$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7425/5267DE6E430411F1BAAFDF3B9A833773/dsy3G8ONvsj1s1rnufdOprg25Qg.mft File: dsy3G8ONvsj1s1rnufdOprg25Qg.mft (raw, json) Hash identifier: Qf1vOZ7yKsYwNZAXEAOyt9wQ2ggzXbKyAN3YlNCNxcE= Subject key identifier: 59:A6:4C:C8:F7:B2:1B:39:ED:F5:2E:40:1B:F2:82:CF:54:75:C9:4C Authority key identifier: 76:CC:B7:1B:C3:8D:BE:C8:F5:B3:5A:E7:B9:F7:4E:A6:B8:36:E5:08 Certificate issuer: /CN=A91C7425/serialNumber=76CCB71BC38DBEC8F5B35AE7B9F74EA6B836E508 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsy3G8ONvsj1s1rnufdOprg25Qg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7425/5267DE6E430411F1BAAFDF3B9A833773/dsy3G8ONvsj1s1rnufdOprg25Qg.mft Manifest number: 0E Signing time: Tue 19 May 2026 09:00:07 +0000 Manifest this update: Tue 19 May 2026 09:00:07 +0000 Manifest next update: Tue 26 May 2026 09:00:07 +0000 Files and hashes: 1: dsy3G8ONvsj1s1rnufdOprg25Qg.crl (hash: zEjiIRa1pBANFeBIFTgEZ1qssdXZnK28L8tNDVqtGKM=) 2: 8A11628E49A511F1AC5B8E7699833773.roa (hash: niJhKfV+ouFK6sQjUZt4n5DTxe39SMX+kn/MPEsu8wg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7425/5267DE6E430411F1BAAFDF3B9A833773/dsy3G8ONvsj1s1rnufdOprg25Qg.crl rsync://rpki.apnic.net/member_repository/A91C7425/5267DE6E430411F1BAAFDF3B9A833773/dsy3G8ONvsj1s1rnufdOprg25Qg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsy3G8ONvsj1s1rnufdOprg25Qg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 09:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7425, serialNumber=76CCB71BC38DBEC8F5B35AE7B9F74EA6B836E508 Validity Not Before: May 19 09:00:07 2026 GMT Not After : May 26 09:00:07 2026 GMT Subject: CN=6a0c2697-3483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5f:8c:8b:3b:f1:d7:ef:b6:dd:b9:b9:03:b4: f3:81:f1:3b:16:75:f6:30:0b:7c:5e:b4:de:c1:cd: 85:e7:68:04:4a:da:78:0c:57:80:3c:cb:74:a5:c8: d6:6a:cc:e5:50:90:c9:78:ad:09:60:f6:6e:23:3a: c2:2e:01:31:50:21:10:34:c3:a2:c0:1a:05:dc:5d: 1c:35:1f:4a:e3:58:ab:8c:77:68:f8:a9:69:e9:27: 53:a7:79:64:86:7f:8a:d1:26:e5:74:25:ed:eb:bd: 36:2c:5d:cf:59:f9:62:36:29:e4:20:1d:55:b5:23: da:fe:a3:e1:ed:e5:a9:91:c4:56:95:42:bc:42:bb: 8c:31:79:60:90:34:a2:3f:92:5d:ef:f9:7b:56:44: 51:2f:63:32:d3:cc:e3:bd:c1:5d:00:64:70:dd:6f: aa:c3:54:27:1e:ce:af:41:7e:2c:d9:3e:2c:fc:80: c2:fc:1b:61:3e:52:76:e6:ea:af:fa:30:e6:f2:fe: 35:a5:e4:23:3f:29:2c:98:1c:fb:32:2a:49:5b:64: 76:c6:41:94:25:81:f6:a1:5c:fd:03:fb:2c:68:0a: 46:f1:c9:2f:e2:7d:a2:17:9f:04:00:11:29:63:e7: b4:7c:d1:e2:0e:01:16:c1:70:a4:57:ea:a5:d7:31: 17:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A6:4C:C8:F7:B2:1B:39:ED:F5:2E:40:1B:F2:82:CF:54:75:C9:4C X509v3 Authority Key Identifier: keyid:76:CC:B7:1B:C3:8D:BE:C8:F5:B3:5A:E7:B9:F7:4E:A6:B8:36:E5:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7425/5267DE6E430411F1BAAFDF3B9A833773/dsy3G8ONvsj1s1rnufdOprg25Qg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsy3G8ONvsj1s1rnufdOprg25Qg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7425/5267DE6E430411F1BAAFDF3B9A833773/dsy3G8ONvsj1s1rnufdOprg25Qg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:18:49:77:3a:66:2e:ec:41:5d:48:b2:d8:0e:a1:ac:c5:85: 51:5f:0e:66:2b:d6:9b:55:92:a1:41:15:37:c8:46:70:b6:2e: ae:5b:d0:4a:61:c5:f1:08:a9:02:81:49:e2:46:38:ac:d3:9d: 39:1d:89:97:17:38:5a:2d:c6:30:af:92:01:07:86:4a:3f:22: dd:6a:54:43:df:8d:09:fa:b4:ca:21:ba:78:0d:66:4d:26:42: 06:82:53:b0:bd:71:74:ee:74:c0:bb:7f:e9:66:1e:7f:cc:9b: 84:67:2e:fa:bb:a5:a9:fe:9f:87:57:f2:22:7a:cd:0a:73:f9: fb:95:b3:da:46:63:78:66:56:d1:ec:43:e6:d4:47:42:6a:f0: ce:3c:c5:06:28:dc:66:7d:9d:94:e0:9a:5e:9e:7e:ab:0a:06: 07:f4:40:62:ed:11:86:fc:ae:84:db:b4:b4:aa:f5:62:6a:bd: 69:0c:b8:05:d4:f1:c4:0d:21:d4:dc:59:34:bc:ce:5f:a4:5f: 42:c9:b9:25:b7:37:fd:9d:8a:9b:1b:14:08:21:23:9a:8f:a9: 40:b8:30:db:14:12:40:9c:45:9c:84:4a:fa:87:18:9b:ed:c2: 80:d9:5e:96:02:89:fc:3a:58:fd:67:0d:e1:01:49:8f:95:a1: ea:6a:ac:ef -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzQyNTExMC8GA1UEBRMoNzZDQ0I3MUJDMzhEQkVDOEY1QjM1QUU3QjlGNzRFQTZC ODM2RTUwODAeFw0yNjA1MTkwOTAwMDdaFw0yNjA1MjYwOTAwMDdaMBgxFjAUBgNV BAMTDTZhMGMyNjk3LTM0ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBX4yLO/HX77bdubkDtPOB8TsWdfYwC3xetN7BzYXnaARK2ngMV4A8y3SlyNZq zOVQkMl4rQlg9m4jOsIuATFQIRA0w6LAGgXcXRw1H0rjWKuMd2j4qWnpJ1OneWSG f4rRJuV0Je3rvTYsXc9Z+WI2KeQgHVW1I9r+o+Ht5amRxFaVQrxCu4wxeWCQNKI/ kl3v+XtWRFEvYzLTzOO9wV0AZHDdb6rDVCcezq9BfizZPiz8gML8G2E+Unbm6q/6 MOby/jWl5CM/KSyYHPsyKklbZHbGQZQlgfahXP0D+yxoCkbxyS/ifaIXnwQAESlj 57R80eIOARbBcKRX6qXXMRc3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWaZMyPey Gznt9S5AG/KCz1R1yUwwHwYDVR0jBBgwFoAUdsy3G8ONvsj1s1rnufdOprg25Qgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3NDI1LzUyNjdERTZFNDMw NDExRjFCQUFGREYzQjlBODMzNzczL2RzeTNHOE9OdnNqMXMxcm51ZmRPcHJnMjVR Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZHN5M0c4T052c2oxczFybnVmZE9wcmcyNVFnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 NDI1LzUyNjdERTZFNDMwNDExRjFCQUFGREYzQjlBODMzNzczL2RzeTNHOE9OdnNq MXMxcm51ZmRPcHJnMjVRZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBqGEl3OmYu7EFdSLLYDqGsxYVRXw5mK9abVZKhQRU3yEZwti6uW9BKYcXxCKkC gUniRjis0505HYmXFzhaLcYwr5IBB4ZKPyLdalRD340J+rTKIbp4DWZNJkIGglOw vXF07nTAu3/pZh5/zJuEZy76u6Wp/p+HV/Iies0Kc/n7lbPaRmN4ZlbR7EPm1EdC avDOPMUGKNxmfZ2U4Jpenn6rCgYH9EBi7RGG/K6E27S0qvViar1pDLgF1PHEDSHU 3Fk0vM5fpF9Cybkltzf9nYqbGxQIISOaj6lAuDDbFBJAnEWchEr6hxib7cKA2V6W Aon8Olj9Zw3hAUmPlaHqaqzv -----END CERTIFICATE-----Generated at Thu May 21 09:39:30 2026 by rpki-client