$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft File: AXCw4NBuMUc8rBZOSwttIb300jc.mft (raw, json) Hash identifier: izHn+CqKJvNn8b5Lm7wxHDgxxfmbofdaX2ywzbGtrJ0= Subject key identifier: 0C:C3:0D:B7:40:C7:AC:8C:7B:3A:FD:8C:BA:93:1E:64:AD:84:B3:61 Authority key identifier: 01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37 Certificate issuer: /CN=A91AE9F7/serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237 Certificate serial: 1099 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft Manifest number: 108A Signing time: Wed 20 May 2026 17:22:32 +0000 Manifest this update: Wed 20 May 2026 17:22:32 +0000 Manifest next update: Wed 27 May 2026 17:22:32 +0000 Files and hashes: 1: AXCw4NBuMUc8rBZOSwttIb300jc.crl (hash: zMVqr2G2XLgpSKJgxIX2ANogkdDI4dfLGenp9gwBKJg=) 2: 1585570A544C11E9BDFF2B2DC4F9AE02.roa (hash: qFHFmRVCbMNHnJYtHdzfYVVLl0Q/VMUun8JPyz9/IMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4249 (0x1099) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE9F7, serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237 Validity Not Before: May 20 17:22:32 2026 GMT Not After : May 27 17:22:32 2026 GMT Subject: CN=6a0dedd8-2450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:28:11:8f:3f:2f:04:cd:c3:f7:dd:e1:65:32: 4c:02:4f:6e:33:8e:ad:16:6c:59:a0:f9:5c:d9:66: 4d:ae:e4:cd:5b:db:ad:d9:23:5d:bc:4f:5a:2c:cf: e0:71:f5:82:ff:18:81:08:72:35:5a:58:49:bd:e4: e4:6e:46:c0:a7:ea:52:0d:34:d5:1e:a4:28:94:49: c2:24:b7:b8:3d:7b:6e:03:64:14:13:ad:a5:48:01: f0:54:a7:4f:15:03:a7:f6:ee:32:3b:fe:52:98:c0: 79:a4:5c:14:a4:1a:81:7e:d7:82:e1:12:bd:3b:38: df:c0:fa:3e:03:db:74:c8:cd:33:f6:c7:0a:8a:e9: a6:15:ed:c4:2b:29:90:5d:8d:0d:f5:44:69:b8:2a: 75:10:b6:cd:7b:7e:0b:f5:8c:31:59:31:25:82:20: ef:a6:78:d1:2b:f1:b9:1c:91:78:e3:66:c0:56:59: 0d:96:65:dd:72:d2:77:6b:97:7c:dc:01:8d:84:a9: 9b:66:ac:91:30:9f:fe:68:92:0f:91:b8:0e:80:bf: 45:41:1c:70:48:56:e7:e4:ef:0f:ed:04:7e:65:7c: fb:6e:f6:2b:fe:c8:97:75:fd:47:b0:48:9a:d4:96: f1:ed:84:49:14:8e:e9:8d:ca:09:5f:e4:c6:a6:70: 46:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C3:0D:B7:40:C7:AC:8C:7B:3A:FD:8C:BA:93:1E:64:AD:84:B3:61 X509v3 Authority Key Identifier: keyid:01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:59:c8:27:79:04:39:2f:c5:66:bc:70:e7:b0:f2:64:21:eb: 0c:3a:2a:fd:61:9c:49:c8:39:29:43:e7:c1:0a:be:43:00:d4: 68:20:db:e8:4e:31:b5:99:1c:36:0d:b9:8c:04:c5:47:20:85: b4:e9:12:d8:4c:ac:20:b2:3e:da:38:c0:f7:a8:fb:74:34:12: 4a:32:69:05:14:9c:3b:81:c2:cf:20:ce:12:f3:e7:48:c4:57: ca:f4:7f:1f:c9:2f:ab:36:38:c6:ea:cd:df:90:9d:e7:9f:cf: 85:9a:65:cd:f9:d8:f9:3b:65:14:bb:7f:df:57:ba:ec:e3:79: bd:6d:9f:8c:08:fc:28:8b:ce:bd:07:6a:fa:38:8a:5c:f7:fc: 4e:5e:4f:54:2c:04:45:51:c7:b6:19:dd:0f:9d:38:1a:34:05: b6:bd:3e:72:9e:d7:8f:2c:95:ea:4a:fa:97:34:1a:03:e8:f6: 2d:06:b6:79:8a:0f:1c:15:e5:34:67:55:e7:6e:43:08:7c:67: 13:b4:f3:36:0f:b4:73:1f:ab:a5:c7:2d:3f:06:a9:6c:2a:a4: 19:df:fe:89:23:20:75:db:82:ab:f4:d5:3a:f2:66:4c:e2:0f: 27:fd:da:6a:fc:01:0b:67:4e:04:8d:f7:a1:63:35:94:4a:fc: a1:e4:85:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5RjcxMTAvBgNVBAUTKDAxNzBCMEUwRDA2RTMxNDczQ0FDMTY0RTRCMEI2RDIx QkRGNEQyMzcwHhcNMjYwNTIwMTcyMjMyWhcNMjYwNTI3MTcyMjMyWjAYMRYwFAYD VQQDEw02YTBkZWRkOC0yNDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmigRjz8vBM3D993hZTJMAk9uM46tFmxZoPlc2WZNruTNW9ut2SNdvE9aLM/g cfWC/xiBCHI1WlhJveTkbkbAp+pSDTTVHqQolEnCJLe4PXtuA2QUE62lSAHwVKdP FQOn9u4yO/5SmMB5pFwUpBqBfteC4RK9OzjfwPo+A9t0yM0z9scKiummFe3EKymQ XY0N9URpuCp1ELbNe34L9YwxWTElgiDvpnjRK/G5HJF442bAVlkNlmXdctJ3a5d8 3AGNhKmbZqyRMJ/+aJIPkbgOgL9FQRxwSFbn5O8P7QR+ZXz7bvYr/siXdf1HsEia 1Jbx7YRJFI7pjcoJX+TGpnBGtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAzDDbdA x6yMezr9jLqTHmSthLNhMB8GA1UdIwQYMBaAFAFwsODQbjFHPKwWTksLbSG99NI3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTlGNy8zNzlFQzc0MjU0 NEExMUU5QTM1MEMxMjdDNEY5QUUwMi9BWEN3NE5CdU1VYzhyQlpPU3d0dEliMzAw amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FYQ3c0TkJ1TVVjOHJCWk9Td3R0SWIzMDBqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTlGNy8zNzlFQzc0MjU0NEExMUU5QTM1MEMxMjdDNEY5QUUwMi9BWEN3NE5CdU1V YzhyQlpPU3d0dEliMzAwamMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS1nIJ3kEOS/FZrxw57DyZCHrDDoq/WGcScg5KUPnwQq+QwDUaCDb6E4xtZkc Ng25jATFRyCFtOkS2EysILI+2jjA96j7dDQSSjJpBRScO4HCzyDOEvPnSMRXyvR/ H8kvqzY4xurN35Cd55/PhZplzfnY+TtlFLt/31e67ON5vW2fjAj8KIvOvQdq+jiK XPf8Tl5PVCwERVHHthndD504GjQFtr0+cp7XjyyV6kr6lzQaA+j2LQa2eYoPHBXl NGdV525DCHxnE7TzNg+0cx+rpcctPwapbCqkGd/+iSMgdduCq/TVOvJmTOIPJ/3a avwBC2dOBI33oWM1lEr8oeSF2w== -----END CERTIFICATE-----Generated at Thu May 21 09:36:55 2026 by rpki-client