$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft File: G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft (raw, json) Hash identifier: hYg84b1QmPWklZvKSxsmk2QgT3swD+JA09sJYjSrcUc= Subject key identifier: 49:91:DB:AD:27:F0:EF:44:E0:9A:5A:F4:A6:A8:E5:99:DC:04:88:1E Authority key identifier: 1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52 Certificate issuer: /CN=A91F67BB/serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752 Certificate serial: 121C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft Manifest number: 11EC Signing time: Tue 12 May 2026 17:10:51 +0000 Manifest this update: Tue 12 May 2026 17:10:50 +0000 Manifest next update: Tue 19 May 2026 17:10:50 +0000 Files and hashes: 1: G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl (hash: 2h1IRZJleMKPyotMVlS5TVweFEArZixlhJY3jTw4q1E=) 2: FB675E140F0311E997412A4EC4F9AE02.roa (hash: WZDgNlhW0pwPMejNqxRBtwXZLqcsEeCsrEz1azRWYbQ=) 3: FAC7FE320F0311E997412A4EC4F9AE02.roa (hash: ltuiI8TZuMv/G/t/Ztpq7bP81fIn8XtBMrkmf8/fbBQ=) 4: 294F19380E5111E988F3C34BC4F9AE02.roa (hash: 2Hp6M6BntVmhWo1ReGblit19qNRWTDvqJP9qHcur32s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4636 (0x121c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67BB, serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752 Validity Not Before: May 12 17:10:50 2026 GMT Not After : May 19 17:10:50 2026 GMT Subject: CN=6a035f1b-e680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:05:5e:3b:98:56:7f:49:27:b5:bc:58:6e:0a: 04:04:3e:d3:d1:f4:c1:8d:89:18:21:ba:38:9f:9b: e9:1b:a0:4e:ee:e9:1b:17:de:80:6f:f1:09:e1:d8: fc:37:5e:8b:00:92:f8:15:1f:34:aa:e7:79:c6:2c: 33:19:2d:a2:46:11:4d:50:49:25:94:9a:e2:3f:0e: d8:45:2e:70:78:5f:c8:e8:2f:2f:ea:70:64:a4:27: 41:8e:f3:f6:62:d4:08:ad:d5:5e:bd:93:b7:1c:09: 4b:9e:af:cc:06:f3:c0:09:ac:09:ae:5f:2b:bf:76: 63:02:33:0e:eb:ac:7c:6f:c6:24:ad:18:a6:34:63: b9:32:20:34:ab:fd:3a:d8:d1:1a:1b:13:3a:11:42: 0d:8e:ff:b1:c6:52:75:c5:2f:13:9a:7a:0d:96:09: 0e:8a:23:e4:45:5a:af:57:1c:af:06:4e:5f:26:b8: b5:17:7f:ea:8b:b3:79:fe:08:87:cd:8c:69:b3:29: d9:19:24:b2:f5:d3:73:41:9b:42:ce:ad:c0:9c:f3: b7:75:64:2c:10:ff:ee:8f:54:57:e6:45:59:23:d0: 10:38:20:52:91:f0:ea:0d:e0:35:cd:eb:a1:5a:db: 33:c8:f9:19:14:fe:c5:ae:2e:2b:b9:6e:2e:0f:65: 80:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:91:DB:AD:27:F0:EF:44:E0:9A:5A:F4:A6:A8:E5:99:DC:04:88:1E X509v3 Authority Key Identifier: keyid:1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:44:55:ce:8c:28:30:10:dd:fc:a2:2a:91:2b:51:a6:c1:3d: 15:4a:33:15:d6:ce:b8:ba:f2:26:89:6d:c5:62:1f:d1:94:9a: a1:ba:46:ba:bf:94:f4:0f:2b:8f:b8:8e:36:52:04:95:f2:49: 45:5c:1f:d6:9c:14:85:99:f9:f0:07:64:96:dc:1e:2d:c9:bf: 38:c7:35:81:2d:16:7e:f9:77:fd:e8:f3:d1:72:51:17:fe:44: 72:7c:7f:59:93:32:8f:6f:f8:dd:bf:26:83:b5:ec:dc:32:3f: 55:f4:ca:41:33:c3:26:ce:1c:66:79:47:34:cf:2b:0b:0e:6f: 26:45:6c:7d:0d:5d:fa:13:7d:5c:6a:fb:33:cd:50:37:28:72: 2e:dc:c3:00:6f:c7:79:79:92:ed:b2:02:d0:b3:46:5e:90:50: f1:c9:33:2f:9d:2f:93:ae:84:f3:dd:3c:66:5a:bf:e5:1e:da: 16:73:45:81:cf:56:4d:d8:55:0b:70:12:0b:04:dd:9f:20:8a: 16:63:31:00:06:0a:6c:c7:d7:c2:7c:d7:a8:7e:af:d8:94:06: f0:e4:a8:fa:1a:fe:a8:7c:a3:c5:bb:c2:bb:ed:1c:fe:1d:99: 4e:33:07:b2:cd:cf:46:e0:21:d7:f3:3a:d9:70:7f:88:41:f0: 04:a4:6a:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3QkIxMTAvBgNVBAUTKDFCRjVBOEQ5NENFMDZDRTMwMUZDMzVEODY5RjcwRDc0 MEQ3MDk3NTIwHhcNMjYwNTEyMTcxMDUwWhcNMjYwNTE5MTcxMDUwWjAYMRYwFAYD VQQDEw02YTAzNWYxYi1lNjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjAVeO5hWf0kntbxYbgoEBD7T0fTBjYkYIbo4n5vpG6BO7ukbF96Ab/EJ4dj8 N16LAJL4FR80qud5xiwzGS2iRhFNUEkllJriPw7YRS5weF/I6C8v6nBkpCdBjvP2 YtQIrdVevZO3HAlLnq/MBvPACawJrl8rv3ZjAjMO66x8b8YkrRimNGO5MiA0q/06 2NEaGxM6EUINjv+xxlJ1xS8TmnoNlgkOiiPkRVqvVxyvBk5fJri1F3/qi7N5/giH zYxpsynZGSSy9dNzQZtCzq3AnPO3dWQsEP/uj1RX5kVZI9AQOCBSkfDqDeA1zeuh WtszyPkZFP7Fri4ruW4uD2WAzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEmR260n 8O9E4Jpa9Kao5ZncBIgeMB8GA1UdIwQYMBaAFBv1qNlM4GzjAfw12Gn3DXQNcJdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdCQi9DOURCODlFRTBF M0UxMUU5ODM2RjQwMTRDNEY5QUUwMi9HX1dvMlV6Z2JPTUJfRFhZYWZjTmRBMXds MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dfV28yVXpnYk9NQl9EWFlhZmNOZEExd2wxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjdCQi9DOURCODlFRTBFM0UxMUU5ODM2RjQwMTRDNEY5QUUwMi9HX1dvMlV6Z2JP TUJfRFhZYWZjTmRBMXdsMUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfERVzowoMBDd/KIqkStRpsE9FUozFdbOuLryJoltxWIf0ZSaobpGur+U9A8r j7iONlIElfJJRVwf1pwUhZn58AdkltweLcm/OMc1gS0Wfvl3/ejz0XJRF/5Ecnx/ WZMyj2/43b8mg7Xs3DI/VfTKQTPDJs4cZnlHNM8rCw5vJkVsfQ1d+hN9XGr7M81Q NyhyLtzDAG/HeXmS7bIC0LNGXpBQ8ckzL50vk66E8908Zlq/5R7aFnNFgc9WTdhV C3ASCwTdnyCKFmMxAAYKbMfXwnzXqH6v2JQG8OSo+hr+qHyjxbvCu+0c/h2ZTjMH ss3PRuAh1/M62XB/iEHwBKRqHQ== -----END CERTIFICATE-----Generated at Wed May 13 06:53:46 2026 by rpki-client