$ rpki-client -vvf rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft File: 40gJvFtFT8eZSH_u2tcCEkAkYjo.mft (raw, json) Hash identifier: jmei3IokEnLjQ347YJCl5trU3twepixfuEgrOxdg6Qc= Subject key identifier: D4:83:E9:0D:94:BC:B0:53:4F:21:3F:B6:88:CC:48:07:FB:80:BC:EB Authority key identifier: E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A Certificate issuer: /CN=A91734C9/serialNumber=E34809BC5B454FC799487FEEDAD702124024623A Certificate serial: 0C87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft Manifest number: 0C6D Signing time: Wed 20 May 2026 18:42:27 +0000 Manifest this update: Wed 20 May 2026 18:42:27 +0000 Manifest next update: Wed 27 May 2026 18:42:27 +0000 Files and hashes: 1: 40gJvFtFT8eZSH_u2tcCEkAkYjo.crl (hash: PPUmfqJkiHDhDe5G1N3JOEXRmb2nmAnNR1mabXaZf9s=) 2: 783907BC225E11EA8BD18A62C4F9AE02.roa (hash: cD+tWMa2tCm5TnaY019r+91dmxm4eQDA6fv1coCGHU4=) 3: 78CFD3CC225E11EA8BD18A62C4F9AE02.roa (hash: LA1zhuDO8oOV5U+SWHLv48B4wlsZkTvLHZIw98i6K60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:42:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3207 (0xc87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91734C9, serialNumber=E34809BC5B454FC799487FEEDAD702124024623A Validity Not Before: May 20 18:42:27 2026 GMT Not After : May 27 18:42:27 2026 GMT Subject: CN=6a0e0093-333d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:31:71:35:f8:a1:47:72:fe:52:1c:64:ce:b4: 9d:b8:04:4a:d8:1a:21:80:1a:c7:ee:db:bc:de:a0: c0:c5:ae:9d:27:70:44:c4:e0:af:3e:a1:a8:fe:fa: a1:19:98:ea:ce:71:da:a0:88:9e:32:63:02:b6:4b: 25:be:a4:ca:41:6e:35:0d:8c:7c:58:60:ba:32:68: 61:05:f3:fd:43:05:61:7d:47:4d:e2:90:8d:c1:08: 8c:ea:2d:eb:10:14:80:98:52:e3:e4:40:4d:43:8a: 52:85:8f:a3:9c:e9:b1:38:34:45:df:da:29:e9:e3: 67:49:7c:18:d0:47:51:ee:0e:dc:d4:17:72:ab:00: 45:14:74:9e:d9:ce:ad:92:43:a6:35:d8:09:bc:ec: bb:bd:7f:a3:81:a4:aa:a0:88:18:d0:53:bc:32:1d: 6f:3d:8e:55:03:84:0f:0f:42:45:43:ab:6c:c9:fe: 32:77:f6:12:65:82:fd:9a:a1:e9:6a:19:09:34:57: d9:5c:e0:3d:2a:6d:98:31:8d:d3:a5:6b:a1:ee:9c: 4d:15:30:89:24:20:00:40:97:89:ae:41:f0:75:c9: 7a:c6:e9:a2:7b:e9:25:4f:82:0d:10:a8:15:45:8f: be:31:f4:1a:b7:08:2f:f5:ff:06:a4:27:d6:10:5e: fc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:83:E9:0D:94:BC:B0:53:4F:21:3F:B6:88:CC:48:07:FB:80:BC:EB X509v3 Authority Key Identifier: keyid:E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:7f:f6:55:69:0c:33:d5:77:c4:9c:04:f4:10:89:1a:3d:5a: 14:fe:de:d7:d5:c9:8a:7d:2d:b1:43:d9:cb:0c:81:91:e4:fe: 5e:18:e9:a7:29:f0:43:65:28:6a:35:e1:6b:30:9b:77:69:dc: 71:82:11:4f:fc:ac:d3:b4:ca:fa:36:47:01:2b:91:2e:fe:ab: 0a:e6:45:1a:32:88:e0:8a:c5:7c:ea:fb:f4:32:28:5c:7f:16: 5c:1b:7a:8e:62:ba:2b:f9:c0:4e:77:14:1c:01:d5:e8:24:8a: e5:26:50:85:48:ca:0e:34:2a:78:26:fe:97:61:c0:34:ff:ba: 00:0e:c5:77:29:1b:e6:fb:7b:dc:45:ba:77:2c:f6:6e:89:29: 1a:57:85:1e:88:a3:34:c4:23:0c:9c:e2:6f:8b:71:a9:81:6d: 43:3a:62:45:d6:2c:60:50:40:a3:50:88:29:61:14:c6:ad:9b: d2:af:7f:2a:d3:28:29:8c:0a:53:ae:33:34:ed:f6:c4:0c:d1: dc:96:17:51:d4:b1:dc:46:a1:32:50:95:cc:da:90:93:66:8f: f7:ef:7a:fc:70:92:32:c1:37:da:65:73:04:f1:51:bf:e6:7c: 30:d1:24:78:c8:51:52:b1:56:3d:c4:ba:bb:00:02:fc:1a:8c: fc:ef:c2:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM0QzkxMTAvBgNVBAUTKEUzNDgwOUJDNUI0NTRGQzc5OTQ4N0ZFRURBRDcwMjEy NDAyNDYyM0EwHhcNMjYwNTIwMTg0MjI3WhcNMjYwNTI3MTg0MjI3WjAYMRYwFAYD VQQDEw02YTBlMDA5My0zMzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjFxNfihR3L+UhxkzrSduARK2BohgBrH7tu83qDAxa6dJ3BExOCvPqGo/vqh GZjqznHaoIieMmMCtkslvqTKQW41DYx8WGC6MmhhBfP9QwVhfUdN4pCNwQiM6i3r EBSAmFLj5EBNQ4pShY+jnOmxODRF39op6eNnSXwY0EdR7g7c1BdyqwBFFHSe2c6t kkOmNdgJvOy7vX+jgaSqoIgY0FO8Mh1vPY5VA4QPD0JFQ6tsyf4yd/YSZYL9mqHp ahkJNFfZXOA9Km2YMY3TpWuh7pxNFTCJJCAAQJeJrkHwdcl6xumie+klT4INEKgV RY++MfQatwgv9f8GpCfWEF78XQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNSD6Q2U vLBTTyE/tojMSAf7gLzrMB8GA1UdIwQYMBaAFONICbxbRU/HmUh/7trXAhJAJGI6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzRDOS82NzM2MDI0QTIy NUQxMUVBQkFDRkM5NjBDNEY5QUUwMi80MGdKdkZ0RlQ4ZVpTSF91MnRjQ0VrQWtZ am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwZ0p2RnRGVDhlWlNIX3UydGNDRWtBa1lqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzRDOS82NzM2MDI0QTIyNUQxMUVBQkFDRkM5NjBDNEY5QUUwMi80MGdKdkZ0RlQ4 ZVpTSF91MnRjQ0VrQWtZam8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY3/2VWkMM9V3xJwE9BCJGj1aFP7e19XJin0tsUPZywyBkeT+XhjppynwQ2Uo ajXhazCbd2nccYIRT/ys07TK+jZHASuRLv6rCuZFGjKI4IrFfOr79DIoXH8WXBt6 jmK6K/nATncUHAHV6CSK5SZQhUjKDjQqeCb+l2HANP+6AA7Fdykb5vt73EW6dyz2 bokpGleFHoijNMQjDJzib4txqYFtQzpiRdYsYFBAo1CIKWEUxq2b0q9/KtMoKYwK U64zNO32xAzR3JYXUdSx3EahMlCVzNqQk2aP9+96/HCSMsE32mVzBPFRv+Z8MNEk eMhRUrFWPcS6uwAC/BqM/O/CLg== -----END CERTIFICATE-----Generated at Thu May 21 10:52:21 2026 by rpki-client