$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft File: T-09NyGnirIEhs2vNKOuaRfYfL4.mft (raw, json) Hash identifier: 8B/bVjlKuUydZdKu2iEQ9x/kSsNAanmJ8wqy78UF0TY= Subject key identifier: 26:02:96:93:ED:C2:53:F0:C2:D0:F8:CD:89:B1:47:D2:07:9E:D9:E9 Authority key identifier: 4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE Certificate issuer: /CN=A91D8F57/serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE Certificate serial: 0D36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft Manifest number: 0D20 Signing time: Wed 20 May 2026 18:05:52 +0000 Manifest this update: Wed 20 May 2026 18:05:51 +0000 Manifest next update: Wed 27 May 2026 18:05:51 +0000 Files and hashes: 1: T-09NyGnirIEhs2vNKOuaRfYfL4.crl (hash: l8KSH9VFOtHy/9eNeFdeBx7cpIZcM+kroJ5Lm4jGEDM=) 2: 21997AB0FEBC11E9B0463650C4F9AE02.roa (hash: JwOjYA/Jw9dwtNja6OhiUESlnckDLqCGhIODnzf58NE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3382 (0xd36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8F57, serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE Validity Not Before: May 20 18:05:51 2026 GMT Not After : May 27 18:05:51 2026 GMT Subject: CN=6a0df800-d678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ad:7e:6b:a1:5e:68:f1:0b:8f:04:ca:47:41: 91:43:5e:0f:02:25:43:10:72:d4:35:87:8d:a6:8a: b6:39:3e:4d:51:1e:55:62:58:2f:04:3f:d3:f5:a5: 3b:19:f2:47:ff:03:77:17:7f:51:81:7a:55:42:e1: eb:68:3e:9f:96:36:12:6b:0f:8c:30:ca:c3:2f:d3: 86:95:d8:5f:cb:6a:a0:6f:12:bb:3d:10:8a:6b:03: 46:42:65:6c:a8:cd:f6:3a:86:e4:30:a4:a5:90:75: ee:26:6c:7d:aa:eb:b1:12:96:54:7e:8d:80:2c:ba: 3e:0b:01:6c:0e:35:c8:b6:44:23:f6:fb:d5:ea:16: 75:f0:b1:2f:48:a9:ca:8c:51:bf:ed:6e:1b:89:a1: 66:f8:f4:e4:ac:7c:d7:74:a8:13:71:2b:7b:d9:83: 62:a6:b2:25:15:57:2d:8a:31:3c:09:c2:f4:07:42: b4:ba:27:e2:ef:8a:83:fa:35:22:6e:b2:37:6a:7c: da:3e:cd:00:3a:ff:c8:e3:59:13:96:33:7c:b9:af: 24:ba:8f:fd:aa:e6:17:41:d1:7c:6c:c1:1c:99:65: e2:37:68:75:38:d9:19:ea:87:26:be:db:b6:99:12: ad:2d:79:cf:29:ed:cb:45:f1:f6:9f:e3:b2:7b:ce: a4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:02:96:93:ED:C2:53:F0:C2:D0:F8:CD:89:B1:47:D2:07:9E:D9:E9 X509v3 Authority Key Identifier: keyid:4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:99:d7:c0:1e:ed:54:ca:01:82:bd:e9:ae:5b:36:d3:47:5f: 0e:ba:36:0a:ff:1a:13:7b:43:fc:0b:ac:f6:d1:17:d3:af:67: 5f:7e:bd:4f:2b:12:65:d2:9f:96:fc:02:f7:09:1f:93:a0:2e: f6:f3:4d:a7:f7:29:87:d1:08:c4:47:e0:bf:af:6a:52:cb:ab: 0b:ac:0b:76:14:c8:87:3d:69:1e:92:f3:fa:2e:da:a7:e7:1d: ff:b4:44:ef:68:c2:29:47:85:e8:17:de:d7:0f:88:2e:22:5d: 7d:6c:5e:3a:53:c6:eb:46:2f:f4:f7:51:6b:39:d6:43:c3:11: a3:54:a3:27:d1:50:b7:b8:e2:bf:07:4d:13:39:2b:14:34:ea: 6d:c7:75:c9:b0:cd:17:72:94:36:00:13:8a:91:59:11:06:5c: ab:4c:ca:67:c7:b3:8a:db:ab:e4:86:e1:df:62:1f:0b:79:5d: 95:7c:8d:c6:11:06:52:1a:a0:cd:b7:9f:85:fe:48:58:7d:6b: 45:f3:6a:cf:ec:5a:50:d5:c9:5e:7e:32:a3:9d:3f:b6:25:56: f4:86:b6:7c:d9:ec:05:24:83:d1:a3:57:05:da:dd:39:29:45: 79:c2:8a:de:f2:5e:36:17:f2:1f:65:6c:b0:28:3a:4d:ea:7f: b8:99:4a:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhGNTcxMTAvBgNVBAUTKDRGRUQzRDM3MjFBNzhBQjIwNDg2Q0RBRjM0QTNBRTY5 MTdEODdDQkUwHhcNMjYwNTIwMTgwNTUxWhcNMjYwNTI3MTgwNTUxWjAYMRYwFAYD VQQDEw02YTBkZjgwMC1kNjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArq1+a6FeaPELjwTKR0GRQ14PAiVDEHLUNYeNpoq2OT5NUR5VYlgvBD/T9aU7 GfJH/wN3F39RgXpVQuHraD6fljYSaw+MMMrDL9OGldhfy2qgbxK7PRCKawNGQmVs qM32OobkMKSlkHXuJmx9quuxEpZUfo2ALLo+CwFsDjXItkQj9vvV6hZ18LEvSKnK jFG/7W4biaFm+PTkrHzXdKgTcSt72YNiprIlFVctijE8CcL0B0K0uifi74qD+jUi brI3anzaPs0AOv/I41kTljN8ua8kuo/9quYXQdF8bMEcmWXiN2h1ONkZ6ocmvtu2 mRKtLXnPKe3LRfH2n+Oye86krQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCYClpPt wlPwwtD4zYmxR9IHntnpMB8GA1UdIwQYMBaAFE/tPTchp4qyBIbNrzSjrmkX2Hy+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEY1Ny80QzU5Rjk2NkZF QkExMUU5OUVEOTgyNENDNEY5QUUwMi9ULTA5TnlHbmlySUVoczJ2TktPdWFSZllm TDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtMDlOeUduaXJJRWhzMnZOS091YVJmWWZMNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEY1Ny80QzU5Rjk2NkZFQkExMUU5OUVEOTgyNENDNEY5QUUwMi9ULTA5TnlHbmly SUVoczJ2TktPdWFSZllmTDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvpnXwB7tVMoBgr3prls200dfDro2Cv8aE3tD/Aus9tEX069nX369TysSZdKf lvwC9wkfk6Au9vNNp/cph9EIxEfgv69qUsurC6wLdhTIhz1pHpLz+i7ap+cd/7RE 72jCKUeF6Bfe1w+ILiJdfWxeOlPG60Yv9PdRaznWQ8MRo1SjJ9FQt7jivwdNEzkr FDTqbcd1ybDNF3KUNgATipFZEQZcq0zKZ8ezitur5Ibh32IfC3ldlXyNxhEGUhqg zbefhf5IWH1rRfNqz+xaUNXJXn4yo50/tiVW9Ia2fNnsBSSD0aNXBdrdOSlFecKK 3vJeNhfyH2VssCg6Tep/uJlK2g== -----END CERTIFICATE-----Generated at Thu May 21 10:14:48 2026 by rpki-client