$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft File: akXWGoN3DJDQWMdBUx2NnGtnk1o.mft (raw, json) Hash identifier: oLk+P3xXu2WAkev6qqu3r1+ykDD3Ah5jxSIA+LSQcyU= Subject key identifier: 18:06:4A:22:A3:AB:7F:A2:38:35:39:BE:96:B5:FF:64:C2:47:D9:29 Authority key identifier: 6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A Certificate issuer: /CN=A91D1AC7/serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A Certificate serial: 0B0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft Manifest number: 0AEE Signing time: Tue 26 May 2026 19:28:01 +0000 Manifest this update: Tue 26 May 2026 19:28:00 +0000 Manifest next update: Tue 02 Jun 2026 19:28:00 +0000 Files and hashes: 1: akXWGoN3DJDQWMdBUx2NnGtnk1o.crl (hash: jpDhji46He4Yom4aEfyw4IhzKXAYt1oBGxuWDr9b9Aw=) 2: 6E71C43EF80A11F0BD0E5DB76F6F56BC.roa (hash: EAWXNHbw72NGXN5onuQ/WOahqrbdihDLckXMN5kD8CQ=) 3: 6EE80A72F80A11F0BD0E5DB76F6F56BC.roa (hash: sUHEm0sthEP5Lto5Jyv7yFbAnqT7Ikn9wDCxjmSd04U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Jun 2026 19:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2831 (0xb0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1AC7, serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A Validity Not Before: May 26 19:28:00 2026 GMT Not After : Jun 2 19:28:00 2026 GMT Subject: CN=6a15f441-fea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f9:56:49:0b:47:03:9c:23:ca:21:1c:02:4c: 01:92:09:4c:b3:b5:28:39:80:e1:b1:46:e9:58:d4: 40:b4:10:f9:3f:d5:5f:95:11:ad:85:89:35:f9:3d: 64:3a:bc:a2:5c:d9:fe:d7:97:af:d3:29:1e:5f:91: 2e:a2:31:6a:69:e3:38:af:42:d0:ce:bd:48:c9:8e: 50:51:e5:1a:c7:8e:6d:b8:ff:42:2b:f2:1a:e1:89: 0c:5a:f6:b3:98:09:00:96:76:f6:d0:c9:0c:30:2f: 5e:cf:dc:cf:a0:f4:99:b6:bf:7a:55:03:81:62:f2: 74:6e:f5:4a:eb:4b:28:90:c7:15:c8:65:13:b9:b7: 16:4f:00:6a:03:c1:ea:c5:56:cd:51:84:c2:fe:df: 72:4e:de:40:7d:cb:13:24:9c:2f:60:70:a9:14:de: 0e:72:0d:92:76:5a:9a:3a:52:e0:ff:64:b5:90:cd: 48:27:a4:4d:26:1b:6b:da:40:f7:c7:13:73:0a:ce: 43:eb:c2:70:f1:e2:fa:85:0a:7a:18:f3:33:8f:da: d8:18:e1:58:7b:58:8e:72:56:27:d2:88:7f:44:0c: 97:6b:8d:ad:8b:03:4a:da:9a:f5:95:e1:09:3d:3f: 33:e6:4a:cc:b4:ea:86:e4:90:a4:62:d3:cb:25:2b: cc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:06:4A:22:A3:AB:7F:A2:38:35:39:BE:96:B5:FF:64:C2:47:D9:29 X509v3 Authority Key Identifier: keyid:6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:6d:3a:ae:c6:59:a1:64:16:ab:a5:cb:a9:14:8d:c2:6a:0f: 38:ba:ff:2c:a5:5c:d6:5c:12:42:db:df:b0:43:da:04:1e:23: d0:b2:0b:e6:0f:6c:d3:4a:02:d8:58:4e:d3:e4:0a:86:c0:2d: bf:fe:13:bb:65:78:b8:10:0e:35:5e:5c:d8:31:70:59:c8:39: 22:2c:05:db:77:5c:33:3c:8b:4c:0b:13:75:99:0b:c3:c8:30: 24:9e:34:b4:b5:41:a5:ac:51:ab:f5:84:af:79:19:1c:6b:73: 3a:64:3e:07:09:8b:1a:10:0b:d5:7f:bf:2a:74:ab:e0:f2:d5: 05:ee:76:dd:1a:2b:3f:4a:79:37:bd:6b:70:d3:62:a9:5a:b7: 28:69:dd:1d:62:e6:28:03:06:dd:9f:d7:25:dd:9c:d4:6b:3a: 2b:4f:cb:8f:55:45:d5:da:ee:ee:b3:f2:f0:c4:7e:5c:a6:5e: 79:f0:00:a2:98:99:e1:54:58:47:e4:d6:dd:03:0f:1b:06:d4: 72:cf:0e:c8:be:31:16:37:80:12:71:a6:80:a5:fa:27:91:e8: 65:88:3d:13:96:a3:fe:92:f1:88:b9:4a:5f:bf:9e:f9:b6:58: 09:59:c2:49:5d:db:3a:85:d0:b7:a9:4c:cf:61:69:47:6c:9e: 41:74:ee:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFBQzcxMTAvBgNVBAUTKDZBNDVENjFBODM3NzBDOTBEMDU4Qzc0MTUzMUQ4RDlD NkI2NzkzNUEwHhcNMjYwNTI2MTkyODAwWhcNMjYwNjAyMTkyODAwWjAYMRYwFAYD VQQDEw02YTE1ZjQ0MS1mZWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0PlWSQtHA5wjyiEcAkwBkglMs7UoOYDhsUbpWNRAtBD5P9VflRGthYk1+T1k OryiXNn+15ev0ykeX5EuojFqaeM4r0LQzr1IyY5QUeUax45tuP9CK/Ia4YkMWvaz mAkAlnb20MkMMC9ez9zPoPSZtr96VQOBYvJ0bvVK60sokMcVyGUTubcWTwBqA8Hq xVbNUYTC/t9yTt5AfcsTJJwvYHCpFN4Ocg2SdlqaOlLg/2S1kM1IJ6RNJhtr2kD3 xxNzCs5D68Jw8eL6hQp6GPMzj9rYGOFYe1iOclYn0oh/RAyXa42tiwNK2pr1leEJ PT8z5krMtOqG5JCkYtPLJSvM+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBgGSiKj q3+iODU5vpa1/2TCR9kpMB8GA1UdIwQYMBaAFGpF1hqDdwyQ0FjHQVMdjZxrZ5Na MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUFDNy84MUE0QzRENjZF NDMxMUVBOTQ5RDk5MjJDNEY5QUUwMi9ha1hXR29OM0RKRFFXTWRCVXgyTm5HdG5r MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrWFdHb04zREpEUVdNZEJVeDJObkd0bmsxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUFDNy84MUE0QzRENjZFNDMxMUVBOTQ5RDk5MjJDNEY5QUUwMi9ha1hXR29OM0RK RFFXTWRCVXgyTm5HdG5rMW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP206rsZZoWQWq6XLqRSNwmoPOLr/LKVc1lwSQtvfsEPaBB4j0LIL5g9s00oC 2FhO0+QKhsAtv/4Tu2V4uBAONV5c2DFwWcg5IiwF23dcMzyLTAsTdZkLw8gwJJ40 tLVBpaxRq/WEr3kZHGtzOmQ+BwmLGhAL1X+/KnSr4PLVBe523RorP0p5N71rcNNi qVq3KGndHWLmKAMG3Z/XJd2c1Gs6K0/Lj1VF1dru7rPy8MR+XKZeefAAopiZ4VRY R+TW3QMPGwbUcs8OyL4xFjeAEnGmgKX6J5HoZYg9E5aj/pLxiLlKX7+e+bZYCVnC SV3bOoXQt6lMz2FpR2yeQXTuZQ== -----END CERTIFICATE-----Generated at Thu May 28 05:52:24 2026 by rpki-client