$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft File: zFfgNkMaXqPBcqpyg0Aa88StXFk.mft (raw, json) Hash identifier: CVSlyL0U2zfCTrdSQbi3LCH9eVl85GBPsgyJPY233W4= Subject key identifier: B5:09:16:2C:2E:AF:36:90:C2:6A:99:6C:C7:19:42:D8:BF:DB:A1:68 Authority key identifier: CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59 Certificate issuer: /CN=A91FDC78/serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59 Certificate serial: 09BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft Manifest number: 09A7 Signing time: Tue 12 May 2026 20:03:44 +0000 Manifest this update: Tue 12 May 2026 20:03:44 +0000 Manifest next update: Tue 19 May 2026 20:03:44 +0000 Files and hashes: 1: zFfgNkMaXqPBcqpyg0Aa88StXFk.crl (hash: S5ZyOV1V0nhpSy0/OTVf2kRXjvIqYef9GRHrBbearGw=) 2: DA0B639E89E711F08DD17A55C4F9AE02.roa (hash: WShAID2RQGXvLt6YUD1Hwx0ZMGyvGXCWr68bcuwRc4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2491 (0x9bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDC78, serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59 Validity Not Before: May 12 20:03:44 2026 GMT Not After : May 19 20:03:44 2026 GMT Subject: CN=6a0387a0-7655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:60:66:2d:4d:aa:6c:49:24:14:25:f1:f2:cc: 02:05:d4:66:0e:6c:7b:7e:a5:75:7f:ac:bd:f9:c9: 98:9e:fa:b5:93:2d:27:0c:8a:5a:3c:4c:e8:a0:93: 7b:d7:83:75:8e:28:54:e3:96:68:fc:54:81:f6:42: f7:60:9a:fa:8f:9e:ce:97:4d:71:bd:82:a4:8b:fd: 9d:aa:54:11:39:bb:d5:ed:cf:55:ea:12:bb:d2:7e: 8c:f9:c0:84:41:04:93:46:83:b7:1e:29:3f:b6:fd: a1:84:8b:a8:64:82:fd:2d:41:52:2f:05:89:4f:c2: 11:67:5f:a3:b0:41:55:4c:21:40:30:f7:d9:6f:10: 5b:d3:07:c7:b6:11:c5:8b:97:d8:20:63:aa:02:a5: 75:80:32:e5:37:4d:4b:bd:1c:e0:d7:92:22:09:9f: 15:13:67:aa:b5:c0:24:7c:4b:9d:d7:55:06:04:a9: 0a:a5:06:93:6d:fc:15:30:f3:28:9c:de:32:e6:5b: c6:80:94:31:f7:d1:06:5b:7e:9b:cf:8e:ba:eb:18: 19:98:12:d4:26:02:66:3b:5f:ca:34:d0:47:3c:dc: e8:18:62:2a:d0:bc:f7:68:0d:03:fd:9d:2b:d4:f1: d5:86:2f:5f:a8:0e:14:c0:5e:33:c8:bd:db:c2:1b: b5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:09:16:2C:2E:AF:36:90:C2:6A:99:6C:C7:19:42:D8:BF:DB:A1:68 X509v3 Authority Key Identifier: keyid:CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:06:92:bd:47:7f:0a:3d:86:7e:48:fd:c2:21:d4:72:4a:24: c7:0b:37:4d:aa:b4:c4:e0:03:93:7e:da:7f:36:b2:98:9b:51: 0a:4a:f5:2b:23:51:46:7e:b3:24:53:91:36:16:81:59:d5:aa: 55:3e:be:17:cf:03:f9:d7:30:8d:f6:7e:01:92:a1:77:ae:af: a7:cf:93:81:57:5c:f4:ab:3c:2c:da:33:26:f1:79:87:b8:e8: 21:aa:f0:a4:40:c0:8e:6a:d0:1e:c5:db:da:66:7c:31:fc:46: b0:a1:45:e8:3e:e4:03:9c:76:26:85:90:80:d9:be:88:6b:0d: 1d:a4:69:8a:54:62:ec:3f:30:fd:c3:12:d6:ec:6e:a8:0a:12: 11:2f:5a:86:72:f6:12:b5:92:cc:52:64:a5:18:8b:42:cb:d3: e7:ee:f1:f9:70:c9:53:65:62:9d:3d:dd:74:ca:03:f4:8b:48: 91:e3:61:a9:7e:57:4b:61:8e:de:09:ff:c7:af:9f:34:93:70: cb:73:75:66:25:1b:ce:80:56:9f:38:84:2b:07:9a:1a:99:05: a6:93:b9:09:ff:75:aa:b4:34:a1:4f:db:70:3c:1e:1a:68:65: 2a:45:e3:7f:fe:87:2c:4e:e0:2c:96:c4:fb:f8:d0:11:f1:5b: e4:2b:12:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDNzgxMTAvBgNVBAUTKENDNTdFMDM2NDMxQTVFQTNDMTcyQUE3MjgzNDAxQUYz QzRBRDVDNTkwHhcNMjYwNTEyMjAwMzQ0WhcNMjYwNTE5MjAwMzQ0WjAYMRYwFAYD VQQDEw02YTAzODdhMC03NjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApGBmLU2qbEkkFCXx8swCBdRmDmx7fqV1f6y9+cmYnvq1ky0nDIpaPEzooJN7 14N1jihU45Zo/FSB9kL3YJr6j57Ol01xvYKki/2dqlQRObvV7c9V6hK70n6M+cCE QQSTRoO3Hik/tv2hhIuoZIL9LUFSLwWJT8IRZ1+jsEFVTCFAMPfZbxBb0wfHthHF i5fYIGOqAqV1gDLlN01LvRzg15IiCZ8VE2eqtcAkfEud11UGBKkKpQaTbfwVMPMo nN4y5lvGgJQx99EGW36bz4666xgZmBLUJgJmO1/KNNBHPNzoGGIq0Lz3aA0D/Z0r 1PHVhi9fqA4UwF4zyL3bwhu1vQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLUJFiwu rzaQwmqZbMcZQti/26FoMB8GA1UdIwQYMBaAFMxX4DZDGl6jwXKqcoNAGvPErVxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREM3OC8xNTQ3NDAwOEFF QUMxMUVBQTZDMUQ3NjFDNEY5QUUwMi96RmZnTmtNYVhxUEJjcXB5ZzBBYTg4U3RY RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGZmdOa01hWHFQQmNxcHlnMEFhODhTdFhGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REM3OC8xNTQ3NDAwOEFFQUMxMUVBQTZDMUQ3NjFDNEY5QUUwMi96RmZnTmtNYVhx UEJjcXB5ZzBBYTg4U3RYRmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASAaSvUd/Cj2Gfkj9wiHUckokxws3Taq0xOADk37afzaymJtRCkr1KyNRRn6z JFORNhaBWdWqVT6+F88D+dcwjfZ+AZKhd66vp8+TgVdc9Ks8LNozJvF5h7joIarw pEDAjmrQHsXb2mZ8MfxGsKFF6D7kA5x2JoWQgNm+iGsNHaRpilRi7D8w/cMS1uxu qAoSES9ahnL2ErWSzFJkpRiLQsvT5+7x+XDJU2VinT3ddMoD9ItIkeNhqX5XS2GO 3gn/x6+fNJNwy3N1ZiUbzoBWnziEKweaGpkFppO5Cf91qrQ0oU/bcDweGmhlKkXj f/6HLE7gLJbE+/jQEfFb5CsSJg== -----END CERTIFICATE-----Generated at Wed May 13 05:28:20 2026 by rpki-client