$ rpki-client -vvf rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft File: Fh4CKuiXURLudYnUmzFmDKkKBBA.mft (raw, json) Hash identifier: F5jsWerws+7/7nmeOp57sMYToQCqIo8Z4nOdr23TO6o= Subject key identifier: CA:9E:2D:C6:90:A9:F2:E2:4F:56:02:67:9C:01:4A:00:19:AD:68:1C Authority key identifier: 16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10 Certificate issuer: /CN=A91A865F/serialNumber=161E022AE8975112EE7589D49B31660CA90A0410 Certificate serial: 0C91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft Manifest number: 0C7F Signing time: Wed 20 May 2026 18:37:42 +0000 Manifest this update: Wed 20 May 2026 18:37:42 +0000 Manifest next update: Wed 27 May 2026 18:37:42 +0000 Files and hashes: 1: Fh4CKuiXURLudYnUmzFmDKkKBBA.crl (hash: /yUQ23xAlSKpprcBdoG5syshfE6bWtMvRTPyRD1+Cz4=) 2: 8AAF803A1C8A11EABAA73A62C4F9AE02.roa (hash: OyMpzW+KeT1/VlF8h4v55nU9WTVj14mDgJ/Hy/mEDTE=) 3: 8BB1EB9E1C8A11EABAA73A62C4F9AE02.roa (hash: aBLu12X/KjBQz6+vTYYYPJq2RB5e32VzOLCjoKt8rHA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3217 (0xc91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A865F, serialNumber=161E022AE8975112EE7589D49B31660CA90A0410 Validity Not Before: May 20 18:37:42 2026 GMT Not After : May 27 18:37:42 2026 GMT Subject: CN=6a0dff76-c119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d8:bb:02:61:3e:11:7b:0e:9a:64:ae:8e:d5: 3b:e7:bb:fd:52:16:1e:5a:22:f5:07:2d:8c:56:bc: 46:d8:08:43:85:52:29:99:22:66:44:b2:12:45:16: 24:41:a3:f9:17:5e:49:bd:c9:d3:28:d9:1f:9c:26: 00:b3:e3:67:6b:cc:57:df:f8:23:46:2a:d1:d0:05: 7f:33:a4:63:a8:4b:3c:12:a9:e2:55:30:0c:98:b0: 03:c0:f1:9c:d7:9d:c9:98:7d:9d:5b:e8:16:3c:43: 61:49:87:f3:df:f8:45:cd:31:2c:3d:81:e5:7c:29: d5:3e:92:a6:4d:2f:a3:bc:8e:ba:f8:6c:8b:73:4c: 65:7e:bf:78:e3:4b:c0:6b:79:e5:f1:0e:2b:98:22: 6b:25:b4:d3:cb:68:7e:64:43:ee:95:15:70:ef:f9: d3:1d:7c:85:24:3b:ad:2e:a6:98:a8:09:be:6a:ee: 82:6f:5d:b3:77:f3:02:8a:52:2d:f1:d4:a3:b5:59: 1c:9e:65:36:35:0e:69:74:a7:52:3e:3d:a7:6d:e7: c8:02:e0:00:48:12:40:db:1d:6a:b8:2e:4c:b9:78: 07:dc:78:65:b6:4a:73:e5:4b:23:65:9b:34:76:78: ff:74:ac:93:31:7e:d6:c6:7b:51:85:78:b4:90:53: c3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:9E:2D:C6:90:A9:F2:E2:4F:56:02:67:9C:01:4A:00:19:AD:68:1C X509v3 Authority Key Identifier: keyid:16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:86:fd:33:10:2b:a2:a4:c4:09:88:f2:f5:91:6f:ac:7d:4c: 88:5b:de:ea:0f:16:15:70:3f:26:52:e3:ef:81:15:50:71:d2: 82:9b:fd:27:c2:59:21:f3:95:38:38:d5:72:21:67:0e:72:45: f7:c3:b2:9e:8f:3c:09:0d:88:a6:0c:4c:00:ea:56:9d:c8:1b: b6:ff:74:78:e2:5a:41:3b:08:ff:3f:84:e8:ff:ba:59:c8:c6: 33:58:3f:39:6c:78:9e:08:d5:d5:e7:6c:b8:d9:9e:e4:bc:39: 52:05:67:18:2c:05:dd:da:c3:5a:f4:d7:2e:e0:55:a5:37:93: 9c:18:46:96:f7:52:98:9c:c9:32:3f:27:47:7b:5c:60:3e:6a: 9b:9d:8d:fe:75:fc:30:72:5a:e0:49:01:e8:2f:40:54:53:90: 95:53:3e:dc:28:02:65:b8:90:9e:33:f6:a3:4a:c1:8c:fe:eb: 90:20:35:1d:77:54:8d:96:ad:94:c2:4d:0b:c9:e5:b3:a5:a9: a4:33:0a:dd:f0:77:38:89:a9:ea:03:ec:60:bf:81:74:2d:0a: 33:62:32:7f:26:40:fd:8f:61:22:93:28:9b:09:b7:bf:85:80: 21:58:c3:83:19:2c:35:02:7b:d7:34:15:41:24:bf:f4:4a:4c: 12:dd:c7:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2NUYxMTAvBgNVBAUTKDE2MUUwMjJBRTg5NzUxMTJFRTc1ODlENDlCMzE2NjBD QTkwQTA0MTAwHhcNMjYwNTIwMTgzNzQyWhcNMjYwNTI3MTgzNzQyWjAYMRYwFAYD VQQDEw02YTBkZmY3Ni1jMTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzdi7AmE+EXsOmmSujtU757v9UhYeWiL1By2MVrxG2AhDhVIpmSJmRLISRRYk QaP5F15JvcnTKNkfnCYAs+Nna8xX3/gjRirR0AV/M6RjqEs8EqniVTAMmLADwPGc 153JmH2dW+gWPENhSYfz3/hFzTEsPYHlfCnVPpKmTS+jvI66+GyLc0xlfr9440vA a3nl8Q4rmCJrJbTTy2h+ZEPulRVw7/nTHXyFJDutLqaYqAm+au6Cb12zd/MCilIt 8dSjtVkcnmU2NQ5pdKdSPj2nbefIAuAASBJA2x1quC5MuXgH3Hhltkpz5UsjZZs0 dnj/dKyTMX7WxntRhXi0kFPD+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMqeLcaQ qfLiT1YCZ5wBSgAZrWgcMB8GA1UdIwQYMBaAFBYeAirol1ES7nWJ1JsxZgypCgQQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODY1Ri9CRjk2NkU0QTFD ODkxMUVBQTlCOTU3NjFDNEY5QUUwMi9GaDRDS3VpWFVSTHVkWW5VbXpGbURLa0tC QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoNENLdWlYVVJMdWRZblVtekZtREtrS0JCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODY1Ri9CRjk2NkU0QTFDODkxMUVBQTlCOTU3NjFDNEY5QUUwMi9GaDRDS3VpWFVS THVkWW5VbXpGbURLa0tCQkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHob9MxAroqTECYjy9ZFvrH1MiFve6g8WFXA/JlLj74EVUHHSgpv9J8JZIfOV ODjVciFnDnJF98Oyno88CQ2IpgxMAOpWncgbtv90eOJaQTsI/z+E6P+6WcjGM1g/ OWx4ngjV1edsuNme5Lw5UgVnGCwF3drDWvTXLuBVpTeTnBhGlvdSmJzJMj8nR3tc YD5qm52N/nX8MHJa4EkB6C9AVFOQlVM+3CgCZbiQnjP2o0rBjP7rkCA1HXdUjZat lMJNC8nls6WppDMK3fB3OImp6gPsYL+BdC0KM2IyfyZA/Y9hIpMomwm3v4WAIVjD gxksNQJ71zQVQSS/9EpMEt3H1Q== -----END CERTIFICATE-----Generated at Thu May 21 09:37:07 2026 by rpki-client