$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft File: 9AFXH04P6PgNV80CfNnuFdc4jyQ.mft (raw, json) Hash identifier: lUYZkL7Zrv5hlJqB19ya4UcVsOwxkiQd2a+zVDpJ8mA= Subject key identifier: 09:FA:1B:A6:B6:44:04:2B:27:D6:B2:00:27:19:A5:36:FC:51:55:99 Authority key identifier: F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24 Certificate issuer: /CN=A91EA54A/serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24 Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft Manifest number: 0138 Signing time: Mon 11 May 2026 05:31:24 +0000 Manifest this update: Mon 11 May 2026 05:31:24 +0000 Manifest next update: Mon 18 May 2026 05:31:24 +0000 Files and hashes: 1: 9AFXH04P6PgNV80CfNnuFdc4jyQ.crl (hash: 3VQ0Zw94w/3eTYq3qZPeb3ddYpfd2ISm7Foerae7DE8=) 2: 8D52A23871A611EF8F5B9755C4F9AE02.roa (hash: Y4eMPkfyTXrtKvA+X6u1unLZ0mgOp+sFenl0Spk8Log=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 05:31:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA54A, serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24 Validity Not Before: May 11 05:31:24 2026 GMT Not After : May 18 05:31:24 2026 GMT Subject: CN=6a0169ac-0efb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:75:f4:82:73:74:a7:e0:65:d3:0c:c7:e7:82: 81:54:a0:4b:94:7d:f7:76:6f:6b:7c:16:ed:b3:f0: d2:04:8a:f5:50:1a:50:1a:e3:ae:1f:4e:fa:2f:ac: 25:b1:88:8d:7c:30:67:3d:00:98:be:3b:a8:17:3f: a3:ac:d5:36:bb:0f:59:c4:a1:b0:ea:a9:71:ee:94: 95:6c:c8:c6:60:e2:5c:5f:69:71:00:27:1c:3d:96: fc:c4:8c:50:78:0e:1a:ac:b7:2c:f8:8e:46:71:30: 8b:88:49:e7:96:ee:eb:63:10:39:84:ac:7a:32:cd: 42:b4:51:16:7a:a8:8d:5a:26:1e:31:70:c4:98:f9: f2:3b:24:c3:a4:69:7a:a2:8f:ec:69:d5:02:14:b5: 22:16:28:b5:be:f0:8e:31:e4:85:e7:37:df:8d:bd: eb:23:f5:76:12:db:25:db:e3:34:af:77:7f:b4:39: ef:16:ce:90:94:ed:d3:fd:3e:8a:41:d0:3d:cc:4b: 7a:b4:81:b1:67:aa:eb:7b:be:5d:fb:31:1c:6a:6c: e5:41:7e:7d:00:da:98:9c:53:d2:21:a2:e4:fe:af: 87:bf:a9:fd:03:43:4b:87:7c:28:c2:bc:44:41:fd: 6c:82:fd:4a:79:5e:da:77:57:0d:59:b7:c5:bd:62: 93:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:FA:1B:A6:B6:44:04:2B:27:D6:B2:00:27:19:A5:36:FC:51:55:99 X509v3 Authority Key Identifier: keyid:F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:81:66:24:c0:00:c5:d6:7c:e6:f4:1d:78:42:bd:2c:74:b5: b5:84:98:12:cc:9f:1b:da:e5:45:17:c1:de:7a:80:24:11:0d: 2a:c4:4b:80:d1:37:c9:37:6a:b9:3c:ab:82:03:f5:05:a7:d7: 24:3f:83:b1:d0:00:d8:02:37:82:b0:2c:ad:8d:17:73:91:68: 7a:97:5c:3c:24:c1:cb:67:25:85:c3:f7:df:89:b2:d0:1c:4c: c9:8e:22:23:ea:fd:64:88:40:87:f3:bc:18:0a:1c:b9:1b:69: da:1e:7e:26:10:fe:db:88:c7:a2:59:e2:7d:7a:69:04:06:df: 7d:72:89:8f:dc:93:d1:e3:39:0f:87:4a:4c:3f:2f:a2:08:a9: a0:b7:5a:8b:b5:4f:a4:67:06:c9:2a:30:d3:e3:76:73:f4:39: 44:97:5f:e4:15:ba:49:33:97:e5:1b:90:21:7a:37:1c:be:59: e0:22:18:8e:0c:c6:27:04:50:af:05:c2:28:41:9f:55:97:a7: 54:7c:e2:93:05:88:af:86:22:7a:3f:8b:72:62:c9:e1:63:7a: c0:db:e9:2f:9d:fa:11:fb:77:c7:fb:72:92:be:90:45:fd:03: a6:aa:d8:7c:2e:b8:84:2f:65:fe:ec:2d:93:6b:51:e3:4d:b9: 80:fb:bd:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE1NEExMTAvBgNVBAUTKEY0MDE1NzFGNEUwRkU4RjgwRDU3Q0QwMjdDRDlFRTE1 RDczODhGMjQwHhcNMjYwNTExMDUzMTI0WhcNMjYwNTE4MDUzMTI0WjAYMRYwFAYD VQQDEw02YTAxNjlhYy0wZWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXX0gnN0p+Bl0wzH54KBVKBLlH33dm9rfBbts/DSBIr1UBpQGuOuH076L6wl sYiNfDBnPQCYvjuoFz+jrNU2uw9ZxKGw6qlx7pSVbMjGYOJcX2lxACccPZb8xIxQ eA4arLcs+I5GcTCLiEnnlu7rYxA5hKx6Ms1CtFEWeqiNWiYeMXDEmPnyOyTDpGl6 oo/sadUCFLUiFii1vvCOMeSF5zffjb3rI/V2Etsl2+M0r3d/tDnvFs6QlO3T/T6K QdA9zEt6tIGxZ6rre75d+zEcamzlQX59ANqYnFPSIaLk/q+Hv6n9A0NLh3wowrxE Qf1sgv1KeV7ad1cNWbfFvWKTbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAn6G6a2 RAQrJ9ayACcZpTb8UVWZMB8GA1UdIwQYMBaAFPQBVx9OD+j4DVfNAnzZ7hXXOI8k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTU0QS9CRTg0QTgyMDcx QTUxMUVGOEQ4MDVDNzhDNEY5QUUwMi85QUZYSDA0UDZQZ05WODBDZk5udUZkYzRq eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlBRlhIMDRQNlBnTlY4MENmTm51RmRjNGp5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTU0QS9CRTg0QTgyMDcxQTUxMUVGOEQ4MDVDNzhDNEY5QUUwMi85QUZYSDA0UDZQ Z05WODBDZk5udUZkYzRqeVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKoFmJMAAxdZ85vQdeEK9LHS1tYSYEsyfG9rlRRfB3nqAJBENKsRLgNE3yTdq uTyrggP1BafXJD+DsdAA2AI3grAsrY0Xc5FoepdcPCTBy2clhcP334my0BxMyY4i I+r9ZIhAh/O8GAocuRtp2h5+JhD+24jHolnifXppBAbffXKJj9yT0eM5D4dKTD8v ogipoLdai7VPpGcGySow0+N2c/Q5RJdf5BW6STOX5RuQIXo3HL5Z4CIYjgzGJwRQ rwXCKEGfVZenVHzikwWIr4Yiej+LcmLJ4WN6wNvpL536Eft3x/tykr6QRf0DpqrY fC64hC9l/uwtk2tR4025gPu9UQ== -----END CERTIFICATE-----Generated at Wed May 13 01:08:38 2026 by rpki-client