$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft File: 0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft (raw, json) Hash identifier: sP86LdX5xxp++9uvQsqkxqRSp8AwG3ykQKhzNL2l6jk= Subject key identifier: 25:02:A0:B6:6B:8A:E0:3B:E8:95:B7:D2:82:7C:F0:DE:B4:A8:B5:54 Authority key identifier: D2:C4:67:BC:3C:62:6B:C5:E6:AE:1B:2A:4D:23:57:11:D8:19:CA:E4 Certificate issuer: /CN=A91D6C43/serialNumber=D2C467BC3C626BC5E6AE1B2A4D235711D819CAE4 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0sRnvDxia8XmrhsqTSNXEdgZyuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft Manifest number: 33 Signing time: Tue 19 May 2026 08:34:05 +0000 Manifest this update: Tue 19 May 2026 08:34:04 +0000 Manifest next update: Tue 26 May 2026 08:34:04 +0000 Files and hashes: 1: 0sRnvDxia8XmrhsqTSNXEdgZyuQ.crl (hash: NRdtquAxgeN/POIM/KSS0vcqT+orQ8iP1GhBjQz596s=) 2: DF277BF6108811F191FBC4DC323D8C67.roa (hash: kvVPZoMA2NCQIEL7Qt23JRtXW0EGzPWXpSZ3FwVtIdw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.crl rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0sRnvDxia8XmrhsqTSNXEdgZyuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6C43, serialNumber=D2C467BC3C626BC5E6AE1B2A4D235711D819CAE4 Validity Not Before: May 19 08:34:04 2026 GMT Not After : May 26 08:34:04 2026 GMT Subject: CN=6a0c207d-7916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1b:bb:54:22:a8:bc:80:fa:10:bb:f4:a2:64: 76:d3:3d:32:2a:d6:22:88:6b:a6:42:73:22:0e:39: a1:46:28:ff:70:3b:2c:bd:41:ff:5c:23:d9:e7:78: 9b:e3:3b:01:10:f8:33:10:44:00:56:5e:4f:ff:79: d1:e6:c4:b6:18:c9:0e:b1:e9:1c:61:05:eb:f4:64: 3f:84:2a:f2:2a:37:bd:a4:da:6c:74:da:51:14:c8: fd:fd:ed:92:2f:6d:6e:50:b1:12:fb:a1:33:a6:74: a4:ab:ad:da:c4:1e:4e:aa:4e:b0:c8:42:cc:5e:54: 97:21:99:20:8b:60:de:30:d3:af:9e:d1:7e:dd:a8: 8d:f0:2b:3e:13:8c:79:0e:2d:32:61:62:fe:9e:ee: 9a:01:5b:fe:75:55:0f:c3:5f:65:94:e7:a1:5b:6c: 59:2a:55:22:92:d2:8c:2c:52:d9:22:00:0f:fd:56: d6:a3:8e:66:18:99:b9:4b:17:fc:a9:cd:08:5b:2b: 9c:f7:4c:66:ab:17:ce:62:e1:cc:27:53:cb:30:ea: af:9e:bf:62:67:3b:f0:73:00:b6:9f:17:86:57:95: 07:f1:a2:97:f4:02:96:c3:77:44:27:8c:38:49:32: 94:51:69:15:c9:e5:87:c1:d3:32:a6:63:68:ab:e4: 63:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:02:A0:B6:6B:8A:E0:3B:E8:95:B7:D2:82:7C:F0:DE:B4:A8:B5:54 X509v3 Authority Key Identifier: keyid:D2:C4:67:BC:3C:62:6B:C5:E6:AE:1B:2A:4D:23:57:11:D8:19:CA:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0sRnvDxia8XmrhsqTSNXEdgZyuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C43/C809B8F0108611F1A1947F72313D8C67/0sRnvDxia8XmrhsqTSNXEdgZyuQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:47:70:83:ec:4a:2c:5e:a5:a9:4a:27:80:33:e3:7e:05:af: ba:07:d5:1e:a3:53:49:da:3d:79:15:07:43:40:64:8f:37:79: 61:e7:ea:4b:0a:d8:13:79:56:75:ec:b9:c8:a0:95:53:97:5d: ac:a5:e9:e5:08:a6:6d:fd:70:29:ec:43:52:7a:03:06:bc:9c: c3:a7:c5:0d:69:c3:f4:87:06:83:e2:d4:bb:60:53:f8:e5:24: 34:c1:a0:78:ab:53:3b:2a:61:d7:77:bd:85:40:42:aa:b8:bf: 1c:ad:5a:27:d2:5c:ec:ed:0a:0d:d3:ad:ae:91:9b:9d:c3:c2: 84:a7:aa:d6:a2:0a:58:b8:06:60:8c:1a:d6:fa:23:67:68:95: 21:6f:db:59:b1:f2:d3:a4:ad:ec:84:09:ed:3f:bb:d6:63:af: ae:d0:1b:52:d3:85:f9:5d:6d:0c:1a:e8:a8:c2:50:f9:07:40: 91:b9:fb:55:30:58:6a:f1:68:b3:ab:19:07:3d:9f:39:f9:3e: 67:91:09:52:89:aa:38:2b:56:fd:b0:0c:bc:44:f4:e5:b1:40: 42:8e:6d:98:a2:38:7c:6b:37:e3:0a:fd:eb:ae:f8:f1:7e:1b: d3:30:90:1e:c2:7a:4e:54:0a:af:12:be:24:66:4d:a2:7e:45: 69:87:97:97 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NkM0MzExMC8GA1UEBRMoRDJDNDY3QkMzQzYyNkJDNUU2QUUxQjJBNEQyMzU3MTFE ODE5Q0FFNDAeFw0yNjA1MTkwODM0MDRaFw0yNjA1MjYwODM0MDRaMBgxFjAUBgNV BAMTDTZhMGMyMDdkLTc5MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmG7tUIqi8gPoQu/SiZHbTPTIq1iKIa6ZCcyIOOaFGKP9wOyy9Qf9cI9nneJvj OwEQ+DMQRABWXk//edHmxLYYyQ6x6RxhBev0ZD+EKvIqN72k2mx02lEUyP397ZIv bW5QsRL7oTOmdKSrrdrEHk6qTrDIQsxeVJchmSCLYN4w06+e0X7dqI3wKz4TjHkO LTJhYv6e7poBW/51VQ/DX2WU56FbbFkqVSKS0owsUtkiAA/9VtajjmYYmblLF/yp zQhbK5z3TGarF85i4cwnU8sw6q+ev2JnO/BzALafF4ZXlQfxopf0ApbDd0QnjDhJ MpRRaRXJ5YfB0zKmY2ir5GOnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJQKgtmuK 4DvolbfSgnzw3rSotVQwHwYDVR0jBBgwFoAU0sRnvDxia8XmrhsqTSNXEdgZyuQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2QzQzL0M4MDlCOEYwMTA4 NjExRjFBMTk0N0Y3MjMxM0Q4QzY3LzBzUm52RHhpYThYbXJoc3FUU05YRWRnWnl1 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMHNSbnZEeGlhOFhtcmhzcVRTTlhFZGdaeXVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2 QzQzL0M4MDlCOEYwMTA4NjExRjFBMTk0N0Y3MjMxM0Q4QzY3LzBzUm52RHhpYThY bXJoc3FUU05YRWRnWnl1US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCBR3CD7EosXqWpSieAM+N+Ba+6B9Ueo1NJ2j15FQdDQGSPN3lh5+pLCtgTeVZ1 7LnIoJVTl12spenlCKZt/XAp7ENSegMGvJzDp8UNacP0hwaD4tS7YFP45SQ0waB4 q1M7KmHXd72FQEKquL8crVon0lzs7QoN062ukZudw8KEp6rWogpYuAZgjBrW+iNn aJUhb9tZsfLTpK3shAntP7vWY6+u0BtS04X5XW0MGuiowlD5B0CRuftVMFhq8Wiz qxkHPZ85+T5nkQlSiao4K1b9sAy8RPTlsUBCjm2Yojh8azfjCv3rrvjxfhvTMJAe wnpOVAqvEr4kZk2ifkVph5eX -----END CERTIFICATE-----Generated at Thu May 21 09:38:40 2026 by rpki-client