyvrO2LINgOulJD5yoFbQZrWUAoA=) 2: EA903484DBE011EF8B7B8868C4F9AE02.roa (hash: qYrHqLo6UNCs7hu1fqjRiYyLDCXIk6/ZaenYZLihdqs=) 3: 1794902224E111EF97BA8F42C4F9AE02.roa (hash: Yq+GDOgPjYfjlCH3DOObesHj7a3fvejOrl/4IRRx/CI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3302 (0xce6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E72AB, serialNumber=31D09E24D5DB8C58F414EEA3EF0EEDFB355DABF4 Validity Not Before: May 12 18:27:57 2026 GMT Not After : May 19 18:27:57 2026 GMT Subject: CN=6a03712d-f249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:89:b8:ef:6c:14:af:5d:0a:38:73:60:6a:91: 52:ec:8c:84:36:5c:9a:48:77:c7:c8:5b:3a:2d:78: d7:93:61:f8:c1:1f:48:85:21:47:f7:be:9d:b2:83: 06:2c:c5:ff:ab:fd:fd:f0:d5:0a:a7:fd:37:4e:1e: c5:7d:ab:4e:f7:81:df:ed:85:78:ea:15:01:02:31: f7:f1:31:2c:3c:23:e4:43:91:8d:f3:8f:05:6b:83: 66:7c:09:b7:64:57:0e:39:d8:f1:eb:3e:3a:a0:38: f5:90:b7:31:3b:e8:f7:d6:29:74:c8:8d:7e:18:26: d7:79:de:79:48:27:7f:e5:96:10:d5:c8:d3:7a:ca: 94:1d:6f:5a:d4:a7:31:9c:bc:cf:d7:b2:37:f2:0a: e9:d5:4a:03:b8:d8:90:d4:62:d4:f3:73:35:da:24: 38:69:3d:8e:04:62:df:88:d3:71:20:11:af:ea:21: df:e6:8f:1d:56:6a:1c:f8:02:55:15:26:42:49:63: 54:c1:9d:b8:ac:8f:26:f7:fa:74:3e:79:f4:22:f0: cc:11:c6:f8:d2:15:18:85:7f:b5:b7:f5:90:65:d0: 2c:ab:13:37:26:96:70:dc:96:94:02:48:36:0b:e4: fd:89:51:d6:9c:2c:8d:de:09:4e:fc:1f:77:71:dd: 89:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:06:96:53:D7:94:0E:78:AB:5E:E4:D1:DC:42:62:5E:FD:B8:13:D7 X509v3 Authority Key Identifier: keyid:31:D0:9E:24:D5:DB:8C:58:F4:14:EE:A3:EF:0E:ED:FB:35:5D:AB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72AB/D71734FE0CA411EA84841B3EC4F9AE02/MdCeJNXbjFj0FO6j7w7t-zVdq_Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:49:fb:dd:c8:36:58:59:d3:a1:60:e9:32:63:eb:3d:e0:e1: cc:43:3c:74:a8:a6:66:37:c5:99:9d:9a:26:66:0b:81:d3:64: 05:16:66:c3:df:7a:7e:82:6f:e6:c6:5e:e5:23:a6:b5:ec:b3: 74:d7:ce:4a:24:2e:90:b3:4f:68:97:a4:c6:4c:98:42:42:72: 80:07:11:14:07:b1:ad:d6:53:29:2e:8f:95:f8:40:41:6c:cc: b5:28:2c:cb:43:00:03:6c:fe:77:02:66:58:e1:9c:85:cd:b8: 2a:4e:6a:b1:28:d5:51:12:ff:6b:47:c1:c0:29:16:ff:6c:e1: 3c:5f:4e:12:6c:c6:70:d5:8a:6f:54:2a:8b:48:5f:b1:ae:32: 8b:09:59:2a:91:79:10:b7:45:eb:15:06:ac:01:c1:fb:8a:dd: 2f:d5:f8:0e:4e:e8:d2:c5:81:27:9d:c6:06:5e:ac:c1:bb:41: e3:8d:4a:bb:07:91:1c:b5:ba:4d:c7:3a:c1:49:ca:79:fa:9f: 41:89:ef:a6:72:8f:73:0c:4c:ab:93:a9:ae:6f:c6:b3:1b:72: d8:d2:74:13:70:ea:89:1d:ce:aa:16:23:cf:05:f6:0c:c1:47: 8c:4d:01:a3:2a:1f:91:08:e7:15:91:f2:d7:29:9a:ae:c7:da: 97:95:c3:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcyQUIxMTAvBgNVBAUTKDMxRDA5RTI0RDVEQjhDNThGNDE0RUVBM0VGMEVFREZC MzU1REFCRjQwHhcNMjYwNTEyMTgyNzU3WhcNMjYwNTE5MTgyNzU3WjAYMRYwFAYD VQQDEw02YTAzNzEyZC1mMjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIm472wUr10KOHNgapFS7IyENlyaSHfHyFs6LXjXk2H4wR9IhSFH976dsoMG LMX/q/398NUKp/03Th7FfatO94Hf7YV46hUBAjH38TEsPCPkQ5GN848Fa4NmfAm3 ZFcOOdjx6z46oDj1kLcxO+j31il0yI1+GCbXed55SCd/5ZYQ1cjTesqUHW9a1Kcx nLzP17I38grp1UoDuNiQ1GLU83M12iQ4aT2OBGLfiNNxIBGv6iHf5o8dVmoc+AJV FSZCSWNUwZ24rI8m9/p0Pnn0IvDMEcb40hUYhX+1t/WQZdAsqxM3JpZw3JaUAkg2 C+T9iVHWnCyN3glO/B93cd2JVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPwGllPX lA54q17k0dxCYl79uBPXMB8GA1UdIwQYMBaAFDHQniTV24xY9BTuo+8O7fs1Xav0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzJBQi9ENzE3MzRGRTBD QTQxMUVBODQ4NDFCM0VDNEY5QUUwMi9NZENlSk5YYmpGajBGTzZqN3c3dC16VmRx X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01kQ2VKTlhiakZqMEZPNmo3dzd0LXpWZHFfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzJBQi9ENzE3MzRGRTBDQTQxMUVBODQ4NDFCM0VDNEY5QUUwMi9NZENlSk5YYmpG ajBGTzZqN3c3dC16VmRxX1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKEn73cg2WFnToWDpMmPrPeDhzEM8dKimZjfFmZ2aJmYLgdNkBRZmw996foJv 5sZe5SOmteyzdNfOSiQukLNPaJekxkyYQkJygAcRFAexrdZTKS6PlfhAQWzMtSgs y0MAA2z+dwJmWOGchc24Kk5qsSjVURL/a0fBwCkW/2zhPF9OEmzGcNWKb1Qqi0hf sa4yiwlZKpF5ELdF6xUGrAHB+4rdL9X4Dk7o0sWBJ53GBl6swbtB441KuweRHLW6 Tcc6wUnKefqfQYnvpnKPcwxMq5Oprm/Gsxty2NJ0E3DqiR3OqhYjzwX2DMFHjE0B oyofkQjnFZHy1ymarsfal5XD3w== -----END CERTIFICATE-----Generated at Wed May 13 12:54:11 2026 by rpki-client