$ rpki-client -vvf rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft File: 8D9Vyycfxbb31KiIeAuNi2qQWA0.mft (raw, json) Hash identifier: k54UZhmXK+oGBFJkeYroxbqgCfBXuW/K5m3dggAXXkU= Subject key identifier: 1E:35:3E:12:38:E6:E0:10:94:F3:58:9C:E9:8E:1C:A5:3B:E4:35:EE Authority key identifier: F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D Certificate issuer: /CN=A91493CC/serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D Certificate serial: 022C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft Manifest number: 0226 Signing time: Thu 21 May 2026 02:46:26 +0000 Manifest this update: Thu 21 May 2026 02:46:26 +0000 Manifest next update: Thu 28 May 2026 02:46:26 +0000 Files and hashes: 1: 8D9Vyycfxbb31KiIeAuNi2qQWA0.crl (hash: nhZpi2II/diA27NGVgTf3Si3+TPIOKSXYum1cVmnRK4=) 2: B50741120AFF11EEBADB6A67C4F9AE02.roa (hash: /W0g7wRAuyXEotKxsKGa14VaFaP0rEyXWp6ttAdlMsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 556 (0x22c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91493CC, serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D Validity Not Before: May 21 02:46:26 2026 GMT Not After : May 28 02:46:26 2026 GMT Subject: CN=6a0e7202-e133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0a:f6:6d:32:65:f7:0b:92:5d:eb:0f:6f:97: fa:53:c2:5b:7e:e0:c9:c2:61:e2:a8:ef:d4:93:c6: 7b:ec:58:db:dd:f3:1e:56:0f:d1:1b:ff:62:ec:46: e3:1c:ac:de:08:55:de:b2:d5:90:81:b9:4c:0d:a7: b4:77:90:09:b6:f2:06:4c:6b:5e:d1:55:40:f5:d6: ce:a1:9d:40:88:51:bf:d8:cf:a4:f8:d3:66:ed:9d: b3:b6:0f:1f:b9:64:b0:12:13:16:36:37:4a:90:e9: 5f:f6:82:62:43:87:21:12:91:d8:ca:bb:63:17:e7: 69:ab:19:f8:1d:1e:91:7e:a5:3c:dd:a4:5d:b9:6e: f4:6c:cf:29:10:52:77:de:e5:19:4c:ec:bd:3f:da: 65:fb:77:9b:3b:37:6f:29:6b:ce:b7:10:b7:a7:c1: 5f:f5:c9:9d:21:f8:7a:6d:a8:c3:f9:d4:c6:38:e4: 3c:6f:d4:03:ec:d4:1f:02:49:cb:f2:f4:7d:72:c3: ad:24:72:bc:f7:d8:2b:20:d3:bd:25:de:71:96:d9: b3:2f:d2:d3:76:b5:e1:7d:9b:e8:00:3b:a0:8f:15: fe:ce:8c:a6:e9:89:8c:d6:4f:43:2b:ff:a8:ae:fc: 8c:2c:55:cc:5e:88:37:87:83:42:1e:70:9e:83:e6: 96:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:35:3E:12:38:E6:E0:10:94:F3:58:9C:E9:8E:1C:A5:3B:E4:35:EE X509v3 Authority Key Identifier: keyid:F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:cf:e6:72:51:67:7d:cb:08:37:c9:c6:2d:66:59:5f:ca:98: 13:46:55:2b:ff:0c:9d:d8:ec:04:19:68:14:51:d0:e5:05:48: 17:ad:d5:5c:33:ff:44:0c:a3:f0:6c:e1:34:47:40:80:2f:2a: 87:53:e9:c2:ff:67:5d:d0:56:15:ad:fa:91:79:33:18:45:ea: d3:11:33:c6:34:7c:12:6c:05:d1:0f:47:38:ea:3c:99:f1:dc: 05:da:58:da:64:c2:3a:20:d7:da:1f:b8:05:ff:35:7a:3e:53: 89:d2:46:22:28:0c:c4:d3:15:9b:f8:42:ab:59:70:b9:92:9e: 04:ae:72:e2:78:75:8c:c1:0b:f6:a3:32:a8:b2:28:ec:48:f3: 4b:df:12:ad:56:6e:19:04:ba:ef:d3:0c:dc:75:83:1e:fc:66: 31:53:33:e9:e4:74:2a:a1:bb:87:06:96:19:33:8d:d1:bf:7b: 5e:f0:a8:ae:da:9d:19:89:64:df:4a:ef:52:e5:63:a9:d4:40: de:c2:ab:74:75:99:fe:75:7f:32:d3:c7:65:6f:0a:fc:14:72: 7a:e5:91:08:b9:f6:77:2b:26:82:ce:17:8f:e0:69:00:53:56: 89:13:74:d7:10:e9:c5:a3:d2:bf:69:86:13:f3:02:4c:34:1b: 38:f3:c6:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkzQ0MxMTAvBgNVBAUTKEYwM0Y1NUNCMjcxRkM1QjZGN0Q0QTg4ODc4MEI4RDhC NkE5MDU4MEQwHhcNMjYwNTIxMDI0NjI2WhcNMjYwNTI4MDI0NjI2WjAYMRYwFAYD VQQDEw02YTBlNzIwMi1lMTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAr2bTJl9wuSXesPb5f6U8JbfuDJwmHiqO/Uk8Z77Fjb3fMeVg/RG/9i7Ebj HKzeCFXestWQgblMDae0d5AJtvIGTGte0VVA9dbOoZ1AiFG/2M+k+NNm7Z2ztg8f uWSwEhMWNjdKkOlf9oJiQ4chEpHYyrtjF+dpqxn4HR6RfqU83aRduW70bM8pEFJ3 3uUZTOy9P9pl+3ebOzdvKWvOtxC3p8Ff9cmdIfh6bajD+dTGOOQ8b9QD7NQfAknL 8vR9csOtJHK899grINO9Jd5xltmzL9LTdrXhfZvoADugjxX+zoym6YmM1k9DK/+o rvyMLFXMXog3h4NCHnCeg+aWAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB41PhI4 5uAQlPNYnOmOHKU75DXuMB8GA1UdIwQYMBaAFPA/VcsnH8W299SoiHgLjYtqkFgN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTNDQy9FQTE3MDM2NDBB RkIxMUVFQTA2QTIzNjdDNEY5QUUwMi84RDlWeXljZnhiYjMxS2lJZUF1TmkycVFX QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhEOVZ5eWNmeGJiMzFLaUllQXVOaTJxUVdBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTNDQy9FQTE3MDM2NDBBRkIxMUVFQTA2QTIzNjdDNEY5QUUwMi84RDlWeXljZnhi YjMxS2lJZUF1TmkycVFXQTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF8/mclFnfcsIN8nGLWZZX8qYE0ZVK/8MndjsBBloFFHQ5QVIF63VXDP/RAyj 8GzhNEdAgC8qh1Ppwv9nXdBWFa36kXkzGEXq0xEzxjR8EmwF0Q9HOOo8mfHcBdpY 2mTCOiDX2h+4Bf81ej5TidJGIigMxNMVm/hCq1lwuZKeBK5y4nh1jMEL9qMyqLIo 7EjzS98SrVZuGQS679MM3HWDHvxmMVMz6eR0KqG7hwaWGTON0b97XvCortqdGYlk 30rvUuVjqdRA3sKrdHWZ/nV/MtPHZW8K/BRyeuWRCLn2dysmgs4Xj+BpAFNWiRN0 1xDpxaPSv2mGE/MCTDQbOPPG9Q== -----END CERTIFICATE-----Generated at Thu May 21 11:09:01 2026 by rpki-client