$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft File: SO9orVG71xh-JKCji6u6pfwRE-4.mft (raw, json) Hash identifier: fp51JCOvdbsGWQOMGJ3UP0JiQF88RT95kpuu+3eRvx4= Subject key identifier: 7F:DA:F7:80:F5:F0:DE:7B:F4:04:DA:06:77:13:79:B3:C4:76:12:31 Authority key identifier: 48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE Certificate issuer: /CN=A91ADA93/serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE Certificate serial: 0968 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft Manifest number: 0967 Signing time: Wed 20 May 2026 20:06:30 +0000 Manifest this update: Wed 20 May 2026 20:06:30 +0000 Manifest next update: Wed 27 May 2026 20:06:30 +0000 Files and hashes: 1: SO9orVG71xh-JKCji6u6pfwRE-4.crl (hash: eATqyrg38RryZu/Dhr8U1zaIT2Lb8QCcFDKcPxFyOIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 20:06:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2408 (0x968) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADA93, serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE Validity Not Before: May 20 20:06:30 2026 GMT Not After : May 27 20:06:30 2026 GMT Subject: CN=6a0e1446-ca28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1f:42:b2:39:8f:1a:c0:f4:ff:77:3c:b2:58: 3d:2e:b3:61:bd:ea:cc:72:d9:21:e8:9a:fb:0d:f9: 3b:d7:b7:81:3f:9c:83:c9:3d:fa:69:f4:0b:c3:b5: 7a:e5:46:42:a1:08:59:1d:0b:52:54:07:4d:2f:01: ab:44:13:4e:47:a8:6e:70:c6:50:8a:40:31:06:ab: d1:af:c0:54:1a:9a:fe:2a:02:93:25:47:34:f1:31: cb:53:ca:31:98:e9:a5:6f:bc:be:ad:85:07:66:4b: e5:4e:c1:fd:e2:6f:ea:58:fa:31:e3:be:13:e6:cd: c8:55:1d:e8:18:74:5d:8f:41:c8:5f:49:d5:1d:9f: a0:ac:c6:64:fe:cc:5a:7b:c8:4c:d1:d6:9c:20:14: 1d:05:5e:f6:09:e3:81:8e:38:99:88:b7:f0:a7:17: e9:8b:a5:b2:5f:ea:92:a1:a0:7f:92:21:de:21:38: 7f:a1:93:1f:d4:8a:f7:9f:39:e5:a4:2f:04:e6:1e: 42:e5:c0:b0:49:18:1a:e4:96:e1:17:2d:20:87:00: 31:e5:45:1d:68:d9:f5:e3:7c:3f:fc:8f:65:c3:aa: b1:67:e8:39:69:29:5f:5b:8a:d8:c5:04:03:5a:8a: 67:70:5e:55:96:87:27:24:c6:70:ca:f7:dd:ae:0a: a0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:DA:F7:80:F5:F0:DE:7B:F4:04:DA:06:77:13:79:B3:C4:76:12:31 X509v3 Authority Key Identifier: keyid:48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:d4:32:e2:aa:07:21:68:ad:7c:a4:c7:b8:cf:58:bf:79:30: be:07:77:0d:96:04:b6:e3:e2:00:d5:c1:f2:e7:73:aa:64:c7: 25:d7:8e:45:52:2a:7e:9f:4f:4f:88:1c:81:80:b9:5e:50:fa: ae:78:7a:56:9c:64:da:0f:9c:4a:1e:87:4f:21:52:fa:2f:56: 7f:ec:c4:f1:54:fb:b3:47:ce:61:7c:22:35:4c:b8:f6:ce:97: 87:8b:99:1f:4f:cf:16:df:b1:22:08:bd:1c:b9:5c:a8:81:42: 85:54:44:48:39:1c:fc:d6:32:e6:68:13:49:f3:e8:52:1a:92: 77:28:1e:19:1f:4b:68:a8:cb:9d:4b:ff:fb:6c:6e:10:44:2b: 22:64:f9:d5:cb:a0:55:7e:0c:e8:f3:92:9d:3e:3f:6b:79:5f: 3a:cf:a2:c6:de:78:14:5e:02:9a:a8:79:11:40:46:90:54:62: c9:2a:87:53:f4:56:78:fa:8e:31:da:f4:0a:7f:e1:96:9c:de: 0c:2e:c7:05:d6:56:fa:49:fe:59:41:3c:10:fd:e6:7c:df:2e: c4:1e:8e:96:bf:cb:2e:a1:f2:20:c6:83:8b:c5:63:61:c2:ae: 86:ce:1f:87:49:7e:ed:54:0f:45:69:a3:6a:63:0c:76:7a:de: bc:09:3a:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURBOTMxMTAvBgNVBAUTKDQ4RUY2OEFENTFCQkQ3MTg3RTI0QTBBMzhCQUJCQUE1 RkMxMTEzRUUwHhcNMjYwNTIwMjAwNjMwWhcNMjYwNTI3MjAwNjMwWjAYMRYwFAYD VQQDEw02YTBlMTQ0Ni1jYTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxB9CsjmPGsD0/3c8slg9LrNhverMctkh6Jr7Dfk717eBP5yDyT36afQLw7V6 5UZCoQhZHQtSVAdNLwGrRBNOR6hucMZQikAxBqvRr8BUGpr+KgKTJUc08THLU8ox mOmlb7y+rYUHZkvlTsH94m/qWPox474T5s3IVR3oGHRdj0HIX0nVHZ+grMZk/sxa e8hM0dacIBQdBV72CeOBjjiZiLfwpxfpi6WyX+qSoaB/kiHeITh/oZMf1Ir3nznl pC8E5h5C5cCwSRga5JbhFy0ghwAx5UUdaNn143w//I9lw6qxZ+g5aSlfW4rYxQQD WopncF5VlocnJMZwyvfdrgqgfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH/a94D1 8N579ATaBncTebPEdhIxMB8GA1UdIwQYMBaAFEjvaK1Ru9cYfiSgo4uruqX8ERPu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREE5My81Q0NCRDRFMEI2 QUMxMUVBQkE4M0NCODZDNEY5QUUwMi9TTzlvclZHNzF4aC1KS0NqaTZ1NnBmd1JF LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPOW9yVkc3MXhoLUpLQ2ppNnU2cGZ3UkUtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REE5My81Q0NCRDRFMEI2QUMxMUVBQkE4M0NCODZDNEY5QUUwMi9TTzlvclZHNzF4 aC1KS0NqaTZ1NnBmd1JFLTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE9Qy4qoHIWitfKTHuM9Yv3kwvgd3DZYEtuPiANXB8udzqmTHJdeORVIqfp9P T4gcgYC5XlD6rnh6Vpxk2g+cSh6HTyFS+i9Wf+zE8VT7s0fOYXwiNUy49s6Xh4uZ H0/PFt+xIgi9HLlcqIFChVRESDkc/NYy5mgTSfPoUhqSdygeGR9LaKjLnUv/+2xu EEQrImT51cugVX4M6POSnT4/a3lfOs+ixt54FF4Cmqh5EUBGkFRiySqHU/RWePqO Mdr0Cn/hlpzeDC7HBdZW+kn+WUE8EP3mfN8uxB6Olr/LLqHyIMaDi8VjYcKuhs4f h0l+7VQPRWmjamMMdnrevAk65A== -----END CERTIFICATE-----Generated at Thu May 21 09:39:08 2026 by rpki-client