$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft File: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft (raw, json) Hash identifier: zqG/m6cWR3yzpc5hxK9YBfxc8pFcZRDJMjvIpTSRgUA= Subject key identifier: 62:68:64:80:F7:28:E9:F7:86:EF:A2:22:51:FB:D3:5F:A4:55:D0:BE Authority key identifier: 69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34 Certificate issuer: /CN=A91FCF44/serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34 Certificate serial: 016A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft Manifest number: 015B Signing time: Wed 13 May 2026 05:20:39 +0000 Manifest this update: Wed 13 May 2026 05:20:39 +0000 Manifest next update: Wed 20 May 2026 05:20:39 +0000 Files and hashes: 1: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl (hash: jKyvisengoli3VHVdHTZ8pwdLSlY0xTN6Te9ji4sie4=) 2: B2A0074EAD4F11EF93ECF282C4F9AE02.roa (hash: zIk6J0N0742RdEvubg3AlZvYEvOIg7avsvcbwF9cq9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 05:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCF44, serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34 Validity Not Before: May 13 05:20:39 2026 GMT Not After : May 20 05:20:39 2026 GMT Subject: CN=6a040a27-d594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ea:44:c2:93:63:6a:e0:da:dd:3c:12:79:7c: 77:47:4d:e3:6c:d0:c7:36:a3:f4:aa:00:6e:95:50: 7f:64:df:d0:f2:4f:a8:f4:23:d3:57:fe:20:b9:63: f0:78:84:ab:0d:ae:93:9e:02:49:93:40:b4:6d:98: 41:60:4f:8a:a9:21:86:0e:79:df:d2:1e:2f:5f:ea: 25:09:23:77:3a:3f:fe:fe:dc:62:fa:ef:95:1f:62: ad:f1:41:a6:bd:28:c3:c0:1c:c2:9a:6e:c4:21:38: a0:b9:5a:f4:54:e3:c2:3d:2c:08:76:04:82:c1:04: cb:f1:28:f9:7e:7e:b7:1c:45:db:72:be:91:0c:76: 9c:42:73:b5:17:6b:7d:ac:a1:9d:b1:d2:86:94:21: d7:5b:38:72:69:8b:dc:0e:e9:fe:bd:4b:15:e1:64: 7e:d9:e1:a5:f4:40:7c:7a:1b:a3:49:13:0f:f6:72: 99:5f:37:7c:46:fd:25:a0:b9:c1:87:a4:51:f3:a2: a6:3b:fc:15:b8:20:b3:a9:24:09:0e:15:78:cf:67: 1e:5e:b1:67:06:a3:ca:6a:4f:37:42:18:30:65:32: 5c:83:bc:cf:ab:01:d1:90:c6:d0:3d:4a:df:18:e5: 46:eb:50:f4:9d:82:7f:09:28:ed:ec:77:21:88:5a: a3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:68:64:80:F7:28:E9:F7:86:EF:A2:22:51:FB:D3:5F:A4:55:D0:BE X509v3 Authority Key Identifier: keyid:69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:8f:e1:9b:a0:f8:2d:90:eb:56:22:90:f0:f5:fe:93:eb:c6: 1b:90:78:a7:40:99:55:89:67:b7:01:2b:68:38:fa:a1:64:85: 6e:76:b6:64:76:a2:ab:33:1e:d2:f2:ea:18:c3:74:f6:a1:9e: f8:8a:3a:f3:a4:ac:74:e5:23:12:da:ef:5e:81:4e:62:d2:85: f3:57:03:8e:9e:61:09:1e:8a:3c:f4:40:74:eb:5a:89:fa:e6: 95:98:5a:12:a8:9e:86:4a:35:c4:b5:97:6e:d2:dd:88:ff:22: f3:40:8c:4d:19:18:26:43:4e:0e:cd:89:d5:96:2f:dd:74:95: 19:48:52:83:2a:99:eb:5b:bb:75:bc:b9:1b:73:87:9b:ee:a8: 17:fb:49:88:5f:41:5d:30:51:77:66:50:73:44:d2:d9:e9:41: b1:fe:cd:04:b4:7e:9b:79:40:1c:c2:16:c5:56:e4:ed:0b:89: 4e:4d:f8:0b:ae:1a:ad:79:7e:28:1e:d8:a8:79:97:1c:47:f8: ff:b7:b9:3d:41:bd:2e:3b:af:b2:1f:64:c8:e0:9e:dd:e1:ab: 22:1c:4b:1c:04:8f:25:b2:81:ee:e5:92:8e:80:ea:37:8e:fe: 74:01:9d:05:17:da:69:f5:cc:14:25:ee:37:1d:e1:fa:d7:46: 3e:f4:00:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNGNDQxMTAvBgNVBAUTKDY5OThEOUI1MzI3QkJGODk0RUQ1NjE5N0M0N0VDODk2 RkFFNTlFMzQwHhcNMjYwNTEzMDUyMDM5WhcNMjYwNTIwMDUyMDM5WjAYMRYwFAYD VQQDEw02YTA0MGEyNy1kNTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+pEwpNjauDa3TwSeXx3R03jbNDHNqP0qgBulVB/ZN/Q8k+o9CPTV/4guWPw eISrDa6TngJJk0C0bZhBYE+KqSGGDnnf0h4vX+olCSN3Oj/+/txi+u+VH2Kt8UGm vSjDwBzCmm7EITiguVr0VOPCPSwIdgSCwQTL8Sj5fn63HEXbcr6RDHacQnO1F2t9 rKGdsdKGlCHXWzhyaYvcDun+vUsV4WR+2eGl9EB8ehujSRMP9nKZXzd8Rv0loLnB h6RR86KmO/wVuCCzqSQJDhV4z2ceXrFnBqPKak83QhgwZTJcg7zPqwHRkMbQPUrf GOVG61D0nYJ/CSjt7HchiFqjxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGJoZID3 KOn3hu+iIlH701+kVdC+MB8GA1UdIwQYMBaAFGmY2bUye7+JTtVhl8R+yJb65Z40 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0Y0NC85NDExMDYwNDYw MkMxMUVGOTdENzNDNUZDNEY5QUUwMi9hWmpadFRKN3Y0bE8xV0dYeEg3SWx2cmxu alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Faalp0VEo3djRsTzFXR1h4SDdJbHZybG5qUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0Y0NC85NDExMDYwNDYwMkMxMUVGOTdENzNDNUZDNEY5QUUwMi9hWmpadFRKN3Y0 bE8xV0dYeEg3SWx2cmxualEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAu4/hm6D4LZDrViKQ8PX+k+vGG5B4p0CZVYlntwEraDj6oWSFbna2ZHaiqzMe 0vLqGMN09qGe+Io686SsdOUjEtrvXoFOYtKF81cDjp5hCR6KPPRAdOtaifrmlZha Eqiehko1xLWXbtLdiP8i80CMTRkYJkNODs2J1ZYv3XSVGUhSgyqZ61u7dby5G3OH m+6oF/tJiF9BXTBRd2ZQc0TS2elBsf7NBLR+m3lAHMIWxVbk7QuJTk34C64arXl+ KB7YqHmXHEf4/7e5PUG9Ljuvsh9kyOCe3eGrIhxLHASPJbKB7uWSjoDqN47+dAGd BRfaafXMFCXuNx3h+tdGPvQAsg== -----END CERTIFICATE-----Generated at Wed May 13 09:06:15 2026 by rpki-client