$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft File: 2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft (raw, json) Hash identifier: aJ+GIIhZI9ctouKff7GwMMqS2rm0cZ7IifEcyaPEh/U= Subject key identifier: 47:89:ED:A0:0B:DA:BD:81:13:E1:C4:BC:61:7D:15:39:25:A7:6F:14 Authority key identifier: DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14 Certificate issuer: /CN=A91CD00C/serialNumber=DB2CCCA83D853288C500CDFC3AE1E2FEA049F514 Certificate serial: 03F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft Manifest number: 03E7 Signing time: Thu 21 May 2026 00:36:18 +0000 Manifest this update: Thu 21 May 2026 00:36:18 +0000 Manifest next update: Thu 28 May 2026 00:36:18 +0000 Files and hashes: 1: 2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl (hash: J2oLnBPoZkWMSGEIuE1YtZpTseFvRbc86V00R1ryzp0=) 2: 15D68F5ED55011EFA0564D54C4F9AE02.roa (hash: 6ChvL5bIW0nd/LEwk1GkYjUq9x3wU+NsnqxaoPxGr+c=) 3: 46654408C6CB11ECB185E43EC4F9AE02.roa (hash: SAmq2qut5svZXJTr/IN8K0rrvVU2RQUex9B9Y/hGwvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 00:36:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1011 (0x3f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD00C, serialNumber=DB2CCCA83D853288C500CDFC3AE1E2FEA049F514 Validity Not Before: May 21 00:36:18 2026 GMT Not After : May 28 00:36:18 2026 GMT Subject: CN=6a0e5382-89c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bf:1b:54:1b:6c:2a:e1:d7:d9:d6:cd:3e:42: 0f:f5:63:5e:8a:94:2d:e1:38:d0:34:e4:34:7a:ac: a2:2c:4c:da:c1:33:26:ac:bd:5d:64:b0:ae:dc:10: d5:6e:fb:19:c6:18:4a:33:c2:2b:63:49:fc:6d:d7: fb:a7:f7:11:ed:9e:87:73:1f:e1:72:e3:45:c3:a4: d2:6d:1b:7e:ed:43:8c:8b:4d:56:41:eb:6b:f0:28: a8:70:06:f1:f1:97:31:ce:df:2c:2c:6b:99:09:32: 03:6f:1c:41:0d:12:cf:3b:88:f8:be:8b:27:f9:81: 6d:03:e8:80:ea:7c:3d:3d:5e:61:59:2c:f0:39:b9: 89:7f:fa:07:cc:25:39:c1:03:5a:0e:51:5e:b5:5a: f9:55:2d:e6:73:0a:ec:7d:87:88:bf:cc:d3:0f:fa: 3d:1e:03:f8:4f:f0:dd:6f:dc:8a:1b:07:37:17:6e: f0:53:0b:7e:96:cd:14:03:0e:fb:fc:1b:e9:c0:3e: d8:3e:77:36:3a:97:a3:a8:66:0f:0d:ed:1f:b1:ac: a4:3f:6f:52:00:9c:68:31:ee:08:33:78:88:47:e5: 1b:57:92:0a:86:e3:72:ad:76:7c:90:67:96:fb:d4: 40:6e:4a:86:6e:29:62:49:ee:e2:e9:57:91:08:89: c3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:89:ED:A0:0B:DA:BD:81:13:E1:C4:BC:61:7D:15:39:25:A7:6F:14 X509v3 Authority Key Identifier: keyid:DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:d4:36:a1:91:d4:40:90:2b:47:29:11:be:f6:c2:50:a6:25: dc:84:3a:80:ab:0b:b7:70:73:dc:b6:af:55:b2:60:ec:8e:95: 7f:69:19:0e:48:29:59:08:72:95:a5:a6:5c:03:93:88:51:31: b3:a4:62:92:80:5d:93:1a:c3:48:ad:e8:f6:02:f3:be:bf:86: 54:5b:a8:52:12:04:2d:da:ae:4f:b1:a3:9d:74:d2:18:ba:64: 50:35:4b:34:9d:ff:44:fb:db:5a:08:37:fe:89:80:5a:8d:31: 00:eb:3d:83:7d:d5:88:10:1b:77:7d:c7:83:87:37:ed:02:c1: 66:85:ae:54:0b:14:fe:b4:9a:14:1e:57:48:dc:1d:56:51:7e: 37:6c:80:1e:43:08:59:cf:94:9c:b0:a1:6a:9d:37:71:c5:2b: 76:d7:87:8c:2b:ef:f0:1c:75:dd:f3:20:1c:20:bf:a4:55:c2: ab:35:eb:e0:ab:31:9a:61:c3:28:9b:77:96:20:52:66:6a:01: e6:d7:ca:6a:a9:20:d9:78:9d:9b:af:b2:86:50:85:93:f1:13: d8:79:55:17:90:8e:67:45:15:6d:9f:c9:1c:1e:a7:2d:c4:eb: 16:e7:5a:4a:78:74:53:3f:08:38:7c:96:82:55:07:1a:64:57: c6:6c:a6:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QwMEMxMTAvBgNVBAUTKERCMkNDQ0E4M0Q4NTMyODhDNTAwQ0RGQzNBRTFFMkZF QTA0OUY1MTQwHhcNMjYwNTIxMDAzNjE4WhcNMjYwNTI4MDAzNjE4WjAYMRYwFAYD VQQDEw02YTBlNTM4Mi04OWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv78bVBtsKuHX2dbNPkIP9WNeipQt4TjQNOQ0eqyiLEzawTMmrL1dZLCu3BDV bvsZxhhKM8IrY0n8bdf7p/cR7Z6Hcx/hcuNFw6TSbRt+7UOMi01WQetr8CiocAbx 8Zcxzt8sLGuZCTIDbxxBDRLPO4j4vosn+YFtA+iA6nw9PV5hWSzwObmJf/oHzCU5 wQNaDlFetVr5VS3mcwrsfYeIv8zTD/o9HgP4T/Ddb9yKGwc3F27wUwt+ls0UAw77 /BvpwD7YPnc2OpejqGYPDe0fsaykP29SAJxoMe4IM3iIR+UbV5IKhuNyrXZ8kGeW +9RAbkqGbiliSe7i6VeRCInDPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEeJ7aAL 2r2BE+HEvGF9FTklp28UMB8GA1UdIwQYMBaAFNsszKg9hTKIxQDN/Drh4v6gSfUU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDAwQy9DQUE4ODYxRUM2 MDExMUVDOTVGRjFFMTFDNEY5QUUwMi8yeXpNcUQyRk1vakZBTTM4T3VIaV9xQko5 UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ5ek1xRDJGTW9qRkFNMzhPdUhpX3FCSjlSUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDAwQy9DQUE4ODYxRUM2MDExMUVDOTVGRjFFMTFDNEY5QUUwMi8yeXpNcUQyRk1v akZBTTM4T3VIaV9xQko5UlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI9Q2oZHUQJArRykRvvbCUKYl3IQ6gKsLt3Bz3LavVbJg7I6Vf2kZDkgpWQhy laWmXAOTiFExs6RikoBdkxrDSK3o9gLzvr+GVFuoUhIELdquT7GjnXTSGLpkUDVL NJ3/RPvbWgg3/omAWo0xAOs9g33ViBAbd33Hg4c37QLBZoWuVAsU/rSaFB5XSNwd VlF+N2yAHkMIWc+UnLChap03ccUrdteHjCvv8Bx13fMgHCC/pFXCqzXr4KsxmmHD KJt3liBSZmoB5tfKaqkg2Xidm6+yhlCFk/ET2HlVF5COZ0UVbZ/JHB6nLcTrFuda Snh0Uz8IOHyWglUHGmRXxmym3w== -----END CERTIFICATE-----Generated at Thu May 21 09:36:00 2026 by rpki-client