$ rpki-client -vvf rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft File: 0va3pYZYVsPyxEYWNgMfsFtgYGo.mft (raw, json) Hash identifier: iJRfSlR2J2oiuW89iqMxf4AdyzJHUw9FpYzByz9uriM= Subject key identifier: AA:C3:02:DD:A6:71:B6:90:53:B9:DC:C9:7A:69:21:07:6A:BC:E1:EE Authority key identifier: D2:F6:B7:A5:86:58:56:C3:F2:C4:46:16:36:03:1F:B0:5B:60:60:6A Certificate issuer: /CN=A91149C8/serialNumber=D2F6B7A5865856C3F2C4461636031FB05B60606A Certificate serial: 0D2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft Manifest number: 0D1E Signing time: Wed 20 May 2026 18:06:20 +0000 Manifest this update: Wed 20 May 2026 18:06:19 +0000 Manifest next update: Wed 27 May 2026 18:06:19 +0000 Files and hashes: 1: 0va3pYZYVsPyxEYWNgMfsFtgYGo.crl (hash: GfOb4O6Bk90RUNmMaTYG4VvLopLorGsKN4QSrw+vLeo=) 2: A2A7584ACA7F11EAB343722AC4F9AE02.roa (hash: M8VzcHzGGFzODlt0s8FMTbdg4bvEqOp4tLkXsR05vew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.crl rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:06:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3371 (0xd2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91149C8, serialNumber=D2F6B7A5865856C3F2C4461636031FB05B60606A Validity Not Before: May 20 18:06:19 2026 GMT Not After : May 27 18:06:19 2026 GMT Subject: CN=6a0df81c-fb31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:43:30:71:a2:af:83:71:24:dd:a0:26:2e:55: 7a:a1:e8:a5:fb:7a:29:3e:05:16:e5:48:b2:9b:c0: bd:0c:bb:d8:89:e9:3a:c1:6b:c1:53:08:1a:23:5d: c8:72:21:3d:d1:ee:c1:34:ae:76:ea:80:3d:e1:92: 25:5d:11:b0:cf:ab:a3:3c:f6:00:58:a8:2a:22:aa: 19:c9:4c:9d:0a:08:f7:53:ea:b4:12:9f:1f:0e:64: f8:b1:42:9e:ee:91:24:f7:6f:31:5f:06:67:0e:c6: 17:38:73:45:81:ba:2f:11:c1:ec:91:ac:e6:ba:3f: 5a:df:d3:b5:39:ad:31:ce:c3:df:25:2e:b2:37:8a: 69:98:e3:3a:e7:a4:0d:c1:b8:ec:0c:1b:22:f0:79: c5:2d:63:53:f0:3d:86:37:53:05:33:06:04:0a:a3: fa:a5:0f:c8:00:60:59:69:dd:91:c2:ca:e0:5d:84: 58:35:57:aa:74:60:ac:3c:24:a8:eb:a6:bc:70:f4: bb:26:82:42:40:53:8a:03:fc:a5:90:82:4f:c4:f6: e8:eb:c5:55:9e:f6:f5:76:2e:6c:b5:66:3a:3b:4d: 23:03:af:00:a6:05:d6:9d:d4:59:f4:37:a9:8b:99: ec:37:5f:33:b5:9f:f7:7b:cd:d9:f9:c2:d8:2a:07: a3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C3:02:DD:A6:71:B6:90:53:B9:DC:C9:7A:69:21:07:6A:BC:E1:EE X509v3 Authority Key Identifier: keyid:D2:F6:B7:A5:86:58:56:C3:F2:C4:46:16:36:03:1F:B0:5B:60:60:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:d7:96:7e:a9:84:30:da:71:ed:7f:ed:c7:b0:67:f5:f4:cf: ce:23:3e:d2:42:66:f9:21:a5:01:d7:05:b9:f5:a8:c6:56:e6: 7c:5d:90:96:82:12:6c:cd:d8:dd:a5:83:2b:d5:a9:9d:2f:d7: f7:fd:9f:1e:8f:b2:fb:31:a9:08:a4:94:bc:07:ae:bf:9a:c6: 83:6b:41:f7:77:88:08:30:ef:4f:9d:20:3e:9d:f4:65:ca:e3: ba:33:77:e0:43:05:75:9b:ea:91:a0:88:4a:d7:89:bc:2e:7c: 4f:79:60:b0:79:0d:a9:c9:90:83:d9:d2:ca:51:eb:93:2f:6e: 87:7f:59:fe:cb:05:31:5b:95:14:8b:f4:be:ad:e6:35:c6:70: 42:1b:2d:83:49:d1:1c:f7:8e:83:20:b5:3e:6e:af:6e:0a:e1: bf:c1:1a:6b:c6:6c:e0:e7:9b:5a:9a:bc:77:2d:fa:67:ff:0d: 37:43:9c:3d:83:63:74:5a:73:5f:12:6e:52:97:6e:a2:88:95: 06:ba:c1:ca:2e:f7:20:91:8a:6f:fc:e7:ed:de:79:b0:9e:3a: 43:4e:a2:28:d2:1e:41:44:40:1f:0f:fa:a6:66:f4:7c:b9:04: 5f:b7:96:be:7f:f5:17:bc:c0:49:3e:ea:f0:ae:d8:4f:5d:d1: a3:4c:65:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ5QzgxMTAvBgNVBAUTKEQyRjZCN0E1ODY1ODU2QzNGMkM0NDYxNjM2MDMxRkIw NUI2MDYwNkEwHhcNMjYwNTIwMTgwNjE5WhcNMjYwNTI3MTgwNjE5WjAYMRYwFAYD VQQDEw02YTBkZjgxYy1mYjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAokMwcaKvg3Ek3aAmLlV6oeil+3opPgUW5Uiym8C9DLvYiek6wWvBUwgaI13I ciE90e7BNK526oA94ZIlXRGwz6ujPPYAWKgqIqoZyUydCgj3U+q0Ep8fDmT4sUKe 7pEk928xXwZnDsYXOHNFgbovEcHskazmuj9a39O1Oa0xzsPfJS6yN4ppmOM656QN wbjsDBsi8HnFLWNT8D2GN1MFMwYECqP6pQ/IAGBZad2RwsrgXYRYNVeqdGCsPCSo 66a8cPS7JoJCQFOKA/ylkIJPxPbo68VVnvb1di5stWY6O00jA68ApgXWndRZ9Dep i5nsN18ztZ/3e83Z+cLYKgejVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKrDAt2m cbaQU7ncyXppIQdqvOHuMB8GA1UdIwQYMBaAFNL2t6WGWFbD8sRGFjYDH7BbYGBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDlDOC8yRkM0NjU5MEZG MkIxMUU5QkYyMEJGMURDNEY5QUUwMi8wdmEzcFlaWVZzUHl4RVlXTmdNZnNGdGdZ R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB2YTNwWVpZVnNQeXhFWVdOZ01mc0Z0Z1lHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDlDOC8yRkM0NjU5MEZGMkIxMUU5QkYyMEJGMURDNEY5QUUwMi8wdmEzcFlaWVZz UHl4RVlXTmdNZnNGdGdZR28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASNeWfqmEMNpx7X/tx7Bn9fTPziM+0kJm+SGlAdcFufWoxlbmfF2QloISbM3Y 3aWDK9WpnS/X9/2fHo+y+zGpCKSUvAeuv5rGg2tB93eICDDvT50gPp30ZcrjujN3 4EMFdZvqkaCISteJvC58T3lgsHkNqcmQg9nSylHrky9uh39Z/ssFMVuVFIv0vq3m NcZwQhstg0nRHPeOgyC1Pm6vbgrhv8Eaa8Zs4OebWpq8dy36Z/8NN0OcPYNjdFpz XxJuUpduooiVBrrByi73IJGKb/zn7d55sJ46Q06iKNIeQURAHw/6pmb0fLkEX7eW vn/1F7zAST7q8K7YT13Ro0xlDQ== -----END CERTIFICATE-----Generated at Thu May 21 09:35:58 2026 by rpki-client