$ rpki-client -vvf rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft File: 2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft (raw, json) Hash identifier: 1xDmbqG8vntgUU7i727LuCIdGjT6C2UMqOjfsGuxJlk= Subject key identifier: 20:BA:FD:E6:8C:08:CB:2F:8A:D7:FA:61:60:A3:6E:C0:E7:DC:97:37 Authority key identifier: D8:07:38:03:EE:CF:F4:F1:9E:FF:99:57:C7:14:7A:FC:CA:A0:19:F5 Certificate issuer: /CN=A91C08C0/serialNumber=D8073803EECFF4F19EFF9957C7147AFCCAA019F5 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft Manifest number: 20 Signing time: Tue 05 May 2026 08:57:42 +0000 Manifest this update: Tue 05 May 2026 08:57:41 +0000 Manifest next update: Tue 12 May 2026 08:57:41 +0000 Files and hashes: 1: 2Ac4A-7P9PGe_5lXxxR6_MqgGfU.crl (hash: nJ2CkeDuT7VvOn/LyWN1/z9S3NPZi2Dn78b8BdQ1FyQ=) 2: EA9A11EA214C11F1A100880B383D8C67.roa (hash: eeD6uCbIvlHKsgpeKIC0IXAVj8jY3ITgO5O6p0iRhic=) 3: 7E0A2AD822E611F1A3C138F6CC833773.roa (hash: z0RXPVTLkvsIzF0pOhO2UmlkU0gKTzJ6WJ2WACgPdDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.crl rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 22:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C08C0, serialNumber=D8073803EECFF4F19EFF9957C7147AFCCAA019F5 Validity Not Before: May 5 08:57:41 2026 GMT Not After : May 12 08:57:41 2026 GMT Subject: CN=69f9b105-0b67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:20:6a:2b:56:72:3e:f8:58:6a:85:3f:74:54: 49:bc:da:5b:7d:7f:c5:c1:79:7c:43:23:35:f9:e9: bd:40:d4:53:a5:e6:12:87:d2:fb:fb:f2:86:74:bd: 1d:f0:09:6d:13:a2:f1:e3:06:4f:e6:20:1b:fd:09: 2c:f4:fd:ec:e2:df:dd:01:76:39:f0:ab:62:45:4f: 36:4c:7b:11:de:b6:be:0c:08:e8:c0:ea:dc:3f:60: 94:49:15:b1:f3:c5:97:22:c3:7c:d3:04:a7:aa:1a: f6:44:2b:16:96:0f:03:20:94:14:02:a1:fa:56:01: bb:23:49:04:1b:8d:cf:50:33:7d:0a:f3:85:bd:99: dc:de:52:76:00:db:69:b0:04:fb:7d:18:47:13:a0: 4b:43:a2:ec:f6:05:41:45:18:6d:a7:55:3e:bf:28: 9c:bd:91:5a:3d:57:5e:09:e6:21:65:e7:38:29:fe: ca:db:f1:21:f8:a3:18:c3:46:cf:1c:df:8b:a1:8a: 47:a6:bd:e7:cd:4a:93:a0:6d:9f:f8:0b:45:f0:16: 15:18:80:31:ea:e4:20:e7:8a:6b:dd:fb:a9:8b:46: 5f:7d:18:3b:2c:f5:3f:b2:3c:28:15:d4:d7:67:e9: 8c:ba:59:97:6c:a8:87:40:db:6c:e6:5f:2e:58:ee: d0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:BA:FD:E6:8C:08:CB:2F:8A:D7:FA:61:60:A3:6E:C0:E7:DC:97:37 X509v3 Authority Key Identifier: keyid:D8:07:38:03:EE:CF:F4:F1:9E:FF:99:57:C7:14:7A:FC:CA:A0:19:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08C0/796AA142214C11F1A36CA1A5373D8C67/2Ac4A-7P9PGe_5lXxxR6_MqgGfU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:74:c4:08:0a:88:c8:c5:66:18:5a:ec:33:3b:a6:20:12:20: 92:06:10:f9:d9:23:14:21:7b:a7:c0:31:7b:6a:65:ea:ec:b9: 25:93:8f:41:22:7b:8f:88:0e:80:16:78:54:d7:51:bd:bb:7f: 1d:3b:40:ee:97:40:38:d4:62:c6:f8:c7:f1:f2:20:95:a2:55: 56:e0:8f:6d:9e:f8:66:c5:f1:e9:ae:93:32:a0:97:d4:ac:2c: 59:a7:6d:e7:0f:c1:34:32:16:08:63:cf:ff:4d:0f:32:d6:0e: 7e:1e:ef:8e:aa:e9:ec:68:31:12:ca:31:50:46:45:9b:dc:75: 60:8f:7a:76:69:f1:ab:a7:1c:02:5a:fb:e5:d0:c5:1c:49:42: ac:f4:03:42:18:4b:d4:a1:bb:49:ee:bc:b4:94:8f:a3:04:87: ef:80:13:ad:09:b9:1a:65:4b:b5:72:3c:db:07:4c:58:0b:09: f9:86:a6:f2:5a:87:1f:a2:19:37:8f:d0:74:c0:51:3c:bf:94: 4d:df:03:86:93:8e:52:18:b5:33:79:ca:f1:92:ea:71:8d:ba: b3:9c:97:a9:b9:40:79:3b:74:0c:85:12:19:3a:23:1d:15:48: a5:a5:e1:40:0b:f0:0a:ea:ce:29:ca:49:41:bf:8b:51:ad:27: d4:9c:a0:b7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MDhDMDExMC8GA1UEBRMoRDgwNzM4MDNFRUNGRjRGMTlFRkY5OTU3QzcxNDdBRkND QUEwMTlGNTAeFw0yNjA1MDUwODU3NDFaFw0yNjA1MTIwODU3NDFaMBgxFjAUBgNV BAMTDTY5ZjliMTA1LTBiNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6IGorVnI++FhqhT90VEm82lt9f8XBeXxDIzX56b1A1FOl5hKH0vv78oZ0vR3w CW0TovHjBk/mIBv9CSz0/ezi390Bdjnwq2JFTzZMexHetr4MCOjA6tw/YJRJFbHz xZciw3zTBKeqGvZEKxaWDwMglBQCofpWAbsjSQQbjc9QM30K84W9mdzeUnYA22mw BPt9GEcToEtDouz2BUFFGG2nVT6/KJy9kVo9V14J5iFl5zgp/srb8SH4oxjDRs8c 34uhikemvefNSpOgbZ/4C0XwFhUYgDHq5CDnimvd+6mLRl99GDss9T+yPCgV1Ndn 6Yy6WZdsqIdA22zmXy5Y7tDzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUILr95owI yy+K1/phYKNuwOfclzcwHwYDVR0jBBgwFoAU2Ac4A+7P9PGe/5lXxxR6/MqgGfUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwOEMwLzc5NkFBMTQyMjE0 QzExRjFBMzZDQTFBNTM3M0Q4QzY3LzJBYzRBLTdQOVBHZV81bFh4eFI2X01xZ0dm VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMkFjNEEtN1A5UEdlXzVsWHh4UjZfTXFnR2ZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMw OEMwLzc5NkFBMTQyMjE0QzExRjFBMzZDQTFBNTM3M0Q4QzY3LzJBYzRBLTdQOVBH ZV81bFh4eFI2X01xZ0dmVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA7dMQICojIxWYYWuwzO6YgEiCSBhD52SMUIXunwDF7amXq7Lklk49BInuPiA6A FnhU11G9u38dO0Dul0A41GLG+Mfx8iCVolVW4I9tnvhmxfHprpMyoJfUrCxZp23n D8E0MhYIY8//TQ8y1g5+Hu+OqunsaDESyjFQRkWb3HVgj3p2afGrpxwCWvvl0MUc SUKs9ANCGEvUobtJ7ry0lI+jBIfvgBOtCbkaZUu1cjzbB0xYCwn5hqbyWocfohk3 j9B0wFE8v5RN3wOGk45SGLUzecrxkupxjbqznJepuUB5O3QMhRIZOiMdFUilpeFA C/AK6s4pyklBv4tRrSfUnKC3 -----END CERTIFICATE-----Generated at Wed May 6 03:31:02 2026 by rpki-client