$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft File: vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft (raw, json) Hash identifier: C0nZY2kVs5IDaRdvtvpGOVTPKGj8ZNWdKol763qo8xo= Subject key identifier: 99:9C:30:FD:17:18:71:6F:AA:E1:4B:FF:8E:94:62:DD:AD:32:34:AA Authority key identifier: BD:06:BD:BF:8B:0E:ED:BC:9F:07:39:5A:65:25:4F:CB:85:83:98:9D Certificate issuer: /CN=A91CB816/serialNumber=BD06BDBF8B0EEDBC9F07395A65254FCB8583989D Certificate serial: 07D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft Manifest number: 07C8 Signing time: Wed 20 May 2026 21:25:21 +0000 Manifest this update: Wed 20 May 2026 21:25:20 +0000 Manifest next update: Wed 27 May 2026 21:25:20 +0000 Files and hashes: 1: vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl (hash: yc4YqPCQfmIZjo7RyFs6U/Wh4dOKkWpSnnkRnVKdbqo=) 2: 7D8845C43DD911EB8DA0EE5FC4F9AE02.roa (hash: 4xgzK7PrNpZAnd72wXzvBuPzMZA+sokeDoeYoGYDtEI=) 3: 122052A03DD811EBAE99F45CC4F9AE02.roa (hash: mtoKEHPZWLoyi/r8N8V2JGeY1kwSeTuX6aCOjVwyle4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 21:25:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2008 (0x7d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB816, serialNumber=BD06BDBF8B0EEDBC9F07395A65254FCB8583989D Validity Not Before: May 20 21:25:20 2026 GMT Not After : May 27 21:25:20 2026 GMT Subject: CN=6a0e26c0-5bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b4:b9:26:b8:b0:ed:e0:a0:0d:fa:1b:2c:e7: 3d:e2:89:90:b1:6a:3f:a6:66:c1:41:d6:40:d3:05: 9b:12:ec:58:24:8c:4d:cc:bd:eb:8f:4e:a5:d8:b3: dc:c8:aa:08:84:6d:86:e9:7f:ff:05:04:5b:5f:72: b2:d7:a3:81:1e:aa:c4:1e:cb:c8:86:bb:8a:35:aa: 79:92:58:2c:df:83:32:03:57:6f:c5:1c:b8:6a:63: a2:1d:ef:3a:b8:29:70:f9:5f:eb:ba:76:f6:21:b3: 28:91:d7:04:8c:f3:ea:5d:ec:a9:e5:8b:92:19:e1: dd:62:7f:23:cf:f4:ed:4f:46:9d:94:0b:30:8f:72: e7:fa:f8:47:c8:e1:17:4c:06:29:db:7f:19:ca:e5: 76:db:72:f5:9f:06:e5:b7:ba:f7:ac:c8:a4:cf:a7: 75:fc:7b:d1:57:57:0c:fb:ac:c2:a5:18:8d:8c:7c: 7b:82:7b:27:41:cf:e1:fa:71:f1:b5:03:8c:46:71: 07:3a:9f:5e:fa:ef:0d:d1:96:a7:44:ea:bb:86:cf: 42:d2:7f:06:e7:14:22:1c:10:78:1f:24:53:91:0f: 45:ca:0a:78:12:e5:8d:68:9e:5d:35:47:ed:a9:a4: b8:3b:1b:b1:2e:09:bf:3f:a8:19:fa:7f:d6:11:b5: a2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:9C:30:FD:17:18:71:6F:AA:E1:4B:FF:8E:94:62:DD:AD:32:34:AA X509v3 Authority Key Identifier: keyid:BD:06:BD:BF:8B:0E:ED:BC:9F:07:39:5A:65:25:4F:CB:85:83:98:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:19:c2:c3:b9:be:c2:ae:61:ae:77:36:80:45:c0:cb:49:c2: 0b:1e:f9:2f:13:81:41:41:32:c5:7a:d6:6e:70:81:b1:ce:e0: 05:2e:62:2e:4e:2d:09:d6:71:c3:eb:c1:e9:fd:f2:7f:99:f7: 2a:bd:d9:aa:df:03:4e:7a:0b:be:94:65:7a:2b:ba:1e:85:ad: 68:fb:62:0c:b6:ca:65:78:47:0c:51:5f:90:4f:f1:0a:67:87: 3d:d6:a3:c7:fb:0d:e1:05:63:eb:09:97:75:81:54:1c:4d:3d: d7:7c:a5:10:95:6f:46:de:f9:ab:9e:46:bc:72:45:4a:2f:04: 85:27:fc:be:3c:8a:74:d4:dd:f8:2d:1d:b3:68:a2:e6:dd:44: 2a:6f:ba:85:9d:a2:b4:27:1e:cc:18:b7:2a:20:90:c5:bc:b9: a7:5d:23:6a:9c:10:7b:2c:a9:54:db:7b:dc:9a:d6:ea:00:7a: 75:e5:91:96:24:1c:6a:fa:0b:4f:38:cb:a0:e1:9e:b8:c4:33: 31:35:cd:44:a3:90:c6:44:63:f2:12:f9:d7:e2:75:e2:3e:fe: b8:a3:c7:f4:c0:dd:ae:e8:39:4c:6a:6d:61:78:c0:9f:8c:02: 84:37:e3:50:fd:3e:13:b9:78:7c:f4:13:15:15:57:18:08:38: 0c:46:b8:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4MTYxMTAvBgNVBAUTKEJEMDZCREJGOEIwRUVEQkM5RjA3Mzk1QTY1MjU0RkNC ODU4Mzk4OUQwHhcNMjYwNTIwMjEyNTIwWhcNMjYwNTI3MjEyNTIwWjAYMRYwFAYD VQQDEw02YTBlMjZjMC01YmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7S5Jriw7eCgDfobLOc94omQsWo/pmbBQdZA0wWbEuxYJIxNzL3rj06l2LPc yKoIhG2G6X//BQRbX3Ky16OBHqrEHsvIhruKNap5klgs34MyA1dvxRy4amOiHe86 uClw+V/runb2IbMokdcEjPPqXeyp5YuSGeHdYn8jz/TtT0adlAswj3Ln+vhHyOEX TAYp238ZyuV223L1nwblt7r3rMikz6d1/HvRV1cM+6zCpRiNjHx7gnsnQc/h+nHx tQOMRnEHOp9e+u8N0ZanROq7hs9C0n8G5xQiHBB4HyRTkQ9Fygp4EuWNaJ5dNUft qaS4OxuxLgm/P6gZ+n/WEbWirwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJmcMP0X GHFvquFL/46UYt2tMjSqMB8GA1UdIwQYMBaAFL0Gvb+LDu28nwc5WmUlT8uFg5id MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjgxNi82MTA0NjYxMDNE RDYxMUVCQTA2MDJDNUJDNEY5QUUwMi92UWE5djRzTzdieWZCemxhWlNWUHk0V0Rt SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZRYTl2NHNPN2J5ZkJ6bGFaU1ZQeTRXRG1KMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjgxNi82MTA0NjYxMDNERDYxMUVCQTA2MDJDNUJDNEY5QUUwMi92UWE5djRzTzdi eWZCemxhWlNWUHk0V0RtSjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuBnCw7m+wq5hrnc2gEXAy0nCCx75LxOBQUEyxXrWbnCBsc7gBS5iLk4tCdZx w+vB6f3yf5n3Kr3Zqt8DTnoLvpRleiu6HoWtaPtiDLbKZXhHDFFfkE/xCmeHPdaj x/sN4QVj6wmXdYFUHE0913ylEJVvRt75q55GvHJFSi8EhSf8vjyKdNTd+C0ds2ii 5t1EKm+6hZ2itCcezBi3KiCQxby5p10japwQeyypVNt73JrW6gB6deWRliQcavoL TzjLoOGeuMQzMTXNRKOQxkRj8hL51+J14j7+uKPH9MDdrug5TGptYXjAn4wChDfj UP0+E7l4fPQTFRVXGAg4DEa4DA== -----END CERTIFICATE-----Generated at Thu May 21 09:38:58 2026 by rpki-client