$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft File: gFLXiRiFOIg0vD1ozrIclvdiXmc.mft (raw, json) Hash identifier: xONzJXY7HmwT9OJNi6LYlPghAIaFNp274MbC2leWPlE= Subject key identifier: E6:57:C6:91:00:64:6D:B0:85:F4:90:D7:C9:1D:02:D1:B3:56:2E:AD Authority key identifier: 80:52:D7:89:18:85:38:88:34:BC:3D:68:CE:B2:1C:96:F7:62:5E:67 Certificate issuer: /CN=A91CBE89/serialNumber=8052D7891885388834BC3D68CEB21C96F7625E67 Certificate serial: 1F12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft Manifest number: 1F11 Signing time: Wed 20 May 2026 16:01:13 +0000 Manifest this update: Wed 20 May 2026 16:01:12 +0000 Manifest next update: Wed 27 May 2026 16:01:12 +0000 Files and hashes: 1: gFLXiRiFOIg0vD1ozrIclvdiXmc.crl (hash: Qk/YawsJ9WLtmbz7pZzzWkY4HvTndVvvC4jPK8N+/lU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.crl rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 16:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7954 (0x1f12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBE89, serialNumber=8052D7891885388834BC3D68CEB21C96F7625E67 Validity Not Before: May 20 16:01:12 2026 GMT Not After : May 27 16:01:12 2026 GMT Subject: CN=6a0ddac9-f9fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e1:44:f1:20:7e:18:17:ca:a9:d9:31:dc:7a: c3:5c:4b:c8:20:d5:93:c8:be:c1:f9:36:5b:3d:dd: ee:2d:5a:a2:53:f4:c0:2a:81:93:5e:f5:57:9b:16: cd:b5:05:b2:cc:98:7b:3a:a3:f0:06:a5:fb:85:27: 15:1a:94:4d:25:52:63:a1:b1:32:a1:1d:b4:2f:da: 2d:6b:b6:b3:0d:89:cd:3c:25:1a:30:be:6a:c7:39: 40:3d:33:d3:01:ae:fb:e5:42:c4:2a:d3:ee:67:4c: 8b:b6:7e:9d:33:ba:ef:17:6d:2f:c4:6e:af:e2:24: 60:99:10:46:14:c2:bc:de:19:09:63:70:a3:85:2e: b3:45:93:ee:ed:cf:d5:88:07:02:ee:cb:39:cd:17: 3f:a1:cc:67:c2:46:d1:ed:47:ca:b0:53:5f:54:88: 9c:cb:20:4e:10:cc:3a:d4:4f:47:5a:ba:18:d3:12: 9d:c4:e3:27:da:84:0a:a8:d8:3d:8b:f6:a5:7f:5e: 42:1d:33:9c:20:c9:9b:27:9e:06:bc:67:ab:8c:b0: 45:39:67:bf:dd:ab:7a:6d:1e:ea:a7:62:db:a5:d3: 88:88:be:1f:db:14:dd:f0:84:14:51:be:2a:de:0f: 65:be:ed:45:f1:a9:bc:a5:bc:df:04:88:81:7c:51: c5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:57:C6:91:00:64:6D:B0:85:F4:90:D7:C9:1D:02:D1:B3:56:2E:AD X509v3 Authority Key Identifier: keyid:80:52:D7:89:18:85:38:88:34:BC:3D:68:CE:B2:1C:96:F7:62:5E:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:39:2b:6e:f5:7a:c6:48:f5:c5:f9:b0:53:c6:7c:47:1a:67: 67:0e:a0:e0:8c:38:04:07:3b:7d:68:63:a5:29:37:ff:b7:11: 52:81:c6:df:95:1b:56:b9:15:10:aa:6a:87:98:f3:26:48:40: ea:05:7c:8f:39:c2:bb:16:de:b5:d1:83:6e:0a:af:48:b6:6a: 1c:29:17:01:57:c0:67:87:1d:34:8a:65:1b:67:5f:31:6c:8d: 2f:76:c0:30:63:64:11:ec:5d:a5:69:b4:d4:0d:36:3a:ef:a5: c2:c6:fa:20:51:0b:c2:bb:ae:f3:47:7b:84:3b:ea:c2:24:a1: a6:92:15:ba:cc:5c:1c:e0:86:9b:21:87:25:be:b6:3f:e9:4d: 5f:ce:c5:f6:11:78:b4:77:23:02:4d:d1:68:6c:ff:04:07:2f: d0:4a:f3:96:9e:82:f5:55:d1:7a:aa:16:0e:28:58:e5:8f:72: ba:cf:38:1e:c6:0a:a3:01:f9:6c:9d:b7:73:3e:b0:8a:f8:11: 01:5d:ac:fc:f2:bf:fe:51:50:a2:7e:41:6b:f3:4f:79:f6:6a: 4f:70:f3:8e:52:85:96:fb:56:aa:9b:9c:80:6b:17:bb:af:fe: cf:6a:d4:be:a5:a5:33:f8:49:2a:1c:cb:5e:5a:87:4d:14:11: 60:0d:25:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JFODkxMTAvBgNVBAUTKDgwNTJENzg5MTg4NTM4ODgzNEJDM0Q2OENFQjIxQzk2 Rjc2MjVFNjcwHhcNMjYwNTIwMTYwMTEyWhcNMjYwNTI3MTYwMTEyWjAYMRYwFAYD VQQDEw02YTBkZGFjOS1mOWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuFE8SB+GBfKqdkx3HrDXEvIINWTyL7B+TZbPd3uLVqiU/TAKoGTXvVXmxbN tQWyzJh7OqPwBqX7hScVGpRNJVJjobEyoR20L9ota7azDYnNPCUaML5qxzlAPTPT Aa775ULEKtPuZ0yLtn6dM7rvF20vxG6v4iRgmRBGFMK83hkJY3CjhS6zRZPu7c/V iAcC7ss5zRc/ocxnwkbR7UfKsFNfVIicyyBOEMw61E9HWroY0xKdxOMn2oQKqNg9 i/alf15CHTOcIMmbJ54GvGerjLBFOWe/3at6bR7qp2LbpdOIiL4f2xTd8IQUUb4q 3g9lvu1F8am8pbzfBIiBfFHFVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOZXxpEA ZG2whfSQ18kdAtGzVi6tMB8GA1UdIwQYMBaAFIBS14kYhTiINLw9aM6yHJb3Yl5n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkU4OS9GMjcyNkExODc2 M0MxMUU2QjAxRTA4NTlDNEY5QUUwMi9nRkxYaVJpRk9JZzB2RDFvenJJY2x2ZGlY bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dGTFhpUmlGT0lnMHZEMW96ckljbHZkaVhtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkU4OS9GMjcyNkExODc2M0MxMUU2QjAxRTA4NTlDNEY5QUUwMi9nRkxYaVJpRk9J ZzB2RDFvenJJY2x2ZGlYbWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbTkrbvV6xkj1xfmwU8Z8RxpnZw6g4Iw4BAc7fWhjpSk3/7cRUoHG35UbVrkV EKpqh5jzJkhA6gV8jznCuxbetdGDbgqvSLZqHCkXAVfAZ4cdNIplG2dfMWyNL3bA MGNkEexdpWm01A02Ou+lwsb6IFELwruu80d7hDvqwiShppIVusxcHOCGmyGHJb62 P+lNX87F9hF4tHcjAk3RaGz/BAcv0Erzlp6C9VXReqoWDihY5Y9yus84HsYKowH5 bJ23cz6wivgRAV2s/PK//lFQon5Ba/NPefZqT3DzjlKFlvtWqpucgGsXu6/+z2rU vqWlM/hJKhzLXlqHTRQRYA0l6w== -----END CERTIFICATE-----Generated at Thu May 21 09:38:46 2026 by rpki-client