$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft File: _KxvqDHo9aKEE0yVqNAg_LyOyfI.mft (raw, json) Hash identifier: 9i34gbsbEznlVsO7fe9smWuxtCo1L5yCt6O95p1xgBg= Subject key identifier: BF:0D:E7:54:BF:C0:2A:99:13:26:30:D1:29:AF:D1:BF:03:7B:6E:DB Authority key identifier: FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2 Certificate issuer: /CN=A91EB820/serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft Manifest number: 97 Signing time: Mon 11 May 2026 07:35:56 +0000 Manifest this update: Mon 11 May 2026 07:35:56 +0000 Manifest next update: Mon 18 May 2026 07:35:56 +0000 Files and hashes: 1: _KxvqDHo9aKEE0yVqNAg_LyOyfI.crl (hash: p4XvOqU0vcbT+9rqUOqt6mtsjhC5aF6sKcG8XVT8TL0=) 2: D918B46C684211F0BE03503CC4F9AE02.roa (hash: aq1rkL3lbBFNGSwriSfEgnoepxf49LO+cuY4rWY4wMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.crl rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 07:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB820, serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2 Validity Not Before: May 11 07:35:56 2026 GMT Not After : May 18 07:35:56 2026 GMT Subject: CN=6a0186dc-d803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a1:fc:ed:e0:13:24:69:2a:3c:43:44:a6:8f: 51:8f:5d:50:1e:33:eb:f5:5f:7b:64:26:04:c9:3f: a4:65:9b:c9:7c:f5:77:73:36:8f:c7:d4:12:ef:82: 3f:32:98:89:2a:54:9d:e5:f4:3c:cf:c3:39:70:d4: 1a:6f:16:5a:26:4e:59:1a:5c:cc:85:03:57:98:88: c4:6a:6b:92:8e:a2:1f:3b:22:cf:85:19:7f:b3:7d: e4:cd:de:8e:74:84:ef:ba:31:08:59:7c:cc:db:05: 44:73:72:c8:6d:45:1d:be:2a:28:f1:85:e5:b6:bb: fa:fe:4c:4e:10:c5:eb:50:45:2a:5f:60:ef:63:c1: 63:a4:ff:45:f1:14:56:63:8d:00:39:20:01:1a:d9: 6d:d0:2f:a4:65:d4:a4:0b:14:b0:d1:3f:f4:62:1f: 6d:f1:68:86:df:b1:d7:d8:42:44:53:cf:89:c4:eb: b9:5d:e1:90:42:92:eb:d5:c9:1b:ce:47:75:25:da: 27:02:40:38:8e:6e:26:a9:6d:d7:c8:e2:ac:4b:03: da:2e:e6:7e:ae:39:b7:5a:55:fc:7e:1a:f7:da:fc: db:07:51:29:76:b4:c5:56:24:e4:1d:70:fb:2d:dd: 53:7c:bf:99:3a:4b:fc:5c:52:32:56:d8:f1:6e:1e: 0f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:0D:E7:54:BF:C0:2A:99:13:26:30:D1:29:AF:D1:BF:03:7B:6E:DB X509v3 Authority Key Identifier: keyid:FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:24:6c:f6:51:3f:0c:cc:d7:99:ff:f8:e9:5e:0c:ff:2d:bf: 67:7d:20:3e:84:34:75:4e:16:07:3b:56:e7:b7:12:a4:79:4d: 42:c2:bc:64:84:fb:23:ad:d5:d8:8b:0c:00:d8:ee:83:ab:17: 86:37:45:db:af:6e:64:d2:85:e5:7b:e3:58:f5:94:06:20:dd: c4:7f:e8:1e:7e:4d:72:8c:f7:0e:24:87:c9:76:50:bd:45:3b: 46:c5:58:93:be:90:8a:7c:57:48:a4:a5:0d:44:6e:3a:35:43: 77:69:49:8d:e2:e8:04:55:75:46:bf:95:c0:58:15:45:ae:72: 04:ae:b4:dd:8d:38:64:67:80:47:32:5c:c2:65:36:85:a8:1d: 80:a4:6f:aa:4d:7e:70:cc:b2:d4:c6:b3:e1:e2:41:a0:9a:0e: 4a:d6:a1:89:12:ea:5e:fe:6a:39:20:42:e9:4f:eb:7b:0c:6a: 64:f0:aa:5d:55:f0:07:60:8f:1b:ca:b9:33:cc:23:d8:c5:3e: a4:ea:3d:eb:73:37:a0:4d:70:70:f2:e0:70:6e:77:47:37:c2: 9e:7f:82:75:59:87:64:43:29:2c:f3:55:d0:20:cd:a3:46:3f: 95:8f:a3:0e:0f:19:ea:77:43:14:7c:8b:61:97:bf:70:ac:c0: 1f:2f:6b:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI4MjAxMTAvBgNVBAUTKEZDQUM2RkE4MzFFOEY1QTI4NDEzNEM5NUE4RDAyMEZD QkM4RUM5RjIwHhcNMjYwNTExMDczNTU2WhcNMjYwNTE4MDczNTU2WjAYMRYwFAYD VQQDEw02YTAxODZkYy1kODAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5KH87eATJGkqPENEpo9Rj11QHjPr9V97ZCYEyT+kZZvJfPV3czaPx9QS74I/ MpiJKlSd5fQ8z8M5cNQabxZaJk5ZGlzMhQNXmIjEamuSjqIfOyLPhRl/s33kzd6O dITvujEIWXzM2wVEc3LIbUUdvioo8YXltrv6/kxOEMXrUEUqX2DvY8FjpP9F8RRW Y40AOSABGtlt0C+kZdSkCxSw0T/0Yh9t8WiG37HX2EJEU8+JxOu5XeGQQpLr1ckb zkd1JdonAkA4jm4mqW3XyOKsSwPaLuZ+rjm3WlX8fhr32vzbB1EpdrTFViTkHXD7 Ld1TfL+ZOkv8XFIyVtjxbh4PIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL8N51S/ wCqZEyYw0Smv0b8De27bMB8GA1UdIwQYMBaAFPysb6gx6PWihBNMlajQIPy8jsny MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjgyMC85MEE4QjA4QTY4 NDAxMUYwQTk0MDQ3NkJDNEY5QUUwMi9fS3h2cURIbzlhS0VFMHlWcU5BZ19MeU95 ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19LeHZxREhvOWFLRUUweVZxTkFnX0x5T3lmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjgyMC85MEE4QjA4QTY4NDAxMUYwQTk0MDQ3NkJDNEY5QUUwMi9fS3h2cURIbzlh S0VFMHlWcU5BZ19MeU95ZkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJiRs9lE/DMzXmf/46V4M/y2/Z30gPoQ0dU4WBztW57cSpHlNQsK8ZIT7I63V 2IsMANjug6sXhjdF269uZNKF5XvjWPWUBiDdxH/oHn5Ncoz3DiSHyXZQvUU7RsVY k76QinxXSKSlDURuOjVDd2lJjeLoBFV1Rr+VwFgVRa5yBK603Y04ZGeARzJcwmU2 hagdgKRvqk1+cMyy1Maz4eJBoJoOStahiRLqXv5qOSBC6U/rewxqZPCqXVXwB2CP G8q5M8wj2MU+pOo963M3oE1wcPLgcG53RzfCnn+CdVmHZEMpLPNV0CDNo0Y/lY+j Dg8Z6ndDFHyLYZe/cKzAHy9rBA== -----END CERTIFICATE-----Generated at Wed May 13 03:37:28 2026 by rpki-client