$ rpki-client -vvf rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft File: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft (raw, json) Hash identifier: HveXTFCPHJpDJl/CW0P/btHkJTFSERtyN4KlrrU/Gow= Subject key identifier: B9:AE:FC:90:34:EA:A9:10:BB:83:3E:0B:9D:25:3F:71:F4:E0:EE:F7 Authority key identifier: 09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00 Certificate issuer: /CN=A91F05B5/serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00 Certificate serial: 021E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft Manifest number: 0215 Signing time: Wed 13 May 2026 03:00:40 +0000 Manifest this update: Wed 13 May 2026 03:00:40 +0000 Manifest next update: Wed 20 May 2026 03:00:40 +0000 Files and hashes: 1: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl (hash: /rHyXE+OZ12VHilNC2/EI/TxPO/RyR7xlQfw7i7NzD8=) 2: E0A69DBC2AB311EE9CA5E515C4F9AE02.roa (hash: yd8nZQYXpuBuXMJow036oPSXKDSenHOrq9DNYBNpxgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 03:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F05B5, serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00 Validity Not Before: May 13 03:00:40 2026 GMT Not After : May 20 03:00:40 2026 GMT Subject: CN=6a03e958-6757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:38:2f:b3:45:7b:be:b6:26:e3:0c:1a:77:ff: 6b:04:2b:a2:4b:93:54:58:37:34:20:e5:b6:85:f1: 68:fc:a1:a9:71:d6:43:64:52:2d:fc:c0:24:3f:07: 66:21:93:81:de:82:df:9d:63:9b:f3:e4:04:98:49: 10:28:66:8f:fe:4e:1e:18:f1:4a:1c:5c:60:ed:76: 18:5a:ee:7f:52:6c:90:d4:65:99:d9:98:69:9b:6b: 10:d3:d9:11:96:80:1f:0a:12:19:c8:e9:fe:7c:de: 31:c8:15:ac:e2:91:05:cf:4a:a0:09:2c:d1:67:be: c4:41:e7:fa:13:55:97:37:93:8e:36:83:18:26:6c: 6e:81:15:e5:51:ce:a1:ac:8e:35:c9:d3:fb:19:5f: b5:f5:c3:3b:8a:9e:3b:4d:78:f2:39:e2:7d:81:be: 69:af:77:85:95:6e:07:d1:a2:c3:e5:00:06:84:8f: 84:4f:83:d0:9d:1c:5f:72:27:78:ce:f0:bd:4b:92: 9e:41:3c:71:c8:3c:17:e4:99:2d:a2:d5:e5:d0:5a: e0:2f:d3:58:4e:08:0d:ef:29:32:46:48:9a:a1:c9: cd:15:dc:a8:5d:e4:5d:84:58:e7:47:10:52:3d:34: 55:7f:24:78:7e:74:ad:4c:5d:90:64:26:6b:14:6c: 2d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:AE:FC:90:34:EA:A9:10:BB:83:3E:0B:9D:25:3F:71:F4:E0:EE:F7 X509v3 Authority Key Identifier: keyid:09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:51:18:fd:32:07:f6:50:5c:a6:32:5d:7b:2b:d5:37:b5:da: ec:6f:08:bf:c6:a1:86:89:f6:d0:dd:58:74:7e:ab:be:19:cb: 91:e4:a3:ca:fd:08:22:ca:61:75:b5:c2:d8:bf:0f:a7:1a:08: 9c:ed:b8:1c:c7:3e:2c:5f:1c:17:9c:28:04:53:50:0a:b3:0b: 19:c4:4b:b6:6e:58:60:5c:b3:e2:25:50:46:56:37:0a:13:ad: b6:f9:31:83:bc:a2:a2:07:1f:10:08:32:44:fd:97:ad:83:21: 21:88:88:27:a9:6b:01:e2:62:44:20:12:76:a0:4a:87:1a:48: 75:ba:5a:da:14:4f:30:e4:ca:25:80:81:6d:9f:66:4a:c7:07: 84:ac:6d:22:79:55:d5:f6:3e:8b:01:2e:14:95:7a:f1:40:53: 5c:e1:4a:4a:9d:a8:ec:90:2e:72:8f:72:ec:f5:43:0a:0b:c5: 16:58:0d:78:be:e9:63:e2:5a:6a:37:45:73:cf:16:79:37:25: 45:01:11:be:42:19:95:f8:88:cd:40:a5:8d:b0:cf:a7:3d:53: b0:46:b5:39:8c:e7:15:e2:9f:9a:1e:8f:68:ef:79:95:cf:53: f6:97:64:70:ed:29:7c:a9:4e:b5:67:88:d0:23:35:73:a2:d7: 17:a3:8b:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA1QjUxMTAvBgNVBAUTKDA5NUY2QzZCQjM4N0M2OTMyRkRBMDFDMEJGQTYyNkY2 QUFDN0JCMDAwHhcNMjYwNTEzMDMwMDQwWhcNMjYwNTIwMDMwMDQwWjAYMRYwFAYD VQQDEw02YTAzZTk1OC02NzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTgvs0V7vrYm4wwad/9rBCuiS5NUWDc0IOW2hfFo/KGpcdZDZFIt/MAkPwdm IZOB3oLfnWOb8+QEmEkQKGaP/k4eGPFKHFxg7XYYWu5/UmyQ1GWZ2Zhpm2sQ09kR loAfChIZyOn+fN4xyBWs4pEFz0qgCSzRZ77EQef6E1WXN5OONoMYJmxugRXlUc6h rI41ydP7GV+19cM7ip47TXjyOeJ9gb5pr3eFlW4H0aLD5QAGhI+ET4PQnRxfcid4 zvC9S5KeQTxxyDwX5JktotXl0FrgL9NYTggN7ykyRkiaocnNFdyoXeRdhFjnRxBS PTRVfyR4fnStTF2QZCZrFGwtQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLmu/JA0 6qkQu4M+C50lP3H04O73MB8GA1UdIwQYMBaAFAlfbGuzh8aTL9oBwL+mJvaqx7sA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDVCNS80NzUwMTIwNjJB QjMxMUVFOEZBRTcyMTRDNEY5QUUwMi9DVjlzYTdPSHhwTXYyZ0hBdjZZbTlxckh1 d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWOXNhN09IeHBNdjJnSEF2NlltOXFySHV3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDVCNS80NzUwMTIwNjJBQjMxMUVFOEZBRTcyMTRDNEY5QUUwMi9DVjlzYTdPSHhw TXYyZ0hBdjZZbTlxckh1d0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoFEY/TIH9lBcpjJdeyvVN7Xa7G8Iv8ahhon20N1YdH6rvhnLkeSjyv0IIsph dbXC2L8PpxoInO24HMc+LF8cF5woBFNQCrMLGcRLtm5YYFyz4iVQRlY3ChOttvkx g7yiogcfEAgyRP2XrYMhIYiIJ6lrAeJiRCASdqBKhxpIdbpa2hRPMOTKJYCBbZ9m SscHhKxtInlV1fY+iwEuFJV68UBTXOFKSp2o7JAuco9y7PVDCgvFFlgNeL7pY+Ja ajdFc88WeTclRQERvkIZlfiIzUCljbDPpz1TsEa1OYznFeKfmh6PaO95lc9T9pdk cO0pfKlOtWeI0CM1c6LXF6OLRQ== -----END CERTIFICATE-----Generated at Wed May 13 10:02:49 2026 by rpki-client