$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft File: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft (raw, json) Hash identifier: cU2u9ntiBBgS5G6+jB+9iAhiJ/sMeQEOsZsNwttzlq0= Subject key identifier: 8D:CD:84:C9:D5:9D:D0:74:28:D6:87:29:4D:A7:76:1B:B7:65:1E:4E Authority key identifier: F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 Certificate issuer: /CN=A91ED571/serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Certificate serial: 0E18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft Manifest number: 0E0E Signing time: Tue 12 May 2026 17:51:42 +0000 Manifest this update: Tue 12 May 2026 17:51:41 +0000 Manifest next update: Tue 19 May 2026 17:51:41 +0000 Files and hashes: 1: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl (hash: He5YugmeyuthdztGPcNZYA1KwqDLEoH10NZ/pf1gPaM=) 2: C9819022CE7011E98E86DD52C4F9AE02.roa (hash: qKnMxoYQzAYEoqtHJW7SDhxTwL61Wk1XcPGIb5rMW/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3608 (0xe18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED571, serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Validity Not Before: May 12 17:51:41 2026 GMT Not After : May 19 17:51:41 2026 GMT Subject: CN=6a0368ae-f1d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:27:24:83:d8:e6:5b:94:da:7a:15:45:b1:35: b0:5e:e0:28:0d:34:ab:01:fd:87:be:4e:1d:0a:7c: 3f:c3:21:93:dd:ca:bc:48:a4:24:0e:c9:18:cb:d6: 7b:06:cc:61:b4:98:f2:53:ed:19:dc:61:2a:4b:66: 1e:cf:75:e5:fb:9d:47:4b:2c:8e:da:1b:fd:0a:07: c3:92:49:29:34:56:21:44:32:02:03:9c:9d:d4:b8: ec:ba:e7:ca:bf:a5:54:87:5b:6e:87:c6:cd:b2:30: b7:be:3d:9e:ee:0d:d4:5e:5b:b5:7b:5d:3b:5e:bb: 1a:8e:13:c2:50:c9:3f:a4:e2:de:34:fc:71:4e:1e: 70:e0:e1:bc:8e:a8:ba:6f:41:af:b7:1c:ff:7d:47: 4b:9d:4a:55:60:25:0a:13:1d:9b:e0:92:82:35:b7: 0e:97:09:c8:be:4f:bc:91:00:50:a1:b8:b4:02:aa: c8:9b:f2:88:82:2c:e1:8c:5b:31:aa:4e:26:2b:e7: 65:05:71:a4:3e:07:42:88:cc:5b:f0:66:9a:d9:d5: dd:ea:00:19:5c:a1:aa:0f:9c:28:98:de:70:35:57: 04:8f:3e:e4:40:f1:c8:3d:ba:47:56:59:3f:09:54: 4e:0c:d9:be:65:eb:85:c5:f0:e7:b9:23:19:c1:80: d6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:CD:84:C9:D5:9D:D0:74:28:D6:87:29:4D:A7:76:1B:B7:65:1E:4E X509v3 Authority Key Identifier: keyid:F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:4b:e9:dd:6a:e9:c2:92:f8:e6:0f:fd:51:20:7c:8a:f2:5d: e9:a0:55:3e:f3:f0:c5:95:a3:9d:35:c5:4e:c9:55:4d:af:fc: 49:f9:a2:c3:e3:e8:d4:7e:09:56:5c:54:3f:09:92:46:ad:ac: 63:18:34:67:29:16:a0:4f:8e:a0:0f:24:81:09:73:8c:42:8c: f4:57:d2:94:85:e5:77:b2:3e:3c:4b:e2:bd:d4:bf:3f:1b:51: a3:ff:06:55:a3:9e:a9:1b:bb:79:b4:cb:2e:53:08:00:69:78: 39:48:25:70:d0:36:3b:38:db:b7:1c:69:50:c5:e2:e0:aa:ac: e1:82:09:03:ba:25:06:d3:ec:07:24:52:dd:08:a3:2a:f4:7c: 64:ca:4c:26:e0:f6:4b:37:f7:28:83:a8:0f:f4:15:2b:02:15: f5:5c:e0:3e:a6:fe:63:32:fe:c1:34:85:5e:7b:d3:58:1e:b6: 6d:94:67:91:94:09:ab:42:f1:27:1d:69:fb:f1:c2:a3:bc:c0: ea:52:6a:e2:54:ca:91:11:37:f3:9c:99:cb:03:bc:bf:2d:65: cf:93:d1:fe:93:35:8a:96:3c:2d:03:c7:15:50:0a:7a:98:8d: ae:60:f1:41:94:74:98:3c:42:c3:99:e1:25:bf:fb:04:f6:b7: a1:1e:28:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1NzExMTAvBgNVBAUTKEY0RjE1QzY3NUVEOUE1QzJEMTk5NUIyN0ZCNTNGRjYw RkYwMjQ5RTAwHhcNMjYwNTEyMTc1MTQxWhcNMjYwNTE5MTc1MTQxWjAYMRYwFAYD VQQDEw02YTAzNjhhZS1mMWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Cckg9jmW5TaehVFsTWwXuAoDTSrAf2Hvk4dCnw/wyGT3cq8SKQkDskYy9Z7 BsxhtJjyU+0Z3GEqS2Yez3Xl+51HSyyO2hv9CgfDkkkpNFYhRDICA5yd1LjsuufK v6VUh1tuh8bNsjC3vj2e7g3UXlu1e107XrsajhPCUMk/pOLeNPxxTh5w4OG8jqi6 b0Gvtxz/fUdLnUpVYCUKEx2b4JKCNbcOlwnIvk+8kQBQobi0AqrIm/KIgizhjFsx qk4mK+dlBXGkPgdCiMxb8Gaa2dXd6gAZXKGqD5womN5wNVcEjz7kQPHIPbpHVlk/ CVRODNm+ZeuFxfDnuSMZwYDWgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI3NhMnV ndB0KNaHKU2ndhu3ZR5OMB8GA1UdIwQYMBaAFPTxXGde2aXC0ZlbJ/tT/2D/Akng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDU3MS9FQ0QyREY5NkNF NkYxMUU5QTBEODZENTFDNEY5QUUwMi85UEZjWjE3WnBjTFJtVnNuLTFQX1lQOENT ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlQRmNaMTdacGNMUm1Wc24tMVBfWVA4Q1NlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDU3MS9FQ0QyREY5NkNFNkYxMUU5QTBEODZENTFDNEY5QUUwMi85UEZjWjE3WnBj TFJtVnNuLTFQX1lQOENTZUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANEvp3WrpwpL45g/9USB8ivJd6aBVPvPwxZWjnTXFTslVTa/8Sfmiw+Po1H4J VlxUPwmSRq2sYxg0ZykWoE+OoA8kgQlzjEKM9FfSlIXld7I+PEvivdS/PxtRo/8G VaOeqRu7ebTLLlMIAGl4OUglcNA2OzjbtxxpUMXi4Kqs4YIJA7olBtPsByRS3Qij KvR8ZMpMJuD2Szf3KIOoD/QVKwIV9VzgPqb+YzL+wTSFXnvTWB62bZRnkZQJq0Lx Jx1p+/HCo7zA6lJq4lTKkRE385yZywO8vy1lz5PR/pM1ipY8LQPHFVAKepiNrmDx QZR0mDxCw5nhJb/7BPa3oR4oeQ== -----END CERTIFICATE-----Generated at Wed May 13 10:14:04 2026 by rpki-client