$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft File: ftCxNhmz84MH3uG0Dn8neTItvm4.mft (raw, json) Hash identifier: U3knNWwlaIxLra/V04t/6Sot6xeFRUqjwx52Ww+Y5TU= Subject key identifier: A7:F9:52:8A:50:B7:48:06:82:26:1C:87:F5:63:E6:2E:E8:9F:7A:71 Authority key identifier: 7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E Certificate issuer: /CN=A91A7EA5/serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E Certificate serial: 0D39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft Manifest number: 0D1F Signing time: Wed 20 May 2026 18:10:57 +0000 Manifest this update: Wed 20 May 2026 18:10:57 +0000 Manifest next update: Wed 27 May 2026 18:10:57 +0000 Files and hashes: 1: ftCxNhmz84MH3uG0Dn8neTItvm4.crl (hash: 5Q6nDF8kACIMXzHztxk5Np6buHIMbnj/W5Q2kei6wEs=) 2: 93E73ABE833811ECA0A7120DC4F9AE02.roa (hash: fNaidmYlOzWHjrBiA/U1bBlqdgJlWr5NlKnTyGVkvtg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3385 (0xd39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7EA5, serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E Validity Not Before: May 20 18:10:57 2026 GMT Not After : May 27 18:10:57 2026 GMT Subject: CN=6a0df931-68fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9b:bd:b8:38:41:d4:6e:a3:e5:d8:40:06:50: 31:66:c2:8d:0e:04:78:78:24:df:58:0c:e6:18:10: 29:1d:f7:64:b2:b8:a4:d9:f5:eb:8d:16:88:ef:2f: fe:8e:68:3e:37:30:12:e8:5a:4d:61:f8:e3:56:9f: 45:aa:ce:c2:b0:b2:da:1a:4d:b3:ef:3e:dd:15:27: ac:a6:92:47:b0:82:62:e5:f7:dc:e5:7c:da:1a:16: b9:4b:53:10:6d:88:8c:91:33:7e:bc:4d:f0:4b:5a: 9a:60:58:eb:6f:5d:cd:c1:9b:a0:14:2a:b4:c3:37: 33:ec:c0:42:fa:b6:5b:e4:f7:35:4a:1a:21:7c:19: b6:b1:64:7d:24:c1:95:ab:d6:74:74:d3:0f:5d:39: 43:eb:97:f5:73:91:58:45:f6:a8:cd:ab:40:32:47: 0e:ee:81:50:4f:b8:c1:54:7a:f7:83:1c:77:fc:7f: b1:0a:e6:ea:bd:7c:21:c2:e9:bd:4e:82:bc:01:54: 56:cd:af:4f:6b:e5:dd:86:d0:64:f5:fb:3e:be:93: a2:a7:f4:23:5d:00:6c:fe:80:ad:10:b2:9e:34:24: e7:22:10:a3:5c:0c:e6:ce:41:0e:f6:29:e1:07:0e: d0:1b:7b:ad:6d:eb:d2:cb:9b:0a:75:07:f5:1a:e7: 23:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F9:52:8A:50:B7:48:06:82:26:1C:87:F5:63:E6:2E:E8:9F:7A:71 X509v3 Authority Key Identifier: keyid:7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:27:c4:65:7b:cd:cd:eb:c2:9f:f6:92:2b:ba:ee:55:bb:94: 3d:44:ac:c4:2b:1c:90:84:5c:3d:91:ad:c8:33:39:a3:c1:e5: fc:b8:48:f8:c7:ad:e1:e9:c2:09:0b:5f:25:f1:df:7d:17:24: cb:69:71:cb:4f:5c:96:b6:1e:25:ab:b5:83:d2:48:d6:29:5f: d4:cb:df:e0:31:dc:b1:b9:35:83:1a:96:df:1b:8e:e1:6f:1a: 01:29:db:0b:da:4a:86:12:d7:a3:e2:51:33:3d:f2:7e:97:55: 60:97:6b:a7:a6:3c:be:e0:74:e8:38:63:44:fa:6b:f5:e4:43: bf:d8:f2:ca:0a:98:cf:8d:72:18:c4:78:76:6d:80:ba:4f:4c: 1e:c0:ad:5a:44:77:45:ff:96:ff:5d:09:95:d5:b6:f4:1e:4a: 68:26:ec:c8:5c:fd:ce:00:8d:28:3f:1f:35:04:ad:28:7b:4d: a5:0d:4d:9e:36:21:52:ae:83:da:77:71:08:71:90:28:3a:d3: 2d:0b:55:a8:0f:1e:4f:81:38:e7:f0:d2:9a:f9:c6:03:51:e5: 43:a0:b4:4a:4e:49:16:b5:c3:81:07:ec:49:7b:cc:49:f9:45: a9:3b:62:30:e7:05:86:04:40:84:94:7b:e9:e2:ef:f7:b1:f9: 1d:ab:a2:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdFQTUxMTAvBgNVBAUTKDdFRDBCMTM2MTlCM0YzODMwN0RFRTFCNDBFN0YyNzc5 MzIyREJFNkUwHhcNMjYwNTIwMTgxMDU3WhcNMjYwNTI3MTgxMDU3WjAYMRYwFAYD VQQDEw02YTBkZjkzMS02OGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5u9uDhB1G6j5dhABlAxZsKNDgR4eCTfWAzmGBApHfdksrik2fXrjRaI7y/+ jmg+NzAS6FpNYfjjVp9Fqs7CsLLaGk2z7z7dFSesppJHsIJi5ffc5XzaGha5S1MQ bYiMkTN+vE3wS1qaYFjrb13NwZugFCq0wzcz7MBC+rZb5Pc1ShohfBm2sWR9JMGV q9Z0dNMPXTlD65f1c5FYRfaozatAMkcO7oFQT7jBVHr3gxx3/H+xCubqvXwhwum9 ToK8AVRWza9Pa+XdhtBk9fs+vpOip/QjXQBs/oCtELKeNCTnIhCjXAzmzkEO9inh Bw7QG3utbevSy5sKdQf1GucjCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKf5UopQ t0gGgiYch/Vj5i7on3pxMB8GA1UdIwQYMBaAFH7QsTYZs/ODB97htA5/J3kyLb5u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0VBNS9DNzg0Q0Y0RTA0 NTAxMUVBOUIzMjg4MTlDNEY5QUUwMi9mdEN4Tmhtejg0TUgzdUcwRG44bmVUSXR2 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0Q3hOaG16ODRNSDN1RzBEbjhuZVRJdHZtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0VBNS9DNzg0Q0Y0RTA0NTAxMUVBOUIzMjg4MTlDNEY5QUUwMi9mdEN4Tmhtejg0 TUgzdUcwRG44bmVUSXR2bTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARSfEZXvNzevCn/aSK7ruVbuUPUSsxCsckIRcPZGtyDM5o8Hl/LhI+Met4enC CQtfJfHffRcky2lxy09clrYeJau1g9JI1ilf1Mvf4DHcsbk1gxqW3xuO4W8aASnb C9pKhhLXo+JRMz3yfpdVYJdrp6Y8vuB06DhjRPpr9eRDv9jyygqYz41yGMR4dm2A uk9MHsCtWkR3Rf+W/10JldW29B5KaCbsyFz9zgCNKD8fNQStKHtNpQ1NnjYhUq6D 2ndxCHGQKDrTLQtVqA8eT4E45/DSmvnGA1HlQ6C0Sk5JFrXDgQfsSXvMSflFqTti MOcFhgRAhJR76eLv97H5HauiBg== -----END CERTIFICATE-----Generated at Thu May 21 10:53:40 2026 by rpki-client