$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft File: r9CVWn3X-bDsKkShHZNyB8J1SmM.mft (raw, json) Hash identifier: rzr0ZAEAKrzJKO3Gny3WPYCb/8sriK7gAQ5CjqYm6G4= Subject key identifier: B7:20:C6:1B:F6:3D:63:CC:98:6E:25:38:FB:A7:A3:DC:75:EB:6E:21 Authority key identifier: AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63 Certificate issuer: /CN=A91B1018/serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63 Certificate serial: 04BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft Manifest number: 049D Signing time: Mon 18 May 2026 23:56:54 +0000 Manifest this update: Mon 18 May 2026 23:56:53 +0000 Manifest next update: Mon 25 May 2026 23:56:53 +0000 Files and hashes: 1: r9CVWn3X-bDsKkShHZNyB8J1SmM.crl (hash: asHW3KxY1PybJktgIz3D0c1J9zjBtU7eHhTu2YsWqqw=) 2: 488DBEDE508011F1A55F3568A4833773.roa (hash: 0IdhV/KCNA/ojcwThaYzEeluJBUJZFZ2dd7XnSYNWPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 May 2026 23:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1211 (0x4bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1018, serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63 Validity Not Before: May 18 23:56:53 2026 GMT Not After : May 25 23:56:53 2026 GMT Subject: CN=6a0ba746-99ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9d:32:f0:26:76:ea:ba:ff:f1:a4:ab:f0:d3: 41:42:d6:23:80:30:cc:ab:04:98:bf:e2:db:65:d0: f3:d5:ef:8b:2a:ba:c2:4f:a6:3f:7e:fb:cb:05:c4: 33:5d:d0:fc:d5:e4:c1:c7:83:20:25:10:8d:37:8d: c5:7b:b0:66:a1:69:98:ca:18:91:63:4e:7f:e3:d9: ab:9e:c3:ca:22:8c:17:e3:4b:38:ac:10:c2:62:b4: 11:11:4c:a1:44:45:81:38:67:cd:20:7e:dd:17:8d: 7c:e3:1c:ad:9c:c2:89:ec:84:d2:82:14:0d:63:a3: 1f:49:85:f3:f0:9a:6c:c2:ac:01:00:0b:45:3f:db: 3d:92:80:40:a8:2b:ee:42:f9:50:1d:2a:34:71:64: 14:b2:34:ad:53:11:4e:4f:89:00:05:32:c8:9f:c7: 70:8a:dc:12:3a:1a:19:d7:cb:3d:b7:29:7a:bf:a1: 55:f5:9e:9a:e8:ae:78:f5:8c:e1:3d:40:ce:70:ac: 33:a6:7a:e6:86:ff:ad:12:1b:cf:2e:89:7c:30:9d: ec:af:86:51:f4:1e:07:fa:25:c5:0b:ee:62:e0:29: a8:72:03:cb:db:93:c3:07:82:ab:cc:09:d8:37:ab: ed:e3:6e:94:01:c5:c3:6e:65:3f:7d:f8:1b:8b:47: 64:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:20:C6:1B:F6:3D:63:CC:98:6E:25:38:FB:A7:A3:DC:75:EB:6E:21 X509v3 Authority Key Identifier: keyid:AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:41:7b:5a:7c:f4:8d:9d:2e:3d:fd:e5:97:eb:47:ab:6e:71: aa:86:8e:1f:6f:1a:96:e0:07:5a:7c:09:15:ec:ac:03:8c:1c: da:a6:e7:63:75:15:08:a2:14:73:a5:ab:a8:8c:2c:86:19:e7: 56:28:d9:15:c8:6f:76:a6:2e:99:c1:3f:f8:f6:bd:24:8f:9c: c3:1c:c8:03:76:fe:c6:fc:bb:9d:4b:5c:ef:4c:37:90:4f:d0: b9:30:a4:6c:e9:e3:0d:fe:32:f2:82:7a:aa:4c:22:4a:a6:83: b7:16:c0:4a:d9:9e:7a:9c:cd:a9:66:c2:ac:e2:0c:97:25:ef: 42:49:45:96:4e:16:e7:00:70:f9:00:37:1a:13:8b:8d:6d:a5: 60:fe:e4:fc:52:07:c2:47:2d:9f:cb:41:26:32:9c:75:8a:f1: eb:b4:9a:ac:eb:cd:e0:94:98:ed:32:97:1c:ae:43:ab:89:87: 43:3c:c1:32:d8:7b:08:38:b5:88:ff:8e:ac:29:79:c5:a5:ff: 3a:a4:cb:9b:bc:ed:33:e5:1f:89:9f:3d:1b:fb:8a:56:0e:df: 27:75:7a:98:d9:c3:61:85:72:ee:d2:ba:ff:d0:4a:b2:fa:d9: fd:41:dd:94:05:82:dc:83:f9:53:1a:1b:cb:24:0e:9d:cb:32: 45:ab:a3:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEwMTgxMTAvBgNVBAUTKEFGRDA5NTVBN0REN0Y5QjBFQzJBNDRBMTFEOTM3MjA3 QzI3NTRBNjMwHhcNMjYwNTE4MjM1NjUzWhcNMjYwNTI1MjM1NjUzWjAYMRYwFAYD VQQDEw02YTBiYTc0Ni05OWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoJ0y8CZ26rr/8aSr8NNBQtYjgDDMqwSYv+LbZdDz1e+LKrrCT6Y/fvvLBcQz XdD81eTBx4MgJRCNN43Fe7BmoWmYyhiRY05/49mrnsPKIowX40s4rBDCYrQREUyh REWBOGfNIH7dF4184xytnMKJ7ITSghQNY6MfSYXz8JpswqwBAAtFP9s9koBAqCvu QvlQHSo0cWQUsjStUxFOT4kABTLIn8dwitwSOhoZ18s9tyl6v6FV9Z6a6K549Yzh PUDOcKwzpnrmhv+tEhvPLol8MJ3sr4ZR9B4H+iXFC+5i4CmocgPL25PDB4KrzAnY N6vt426UAcXDbmU/ffgbi0dk1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLcgxhv2 PWPMmG4lOPuno9x1624hMB8GA1UdIwQYMBaAFK/QlVp91/mw7CpEoR2TcgfCdUpj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTAxOC84ODM2RkE2MDhE NEMxMUVDOTg4QUU4NURDNEY5QUUwMi9yOUNWV24zWC1iRHNLa1NoSFpOeUI4SjFT bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I5Q1ZXbjNYLWJEc0trU2hIWk55QjhKMVNtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTAxOC84ODM2RkE2MDhENEMxMUVDOTg4QUU4NURDNEY5QUUwMi9yOUNWV24zWC1i RHNLa1NoSFpOeUI4SjFTbU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhkF7Wnz0jZ0uPf3ll+tHq25xqoaOH28aluAHWnwJFeysA4wc2qbnY3UVCKIU c6WrqIwshhnnVijZFchvdqYumcE/+Pa9JI+cwxzIA3b+xvy7nUtc70w3kE/QuTCk bOnjDf4y8oJ6qkwiSqaDtxbAStmeepzNqWbCrOIMlyXvQklFlk4W5wBw+QA3GhOL jW2lYP7k/FIHwkctn8tBJjKcdYrx67SarOvN4JSY7TKXHK5Dq4mHQzzBMth7CDi1 iP+OrCl5xaX/OqTLm7ztM+UfiZ89G/uKVg7fJ3V6mNnDYYVy7tK6/9BKsvrZ/UHd lAWC3IP5UxobyyQOncsyRaujkw== -----END CERTIFICATE-----Generated at Tue May 19 10:22:42 2026 by rpki-client