$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft File: buWafawHoiW5GzRmrRoHRkk9jiQ.mft (raw, json) Hash identifier: 8fAGamelOvGJgNTv2esnSl7GBm117J+b9AhIVcY5Kqk= Subject key identifier: DA:CA:01:CF:CE:0E:74:01:AE:3A:4A:58:67:EC:58:40:05:CE:D5:78 Authority key identifier: 6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24 Certificate issuer: /CN=A91E9D5D/serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24 Certificate serial: 067D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft Manifest number: 0674 Signing time: Tue 12 May 2026 22:40:29 +0000 Manifest this update: Tue 12 May 2026 22:40:29 +0000 Manifest next update: Tue 19 May 2026 22:40:29 +0000 Files and hashes: 1: buWafawHoiW5GzRmrRoHRkk9jiQ.crl (hash: j+uwz/H7f9DZA4Wk+hZnl3aYlaOWb3YViIYmTfxPtUc=) 2: 581F68DAD48A11EEB7A00557C4F9AE02.roa (hash: NDR9ZBlCPG6TNFjpWR6oUi6H3yAwo0tj9PuG9qFDBEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 22:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1661 (0x67d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9D5D, serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24 Validity Not Before: May 12 22:40:29 2026 GMT Not After : May 19 22:40:29 2026 GMT Subject: CN=6a03ac5d-f9f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ab:74:a4:f5:30:89:2d:61:e1:5f:b6:fd:19: d1:c2:04:d6:11:a0:1c:0c:67:5d:c5:c8:fe:12:f2: 34:27:c6:10:d8:37:30:5e:5d:f2:e3:67:8e:f6:4f: e5:45:e5:24:e7:de:a6:7b:ca:26:07:ee:6a:e9:f9: 22:f2:8f:1b:08:37:f1:e1:c4:9f:50:10:52:e7:ff: 0f:f4:79:28:93:01:c0:28:ee:5e:a3:df:54:92:6b: 1f:fa:95:fd:d5:5b:17:29:a1:1d:13:d4:01:5c:48: 18:10:19:66:92:d4:00:06:22:08:24:1f:41:90:60: 01:78:84:e3:dc:69:50:24:03:d9:62:c1:8b:5d:9a: e2:ed:06:0f:3c:80:36:fc:6c:f6:ab:2b:c2:9c:90: 86:39:1c:4d:14:40:1a:7d:a6:bf:8c:78:7f:03:58: 58:10:58:48:b1:1c:f6:b8:98:8c:bd:0f:20:0a:6f: a3:6e:0d:75:3d:e0:03:bd:06:34:64:db:8b:27:71: f6:1a:fe:13:e6:86:53:84:0a:7e:92:46:ff:42:8b: 3d:0b:c1:df:f9:54:3a:fb:12:5e:71:90:c4:41:23: 61:af:a3:a4:c3:e0:59:9f:9f:c1:64:8b:fd:a0:e8: c7:0e:06:86:85:22:1a:79:bb:eb:18:20:6d:a9:1e: f6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CA:01:CF:CE:0E:74:01:AE:3A:4A:58:67:EC:58:40:05:CE:D5:78 X509v3 Authority Key Identifier: keyid:6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:fa:7c:ae:9b:0f:d9:04:d1:ad:6c:38:5a:53:98:4e:5d:34: 21:09:2b:d4:85:cc:16:32:2b:6e:f7:e7:7d:b1:3b:83:f4:28: d4:7b:85:0a:1d:2c:c1:d4:ab:4f:bd:06:3e:03:ad:42:67:66: ca:8a:19:36:0e:da:b6:9b:d5:1d:1d:4c:1f:11:2c:0c:9d:4c: a4:b2:c8:66:0e:4d:fd:9b:ff:7d:e2:1f:c2:88:c5:10:d2:31: 4f:05:06:a8:fe:ca:d5:16:e7:3c:3f:4a:83:0f:00:92:e8:d0: 28:11:cb:3d:e4:59:9d:7c:0d:17:bf:16:1b:78:80:eb:48:e1: 03:6b:d7:f7:2f:8c:87:cc:89:a6:94:eb:a0:37:66:4e:fc:9b: 65:34:82:ed:25:a3:f7:29:40:40:aa:43:9e:42:66:d4:44:5e: 44:3a:d3:9f:c1:5d:87:c5:e0:a4:a8:83:07:48:5e:0d:44:b8: 34:c1:9b:10:22:46:e2:26:d4:e3:a4:8e:97:8f:dd:4a:6c:ce: f2:16:22:b3:eb:dc:27:87:a4:5a:22:c0:22:66:8e:2d:ca:e0: 58:98:75:19:17:94:ec:86:c4:8a:8a:e2:44:df:41:c1:74:c7: cf:b8:24:7a:13:ea:85:17:d6:ba:81:40:93:76:ef:8e:07:84: 9f:10:86:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlENUQxMTAvBgNVBAUTKDZFRTU5QTdEQUMwN0EyMjVCOTFCMzQ2NkFEMUEwNzQ2 NDkzRDhFMjQwHhcNMjYwNTEyMjI0MDI5WhcNMjYwNTE5MjI0MDI5WjAYMRYwFAYD VQQDEw02YTAzYWM1ZC1mOWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6t0pPUwiS1h4V+2/RnRwgTWEaAcDGddxcj+EvI0J8YQ2DcwXl3y42eO9k/l ReUk596me8omB+5q6fki8o8bCDfx4cSfUBBS5/8P9HkokwHAKO5eo99Ukmsf+pX9 1VsXKaEdE9QBXEgYEBlmktQABiIIJB9BkGABeITj3GlQJAPZYsGLXZri7QYPPIA2 /Gz2qyvCnJCGORxNFEAafaa/jHh/A1hYEFhIsRz2uJiMvQ8gCm+jbg11PeADvQY0 ZNuLJ3H2Gv4T5oZThAp+kkb/Qos9C8Hf+VQ6+xJecZDEQSNhr6Okw+BZn5/BZIv9 oOjHDgaGhSIaebvrGCBtqR72zQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNrKAc/O DnQBrjpKWGfsWEAFztV4MB8GA1UdIwQYMBaAFG7lmn2sB6IluRs0Zq0aB0ZJPY4k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUQ1RC80MDAxQTE2Q0M0 NUUxMUVCQjI5QjRDNENDNEY5QUUwMi9idVdhZmF3SG9pVzVHelJtclJvSFJrazlq aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J1V2FmYXdIb2lXNUd6Um1yUm9IUmtrOWppUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUQ1RC80MDAxQTE2Q0M0NUUxMUVCQjI5QjRDNENDNEY5QUUwMi9idVdhZmF3SG9p VzVHelJtclJvSFJrazlqaVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwfp8rpsP2QTRrWw4WlOYTl00IQkr1IXMFjIrbvfnfbE7g/Qo1HuFCh0swdSr T70GPgOtQmdmyooZNg7atpvVHR1MHxEsDJ1MpLLIZg5N/Zv/feIfwojFENIxTwUG qP7K1RbnPD9Kgw8AkujQKBHLPeRZnXwNF78WG3iA60jhA2vX9y+Mh8yJppTroDdm TvybZTSC7SWj9ylAQKpDnkJm1EReRDrTn8Fdh8XgpKiDB0heDUS4NMGbECJG4ibU 46SOl4/dSmzO8hYis+vcJ4ekWiLAImaOLcrgWJh1GReU7IbEioriRN9BwXTHz7gk ehPqhRfWuoFAk3bvjgeEnxCGjg== -----END CERTIFICATE-----Generated at Wed May 13 19:10:02 2026 by rpki-client