$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft File: Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft (raw, json) Hash identifier: g33j3f7kC8+nYdhE42d3UZn4l7M1xuNHUxEGrs+rcJg= Subject key identifier: 60:6F:47:96:FE:23:A7:88:7B:EA:1C:45:B0:40:DF:B4:D3:D4:36:EB Authority key identifier: 42:6F:4A:D5:85:D7:A5:4D:D3:62:E3:F7:B3:C8:F3:AF:6A:A6:3C:2E Certificate issuer: /CN=A91F9BB3/serialNumber=426F4AD585D7A54DD362E3F7B3C8F3AF6AA63C2E Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft Manifest number: 4D Signing time: Wed 13 May 2026 08:28:48 +0000 Manifest this update: Wed 13 May 2026 08:28:48 +0000 Manifest next update: Wed 20 May 2026 08:28:48 +0000 Files and hashes: 1: Qm9K1YXXpU3TYuP3s8jzr2qmPC4.crl (hash: +m7qMC6OVKL8Hp+dHpRrq/vXWgh6qUWRQd2161ofDeE=) 2: DB9D3A1AE24411F0BBC3E4F5716F56BC.roa (hash: FGeU1tZaj6B6d9kcXemk68XFxPuUp5ULKxFkHVuu17c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.crl rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 08:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9BB3, serialNumber=426F4AD585D7A54DD362E3F7B3C8F3AF6AA63C2E Validity Not Before: May 13 08:28:48 2026 GMT Not After : May 20 08:28:48 2026 GMT Subject: CN=6a043640-f5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dd:8e:8f:79:11:ef:d4:1f:b9:1a:db:53:3a: b0:40:dc:9b:46:23:7b:ca:1c:87:e4:c5:21:d3:58: 91:d7:d7:f7:b8:0f:6b:74:d9:8b:7e:a8:38:7d:1b: 4b:ec:5a:ef:9c:95:00:0a:77:35:54:24:19:3d:30: 28:a3:ee:af:37:96:db:fc:0b:ea:14:06:f0:8a:40: bd:38:84:1e:30:e7:54:1c:9b:46:37:89:13:3d:0d: e9:fb:16:e1:01:a0:c8:f9:26:43:09:00:3f:b7:48: c8:47:4a:94:56:7e:c1:12:7a:27:e5:86:b4:21:7f: a2:87:4b:32:88:10:f2:a1:f1:82:49:75:a1:59:e1: 2d:fd:8e:15:5a:50:b6:4a:20:fc:91:0f:dd:af:9f: 01:40:3c:cd:4f:eb:fa:8e:20:9d:53:f0:13:bc:64: da:55:7e:e2:9f:ae:84:7e:6d:b5:6c:e5:7b:3d:54: a0:79:26:ca:0e:a1:be:8d:af:6d:9d:ea:bc:56:05: 22:21:c4:f3:73:86:07:b4:fd:4f:a6:27:d3:73:e8: e4:1f:58:de:0d:4b:34:51:49:1e:ee:ea:4b:68:1a: fc:6a:39:30:f6:1a:2b:78:bb:93:92:ed:fa:f4:c6: f4:97:ac:4c:79:80:26:c0:da:8f:33:4b:33:74:20: 5d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:6F:47:96:FE:23:A7:88:7B:EA:1C:45:B0:40:DF:B4:D3:D4:36:EB X509v3 Authority Key Identifier: keyid:42:6F:4A:D5:85:D7:A5:4D:D3:62:E3:F7:B3:C8:F3:AF:6A:A6:3C:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9BB3/8198E014E24411F0B953D896716F56BC/Qm9K1YXXpU3TYuP3s8jzr2qmPC4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:54:67:40:3a:9c:53:b1:72:86:cf:4a:be:3d:25:83:c0:0d: 81:b4:91:1c:0c:87:22:0b:27:98:e8:6c:04:5e:87:b6:84:e8: 75:31:13:5e:09:87:44:04:a7:e5:85:14:a4:d3:1b:7d:08:c2: b6:c8:e4:c8:a3:32:65:3f:cc:10:89:6a:2a:d0:a4:95:f0:dd: 9f:84:0c:c1:70:4a:d6:f8:84:44:6a:61:65:39:e2:a7:f6:df: 75:74:00:0c:22:0d:c5:5e:fe:66:73:fb:c4:0b:fa:f2:44:77: 09:a9:46:52:8a:1a:85:fb:03:b4:bf:93:bb:26:66:96:82:9f: 3c:c4:68:19:d0:d8:e0:2c:a8:36:89:c1:0e:75:d8:78:d2:79: dd:53:37:51:66:e6:e1:1b:4c:80:f3:bc:e7:8e:02:69:b8:17: 73:99:a4:d1:83:e0:c1:08:d8:93:98:10:8a:2f:d7:e9:f2:d2: 2e:7f:3b:60:b3:39:f0:ed:97:6f:1d:c0:c6:de:e9:8c:6c:2c: 3b:20:ca:d8:be:b7:14:7f:a2:62:46:b0:23:42:ae:6b:0e:1d: 53:4d:68:5f:4b:65:b8:1a:76:63:c1:bd:f4:71:74:d8:3b:0a: 6d:9f:ce:4a:d7:e9:b2:c3:a1:9a:48:4e:bd:d5:14:92:d0:a4: a8:04:8d:36 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OUJCMzExMC8GA1UEBRMoNDI2RjRBRDU4NUQ3QTU0REQzNjJFM0Y3QjNDOEYzQUY2 QUE2M0MyRTAeFw0yNjA1MTMwODI4NDhaFw0yNjA1MjAwODI4NDhaMBgxFjAUBgNV BAMTDTZhMDQzNjQwLWY1YTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCh3Y6PeRHv1B+5GttTOrBA3JtGI3vKHIfkxSHTWJHX1/e4D2t02Yt+qDh9G0vs Wu+clQAKdzVUJBk9MCij7q83ltv8C+oUBvCKQL04hB4w51Qcm0Y3iRM9Den7FuEB oMj5JkMJAD+3SMhHSpRWfsESeiflhrQhf6KHSzKIEPKh8YJJdaFZ4S39jhVaULZK IPyRD92vnwFAPM1P6/qOIJ1T8BO8ZNpVfuKfroR+bbVs5Xs9VKB5JsoOob6Nr22d 6rxWBSIhxPNzhge0/U+mJ9Nz6OQfWN4NSzRRSR7u6ktoGvxqOTD2Git4u5OS7fr0 xvSXrEx5gCbA2o8zSzN0IF1zAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYG9Hlv4j p4h76hxFsEDftNPUNuswHwYDVR0jBBgwFoAUQm9K1YXXpU3TYuP3s8jzr2qmPC4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5QkIzLzgxOThFMDE0RTI0 NDExRjBCOTUzRDg5NjcxNkY1NkJDL1FtOUsxWVhYcFUzVFl1UDNzOGp6cjJxbVBD NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUW05SzFZWFhwVTNUWXVQM3M4anpyMnFtUEM0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5 QkIzLzgxOThFMDE0RTI0NDExRjBCOTUzRDg5NjcxNkY1NkJDL1FtOUsxWVhYcFUz VFl1UDNzOGp6cjJxbVBDNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCBVGdAOpxTsXKGz0q+PSWDwA2BtJEcDIciCyeY6GwEXoe2hOh1MRNeCYdEBKfl hRSk0xt9CMK2yOTIozJlP8wQiWoq0KSV8N2fhAzBcErW+IREamFlOeKn9t91dAAM Ig3FXv5mc/vEC/ryRHcJqUZSihqF+wO0v5O7JmaWgp88xGgZ0NjgLKg2icEOddh4 0nndUzdRZubhG0yA87znjgJpuBdzmaTRg+DBCNiTmBCKL9fp8tIufztgsznw7Zdv HcDG3umMbCw7IMrYvrcUf6JiRrAjQq5rDh1TTWhfS2W4GnZjwb30cXTYOwptn85K 1+myw6GaSE691RSS0KSoBI02 -----END CERTIFICATE-----Generated at Wed May 13 12:45:03 2026 by rpki-client