$ rpki-client -vvf rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft File: AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft (raw, json) Hash identifier: BBIRgoFOTVS1FlIvSDU+AQheWiJsDEXNJGP0/+U0S+Q= Subject key identifier: F7:BF:F0:CD:AB:7F:9E:62:60:09:48:F7:E4:62:5F:52:24:FD:B8:C1 Authority key identifier: 02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16 Certificate issuer: /CN=A91147EF/serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016 Certificate serial: 0A1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft Manifest number: 0A09 Signing time: Wed 20 May 2026 19:50:02 +0000 Manifest this update: Wed 20 May 2026 19:50:02 +0000 Manifest next update: Wed 27 May 2026 19:50:02 +0000 Files and hashes: 1: AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl (hash: caPjBHhBnOH3ohZnPoydoqDnJRPxoXhO3xUNXSFe548=) 2: 38EC4D321F2711EB93A71042C4F9AE02.roa (hash: Sblu535PzvGVdxFBEruufBhd0MyzgVdZtuh1fI35ITw=) 3: 84D32F2AE32411EA800C6724C4F9AE02.roa (hash: MKSHGi4h67nwUpcuBwoNEL48SK6GQQ+1zuIScKP5bro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 19:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2588 (0xa1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91147EF, serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016 Validity Not Before: May 20 19:50:02 2026 GMT Not After : May 27 19:50:02 2026 GMT Subject: CN=6a0e106a-fde7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4f:46:d8:2d:8d:d9:cf:b4:02:7a:33:97:44: bc:8f:2f:a1:f0:7a:a0:ea:41:9b:84:cb:d4:8c:b7: c5:e1:15:3f:5d:75:1c:38:dc:cf:fe:4e:fb:f3:e9: 12:88:06:84:f4:7b:0d:90:56:a4:1f:b0:99:03:99: 8c:b6:cb:72:36:07:fa:e1:ad:3e:d4:40:fd:c2:10: 0e:e1:68:a2:af:b7:44:40:7c:90:9b:7b:d9:d3:1a: f5:4e:d7:61:83:af:c5:34:28:46:81:64:a5:f4:ca: ca:6b:b8:d4:f3:a7:69:5f:da:5c:7e:94:28:c5:0f: 8e:89:41:6f:db:7a:ad:fc:bc:bf:08:ce:3e:84:f3: 62:6d:bb:e1:de:3a:56:b4:16:05:1f:35:13:4d:72: d5:db:74:10:1c:28:fe:80:b2:a1:f0:72:8e:83:2b: 8d:84:e7:1a:d0:79:87:fc:59:da:a8:ba:b1:7a:c8: 60:d9:ac:27:76:9d:ca:d7:6a:10:cd:49:8b:c2:a8: 48:68:f7:12:fc:43:64:62:ef:72:4e:67:26:a4:79: 6b:25:5d:3e:81:79:61:52:dc:6c:fe:a5:24:92:1e: 8c:3b:bb:ff:b1:11:2f:6a:d1:72:f8:73:4b:89:db: 83:67:37:bc:09:b1:0e:29:83:c0:8f:28:ed:e1:df: c6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:BF:F0:CD:AB:7F:9E:62:60:09:48:F7:E4:62:5F:52:24:FD:B8:C1 X509v3 Authority Key Identifier: keyid:02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:0a:3c:d3:ae:27:8c:3f:51:6e:f1:2d:4e:ac:ea:bf:f0:3e: 16:83:71:ba:76:40:f1:1d:eb:bd:27:ba:1c:a1:44:b5:42:30: ef:77:e1:56:d5:1e:3a:6b:1e:20:73:58:bd:f9:09:5e:3a:1b: 89:01:5b:b8:a9:f9:ab:5c:a2:cd:b0:85:3d:53:67:d9:ad:16: 71:04:61:fb:be:9f:5f:47:ed:b2:ee:25:52:3b:59:fa:7a:0e: 0c:20:45:91:ed:98:8c:70:e0:7d:f3:84:71:e1:06:f9:d0:30: cb:fb:b9:93:e3:2f:b6:2b:d5:de:ad:2a:97:d3:70:01:7b:09: 06:9f:89:12:08:78:39:35:cd:50:91:d6:19:8b:85:86:1a:b7: 16:81:75:4d:c2:2b:ab:1b:d9:05:35:f1:5f:53:75:09:0a:f8: ef:bc:e9:e1:09:f2:1e:39:ed:01:83:88:f0:44:df:48:7d:00: 18:7e:e7:87:a4:31:a1:83:d3:0f:6d:29:ad:de:ca:b0:93:56: 02:4a:8b:7c:92:2c:4f:12:f9:ba:76:4b:ff:0c:bd:e9:fb:88: 3d:02:df:f1:bf:4e:5e:b3:7f:b5:b9:38:64:64:b0:1e:11:d2: e7:4a:d0:f9:e8:0f:df:98:d6:10:4f:49:c7:31:15:fb:38:20: 3d:f6:26:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICChwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ3RUYxMTAvBgNVBAUTKDAyMTU1MDJBQThGRkRDNzIxRDdGODRGNzRDRDA3MEI3 NTYzOTAwMTYwHhcNMjYwNTIwMTk1MDAyWhcNMjYwNTI3MTk1MDAyWjAYMRYwFAYD VQQDEw02YTBlMTA2YS1mZGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzk9G2C2N2c+0Anozl0S8jy+h8Hqg6kGbhMvUjLfF4RU/XXUcONzP/k778+kS iAaE9HsNkFakH7CZA5mMtstyNgf64a0+1ED9whAO4Wiir7dEQHyQm3vZ0xr1Ttdh g6/FNChGgWSl9MrKa7jU86dpX9pcfpQoxQ+OiUFv23qt/Ly/CM4+hPNibbvh3jpW tBYFHzUTTXLV23QQHCj+gLKh8HKOgyuNhOca0HmH/FnaqLqxeshg2awndp3K12oQ zUmLwqhIaPcS/ENkYu9yTmcmpHlrJV0+gXlhUtxs/qUkkh6MO7v/sREvatFy+HNL iduDZze8CbEOKYPAjyjt4d/GLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPe/8M2r f55iYAlI9+RiX1Ik/bjBMB8GA1UdIwQYMBaAFAIVUCqo/9xyHX+E90zQcLdWOQAW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDdFRi84QTI5MTA0Njk5 MTYxMUVBOTk1NUQ1MEJDNEY5QUUwMi9BaFZRS3FqXzNISWRmNFQzVE5Cd3QxWTVB QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FoVlFLcWpfM0hJZGY0VDNUTkJ3dDFZNUFCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDdFRi84QTI5MTA0Njk5MTYxMUVBOTk1NUQ1MEJDNEY5QUUwMi9BaFZRS3FqXzNI SWRmNFQzVE5Cd3QxWTVBQlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlwo8064njD9RbvEtTqzqv/A+FoNxunZA8R3rvSe6HKFEtUIw73fhVtUeOmse IHNYvfkJXjobiQFbuKn5q1yizbCFPVNn2a0WcQRh+76fX0ftsu4lUjtZ+noODCBF ke2YjHDgffOEceEG+dAwy/u5k+MvtivV3q0ql9NwAXsJBp+JEgh4OTXNUJHWGYuF hhq3FoF1TcIrqxvZBTXxX1N1CQr477zp4QnyHjntAYOI8ETfSH0AGH7nh6QxoYPT D20prd7KsJNWAkqLfJIsTxL5unZL/wy96fuIPQLf8b9OXrN/tbk4ZGSwHhHS50rQ +egP35jWEE9JxzEV+zggPfYmEg== -----END CERTIFICATE-----Generated at Thu May 21 10:24:22 2026 by rpki-client