$ rpki-client -vvf rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.mft File: CFDUhlPa5QGZunr6XjP5gKNfk-U.mft (raw, json) Hash identifier: xSFRS0+DgaOw1IbPt4lu2KVZNwPU7cidtht/vRWwZSk= Subject key identifier: 1C:DE:B1:2B:EB:7F:AB:65:C9:30:3E:28:0F:20:0D:48:E7:30:92:6C Authority key identifier: 08:50:D4:86:53:DA:E5:01:99:BA:7A:FA:5E:33:F9:80:A3:5F:93:E5 Certificate issuer: /CN=A91390D1/serialNumber=0850D48653DAE50199BA7AFA5E33F980A35F93E5 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CFDUhlPa5QGZunr6XjP5gKNfk-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.mft Manifest number: 10 Signing time: Tue 19 May 2026 08:55:59 +0000 Manifest this update: Tue 19 May 2026 08:55:59 +0000 Manifest next update: Tue 26 May 2026 08:55:59 +0000 Files and hashes: 1: CFDUhlPa5QGZunr6XjP5gKNfk-U.crl (hash: WzWQ1QQQXMFCV1alQIwnUuyK0FgbRTswqMSza+0b4mI=) 2: 2FF9F3D63E1211F1A9349102AE833773.roa (hash: VWpcu8O6MRinpVbPmabr8oFyo8vRo6lsrBwyQBIngak=) 3: 309048B83E1211F1A9349102AE833773.roa (hash: sqKxThroamkDhc6JSRBhISx43pCPlzadkHUPyjm96LY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.crl rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CFDUhlPa5QGZunr6XjP5gKNfk-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:55:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91390D1, serialNumber=0850D48653DAE50199BA7AFA5E33F980A35F93E5 Validity Not Before: May 19 08:55:59 2026 GMT Not After : May 26 08:55:59 2026 GMT Subject: CN=6a0c259f-9b98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d9:52:0f:ab:a0:ad:b5:76:ef:cd:d9:62:78: 3e:d5:a7:9b:e0:8f:e5:82:be:d5:ad:66:0f:15:9d: 32:a5:f1:dc:84:90:4f:33:e7:88:94:e3:d4:d9:c5: 6f:b2:96:21:77:ef:57:36:1b:5d:3c:93:1e:e8:24: 0d:67:f0:51:29:7e:af:e2:c2:10:c0:05:71:26:32: a2:83:42:ac:19:06:83:fe:e8:89:c8:d1:94:48:27: 10:9a:e3:b9:28:b7:cf:67:8a:02:45:85:54:03:11: e9:ed:3b:4b:b8:11:e5:8c:92:21:1b:f5:05:dc:05: bf:d2:98:e0:16:92:db:a0:6b:65:ee:67:42:85:11: b6:31:9b:4e:84:57:47:d8:8e:27:53:ad:31:cf:06: b4:38:21:36:4a:7f:31:fe:7a:3b:3a:d4:cf:73:2d: 81:4b:0a:b5:7a:ab:ca:bb:ec:c3:55:a4:87:7c:5a: c5:5f:01:d2:5a:7c:bd:aa:66:bc:1d:6d:12:20:ec: 88:d7:57:9b:78:63:28:46:67:7a:5e:eb:38:0a:ae: 8f:9d:44:9f:74:cf:c2:f8:da:b3:b6:61:49:13:93: 42:b3:f3:ef:7b:fb:3a:d0:7d:31:b1:f4:8b:f9:7c: 86:82:f0:47:38:77:7f:68:94:98:8b:48:5c:a2:b9: ed:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:DE:B1:2B:EB:7F:AB:65:C9:30:3E:28:0F:20:0D:48:E7:30:92:6C X509v3 Authority Key Identifier: keyid:08:50:D4:86:53:DA:E5:01:99:BA:7A:FA:5E:33:F9:80:A3:5F:93:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CFDUhlPa5QGZunr6XjP5gKNfk-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:ad:05:0d:db:e4:cc:69:a0:7e:f6:81:b6:40:58:ae:dc:2b: 27:a0:ec:72:8d:6c:83:e5:99:54:70:06:6f:03:dd:b7:59:25: 7e:ec:29:84:a2:e9:2e:04:43:c8:40:c4:3b:50:f4:cc:8b:b2: 5c:e2:0f:05:58:28:05:c5:5e:97:a3:b1:cd:f2:d6:91:5a:c2: 58:97:de:da:5c:d1:e4:35:fc:54:c1:7a:a0:a6:07:fc:2a:f3: 66:0b:c4:c8:df:02:cb:5f:5b:e0:f3:ba:41:01:10:86:ae:20: 09:9c:04:73:c8:d5:d5:07:cd:4b:e6:98:50:bf:a6:9d:4f:a0: 49:8f:f2:28:8a:ef:2e:be:66:8e:35:f5:ab:84:5e:4e:de:90: c5:b1:0d:8d:9e:6e:06:f5:b4:af:90:92:e7:a0:59:56:af:d3: bd:e8:c5:61:05:57:16:a9:63:c2:e3:46:25:67:c4:35:c8:94: ac:3c:f9:4a:da:45:d6:9d:f5:51:6d:3c:f7:0f:d2:4d:38:06: ad:f2:fc:7e:9e:74:8c:27:5c:ad:92:33:5a:0a:7b:0b:e1:68: 4a:92:19:5e:3d:b0:b9:8a:89:bb:6e:9a:7f:26:c0:aa:8e:b6: be:a7:a7:ea:c1:e1:99:9a:d8:19:93:01:f1:e4:53:5d:ef:30: cf:ae:f0:b1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OTBEMTExMC8GA1UEBRMoMDg1MEQ0ODY1M0RBRTUwMTk5QkE3QUZBNUUzM0Y5ODBB MzVGOTNFNTAeFw0yNjA1MTkwODU1NTlaFw0yNjA1MjYwODU1NTlaMBgxFjAUBgNV BAMTDTZhMGMyNTlmLTliOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC42VIPq6CttXbvzdlieD7Vp5vgj+WCvtWtZg8VnTKl8dyEkE8z54iU49TZxW+y liF371c2G108kx7oJA1n8FEpfq/iwhDABXEmMqKDQqwZBoP+6InI0ZRIJxCa47ko t89nigJFhVQDEentO0u4EeWMkiEb9QXcBb/SmOAWktuga2XuZ0KFEbYxm06EV0fY jidTrTHPBrQ4ITZKfzH+ejs61M9zLYFLCrV6q8q77MNVpId8WsVfAdJafL2qZrwd bRIg7IjXV5t4YyhGZ3pe6zgKro+dRJ90z8L42rO2YUkTk0Kz8+97+zrQfTGx9Iv5 fIaC8Ec4d39olJiLSFyiue1hAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHN6xK+t/ q2XJMD4oDyANSOcwkmwwHwYDVR0jBBgwFoAUCFDUhlPa5QGZunr6XjP5gKNfk+Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5MEQxL0ZGQTQzRjE0M0Uw NDExRjFBRDYzREY4Q0E2ODMzNzczL0NGRFVobFBhNVFHWnVucjZYalA1Z0tOZmst VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ0ZEVWhsUGE1UUdadW5yNlhqUDVnS05may1VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5 MEQxL0ZGQTQzRjE0M0UwNDExRjFBRDYzREY4Q0E2ODMzNzczL0NGRFVobFBhNVFH WnVucjZYalA1Z0tOZmstVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAyrQUN2+TMaaB+9oG2QFiu3CsnoOxyjWyD5ZlUcAZvA923WSV+7CmEoukuBEPI QMQ7UPTMi7Jc4g8FWCgFxV6Xo7HN8taRWsJYl97aXNHkNfxUwXqgpgf8KvNmC8TI 3wLLX1vg87pBARCGriAJnARzyNXVB81L5phQv6adT6BJj/Ioiu8uvmaONfWrhF5O 3pDFsQ2Nnm4G9bSvkJLnoFlWr9O96MVhBVcWqWPC40YlZ8Q1yJSsPPlK2kXWnfVR bTz3D9JNOAat8vx+nnSMJ1ytkjNaCnsL4WhKkhlePbC5iom7bpp/JsCqjra+p6fq weGZmtgZkwHx5FNd7zDPrvCx -----END CERTIFICATE-----Generated at Thu May 21 09:39:32 2026 by rpki-client