$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft File: C-AoY1W14laYjORU35P8D8p_YEA.mft (raw, json) Hash identifier: G03UM2OqipjUMYaY3mx9jvPJFOdX1nzeQVpoILGMfjQ= Subject key identifier: 84:6D:22:EE:5B:9F:0A:5D:BA:A0:4F:3F:3F:BE:78:3E:CB:13:2A:EF Authority key identifier: 0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40 Certificate issuer: /CN=A91A1D43/serialNumber=0BE0286355B5E256988CE454DF93FC0FCA7F6040 Certificate serial: 024A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft Manifest number: 023E Signing time: Thu 21 May 2026 02:32:55 +0000 Manifest this update: Thu 21 May 2026 02:32:54 +0000 Manifest next update: Thu 28 May 2026 02:32:54 +0000 Files and hashes: 1: C-AoY1W14laYjORU35P8D8p_YEA.crl (hash: mERL/iFFqVowTysftl0mKYG7UdLBDAeMX6ZNGknYZPc=) 2: 8BCB2CFAEA3911EDB91E190BC4F9AE02.roa (hash: QhSp+pceORKO5TeSj6aanaSrz92dgNngwmylNT95Bc4=) 3: 8B1BDC14EA3911EDB91E190BC4F9AE02.roa (hash: IRQ+OR5t+v1uxAMW20q5TYiXjn6EFNEgE2VqHO9rI/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.crl rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 586 (0x24a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1D43, serialNumber=0BE0286355B5E256988CE454DF93FC0FCA7F6040 Validity Not Before: May 21 02:32:54 2026 GMT Not After : May 28 02:32:54 2026 GMT Subject: CN=6a0e6ed7-504a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c8:cf:e9:f2:45:a3:0e:cc:dc:da:44:a9:9f: 67:fe:10:76:8a:69:a2:ac:52:58:ce:59:47:b5:7a: e4:2b:4c:2d:5f:76:eb:80:3c:50:0f:c7:07:54:0e: 71:ad:44:37:6c:ae:75:3f:6b:cc:ba:97:d5:d2:8f: 9e:00:be:b5:08:e7:3c:fa:72:03:02:12:e6:ec:b7: 6b:7f:06:21:ee:7f:e3:76:b7:b9:f4:a1:12:7b:dc: 0f:f5:3b:ba:c9:c6:fa:27:66:e3:a2:b4:66:de:0a: 94:7d:37:d0:89:06:da:6d:d2:2f:9c:6b:71:34:c5: 0e:2a:46:2a:f6:f6:ff:7a:7c:e0:ed:e2:54:ca:1b: b0:f2:0d:9a:9b:34:b0:3b:e1:c4:96:e1:2d:e2:1e: 1c:0c:09:65:85:f6:d5:67:b7:d7:e7:51:d3:26:27: 6e:c1:1e:79:4f:35:d4:cb:f2:b0:0e:3a:66:9a:9a: 4f:40:82:3a:d6:95:29:df:26:ff:c2:7f:48:49:47: 3a:bf:ef:6e:80:2f:39:89:a5:a3:93:77:65:e0:3d: 0a:a3:aa:e1:8d:9f:98:f0:d3:c2:2f:43:ab:5e:b9: db:61:af:16:e9:e5:6f:77:d6:74:45:6a:20:3b:fb: f6:f3:5e:ca:ff:66:8d:09:ac:d3:4c:53:36:d8:f0: ad:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:6D:22:EE:5B:9F:0A:5D:BA:A0:4F:3F:3F:BE:78:3E:CB:13:2A:EF X509v3 Authority Key Identifier: keyid:0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:fa:8d:15:ef:af:0b:a3:73:a5:7c:63:79:b2:fa:8f:6b:29: e5:96:f0:7a:a2:26:b6:69:13:59:7a:7b:53:46:a0:6b:b8:3f: 38:8d:b8:26:de:f5:96:51:35:80:23:b5:7e:b2:14:9b:a5:21: 38:c2:71:4d:93:b7:40:06:20:8a:c8:f9:93:ea:8b:5a:bd:81: 93:e0:35:4b:55:ea:4c:76:23:ec:4f:ca:b4:07:8c:aa:e3:e0: 75:03:c6:d2:34:4f:97:bc:a4:91:83:e6:b6:f5:c4:ac:11:2b: c3:f0:b4:69:c2:46:56:8e:6c:84:f0:7b:6d:7e:da:8b:00:a1: ba:55:d0:d0:bf:e8:48:1c:c2:a9:31:26:9a:fa:84:e1:91:5b: 41:0f:95:7a:9c:4c:74:6e:69:57:b4:45:85:5d:65:24:ab:b6: b7:97:14:88:0d:c9:f3:24:63:79:d7:cf:98:8b:21:e6:79:6a: d3:ee:92:3f:21:6c:ae:97:4e:c7:c6:9a:ee:40:f5:a0:d2:2c: 30:a2:e3:fc:b8:80:32:20:d5:2f:ca:f8:c5:10:09:7f:58:3b: 88:a9:b8:94:7e:47:90:19:42:17:70:25:f8:52:c4:37:74:e1: 7c:c4:ed:71:33:62:6b:d7:da:dc:4f:24:c4:36:f3:2f:2f:c1: 8b:e7:03:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFENDMxMTAvBgNVBAUTKDBCRTAyODYzNTVCNUUyNTY5ODhDRTQ1NERGOTNGQzBG Q0E3RjYwNDAwHhcNMjYwNTIxMDIzMjU0WhcNMjYwNTI4MDIzMjU0WjAYMRYwFAYD VQQDEw02YTBlNmVkNy01MDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArsjP6fJFow7M3NpEqZ9n/hB2immirFJYzllHtXrkK0wtX3brgDxQD8cHVA5x rUQ3bK51P2vMupfV0o+eAL61COc8+nIDAhLm7LdrfwYh7n/jdre59KESe9wP9Tu6 ycb6J2bjorRm3gqUfTfQiQbabdIvnGtxNMUOKkYq9vb/enzg7eJUyhuw8g2amzSw O+HEluEt4h4cDAllhfbVZ7fX51HTJiduwR55TzXUy/KwDjpmmppPQII61pUp3yb/ wn9ISUc6v+9ugC85iaWjk3dl4D0Ko6rhjZ+Y8NPCL0OrXrnbYa8W6eVvd9Z0RWog O/v2817K/2aNCazTTFM22PCtgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIRtIu5b nwpduqBPPz++eD7LEyrvMB8GA1UdIwQYMBaAFAvgKGNVteJWmIzkVN+T/A/Kf2BA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUQ0My84OTI5REZERUVB MjgxMUVEQjdERDAxMThDNEY5QUUwMi9DLUFvWTFXMTRsYVlqT1JVMzVQOEQ4cF9Z RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MtQW9ZMVcxNGxhWWpPUlUzNVA4RDhwX1lFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUQ0My84OTI5REZERUVBMjgxMUVEQjdERDAxMThDNEY5QUUwMi9DLUFvWTFXMTRs YVlqT1JVMzVQOEQ4cF9ZRUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoPqNFe+vC6NzpXxjebL6j2sp5ZbweqImtmkTWXp7U0aga7g/OI24Jt71llE1 gCO1frIUm6UhOMJxTZO3QAYgisj5k+qLWr2Bk+A1S1XqTHYj7E/KtAeMquPgdQPG 0jRPl7ykkYPmtvXErBErw/C0acJGVo5shPB7bX7aiwChulXQ0L/oSBzCqTEmmvqE 4ZFbQQ+VepxMdG5pV7RFhV1lJKu2t5cUiA3J8yRjedfPmIsh5nlq0+6SPyFsrpdO x8aa7kD1oNIsMKLj/LiAMiDVL8r4xRAJf1g7iKm4lH5HkBlCF3Al+FLEN3ThfMTt cTNia9fa3E8kxDbzLy/Bi+cD6g== -----END CERTIFICATE-----Generated at Thu May 21 12:25:40 2026 by rpki-client