$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft File: vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft (raw, json) Hash identifier: 74IapUwFoyM+0UvY9SW58GXolZintThdIBnpGnIYfko= Subject key identifier: 64:3D:B7:24:17:04:23:7A:11:1D:92:C9:D0:68:9D:DD:33:B8:03:24 Authority key identifier: BC:E9:FA:6C:37:7C:94:34:B1:2C:77:BE:FC:DD:42:A5:B7:03:4F:F2 Certificate issuer: /CN=A91EC3C9/serialNumber=BCE9FA6C377C9434B12C77BEFCDD42A5B7034FF2 Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft Manifest number: BB Signing time: Mon 11 May 2026 07:08:45 +0000 Manifest this update: Mon 11 May 2026 07:08:44 +0000 Manifest next update: Mon 18 May 2026 07:08:44 +0000 Files and hashes: 1: vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl (hash: K4dWNdtPCcNKy0S8LdqSgiq5nROeggH9lt2bWW5PbXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 07:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3C9, serialNumber=BCE9FA6C377C9434B12C77BEFCDD42A5B7034FF2 Validity Not Before: May 11 07:08:44 2026 GMT Not After : May 18 07:08:44 2026 GMT Subject: CN=6a01807d-d2bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9c:dd:3c:2a:e0:ba:a4:62:1b:36:ba:d3:9c: e1:19:60:5d:b6:e9:a5:4e:a4:cb:dc:ec:0f:12:50: 7a:5e:13:b7:5b:26:b8:e4:c8:60:fa:c2:2a:34:10: d2:b4:88:0e:ef:03:81:dc:5d:65:13:fd:a3:3f:58: 4e:3e:46:b0:54:06:49:7b:ec:e2:07:8c:95:ab:93: 11:31:53:5e:a7:62:b5:65:6e:8f:e2:9e:81:bc:e8: f8:33:71:4b:c4:33:3b:b4:95:80:41:ae:c1:50:d5: f7:f0:28:13:5f:bf:9c:34:39:83:f1:45:e4:5a:72: dc:99:34:b3:2b:b5:d4:26:c0:b0:8c:34:8a:82:09: 28:11:1f:4a:c2:8b:0a:e7:2e:7e:da:17:2b:73:41: 56:3a:d2:7f:af:f4:bd:c6:99:58:2e:7a:20:9d:5e: ed:b9:e6:65:54:bd:d8:a6:74:43:ad:55:eb:20:11: 0a:53:a3:32:7c:c9:d1:17:89:8c:26:57:08:15:83: 3a:fa:79:17:a8:cc:b7:5c:49:de:60:31:20:27:d4: 91:cf:92:5b:ae:65:34:8f:c1:88:a4:2b:7b:cc:53: 78:a9:28:df:1b:aa:50:8a:14:cc:5a:b0:00:a3:5f: 2c:a4:15:07:bc:c1:74:2c:e0:81:96:c7:dc:89:91: ed:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3D:B7:24:17:04:23:7A:11:1D:92:C9:D0:68:9D:DD:33:B8:03:24 X509v3 Authority Key Identifier: keyid:BC:E9:FA:6C:37:7C:94:34:B1:2C:77:BE:FC:DD:42:A5:B7:03:4F:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:6f:7d:25:49:c1:17:e2:da:0f:d2:06:13:8a:43:67:54:f9: 26:de:bd:4f:5d:b9:4c:23:f5:66:d0:34:a1:f4:f3:b5:92:fd: 53:13:6b:26:51:34:4a:1a:f0:70:28:ce:2c:a2:65:fa:2e:d1: 9c:60:42:96:d7:b3:57:83:24:8d:73:bf:98:c7:96:3a:51:27: 40:6c:61:8e:d3:07:1c:3e:41:ca:0d:26:94:12:d1:ac:5a:d6: 15:8f:3d:aa:49:b6:14:f4:e1:de:9c:a0:8a:d0:0f:2a:66:80: 94:90:4c:7f:a4:6e:d4:88:0e:91:81:73:95:91:5e:d8:06:97: 61:e4:20:bd:5e:36:96:7b:77:37:f9:85:55:71:bc:33:f9:eb: 3d:c0:a5:1b:38:8e:6a:86:1f:ef:57:7f:eb:4b:f6:ea:35:48: d8:30:7e:77:ee:45:39:5e:f2:52:a6:d4:7b:35:7c:ff:60:12: 63:f7:5c:3f:9f:c7:18:9b:46:2b:cd:5a:42:07:2d:f6:6a:a2: 6b:89:03:45:f5:5c:2d:f8:77:f5:39:a7:46:e5:ac:f0:5b:6e: cd:8a:89:32:1f:c6:69:1d:ee:10:9e:43:62:40:23:b6:b7:fc: 54:d7:b0:64:0d:0b:5e:c8:f6:2e:25:6c:01:d1:db:31:d1:7f: 94:f1:c0:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzQzkxMTAvBgNVBAUTKEJDRTlGQTZDMzc3Qzk0MzRCMTJDNzdCRUZDREQ0MkE1 QjcwMzRGRjIwHhcNMjYwNTExMDcwODQ0WhcNMjYwNTE4MDcwODQ0WjAYMRYwFAYD VQQDEw02YTAxODA3ZC1kMmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJzdPCrguqRiGza605zhGWBdtumlTqTL3OwPElB6XhO3Wya45Mhg+sIqNBDS tIgO7wOB3F1lE/2jP1hOPkawVAZJe+ziB4yVq5MRMVNep2K1ZW6P4p6BvOj4M3FL xDM7tJWAQa7BUNX38CgTX7+cNDmD8UXkWnLcmTSzK7XUJsCwjDSKggkoER9KwosK 5y5+2hcrc0FWOtJ/r/S9xplYLnognV7tueZlVL3YpnRDrVXrIBEKU6MyfMnRF4mM JlcIFYM6+nkXqMy3XEneYDEgJ9SRz5JbrmU0j8GIpCt7zFN4qSjfG6pQihTMWrAA o18spBUHvMF0LOCBlsfciZHt/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGQ9tyQX BCN6ER2SydBond0zuAMkMB8GA1UdIwQYMBaAFLzp+mw3fJQ0sSx3vvzdQqW3A0/y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzNDOS9DMTJDREFFNDMx OEUxMUYwOUMzNkRBN0JDNEY5QUUwMi92T242YkRkOGxEU3hMSGUtX04xQ3BiY0RU X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZPbjZiRGQ4bERTeExIZS1fTjFDcGJjRFRfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzNDOS9DMTJDREFFNDMxOEUxMUYwOUMzNkRBN0JDNEY5QUUwMi92T242YkRkOGxE U3hMSGUtX04xQ3BiY0RUX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2299JUnBF+LaD9IGE4pDZ1T5Jt69T125TCP1ZtA0ofTztZL9UxNrJlE0Shrw cCjOLKJl+i7RnGBCltezV4MkjXO/mMeWOlEnQGxhjtMHHD5Byg0mlBLRrFrWFY89 qkm2FPTh3pygitAPKmaAlJBMf6Ru1IgOkYFzlZFe2AaXYeQgvV42lnt3N/mFVXG8 M/nrPcClGziOaoYf71d/60v26jVI2DB+d+5FOV7yUqbUezV8/2ASY/dcP5/HGJtG K81aQgct9mqia4kDRfVcLfh39TmnRuWs8FtuzYqJMh/GaR3uEJ5DYkAjtrf8VNew ZA0LXsj2LiVsAdHbMdF/lPHAJg== -----END CERTIFICATE-----Generated at Wed May 13 03:11:04 2026 by rpki-client