$ rpki-client -vvf rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft File: -O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft (raw, json) Hash identifier: gOmy9VXLs/L5JtKSjmRAuvrctRvkc9ehZc2RzeMHXxU= Subject key identifier: F2:0B:61:C5:51:E6:8D:CC:4E:D4:76:0B:35:29:24:B2:1E:8F:22:FE Authority key identifier: F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08 Certificate issuer: /CN=A91B268A/serialNumber=F8EECE7D3C0CF5922EA3D803553638823FAEEA08 Certificate serial: 1306 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft Manifest number: 12E9 Signing time: Wed 20 May 2026 17:02:29 +0000 Manifest this update: Wed 20 May 2026 17:02:28 +0000 Manifest next update: Wed 27 May 2026 17:02:28 +0000 Files and hashes: 1: -O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl (hash: i+koy9a/w5yxAB0r3iosBrQcJKpgsrmntVabJayum8w=) 2: 801B5CA0D49711EFBF7D3414C4F9AE02.roa (hash: h19/MR9hkMVPGpl7f/+5Vxrt7msI3muNoOIhYt+wOkY=) 3: 0AF12B12DDA411E88E25E96FC4F9AE02.roa (hash: ENmiPhNmvPrhbRyvAeBKsSY9zQmQ1uUazbQzc4bFAXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4870 (0x1306) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B268A, serialNumber=F8EECE7D3C0CF5922EA3D803553638823FAEEA08 Validity Not Before: May 20 17:02:28 2026 GMT Not After : May 27 17:02:28 2026 GMT Subject: CN=6a0de925-f235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:70:58:e2:de:5f:54:0c:7c:9d:5b:9c:ed:f5: 16:fc:cb:d5:56:24:e3:70:2e:4c:6f:f0:5e:60:fa: cd:13:cf:85:b8:59:1e:ce:a7:63:9b:4c:24:e5:3e: 37:1e:c2:81:c7:97:38:f3:ad:ab:9b:2c:dc:a0:2b: 6a:56:40:1d:4d:2e:52:2d:ef:e2:a9:b0:9f:b8:0a: 28:8c:25:13:b1:b6:21:a2:0e:a3:c3:0a:79:fe:79: ec:39:2a:8f:67:6a:4f:ed:05:d8:19:08:01:d8:5e: 77:e4:27:e3:c8:1a:8f:04:7b:08:53:dd:53:84:98: d3:7a:a6:18:04:25:b5:b5:14:9e:14:02:8c:7d:26: e0:4c:6e:09:19:c4:ce:d0:94:62:f5:cc:c0:37:ae: 0f:19:19:28:66:70:fc:fe:cd:15:37:eb:3f:73:aa: 44:39:56:84:40:b8:61:a2:dc:bf:41:b4:ed:0a:5b: d5:cb:40:00:99:27:65:6e:67:b5:64:af:9e:21:a4: f2:4f:35:47:cb:93:b8:dd:db:d7:ab:d6:91:d0:33: ba:11:3f:bd:e1:8d:2e:ab:8d:a7:9a:10:70:cb:6f: 86:b0:59:96:36:66:70:ba:12:e4:e0:98:a4:01:f1: b8:99:30:fc:dd:4d:6e:03:1a:e7:f0:89:c6:be:32: 81:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:0B:61:C5:51:E6:8D:CC:4E:D4:76:0B:35:29:24:B2:1E:8F:22:FE X509v3 Authority Key Identifier: keyid:F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:52:6e:52:0d:c0:ba:50:81:bc:c3:a2:34:4a:72:8e:7e:c0: ad:5c:de:9c:9f:e3:71:bf:d2:6e:11:ae:29:e5:1c:98:39:39: ad:1c:10:d3:51:7b:de:74:8e:02:69:bf:d3:5c:21:de:7b:42: 93:61:0c:80:8d:9f:d7:0f:8d:23:ea:69:de:02:81:9e:8c:7a: cf:98:4d:f1:ea:48:e9:da:9b:44:c2:91:5d:7a:e1:9f:8d:73: 4a:73:74:f6:9f:4c:95:4b:08:ca:38:74:71:fc:05:f9:67:87: 1c:5b:66:db:0d:79:bb:88:b7:c0:e0:8d:bc:ce:bc:a9:76:6b: 7b:63:37:7a:bc:b6:10:2a:37:f5:c4:0b:82:fc:24:ae:61:a4: c9:b3:c7:f1:56:74:5e:fa:04:85:d9:bf:49:aa:92:a7:3c:f0: fd:9f:38:81:09:f2:97:e5:c5:62:57:c2:53:d2:e9:51:66:a9: 3b:8f:3d:33:ca:38:1b:41:5a:87:65:32:48:08:f7:21:0e:35: 6c:61:64:2a:a4:0a:b0:51:d3:80:ca:60:25:e2:41:e1:fc:97: b7:07:b3:85:14:cc:ca:5c:ac:e5:55:d3:18:e0:f4:98:9e:25: f1:6e:dd:3b:25:86:4e:05:f3:d5:61:31:1f:10:c0:7a:4c:34: 3f:25:2b:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI2OEExMTAvBgNVBAUTKEY4RUVDRTdEM0MwQ0Y1OTIyRUEzRDgwMzU1MzYzODgy M0ZBRUVBMDgwHhcNMjYwNTIwMTcwMjI4WhcNMjYwNTI3MTcwMjI4WjAYMRYwFAYD VQQDEw02YTBkZTkyNS1mMjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoXBY4t5fVAx8nVuc7fUW/MvVViTjcC5Mb/BeYPrNE8+FuFkezqdjm0wk5T43 HsKBx5c4862rmyzcoCtqVkAdTS5SLe/iqbCfuAoojCUTsbYhog6jwwp5/nnsOSqP Z2pP7QXYGQgB2F535CfjyBqPBHsIU91ThJjTeqYYBCW1tRSeFAKMfSbgTG4JGcTO 0JRi9czAN64PGRkoZnD8/s0VN+s/c6pEOVaEQLhhoty/QbTtClvVy0AAmSdlbme1 ZK+eIaTyTzVHy5O43dvXq9aR0DO6ET+94Y0uq42nmhBwy2+GsFmWNmZwuhLk4Jik AfG4mTD83U1uAxrn8InGvjKBDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPILYcVR 5o3MTtR2CzUpJLIejyL+MB8GA1UdIwQYMBaAFPjuzn08DPWSLqPYA1U2OII/ruoI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjY4QS84NEZCNEM5Q0RE QTExMUU4QTJFNzhBNjlDNEY5QUUwMi8tTzdPZlR3TTlaSXVvOWdEVlRZNGdqLXU2 Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1PN09mVHdNOVpJdW85Z0RWVFk0Z2otdTZnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjY4QS84NEZCNEM5Q0REQTExMUU4QTJFNzhBNjlDNEY5QUUwMi8tTzdPZlR3TTla SXVvOWdEVlRZNGdqLXU2Z2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiVJuUg3AulCBvMOiNEpyjn7ArVzenJ/jcb/SbhGuKeUcmDk5rRwQ01F73nSO Amm/01wh3ntCk2EMgI2f1w+NI+pp3gKBnox6z5hN8epI6dqbRMKRXXrhn41zSnN0 9p9MlUsIyjh0cfwF+WeHHFtm2w15u4i3wOCNvM68qXZre2M3ery2ECo39cQLgvwk rmGkybPH8VZ0XvoEhdm/SaqSpzzw/Z84gQnyl+XFYlfCU9LpUWapO489M8o4G0Fa h2UySAj3IQ41bGFkKqQKsFHTgMpgJeJB4fyXtwezhRTMylys5VXTGOD0mJ4l8W7d OyWGTgXz1WExHxDAekw0PyUrNQ== -----END CERTIFICATE-----Generated at Thu May 21 10:18:54 2026 by rpki-client