$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft File: WDy8e8lmFFeQyfbyI2iK2v5a07g.mft (raw, json) Hash identifier: PqHs2VWsb5/2KcCsPgxYEhz3AdiRF/ASGVksTfgLeg8= Subject key identifier: 56:9B:DA:81:F4:85:3B:18:AF:47:35:9F:21:74:66:53:A7:47:DC:8E Authority key identifier: 58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8 Certificate issuer: /CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8 Certificate serial: 0210 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft Manifest number: 01F7 Signing time: Thu 21 May 2026 03:21:27 +0000 Manifest this update: Thu 21 May 2026 03:21:27 +0000 Manifest next update: Thu 28 May 2026 03:21:27 +0000 Files and hashes: 1: WDy8e8lmFFeQyfbyI2iK2v5a07g.crl (hash: ETFOIQ99qdGoXlkbHnBplZhKtRJaWQ+0qAAHDoyPvoE=) 2: A6F6E9E43C6E11F19CBF2AC991833773.roa (hash: 46x0HcGyg5ZqbRk9Z/I39DBeqCVUcYGSuLiYKPf2rpo=) 3: 09820DBA626411EEB46F7861C4F9AE02.roa (hash: ZCeCkuNAMK9rwX4/TECTij2fUOVdG//HOrl/aGbqzoQ=) 4: 9AD1EA98626311EE8EE2D260C4F9AE02.roa (hash: TRYBWoWB1+O1h6++uHuCXlTu4HpKrVeUUMhvWRHclCc=) 5: 35941A5CF49D11EFBD8ACC0EC4F9AE02.roa (hash: lnol3FDE+TIgmDpE8Hb5zoS0uAhkzs2Kf9xTWAAdaZg=) 6: 34F912AAF49D11EFBD8ACC0EC4F9AE02.roa (hash: j8XwNmKzHtxOYC1qN4eC3Mdd11Pr7Jsabm08Gp7iA9o=) 7: 34509C1AF49D11EFBD8ACC0EC4F9AE02.roa (hash: A4JCozIWp8wr/poP9Jp6dNkVfMHGLYtzZMkqHhGl4c8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 03:21:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 528 (0x210) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFF62, serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8 Validity Not Before: May 21 03:21:27 2026 GMT Not After : May 28 03:21:27 2026 GMT Subject: CN=6a0e7a37-dd1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6e:1e:30:a7:ac:26:cd:1e:7d:7f:14:77:a9: ec:be:fc:e4:f0:6b:c7:97:38:31:d9:5f:4f:58:e8: 63:a7:75:4d:83:ab:36:62:20:87:9b:8c:05:36:18: 33:68:90:56:3a:c6:98:a7:d5:73:04:d5:97:4e:74: 62:cf:ae:16:95:b9:04:90:17:7a:18:4d:44:8f:43: 63:79:8c:23:6d:cd:0e:3a:91:c9:3f:91:a3:20:21: 78:7a:c0:7f:71:ac:bb:82:95:5e:50:e9:14:23:1d: 7f:18:21:20:bc:0e:08:39:7a:51:40:43:6d:2c:4a: 59:87:dd:cd:5b:f0:a3:ec:75:d4:71:75:75:3b:87: 09:01:0d:ad:67:72:af:d9:8a:68:1a:69:83:6c:01: 04:1c:00:f5:0f:1c:6a:33:47:71:0a:ee:72:7d:2c: 89:c2:c7:d8:11:50:cb:5b:d9:6d:40:a4:e5:dd:1e: 67:30:d7:16:fc:dd:14:c0:16:6c:bd:19:07:b0:d1: cf:68:06:71:ea:2a:b3:be:c9:54:54:2f:56:63:a3: e8:c6:ef:39:03:fb:4a:90:b1:60:1a:c0:09:cf:f9: c6:d6:4b:88:fc:73:90:b0:e6:c2:8f:05:4d:28:24: 53:df:eb:67:70:09:4c:65:39:6f:92:49:68:29:85: c7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:9B:DA:81:F4:85:3B:18:AF:47:35:9F:21:74:66:53:A7:47:DC:8E X509v3 Authority Key Identifier: keyid:58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:39:fa:37:af:d9:39:c0:25:69:3b:bd:d6:05:20:ea:bc:04: 56:89:57:83:36:5c:fb:02:ca:c0:48:ea:89:1f:22:76:b6:ee: c2:cd:65:d1:a2:8b:04:da:77:86:9e:ab:9f:ca:7c:f7:54:31: 7a:fb:b2:b9:ef:84:58:a5:d2:2a:16:7d:f3:6c:6d:a2:e6:16: 23:89:47:82:bb:b3:62:08:17:46:f1:29:c2:29:db:84:f9:01: 81:24:51:e0:58:1b:12:58:4f:93:8b:b3:ba:be:3d:42:7d:62: 3a:9e:25:31:00:cf:20:93:2f:9f:3f:bf:f4:40:56:b5:69:d4: 38:b7:12:2a:81:1b:8c:4e:d3:d5:be:cb:3a:ef:f9:dd:cc:87: a1:27:b3:1f:ae:49:e2:e3:3b:bf:9c:81:cc:13:89:75:39:56: 8e:61:46:be:a6:ca:35:23:f5:b3:17:fe:91:e8:92:49:75:0d: 6e:33:7b:a9:09:b7:4c:48:c4:74:7d:ed:4b:bf:15:f5:83:b9: 9a:7a:00:65:1b:fb:41:35:78:81:ac:73:3f:d9:70:08:74:36: ed:03:af:0c:26:61:f6:e1:45:c6:82:b6:a6:61:5c:64:13:ac: a6:66:28:88:27:22:d2:38:06:de:6c:16:18:b3:6f:9c:ff:10: da:e7:8c:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGNjIxMTAvBgNVBAUTKDU4M0NCQzdCQzk2NjE0NTc5MEM5RjZGMjIzNjg4QURB RkU1QUQzQjgwHhcNMjYwNTIxMDMyMTI3WhcNMjYwNTI4MDMyMTI3WjAYMRYwFAYD VQQDEw02YTBlN2EzNy1kZDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnW4eMKesJs0efX8Ud6nsvvzk8GvHlzgx2V9PWOhjp3VNg6s2YiCHm4wFNhgz aJBWOsaYp9VzBNWXTnRiz64WlbkEkBd6GE1Ej0NjeYwjbc0OOpHJP5GjICF4esB/ cay7gpVeUOkUIx1/GCEgvA4IOXpRQENtLEpZh93NW/Cj7HXUcXV1O4cJAQ2tZ3Kv 2YpoGmmDbAEEHAD1DxxqM0dxCu5yfSyJwsfYEVDLW9ltQKTl3R5nMNcW/N0UwBZs vRkHsNHPaAZx6iqzvslUVC9WY6Poxu85A/tKkLFgGsAJz/nG1kuI/HOQsObCjwVN KCRT3+tncAlMZTlvkkloKYXHPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFab2oH0 hTsYr0c1nyF0ZlOnR9yOMB8GA1UdIwQYMBaAFFg8vHvJZhRXkMn28iNoitr+WtO4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkY2Mi8xMUY0RDhEMDYy NjIxMUVFODBCQzg1NURDNEY5QUUwMi9XRHk4ZThsbUZGZVF5ZmJ5STJpSzJ2NWEw N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dEeThlOGxtRkZlUXlmYnlJMmlLMnY1YTA3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkY2Mi8xMUY0RDhEMDYyNjIxMUVFODBCQzg1NURDNEY5QUUwMi9XRHk4ZThsbUZG ZVF5ZmJ5STJpSzJ2NWEwN2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQDn6N6/ZOcAlaTu91gUg6rwEVolXgzZc+wLKwEjqiR8idrbuws1l0aKLBNp3 hp6rn8p891Qxevuyue+EWKXSKhZ982xtouYWI4lHgruzYggXRvEpwinbhPkBgSRR 4FgbElhPk4uzur49Qn1iOp4lMQDPIJMvnz+/9EBWtWnUOLcSKoEbjE7T1b7LOu/5 3cyHoSezH65J4uM7v5yBzBOJdTlWjmFGvqbKNSP1sxf+keiSSXUNbjN7qQm3TEjE dH3tS78V9YO5mnoAZRv7QTV4gaxzP9lwCHQ27QOvDCZh9uFFxoK2pmFcZBOspmYo iCci0jgG3mwWGLNvnP8Q2ueMIQ== -----END CERTIFICATE-----Generated at Thu May 21 12:17:23 2026 by rpki-client