$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.mft File: g86FOnpm6rnh8jNGcR09yX1XWXg.mft (raw, json) Hash identifier: J1nP7ao2XacDr3YodkWZ/bHzakM2HozbPOENogq4aWY= Subject key identifier: 8D:65:30:0D:B8:E9:5F:BE:4C:8B:AF:59:A1:A2:C5:F9:DA:9C:30:20 Authority key identifier: 83:CE:85:3A:7A:66:EA:B9:E1:F2:33:46:71:1D:3D:C9:7D:57:59:78 Certificate issuer: /CN=A91E9BC4/serialNumber=83CE853A7A66EAB9E1F23346711D3DC97D575978 Certificate serial: 0EEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g86FOnpm6rnh8jNGcR09yX1XWXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.mft Manifest number: 0EE2 Signing time: Tue 12 May 2026 17:40:58 +0000 Manifest this update: Tue 12 May 2026 17:40:57 +0000 Manifest next update: Tue 19 May 2026 17:40:57 +0000 Files and hashes: 1: g86FOnpm6rnh8jNGcR09yX1XWXg.crl (hash: gndEwGcCVUc1lgKnepqWZW3bFcM4XzOs3zY+XNHwMLA=) 2: 3B495FFCA46211E9B730310FC4F9AE02.roa (hash: 4lDpGUim/KAgzaEuEFqQeILbJPyTanzET71bwtPn5Wc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.crl rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g86FOnpm6rnh8jNGcR09yX1XWXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3822 (0xeee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9BC4, serialNumber=83CE853A7A66EAB9E1F23346711D3DC97D575978 Validity Not Before: May 12 17:40:57 2026 GMT Not After : May 19 17:40:57 2026 GMT Subject: CN=6a036629-2a2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:80:70:38:93:c6:48:8d:36:f3:ea:90:7d:fd: d7:0d:ed:3e:57:d0:77:dd:96:64:d4:e2:d0:f1:fa: 1a:f3:29:92:89:56:17:f1:ba:2e:d3:04:25:0f:98: 20:55:c3:7c:ea:ca:96:78:b6:f8:64:5e:eb:3e:d1: a0:54:9f:ad:07:7f:8f:90:29:2d:a8:e0:78:c9:92: 90:9c:eb:5c:28:8f:b0:25:95:89:08:3d:ed:0f:91: e7:30:52:12:51:c0:83:de:0e:c5:f3:50:05:ae:0f: dd:d5:3f:50:bd:83:68:1b:22:d5:e6:31:12:b3:d6: 10:cd:7f:a6:0a:7b:42:23:9a:5f:4f:51:cc:b7:db: a9:83:54:d4:a2:43:bd:e2:cb:c8:73:c6:57:8c:72: 58:c3:f0:d9:04:be:33:b3:4c:45:5c:89:ec:25:f8: 91:72:8e:06:13:21:35:db:2e:7e:cc:f2:30:90:80: f9:8c:ab:15:44:e0:91:6c:4f:ae:31:33:33:59:8c: bd:93:56:46:f1:01:a6:a8:e5:c3:b5:7c:e6:cb:a5: 20:37:e5:1c:66:0b:60:a0:7a:80:c0:ee:aa:b4:e8: f5:a2:69:21:4e:d5:27:89:60:2f:02:ad:64:54:2a: 81:55:e4:c6:43:56:66:c4:52:40:4c:90:bd:c4:9e: 0d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:65:30:0D:B8:E9:5F:BE:4C:8B:AF:59:A1:A2:C5:F9:DA:9C:30:20 X509v3 Authority Key Identifier: keyid:83:CE:85:3A:7A:66:EA:B9:E1:F2:33:46:71:1D:3D:C9:7D:57:59:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g86FOnpm6rnh8jNGcR09yX1XWXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9BC4/92E821F0A46011E9810A5C0BC4F9AE02/g86FOnpm6rnh8jNGcR09yX1XWXg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:18:2b:7d:95:e4:1c:1e:e6:15:97:19:47:52:ec:d3:f1:cb: 20:cd:36:37:bd:50:54:04:36:e1:9c:cf:62:51:86:6c:95:cf: ff:b2:49:27:c1:97:65:c2:37:21:dd:4d:98:d3:07:3a:0e:d8: 61:f9:ff:8c:49:73:f4:70:27:6c:5b:80:cd:75:0f:87:76:39: 80:3b:43:2b:b0:bb:eb:83:c0:db:65:58:d3:91:6f:b9:92:3b: 55:38:b9:a4:a5:5a:be:92:9f:48:d2:42:78:8c:6a:b2:ca:d6: 0a:80:50:9c:1c:5a:d7:1e:41:c4:62:d7:06:51:6c:2e:36:b8: 40:b4:87:ed:85:8b:ee:86:4e:65:b5:a1:83:96:1f:5d:c2:27: fd:a2:59:f0:93:dd:dc:b3:42:57:67:ae:32:11:6a:02:05:5d: 42:cd:de:62:bc:f8:4f:77:b5:66:79:1c:c4:95:11:c1:90:0e: 75:17:9f:ae:f9:a6:4e:48:41:b6:07:54:bc:1f:ec:bd:54:05: 27:27:57:48:4b:38:06:e1:40:90:74:d2:bf:12:81:47:1f:88: 19:0c:65:03:3f:e9:26:2d:8e:4e:9c:c7:6c:cd:88:4d:66:ef: bf:4f:5f:9f:1a:55:45:da:1f:3b:31:c0:4e:ec:67:62:31:66: da:78:74:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlCQzQxMTAvBgNVBAUTKDgzQ0U4NTNBN0E2NkVBQjlFMUYyMzM0NjcxMUQzREM5 N0Q1NzU5NzgwHhcNMjYwNTEyMTc0MDU3WhcNMjYwNTE5MTc0MDU3WjAYMRYwFAYD VQQDEw02YTAzNjYyOS0yYTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjIBwOJPGSI028+qQff3XDe0+V9B33ZZk1OLQ8foa8ymSiVYX8bou0wQlD5gg VcN86sqWeLb4ZF7rPtGgVJ+tB3+PkCktqOB4yZKQnOtcKI+wJZWJCD3tD5HnMFIS UcCD3g7F81AFrg/d1T9QvYNoGyLV5jESs9YQzX+mCntCI5pfT1HMt9upg1TUokO9 4svIc8ZXjHJYw/DZBL4zs0xFXInsJfiRco4GEyE12y5+zPIwkID5jKsVROCRbE+u MTMzWYy9k1ZG8QGmqOXDtXzmy6UgN+UcZgtgoHqAwO6qtOj1omkhTtUniWAvAq1k VCqBVeTGQ1ZmxFJATJC9xJ4NywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI1lMA24 6V++TIuvWaGixfnanDAgMB8GA1UdIwQYMBaAFIPOhTp6Zuq54fIzRnEdPcl9V1l4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUJDNC85MkU4MjFGMEE0 NjAxMUU5ODEwQTVDMEJDNEY5QUUwMi9nODZGT25wbTZybmg4ak5HY1IwOXlYMVhX WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c4NkZPbnBtNnJuaDhqTkdjUjA5eVgxWFdYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUJDNC85MkU4MjFGMEE0NjAxMUU5ODEwQTVDMEJDNEY5QUUwMi9nODZGT25wbTZy bmg4ak5HY1IwOXlYMVhXWGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMRgrfZXkHB7mFZcZR1Ls0/HLIM02N71QVAQ24ZzPYlGGbJXP/7JJJ8GXZcI3 Id1NmNMHOg7YYfn/jElz9HAnbFuAzXUPh3Y5gDtDK7C764PA22VY05FvuZI7VTi5 pKVavpKfSNJCeIxqssrWCoBQnBxa1x5BxGLXBlFsLja4QLSH7YWL7oZOZbWhg5Yf XcIn/aJZ8JPd3LNCV2euMhFqAgVdQs3eYrz4T3e1ZnkcxJURwZAOdRefrvmmTkhB tgdUvB/svVQFJydXSEs4BuFAkHTSvxKBRx+IGQxlAz/pJi2OTpzHbM2ITWbvv09f nxpVRdofOzHATuxnYjFm2nh09w== -----END CERTIFICATE-----Generated at Wed May 13 11:40:41 2026 by rpki-client