$ rpki-client -vvf rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft File: 8Esk0kgu8B-It9DWKlOSJzm3iA0.mft (raw, json) Hash identifier: JeQ3GJUa/yRZLn9ki9wTWrmLfbKnsz/YoAypfIYjulQ= Subject key identifier: 1C:06:26:C3:E1:57:8C:17:C9:FB:73:FE:F5:F5:D8:C7:6F:E2:C1:BB Authority key identifier: F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D Certificate issuer: /CN=A91D112B/serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D Certificate serial: 07FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft Manifest number: 07F3 Signing time: Wed 20 May 2026 21:18:20 +0000 Manifest this update: Wed 20 May 2026 21:18:20 +0000 Manifest next update: Wed 27 May 2026 21:18:20 +0000 Files and hashes: 1: 8Esk0kgu8B-It9DWKlOSJzm3iA0.crl (hash: cH3FCg4ZFJRbRnKGGh+qisaz3ifm79qNDuzg9gabWOU=) 2: D00FC228F46111ECA631AC55C4F9AE02.roa (hash: CCeYRNeMxbpOCPaIE3BqCoWORj/K4Cmf/wyUKaeIcyQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 21:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2047 (0x7ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D112B, serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D Validity Not Before: May 20 21:18:20 2026 GMT Not After : May 27 21:18:20 2026 GMT Subject: CN=6a0e251c-84c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:32:cf:70:bc:2f:fd:61:1c:84:3d:78:4a:ae: d5:e9:9c:3d:fa:b5:34:b4:3a:72:dc:8b:bc:f1:3c: 60:69:16:cb:95:26:d8:39:cb:92:91:aa:b9:52:8d: 87:c0:51:ec:86:46:22:fd:fc:4a:a8:5c:0f:36:e8: 97:c2:27:94:42:38:b3:fc:39:f0:0d:d2:db:24:6e: 75:c7:a0:09:a8:f0:dc:c5:5a:96:de:5e:05:38:bd: 97:e9:eb:84:39:d2:a0:a4:b5:ba:e0:b1:58:22:a9: bd:47:29:7f:16:c7:1b:ad:d2:b4:2a:1e:57:8c:ad: 7f:f3:80:9a:1a:72:21:ab:ec:00:e1:cc:3d:3a:2e: e9:cc:11:74:20:17:ee:ac:28:7c:f6:d4:df:45:c0: 05:fe:1a:dc:e1:3c:80:a0:3b:aa:fe:f4:9e:04:f2: 43:72:68:8b:a7:83:97:60:a8:28:6e:7e:fc:a9:c1: 43:78:4d:bd:70:eb:af:dd:b0:79:f9:3d:16:05:8b: 4e:73:72:5f:b2:91:3d:2e:cc:d6:ec:74:55:6c:f5: 60:3f:3b:83:8f:20:4a:75:aa:cf:4f:30:ca:f6:21: 9d:dd:0f:88:5f:e0:58:bb:64:b5:69:92:33:96:8b: c5:90:c6:f7:c0:d2:02:0f:f0:8b:f1:07:7e:62:cf: 32:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:06:26:C3:E1:57:8C:17:C9:FB:73:FE:F5:F5:D8:C7:6F:E2:C1:BB X509v3 Authority Key Identifier: keyid:F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:c4:21:79:9b:09:66:68:4c:56:44:9d:cd:d0:29:7c:0f:09: f4:23:b5:ee:96:ab:64:09:fa:68:af:f4:96:95:d3:da:ee:dd: e7:dd:97:90:cc:77:c2:35:ec:97:2c:a7:da:95:01:9a:3f:67: b1:f9:d6:68:df:3b:bb:ad:32:d9:f9:e4:dc:6e:cb:8e:d2:2e: 28:a7:5d:c1:c4:13:c8:fc:44:16:80:09:a1:46:36:67:4d:87: 90:68:33:c6:8a:2d:5b:7b:13:c3:a8:ee:e3:d5:89:74:0b:eb: c6:94:55:fd:9b:89:db:0c:9f:96:33:1b:7b:7e:d0:ef:a5:3c: 09:5a:9d:98:90:4f:30:13:ac:d5:2f:0d:77:d8:75:72:38:c1: a1:b4:33:b5:2e:77:79:d8:8d:d7:f0:62:56:8d:e7:bf:5f:21: b1:20:d5:16:b4:ee:90:bd:8d:60:78:a2:ce:c8:d5:67:10:21: c1:c1:73:80:dd:02:4c:c3:cf:ab:91:fb:2a:c7:83:d9:56:73: 53:01:ce:36:9c:15:45:7d:76:f5:a3:5f:40:c0:5f:cb:71:bc: ce:ae:61:e7:45:9e:09:ef:cb:d1:be:f2:e4:7d:2f:ef:d7:5c: 8d:11:ab:06:b4:e2:f3:85:b8:47:58:97:e0:d8:0e:d2:88:fa: 73:e3:47:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMkIxMTAvBgNVBAUTKEYwNEIyNEQyNDgyRUYwMUY4OEI3RDBENjJBNTM5MjI3 MzlCNzg4MEQwHhcNMjYwNTIwMjExODIwWhcNMjYwNTI3MjExODIwWjAYMRYwFAYD VQQDEw02YTBlMjUxYy04NGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjLPcLwv/WEchD14Sq7V6Zw9+rU0tDpy3Iu88TxgaRbLlSbYOcuSkaq5Uo2H wFHshkYi/fxKqFwPNuiXwieUQjiz/DnwDdLbJG51x6AJqPDcxVqW3l4FOL2X6euE OdKgpLW64LFYIqm9Ryl/FscbrdK0Kh5XjK1/84CaGnIhq+wA4cw9Oi7pzBF0IBfu rCh89tTfRcAF/hrc4TyAoDuq/vSeBPJDcmiLp4OXYKgobn78qcFDeE29cOuv3bB5 +T0WBYtOc3JfspE9LszW7HRVbPVgPzuDjyBKdarPTzDK9iGd3Q+IX+BYu2S1aZIz lovFkMb3wNICD/CL8Qd+Ys8ylQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBwGJsPh V4wXyftz/vX12Mdv4sG7MB8GA1UdIwQYMBaAFPBLJNJILvAfiLfQ1ipTkic5t4gN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEyQi8xQ0QwRTA1MDJG MzQxMUVCOTdGRTE3ODZDNEY5QUUwMi84RXNrMGtndThCLUl0OURXS2xPU0p6bTNp QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFc2swa2d1OEItSXQ5RFdLbE9TSnptM2lBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTEyQi8xQ0QwRTA1MDJGMzQxMUVCOTdGRTE3ODZDNEY5QUUwMi84RXNrMGtndThC LUl0OURXS2xPU0p6bTNpQTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAecQheZsJZmhMVkSdzdApfA8J9CO17parZAn6aK/0lpXT2u7d592XkMx3wjXs lyyn2pUBmj9nsfnWaN87u60y2fnk3G7LjtIuKKddwcQTyPxEFoAJoUY2Z02HkGgz xootW3sTw6ju49WJdAvrxpRV/ZuJ2wyfljMbe37Q76U8CVqdmJBPMBOs1S8Nd9h1 cjjBobQztS53ediN1/BiVo3nv18hsSDVFrTukL2NYHiizsjVZxAhwcFzgN0CTMPP q5H7KseD2VZzUwHONpwVRX129aNfQMBfy3G8zq5h50WeCe/L0b7y5H0v79dcjRGr BrTi84W4R1iX4NgO0oj6c+NHng== -----END CERTIFICATE-----Generated at Thu May 21 10:17:03 2026 by rpki-client