$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft File: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft (raw, json) Hash identifier: 4Uj8pv3wThhfR+IVwo+VlqWuL28Tn6dhv09CHmmpUbs= Subject key identifier: 0E:68:61:86:83:37:B0:DB:BB:20:75:2A:96:C6:38:90:BF:AB:93:3A Authority key identifier: 4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A Certificate issuer: /CN=A91FDEFE/serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft Manifest number: 0120 Signing time: Wed 13 May 2026 05:58:44 +0000 Manifest this update: Wed 13 May 2026 05:58:43 +0000 Manifest next update: Wed 20 May 2026 05:58:43 +0000 Files and hashes: 1: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl (hash: R84lP2eERPSmVEUqFC4GC+0Luhi9WDVIEFRuv1uhyAY=) 2: 669FD05EA53911EFBE261371C4F9AE02.roa (hash: iXPPbRwODBTS92FzdfuvK5J3jl/IZyMATy+kQwe/++Q=) 3: 12B6D40E37C511F19788E36ABE833773.roa (hash: f5bzM7j+pO8fCnEBI50cYrv56JA2HlZHuSFXp1GJx88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 05:58:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDEFE, serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A Validity Not Before: May 13 05:58:43 2026 GMT Not After : May 20 05:58:43 2026 GMT Subject: CN=6a041314-d115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:84:74:c9:ab:26:5d:78:cb:44:5e:56:fa:9d: c0:f3:c2:ed:fd:aa:39:6b:de:0e:02:f0:1a:bf:c2: bc:13:19:1d:99:04:a4:f6:06:5c:c2:03:17:8a:5d: cf:f6:56:a1:64:30:46:72:50:e3:2f:67:fa:82:f0: 5d:d0:38:59:66:5b:5b:0f:c1:90:ed:49:ba:f5:77: 20:f9:fe:6c:6c:0a:81:10:c0:a3:3f:d3:19:7d:56: 0c:06:83:91:42:f3:f5:71:3e:7f:6f:96:4e:32:2c: ba:24:e2:b7:a0:3f:14:76:6a:ec:8d:7d:ae:d9:a0: c7:fe:be:d1:2e:d4:19:3e:f8:eb:e1:50:92:0b:38: 4c:e9:ee:fb:4d:d7:03:15:f3:83:12:d0:6d:63:f6: 7d:43:cd:5a:4c:c5:1e:85:52:07:87:e8:a8:e5:d4: 48:57:d9:a5:61:d9:ee:6c:88:e6:e4:8a:62:3a:d6: 20:ea:c3:7d:d9:4b:42:f2:3e:20:db:01:e5:3e:17: bc:f2:6b:f7:f7:dc:f5:a7:a7:86:43:c5:54:d4:f7: 75:1d:d6:a2:e0:03:3f:7a:d2:d3:34:41:c8:34:37: c1:0d:72:44:26:2e:aa:b7:9d:53:ca:0c:f5:cb:eb: 78:d4:76:24:0f:81:24:31:c7:06:a7:cd:80:ab:38: d2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:68:61:86:83:37:B0:DB:BB:20:75:2A:96:C6:38:90:BF:AB:93:3A X509v3 Authority Key Identifier: keyid:4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:0d:aa:32:b7:15:15:5c:c0:b9:a5:ca:62:0a:60:e2:38:ed: 24:44:97:84:2e:11:98:40:96:34:fc:8f:7d:d7:2d:6a:ac:12: 41:e6:c7:6a:48:e6:2d:17:b2:19:09:83:f4:ba:e1:dc:3d:a6: f1:27:08:a8:0b:09:29:bf:98:89:6f:d1:fa:6f:6d:25:4d:1d: a4:78:0e:75:35:09:c4:48:8d:ad:0c:bf:34:e4:ee:a4:8a:b8: 01:ef:e4:98:f4:25:e9:64:7f:92:c1:0f:f5:ea:f9:db:8f:7b: 85:0a:30:e4:ea:a8:ef:8f:a5:b3:7d:a6:63:9c:4b:74:1c:ce: 18:e4:13:02:34:94:bb:67:db:2b:bf:e0:51:b1:ea:e7:c2:f6: 4f:61:68:80:10:1f:2f:8c:73:cf:79:30:3c:df:04:45:9d:17: 30:a2:69:dc:94:4c:2b:df:f3:ef:55:c3:b6:9c:e1:56:1b:e4: 35:09:2f:c9:9a:d8:7a:d4:e5:8b:7f:ca:da:6b:ad:40:88:7d: 7b:45:bd:aa:07:1b:cf:9d:0d:e9:13:e8:33:0d:3f:c3:d4:ab: ad:6a:56:82:11:b5:df:47:79:a3:03:4e:e3:60:2a:0c:f4:6c: 9c:fd:15:9c:1c:ab:a6:0c:4d:cb:13:07:3a:94:fb:32:de:d3: 63:f9:08:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRFRkUxMTAvBgNVBAUTKDRGRTFCMzVGOUFEODI4MUI2NkY0NzAzMUY1MDdFMEVF N0Q1NDIxMUEwHhcNMjYwNTEzMDU1ODQzWhcNMjYwNTIwMDU1ODQzWjAYMRYwFAYD VQQDEw02YTA0MTMxNC1kMTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5IR0yasmXXjLRF5W+p3A88Lt/ao5a94OAvAav8K8ExkdmQSk9gZcwgMXil3P 9lahZDBGclDjL2f6gvBd0DhZZltbD8GQ7Um69Xcg+f5sbAqBEMCjP9MZfVYMBoOR QvP1cT5/b5ZOMiy6JOK3oD8UdmrsjX2u2aDH/r7RLtQZPvjr4VCSCzhM6e77TdcD FfODEtBtY/Z9Q81aTMUehVIHh+io5dRIV9mlYdnubIjm5IpiOtYg6sN92UtC8j4g 2wHlPhe88mv399z1p6eGQ8VU1Pd1Hdai4AM/etLTNEHINDfBDXJEJi6qt51Tygz1 y+t41HYkD4EkMccGp82AqzjS6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA5oYYaD N7DbuyB1KpbGOJC/q5M6MB8GA1UdIwQYMBaAFE/hs1+a2CgbZvRwMfUH4O59VCEa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREVGRS8xOTRCNzkyMEE1 MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9ULUd6WDVyWUtCdG05SEF4OVFmZzduMVVJ Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtR3pYNXJZS0J0bTlIQXg5UWZnN24xVUlSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REVGRS8xOTRCNzkyMEE1MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9ULUd6WDVyWUtC dG05SEF4OVFmZzduMVVJUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYg2qMrcVFVzAuaXKYgpg4jjtJESXhC4RmECWNPyPfdctaqwSQebHakjmLRey GQmD9Lrh3D2m8ScIqAsJKb+YiW/R+m9tJU0dpHgOdTUJxEiNrQy/NOTupIq4Ae/k mPQl6WR/ksEP9er52497hQow5Oqo74+ls32mY5xLdBzOGOQTAjSUu2fbK7/gUbHq 58L2T2FogBAfL4xzz3kwPN8ERZ0XMKJp3JRMK9/z71XDtpzhVhvkNQkvyZrYetTl i3/K2mutQIh9e0W9qgcbz50N6RPoMw0/w9SrrWpWghG130d5owNO42AqDPRsnP0V nByrpgxNyxMHOpT7Mt7TY/kIEg== -----END CERTIFICATE-----Generated at Wed May 13 18:40:32 2026 by rpki-client