$ rpki-client -vvf rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft File: AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft (raw, json) Hash identifier: 6rs+RsdHAlhiYrX4P4YA14mASPc4JYql6pRno2t1Ytc= Subject key identifier: B2:5D:9A:87:FC:76:D6:B4:6C:4C:F5:A5:21:3F:A9:B8:1B:D8:88:28 Authority key identifier: 01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4 Certificate issuer: /CN=A91788FF/serialNumber=01F1ED08CDE27136F397D0734AF2A35E5D527DD4 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft Manifest number: 015E Signing time: Thu 21 May 2026 05:07:06 +0000 Manifest this update: Thu 21 May 2026 05:07:06 +0000 Manifest next update: Thu 28 May 2026 05:07:06 +0000 Files and hashes: 1: AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl (hash: HQOSGpUub6LIBMP5WlznbJEHGLOTTyzUqaDj71tjEFw=) 2: 726BD5E645CF11EF854E2262C4F9AE02.roa (hash: YmYTcwhgDvKWuwVdE5g0+SEXv17ijbphmsKcmV8ZajM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 05:07:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91788FF, serialNumber=01F1ED08CDE27136F397D0734AF2A35E5D527DD4 Validity Not Before: May 21 05:07:06 2026 GMT Not After : May 28 05:07:06 2026 GMT Subject: CN=6a0e92fa-65a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:be:6d:77:31:42:0e:ae:14:17:8b:b8:86:5d: 7a:7a:ee:c5:79:33:58:c5:e7:bc:b2:ec:5d:31:65: e9:e4:0c:f4:18:cf:63:1a:07:c1:8c:7b:e7:f8:72: 8e:58:07:a6:26:9c:92:d2:d9:f1:eb:06:6a:fd:95: 09:b1:f4:5d:1c:c3:61:47:bf:f9:85:fe:55:44:71: af:db:83:13:c9:f9:28:dc:fc:8a:f8:ee:cb:b3:2c: 12:ba:d2:71:fe:25:f3:c7:dd:19:96:23:87:8a:c5: 2e:9e:1f:ea:21:e4:d8:ef:75:7e:6f:f5:5e:91:87: a3:d6:96:5b:cc:2c:74:d6:ea:1b:0c:1e:78:25:73: 50:6c:1b:98:cd:40:a1:68:20:a6:66:35:6f:51:95: bc:ad:cf:82:72:b9:7b:2e:57:2d:0e:0a:85:80:15: 0f:0b:f4:65:35:90:53:70:05:d9:3c:e2:49:f6:0c: 99:da:64:01:c3:fb:a3:e0:d7:1f:38:ff:ff:de:b2: 69:1d:93:fb:0e:17:8a:41:4e:a5:0e:f9:80:90:8d: 40:41:2d:cb:9c:5e:84:02:55:91:9e:d7:b1:11:7f: 1d:f0:ca:3c:a5:01:69:57:6e:73:cc:2b:eb:47:3c: f2:08:7d:8a:2b:70:9f:44:cc:f7:8a:ca:4e:a2:66: 05:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:5D:9A:87:FC:76:D6:B4:6C:4C:F5:A5:21:3F:A9:B8:1B:D8:88:28 X509v3 Authority Key Identifier: keyid:01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:48:9e:b0:57:d4:ff:85:ec:db:2b:fb:cb:60:19:02:37:a1: 86:32:e5:ce:ed:23:32:9d:9c:46:38:8c:fc:56:5c:f8:01:00: 81:7f:03:26:63:bb:1a:e4:39:31:6b:f3:71:e5:50:ea:e0:73: 5e:73:71:f9:12:25:3d:0d:8b:e9:5f:48:e7:ea:4e:cb:b8:05: 6f:ac:d8:af:2f:c6:5b:80:cc:43:82:46:6a:0d:67:54:7e:d1: 5e:bd:e9:4c:b3:a4:85:bb:37:ce:e1:e3:91:a2:ff:17:31:a1: c4:cf:13:f2:ae:0b:8c:fa:bd:c3:ee:23:2e:8c:ee:21:ba:a6: ec:15:6c:22:41:5b:f7:f9:b7:87:d8:48:26:fa:5f:d7:34:a4: 41:b0:41:77:39:59:6b:e2:7b:51:0b:52:12:bd:93:bb:9d:79: 21:2c:cf:98:fe:99:c3:55:64:34:85:57:1e:4e:c9:96:04:96: 42:23:b7:e6:37:10:dd:c3:3f:c3:78:7b:a4:bd:36:0d:ac:f1: 5f:6f:92:fa:6d:23:8a:33:cd:e2:aa:cb:1d:bb:7f:61:e4:67: 2c:f7:93:c2:af:c9:0d:3e:aa:d9:4a:9a:d6:23:ac:12:a4:87: d7:8e:18:57:1e:c2:24:ab:77:e7:ad:76:d6:51:c4:98:94:31: 61:ff:1c:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg4RkYxMTAvBgNVBAUTKDAxRjFFRDA4Q0RFMjcxMzZGMzk3RDA3MzRBRjJBMzVF NUQ1MjdERDQwHhcNMjYwNTIxMDUwNzA2WhcNMjYwNTI4MDUwNzA2WjAYMRYwFAYD VQQDEw02YTBlOTJmYS02NWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsr5tdzFCDq4UF4u4hl16eu7FeTNYxee8suxdMWXp5Az0GM9jGgfBjHvn+HKO WAemJpyS0tnx6wZq/ZUJsfRdHMNhR7/5hf5VRHGv24MTyfko3PyK+O7LsywSutJx /iXzx90ZliOHisUunh/qIeTY73V+b/VekYej1pZbzCx01uobDB54JXNQbBuYzUCh aCCmZjVvUZW8rc+Ccrl7LlctDgqFgBUPC/RlNZBTcAXZPOJJ9gyZ2mQBw/uj4Ncf OP//3rJpHZP7DheKQU6lDvmAkI1AQS3LnF6EAlWRntexEX8d8Mo8pQFpV25zzCvr RzzyCH2KK3CfRMz3ispOomYFyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLJdmof8 dta0bEz1pSE/qbgb2IgoMB8GA1UdIwQYMBaAFAHx7QjN4nE285fQc0ryo15dUn3U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODhGRi9CREVCMjk3NDQ1 Q0QxMUVGOEU4MjY0NEVDNEY5QUUwMi9BZkh0Q00zaWNUYnpsOUJ6U3ZLalhsMVNm ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FmSHRDTTNpY1Riemw5QnpTdktqWGwxU2ZkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODhGRi9CREVCMjk3NDQ1Q0QxMUVGOEU4MjY0NEVDNEY5QUUwMi9BZkh0Q00zaWNU YnpsOUJ6U3ZLalhsMVNmZFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWkiesFfU/4Xs2yv7y2AZAjehhjLlzu0jMp2cRjiM/FZc+AEAgX8DJmO7GuQ5 MWvzceVQ6uBzXnNx+RIlPQ2L6V9I5+pOy7gFb6zYry/GW4DMQ4JGag1nVH7RXr3p TLOkhbs3zuHjkaL/FzGhxM8T8q4LjPq9w+4jLozuIbqm7BVsIkFb9/m3h9hIJvpf 1zSkQbBBdzlZa+J7UQtSEr2Tu515ISzPmP6Zw1VkNIVXHk7JlgSWQiO35jcQ3cM/ w3h7pL02DazxX2+S+m0jijPN4qrLHbt/YeRnLPeTwq/JDT6q2Uqa1iOsEqSH144Y Vx7CJKt356121lHEmJQxYf8cIA== -----END CERTIFICATE-----Generated at Thu May 21 10:28:50 2026 by rpki-client