$ rpki-client -vvf rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft File: -L04pMnwxPpzvw2Q_wzKgC2_1tw.mft (raw, json) Hash identifier: 7m1aCqxQX0Xbj8g/eSK0jYiJbqiMYfVLBbnTuP/ksFI= Subject key identifier: D7:15:36:7F:15:B7:F6:5F:71:75:B5:5A:17:C5:2D:32:DC:E1:07:AF Authority key identifier: F8:BD:38:A4:C9:F0:C4:FA:73:BF:0D:90:FF:0C:CA:80:2D:BF:D6:DC Certificate issuer: /CN=A91407B7/serialNumber=F8BD38A4C9F0C4FA73BF0D90FF0CCA802DBFD6DC Certificate serial: 08A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft Manifest number: 0891 Signing time: Wed 20 May 2026 20:36:17 +0000 Manifest this update: Wed 20 May 2026 20:36:16 +0000 Manifest next update: Wed 27 May 2026 20:36:16 +0000 Files and hashes: 1: -L04pMnwxPpzvw2Q_wzKgC2_1tw.crl (hash: t50W92mjZU10kZMwxnu56Jb2URTNeV/BQJHcmHr7nV8=) 2: 4878EA2E954511EF87341210C4F9AE02.roa (hash: nPuGU4dIjV5NcDfw4+iA+iIUzRsqHity9f8+08+b7NA=) 3: 26833348954511EFA5D9B90FC4F9AE02.roa (hash: h8w/oRabDFzHFUZZQz0f2z/FRWd7Jq2xtW0buGwOh1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.crl rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 20:36:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2214 (0x8a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91407B7, serialNumber=F8BD38A4C9F0C4FA73BF0D90FF0CCA802DBFD6DC Validity Not Before: May 20 20:36:16 2026 GMT Not After : May 27 20:36:16 2026 GMT Subject: CN=6a0e1b41-f671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e7:7d:df:35:5e:6b:b5:00:44:bf:7d:0e:3f: 47:26:90:ac:00:f2:98:f9:81:2c:59:11:ac:7e:31: 74:f3:42:e6:5f:26:c6:54:32:1f:e8:25:9e:e0:b4: 71:61:38:f6:24:17:67:0a:0d:9b:b6:67:ea:05:51: 59:2c:f7:ae:fe:8f:ea:5d:70:b3:8d:10:af:99:10: 33:4c:d7:30:87:dd:db:39:dc:3c:3b:aa:30:54:89: 1f:0f:bc:ce:c9:04:1b:28:71:7c:09:ae:0d:e8:43: 82:0a:f4:a3:59:30:42:d8:0a:b7:7e:b8:f6:a7:52: 5b:1e:66:05:0c:e1:14:e0:a6:cb:15:e8:f4:1e:7c: f7:f4:c8:41:e3:a9:d8:03:f9:31:f6:4f:cf:99:7d: 2f:4e:4c:02:21:7b:2c:a8:2b:6e:94:c8:65:46:20: 08:c8:17:27:1a:be:75:0a:d9:52:20:0f:58:a6:3d: 14:fb:00:67:12:6b:fb:03:21:c9:73:c5:98:5d:b4: 00:ee:a0:d8:2c:51:6f:ab:a8:c5:1b:5b:56:c7:14: 1d:62:50:08:2e:31:7c:3e:26:13:d5:1d:7c:d1:fb: c0:ad:55:db:16:db:58:dd:a7:f0:70:3a:f0:bb:81: 0f:fc:ed:c4:41:89:22:8a:e4:86:4b:a7:54:43:3e: e1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:15:36:7F:15:B7:F6:5F:71:75:B5:5A:17:C5:2D:32:DC:E1:07:AF X509v3 Authority Key Identifier: keyid:F8:BD:38:A4:C9:F0:C4:FA:73:BF:0D:90:FF:0C:CA:80:2D:BF:D6:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:4f:a7:41:c1:01:2a:52:a5:75:02:a5:93:1f:f9:93:bc:db: 8b:6b:96:72:61:6e:58:6a:28:7c:23:ee:40:e7:75:18:ce:19: e0:c3:30:84:6e:5f:ba:8b:20:95:8c:d8:ee:b6:d8:81:10:19: 34:13:19:da:50:5a:3a:61:3e:7f:83:72:f2:51:60:29:c4:5d: 34:11:3c:09:3c:05:0a:72:88:1f:e2:66:e5:9b:29:ad:6d:7c: 5c:03:b1:86:c6:46:5c:f6:49:37:64:1d:47:ad:e4:7a:0f:f4: 80:37:5d:ed:f3:c9:e5:12:59:32:50:ba:fa:0e:33:0b:5f:aa: ed:dc:f0:e3:69:8a:83:be:1c:cc:a2:b0:2b:d5:a2:28:3d:5f: 19:a2:bf:ad:53:74:97:af:d8:d3:5e:ef:e6:a8:5a:3c:bc:1b: 1b:2e:0c:85:fa:82:3a:fa:74:fc:b3:4e:4e:71:99:4b:53:2d: 45:66:37:8c:17:55:3c:bb:28:e3:fa:2e:10:69:92:02:4a:37: 0b:f4:97:68:4a:99:3b:95:59:fb:e3:1a:ed:1d:a3:96:83:96: af:61:11:0c:e9:d2:2c:1d:a6:86:41:7f:5c:e1:18:4f:16:c8: a9:d7:dc:99:0a:09:2b:1a:e9:1b:c2:b8:4a:7c:ae:a6:3b:23: 23:15:c0:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA3QjcxMTAvBgNVBAUTKEY4QkQzOEE0QzlGMEM0RkE3M0JGMEQ5MEZGMENDQTgw MkRCRkQ2REMwHhcNMjYwNTIwMjAzNjE2WhcNMjYwNTI3MjAzNjE2WjAYMRYwFAYD VQQDEw02YTBlMWI0MS1mNjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvud93zVea7UARL99Dj9HJpCsAPKY+YEsWRGsfjF080LmXybGVDIf6CWe4LRx YTj2JBdnCg2btmfqBVFZLPeu/o/qXXCzjRCvmRAzTNcwh93bOdw8O6owVIkfD7zO yQQbKHF8Ca4N6EOCCvSjWTBC2Aq3frj2p1JbHmYFDOEU4KbLFej0Hnz39MhB46nY A/kx9k/PmX0vTkwCIXssqCtulMhlRiAIyBcnGr51CtlSIA9Ypj0U+wBnEmv7AyHJ c8WYXbQA7qDYLFFvq6jFG1tWxxQdYlAILjF8PiYT1R180fvArVXbFttY3afwcDrw u4EP/O3EQYkiiuSGS6dUQz7hNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNcVNn8V t/ZfcXW1WhfFLTLc4QevMB8GA1UdIwQYMBaAFPi9OKTJ8MT6c78NkP8MyoAtv9bc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDdCNy9CRDZGRTg1MEYx NzUxMUVBQjU2QjAwNENDNEY5QUUwMi8tTDA0cE1ud3hQcHp2dzJRX3d6S2dDMl8x dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1MMDRwTW53eFBwenZ3MlFfd3pLZ0MyXzF0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDdCNy9CRDZGRTg1MEYxNzUxMUVBQjU2QjAwNENDNEY5QUUwMi8tTDA0cE1ud3hQ cHp2dzJRX3d6S2dDMl8xdHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARk+nQcEBKlKldQKlkx/5k7zbi2uWcmFuWGoofCPuQOd1GM4Z4MMwhG5fuosg lYzY7rbYgRAZNBMZ2lBaOmE+f4Ny8lFgKcRdNBE8CTwFCnKIH+Jm5ZsprW18XAOx hsZGXPZJN2QdR63keg/0gDdd7fPJ5RJZMlC6+g4zC1+q7dzw42mKg74czKKwK9Wi KD1fGaK/rVN0l6/Y017v5qhaPLwbGy4MhfqCOvp0/LNOTnGZS1MtRWY3jBdVPLso 4/ouEGmSAko3C/SXaEqZO5VZ++Ma7R2jloOWr2ERDOnSLB2mhkF/XOEYTxbIqdfc mQoJKxrpG8K4SnyupjsjIxXAiA== -----END CERTIFICATE-----Generated at Thu May 21 09:39:21 2026 by rpki-client