$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft File: rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft (raw, json) Hash identifier: nvkZam8z1CK1o/dMcxPEGviBdJvGbsq5PDiIfUPCRLw= Subject key identifier: 66:4A:DE:45:69:E0:06:0A:FF:AF:9A:9A:B4:FB:97:00:A5:1A:9C:36 Authority key identifier: AE:FD:51:46:4A:79:65:42:D5:64:21:3A:2F:63:AD:5F:8F:C3:00:6D Certificate issuer: /CN=A91ED65C/serialNumber=AEFD51464A796542D564213A2F63AD5F8FC3006D Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rv1RRkp5ZULVZCE6L2OtX4_DAG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft Manifest number: 22 Signing time: Mon 11 May 2026 09:03:48 +0000 Manifest this update: Mon 11 May 2026 09:03:47 +0000 Manifest next update: Mon 18 May 2026 09:03:47 +0000 Files and hashes: 1: rv1RRkp5ZULVZCE6L2OtX4_DAG0.crl (hash: azanbk1bh0sorGd0/iXhXyKO8duNruPnMG/st/CmozA=) 2: 39CF61B81E3F11F196621670303D8C67.roa (hash: EYfYn+U3VhT59mtwpdO2I7nb2Hr1Kjf7NC15GXsbD8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.crl rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rv1RRkp5ZULVZCE6L2OtX4_DAG0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 09:03:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED65C, serialNumber=AEFD51464A796542D564213A2F63AD5F8FC3006D Validity Not Before: May 11 09:03:47 2026 GMT Not After : May 18 09:03:47 2026 GMT Subject: CN=6a019b74-5bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f6:a1:e4:d5:c1:c2:07:73:31:66:68:7b:23: 5d:f7:35:f6:36:1c:f4:68:54:22:b5:be:cf:1a:73: f3:21:79:ce:b2:b1:5f:25:c2:f1:ef:98:c8:76:6b: f8:1f:05:92:5b:ad:f6:be:7e:7f:b8:b6:cc:a4:5a: c9:7a:19:86:32:d6:2f:8c:ca:71:4f:dc:ca:04:ef: b5:9e:bc:a7:7b:56:97:ff:2c:a1:8f:51:6c:0c:0a: f5:07:6a:8a:84:61:6b:8f:3e:f1:87:fe:54:a1:be: 95:f9:e6:63:a8:32:ec:d6:30:b7:96:32:29:06:1a: f7:67:40:88:03:31:d3:2e:ad:b1:05:5b:31:3c:b1: 36:0d:17:5f:17:48:47:50:c1:06:32:87:c7:b9:86: 91:64:4f:b7:6e:8e:75:ca:7f:0a:17:12:3c:4f:70: da:ab:c3:27:75:3f:07:45:8b:84:35:fa:c6:87:37: c8:88:7a:58:75:37:ba:1b:d3:48:03:9a:d3:0b:e8: 03:3c:28:7d:0f:29:8a:67:45:71:36:b8:10:29:6b: a6:54:94:82:3f:98:64:90:75:91:ef:c0:30:36:75: 07:8b:ed:e3:9f:46:b2:0c:d5:e2:a5:f4:27:79:e1: 90:07:b4:5b:42:b1:c0:39:67:3a:13:cc:16:48:61: 6e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:4A:DE:45:69:E0:06:0A:FF:AF:9A:9A:B4:FB:97:00:A5:1A:9C:36 X509v3 Authority Key Identifier: keyid:AE:FD:51:46:4A:79:65:42:D5:64:21:3A:2F:63:AD:5F:8F:C3:00:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rv1RRkp5ZULVZCE6L2OtX4_DAG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ec:a5:c2:01:04:3e:b1:ed:34:db:e9:24:dc:96:a2:6a:89: fd:9d:65:cd:f2:de:12:b1:04:50:92:8a:a1:13:39:63:da:93: e8:21:1f:1a:cb:3b:b5:e7:61:b1:f9:1a:60:5c:5f:3d:8f:18: b8:b2:a8:26:d7:5b:a8:ef:21:a8:5a:71:e8:4d:f6:99:f3:59: 6a:b6:98:c1:2d:0a:a0:20:22:34:7a:ac:c8:b5:b5:82:f0:71: c3:12:b4:8c:c0:1e:17:05:b6:ff:ab:26:e3:57:7d:d2:ea:09: d0:8e:31:d3:1d:67:03:b1:03:1e:f4:99:1a:25:3d:56:67:a7: 1f:5c:48:43:c4:a8:9e:02:2e:e9:89:be:93:f5:38:c7:41:8a: a9:8f:fe:fb:76:77:d6:2c:b8:0b:f9:5a:fc:a8:34:8b:16:41: 82:bb:9d:0e:38:69:cb:7c:08:9b:5d:93:01:eb:02:ae:ec:e3: 75:13:52:a6:14:d8:ee:36:cb:77:91:cc:3e:88:16:bb:26:6d: 2a:01:0b:29:b9:3e:e4:5f:8d:38:9e:78:c4:52:34:0b:b9:a2: 3b:a8:88:91:c0:9b:33:e5:a5:e5:09:7d:36:30:82:f6:ad:b9: a3:4d:97:8b:68:3a:34:17:6a:14:3f:2c:92:2b:da:4e:62:33: 47:42:55:4c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RDY1QzExMC8GA1UEBRMoQUVGRDUxNDY0QTc5NjU0MkQ1NjQyMTNBMkY2M0FENUY4 RkMzMDA2RDAeFw0yNjA1MTEwOTAzNDdaFw0yNjA1MTgwOTAzNDdaMBgxFjAUBgNV BAMTDTZhMDE5Yjc0LTViZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDT9qHk1cHCB3MxZmh7I133NfY2HPRoVCK1vs8ac/Mhec6ysV8lwvHvmMh2a/gf BZJbrfa+fn+4tsykWsl6GYYy1i+MynFP3MoE77WevKd7Vpf/LKGPUWwMCvUHaoqE YWuPPvGH/lShvpX55mOoMuzWMLeWMikGGvdnQIgDMdMurbEFWzE8sTYNF18XSEdQ wQYyh8e5hpFkT7dujnXKfwoXEjxPcNqrwyd1PwdFi4Q1+saHN8iIelh1N7ob00gD mtML6AM8KH0PKYpnRXE2uBApa6ZUlII/mGSQdZHvwDA2dQeL7eOfRrIM1eKl9Cd5 4ZAHtFtCscA5ZzoTzBZIYW4bAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZkreRWng Bgr/r5qatPuXAKUanDYwHwYDVR0jBBgwFoAUrv1RRkp5ZULVZCE6L2OtX4/DAG0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVENjVDL0Y2MTNFMTI2MUUz QzExRjFCRkI1RUExQzJGM0Q4QzY3L3J2MVJSa3A1WlVMVlpDRTZMMk90WDRfREFH MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcnYxUlJrcDVaVUxWWkNFNkwyT3RYNF9EQUcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVE NjVDL0Y2MTNFMTI2MUUzQzExRjFCRkI1RUExQzJGM0Q4QzY3L3J2MVJSa3A1WlVM VlpDRTZMMk90WDRfREFHMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA97KXCAQQ+se002+kk3Jaiaon9nWXN8t4SsQRQkoqhEzlj2pPoIR8ayzu152Gx +RpgXF89jxi4sqgm11uo7yGoWnHoTfaZ81lqtpjBLQqgICI0eqzItbWC8HHDErSM wB4XBbb/qybjV33S6gnQjjHTHWcDsQMe9JkaJT1WZ6cfXEhDxKieAi7pib6T9TjH QYqpj/77dnfWLLgL+Vr8qDSLFkGCu50OOGnLfAibXZMB6wKu7ON1E1KmFNjuNst3 kcw+iBa7Jm0qAQspuT7kX404nnjEUjQLuaI7qIiRwJsz5aXlCX02MIL2rbmjTZeL aDo0F2oUPyySK9pOYjNHQlVM -----END CERTIFICATE-----Generated at Wed May 13 08:49:13 2026 by rpki-client