$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft File: 8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft (raw, json) Hash identifier: p+NtXeNLI8vfcJJtGJTtku5b0R980/1DBmRRpR9BlaQ= Subject key identifier: 72:81:03:5A:D7:6C:EF:C6:E8:71:7E:98:0F:9F:9D:7D:D2:99:0F:C5 Authority key identifier: F2:44:81:5D:5B:39:1E:20:00:B7:8C:A9:6E:19:30:20:FF:90:22:58 Certificate issuer: /CN=A91CDF78/serialNumber=F244815D5B391E2000B78CA96E193020FF902258 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kSBXVs5HiAAt4ypbhkwIP-QIlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft Manifest number: 0C Signing time: Thu 21 May 2026 09:17:02 +0000 Manifest this update: Thu 21 May 2026 09:17:01 +0000 Manifest next update: Thu 28 May 2026 09:17:01 +0000 Files and hashes: 1: 8kSBXVs5HiAAt4ypbhkwIP-QIlg.crl (hash: t4S898Wc0E4Z3WxE35Eq0F7qppB3kLqawVYCicQ0oeU=) 2: 46165CDE490411F1BC93ABE395833773.roa (hash: X96VcqcjafQHkS8RXd769VXGiUvTLL5bk9V9PsYGSzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.crl rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kSBXVs5HiAAt4ypbhkwIP-QIlg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 09:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDF78, serialNumber=F244815D5B391E2000B78CA96E193020FF902258 Validity Not Before: May 21 09:17:01 2026 GMT Not After : May 28 09:17:01 2026 GMT Subject: CN=6a0ecd8e-0756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0b:28:8a:54:fa:fe:4d:30:e3:32:e0:ba:90: f9:b9:d3:06:98:31:8a:72:23:ef:4c:98:ef:92:13: 59:01:73:cc:5d:9d:19:b0:4b:d0:2b:03:a3:f3:9d: a7:73:8e:4b:3f:f2:af:5f:c1:d6:18:05:ca:65:58: 12:29:ea:0d:b9:57:2b:9b:f2:23:3f:06:57:35:60: 6b:7a:b6:13:7f:08:57:cb:3c:ab:74:be:7c:1b:6b: 23:49:fb:c8:b5:15:79:8d:55:42:db:b0:20:5d:06: 2b:a1:fb:35:bf:56:6b:a8:f9:da:48:08:f0:0d:a9: 99:f4:f3:c4:b0:47:c8:9a:47:dd:5a:65:a3:7e:f9: dc:c8:7a:12:aa:e7:36:72:4a:14:b1:b2:0f:62:c6: 74:2b:41:b3:e9:73:03:98:e1:ea:21:b3:3c:be:5f: ea:8f:2f:86:b6:ec:4a:bd:96:10:2f:18:a2:75:f1: 10:43:24:58:85:ca:f7:8b:46:93:19:e4:f6:58:72: e2:86:21:84:39:1c:54:e7:7f:25:37:02:5d:ea:4a: 7d:3b:0f:2b:24:31:89:7c:cf:96:92:c1:dc:51:de: a7:b5:f6:0e:65:6d:51:96:67:b8:d6:2f:fd:20:e2: 05:16:c3:3d:2d:3c:5f:b0:22:df:fa:16:c0:36:13: ec:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:81:03:5A:D7:6C:EF:C6:E8:71:7E:98:0F:9F:9D:7D:D2:99:0F:C5 X509v3 Authority Key Identifier: keyid:F2:44:81:5D:5B:39:1E:20:00:B7:8C:A9:6E:19:30:20:FF:90:22:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kSBXVs5HiAAt4ypbhkwIP-QIlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF78/F0309BA647C611F19E38693EB1833773/8kSBXVs5HiAAt4ypbhkwIP-QIlg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:56:f2:7a:be:94:47:87:0f:b9:42:b3:0d:43:ae:b9:44:7d: 84:86:98:e9:73:0d:84:9b:ac:16:ad:e9:12:ce:84:c9:4b:71: fd:2b:e6:50:ba:73:00:11:28:fb:e0:56:7f:05:9c:7d:54:cd: 11:83:ef:0a:30:41:7a:44:cb:12:37:11:b1:39:47:40:82:bf: 68:0a:5a:2a:76:61:9b:f8:2a:8b:1c:3e:98:2b:22:15:e9:5f: 1b:44:79:3b:ec:15:48:6c:14:72:e6:1b:92:38:36:86:ee:b7: 72:c6:5a:64:78:e1:dd:95:2d:65:b5:4c:1a:21:be:8c:7e:1b: cc:49:8d:a3:a5:97:6b:61:9e:e7:11:ca:a3:18:80:5b:d5:58: 3c:24:89:61:dc:81:68:34:c1:31:86:03:d6:84:07:7b:ba:29: ab:c9:24:f3:44:13:74:46:d2:5d:1a:5f:60:08:e0:8d:2b:de: 3d:71:56:4f:10:58:5b:53:cc:06:57:54:6b:3d:80:c3:5d:46: d2:50:2a:b5:d3:d3:31:17:76:5e:e9:ed:b0:80:6b:e4:73:10: cd:e9:46:88:e7:98:e8:a8:de:d6:5d:ea:f4:56:28:c5:1a:bc: 53:49:8f:ed:6d:ef:15:37:7e:51:86:9e:70:69:40:c1:c8:14: f1:a1:75:cb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD REY3ODExMC8GA1UEBRMoRjI0NDgxNUQ1QjM5MUUyMDAwQjc4Q0E5NkUxOTMwMjBG RjkwMjI1ODAeFw0yNjA1MjEwOTE3MDFaFw0yNjA1MjgwOTE3MDFaMBgxFjAUBgNV BAMTDTZhMGVjZDhlLTA3NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmCyiKVPr+TTDjMuC6kPm50waYMYpyI+9MmO+SE1kBc8xdnRmwS9ArA6Pznadz jks/8q9fwdYYBcplWBIp6g25Vyub8iM/Blc1YGt6thN/CFfLPKt0vnwbayNJ+8i1 FXmNVULbsCBdBiuh+zW/Vmuo+dpICPANqZn088SwR8iaR91aZaN++dzIehKq5zZy ShSxsg9ixnQrQbPpcwOY4eohszy+X+qPL4a27Eq9lhAvGKJ18RBDJFiFyveLRpMZ 5PZYcuKGIYQ5HFTnfyU3Al3qSn07DyskMYl8z5aSwdxR3qe19g5lbVGWZ7jWL/0g 4gUWwz0tPF+wIt/6FsA2E+zZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUcoEDWtds 78bocX6YD5+dfdKZD8UwHwYDVR0jBBgwFoAU8kSBXVs5HiAAt4ypbhkwIP+QIlgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNERjc4L0YwMzA5QkE2NDdD NjExRjE5RTM4NjkzRUIxODMzNzczLzhrU0JYVnM1SGlBQXQ0eXBiaGt3SVAtUUls Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOGtTQlhWczVIaUFBdDR5cGJoa3dJUC1RSWxnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE Rjc4L0YwMzA5QkE2NDdDNjExRjE5RTM4NjkzRUIxODMzNzczLzhrU0JYVnM1SGlB QXQ0eXBiaGt3SVAtUUlsZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAfVvJ6vpRHhw+5QrMNQ665RH2Ehpjpcw2Em6wWrekSzoTJS3H9K+ZQunMAESj7 4FZ/BZx9VM0Rg+8KMEF6RMsSNxGxOUdAgr9oCloqdmGb+CqLHD6YKyIV6V8bRHk7 7BVIbBRy5huSODaG7rdyxlpkeOHdlS1ltUwaIb6MfhvMSY2jpZdrYZ7nEcqjGIBb 1Vg8JIlh3IFoNMExhgPWhAd7uimrySTzRBN0RtJdGl9gCOCNK949cVZPEFhbU8wG V1RrPYDDXUbSUCq109MxF3Ze6e2wgGvkcxDN6UaI55joqN7WXer0VijFGrxTSY/t be8VN35Rhp5waUDByBTxoXXL -----END CERTIFICATE-----Generated at Thu May 21 17:45:13 2026 by rpki-client