$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft File: D59xWNvf-ipXrgJIfJgga3g4BJY.mft (raw, json) Hash identifier: DIJMp5NFQCBXsAas4zIRLPtTcTE9CEpqhjDLKcF4KMU= Subject key identifier: BB:B0:7E:57:D0:EF:EC:6A:4A:27:65:3C:E2:AD:C0:B0:4F:A4:3A:32 Authority key identifier: 0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 Certificate issuer: /CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft Manifest number: 0191 Signing time: Mon 11 May 2026 04:29:10 +0000 Manifest this update: Mon 11 May 2026 04:29:10 +0000 Manifest next update: Mon 18 May 2026 04:29:10 +0000 Files and hashes: 1: D59xWNvf-ipXrgJIfJgga3g4BJY.crl (hash: /UjVIByTgVcjsweEkUFhDwAcIoo2wM+zOAqySw1RTqE=) 2: CAF5E0EA6BDA11EF942AB06BC4F9AE02.roa (hash: NSdNu+vXnYcTSniUQqnt8p+QBPXnXEprmzukCezOx0U=) 3: 507476EE6BD811EFBDD72932C4F9AE02.roa (hash: irjK47i6Sld0YH0p5+DxVPsO0MEpAL8iYc9/ecny0Gs=) 4: 1132F3026BD811EF90DBC631C4F9AE02.roa (hash: RseQd9x0Qtjlynx4q/LTY8jY17t9oSxHJT5UuEAvOWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 04:29:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE9DC, serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Validity Not Before: May 11 04:29:10 2026 GMT Not After : May 18 04:29:10 2026 GMT Subject: CN=6a015b16-2ed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:33:95:e5:6a:c8:90:2f:87:c8:8c:6c:e6:96: 7a:65:74:29:a8:ad:c3:2d:86:01:62:29:11:5a:c4: 2b:23:bb:d9:d8:7b:34:08:05:4a:18:98:d5:21:3a: 7e:74:e3:10:2b:72:e7:72:f7:a3:88:4d:44:30:3c: 6a:f8:fa:1b:51:03:12:9c:4e:b9:ea:2c:fe:aa:16: d3:98:b7:58:b6:6b:ad:17:41:0a:77:e4:bd:3c:dc: 89:6b:a7:99:0c:d2:4f:94:a4:bf:3a:1c:d7:bf:3a: 41:64:65:b9:76:72:ba:c5:dd:86:44:29:7c:ba:eb: 5b:39:e9:77:60:6d:1b:e4:50:58:40:ce:36:51:31: 4a:be:71:a1:9d:a6:a7:a6:02:e5:b1:9a:c0:61:f9: fe:a1:26:ad:70:db:7a:b3:27:90:ef:8f:e5:ea:7d: b9:d3:7b:6b:67:da:b3:c7:69:f9:09:8b:ca:48:51: aa:e2:6d:3c:31:43:dd:f2:35:dd:62:a9:4c:ce:0c: 33:ad:62:7c:4f:c4:4c:bc:06:22:79:6b:66:b3:52: 8d:84:77:e2:2e:07:3c:1a:3e:91:0f:a1:95:e7:cd: 0f:e4:61:07:f2:dd:16:c8:b9:37:ff:78:bd:1d:c5: 8e:9c:5c:46:1c:94:2d:5e:5c:26:5f:ba:a6:5e:92: 9d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B0:7E:57:D0:EF:EC:6A:4A:27:65:3C:E2:AD:C0:B0:4F:A4:3A:32 X509v3 Authority Key Identifier: keyid:0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:7f:e7:56:cc:b5:df:27:6c:47:8d:f1:4e:76:2d:83:a6:7f: b7:d0:cd:a8:d4:99:81:76:cc:c5:2d:6e:ae:96:92:f2:85:39: f5:63:b5:d8:da:40:29:4e:9e:b0:c2:50:66:00:32:63:61:c9: c9:f9:8c:bf:19:8a:81:ed:b9:12:88:7b:3c:15:26:7c:4b:37: 15:3e:97:82:6d:3b:be:e9:5f:87:bc:21:bd:69:fb:83:75:0b: f2:fb:80:09:78:37:e6:9d:b4:54:b1:66:e9:47:c5:fe:17:bb: 36:d5:d0:03:f4:0b:e1:f3:e6:5a:f4:f9:dc:47:6c:cb:4e:91: 64:e5:c2:44:32:99:49:d6:3d:fb:c7:b5:41:93:38:35:0c:91: 6c:c2:7e:a1:b8:c6:1b:93:9b:57:48:38:6f:03:de:c2:b0:87: 1c:52:65:3f:6b:af:47:1f:a1:34:22:bb:17:34:b6:2d:d7:84: 97:02:8b:30:43:d7:0c:62:9f:f3:ed:48:93:89:ce:64:d0:40: b1:24:ab:09:a9:1c:47:4a:3a:d2:8e:a1:5c:fc:b5:ce:10:d1: 6e:67:af:a8:89:8d:88:ab:2a:22:36:df:28:94:4c:bb:56:83: b9:2b:a8:76:40:fd:7c:53:00:05:19:ad:36:d0:c2:42:eb:12: d5:d0:f3:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU5REMxMTAvBgNVBAUTKDBGOUY3MTU4REJERkZBMkE1N0FFMDI0ODdDOTgyMDZC NzgzODA0OTYwHhcNMjYwNTExMDQyOTEwWhcNMjYwNTE4MDQyOTEwWjAYMRYwFAYD VQQDEw02YTAxNWIxNi0yZWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7jOV5WrIkC+HyIxs5pZ6ZXQpqK3DLYYBYikRWsQrI7vZ2Hs0CAVKGJjVITp+ dOMQK3LncvejiE1EMDxq+PobUQMSnE656iz+qhbTmLdYtmutF0EKd+S9PNyJa6eZ DNJPlKS/OhzXvzpBZGW5dnK6xd2GRCl8uutbOel3YG0b5FBYQM42UTFKvnGhnaan pgLlsZrAYfn+oSatcNt6syeQ74/l6n2503trZ9qzx2n5CYvKSFGq4m08MUPd8jXd YqlMzgwzrWJ8T8RMvAYieWtms1KNhHfiLgc8Gj6RD6GV580P5GEH8t0WyLk3/3i9 HcWOnFxGHJQtXlwmX7qmXpKdywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLuwflfQ 7+xqSidlPOKtwLBPpDoyMB8GA1UdIwQYMBaAFA+fcVjb3/oqV64CSHyYIGt4OASW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTlEQy82RUVDMUY1Q0VG RkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1pcFhyZ0pJZkpnZ2EzZzRC SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1OXhXTnZmLWlwWHJnSklmSmdnYTNnNEJKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTlEQy82RUVDMUY1Q0VGRkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1p cFhyZ0pJZkpnZ2EzZzRCSlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABX/nVsy13ydsR43xTnYtg6Z/t9DNqNSZgXbMxS1urpaS8oU59WO12NpAKU6e sMJQZgAyY2HJyfmMvxmKge25Eoh7PBUmfEs3FT6Xgm07vulfh7whvWn7g3UL8vuA CXg35p20VLFm6UfF/he7NtXQA/QL4fPmWvT53Edsy06RZOXCRDKZSdY9+8e1QZM4 NQyRbMJ+objGG5ObV0g4bwPewrCHHFJlP2uvRx+hNCK7FzS2LdeElwKLMEPXDGKf 8+1Ik4nOZNBAsSSrCakcR0o60o6hXPy1zhDRbmevqImNiKsqIjbfKJRMu1aDuSuo dkD9fFMABRmtNtDCQusS1dDzsA== -----END CERTIFICATE-----Generated at Wed May 13 05:29:17 2026 by rpki-client