$ rpki-client -vvf rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft File: gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft (raw, json) Hash identifier: 9Jjksdd2lTo1BEp9pgvkekXnJBvt8UKeJe30PwcmqQE= Subject key identifier: 29:65:02:B7:D1:71:D5:BD:86:E9:FC:2B:8A:5D:AE:E2:60:C5:B9:94 Authority key identifier: 80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB Certificate issuer: /CN=A91D959F/serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB Certificate serial: 0839 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft Manifest number: 0831 Signing time: Wed 20 May 2026 21:01:25 +0000 Manifest this update: Wed 20 May 2026 21:01:24 +0000 Manifest next update: Wed 27 May 2026 21:01:24 +0000 Files and hashes: 1: gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl (hash: AqCDeqGAgJTnJRQUS7KekWm0k53hL1eFG6553g+AGKc=) 2: F75AEA8A13F111EB950DBC4EC4F9AE02.roa (hash: jOVkHlbZCBgwXHvRYiey/5/5qsAljK9sG8lXCEjLe4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 21:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2105 (0x839) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D959F, serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB Validity Not Before: May 20 21:01:24 2026 GMT Not After : May 27 21:01:24 2026 GMT Subject: CN=6a0e2125-cd13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cb:1e:e4:d6:e4:5a:d4:95:e6:ac:cc:e0:3b: 2b:a7:47:b4:64:75:3b:3e:8d:07:fa:5f:d3:47:1d: f5:5c:c7:a3:75:d3:01:9f:05:98:a0:16:42:f1:9d: 44:48:98:9a:6f:ad:70:a6:5e:ce:fe:62:10:df:1b: e2:f7:98:3e:3e:bb:66:06:4c:67:78:ac:d5:0c:f4: 6f:a8:b0:b7:08:7f:da:27:1e:c1:7c:4f:87:52:b3: 0b:d2:c4:98:86:49:0e:6c:00:78:c4:7c:cb:2f:f4: ec:2e:73:2a:bd:08:2c:2b:d0:7e:b9:2d:eb:64:91: a2:59:dc:a6:e0:d3:38:7e:60:6d:2f:19:cd:d1:c9: a6:a1:2a:26:69:ee:ed:d3:73:20:f5:1c:59:d7:7a: 73:17:81:44:a2:90:37:31:c1:5f:03:6d:24:92:a3: b6:b5:bc:0d:f8:e2:2c:39:65:87:97:64:b4:22:1c: 96:0f:e5:69:ad:91:1b:47:ce:51:60:d5:d2:49:35: 7b:aa:bf:d2:af:de:da:88:23:29:a2:99:e9:ac:42: 2a:59:0a:3c:5f:65:c3:98:b4:70:b6:1f:4c:63:bd: 46:ba:e9:e1:be:c8:c0:25:b7:a2:5c:3f:92:0f:a4: f2:20:70:e8:03:fc:cf:b3:9c:8c:a6:7f:4c:e6:a9: 7b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:65:02:B7:D1:71:D5:BD:86:E9:FC:2B:8A:5D:AE:E2:60:C5:B9:94 X509v3 Authority Key Identifier: keyid:80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:96:8b:c3:44:cb:a4:fd:c2:d9:3f:5f:ba:12:55:09:fa:5a: f9:7b:3b:02:83:e8:50:64:7b:c7:79:36:fd:29:7d:4d:1c:4c: 9f:97:19:ba:4a:2f:8d:3a:13:2d:d4:9f:90:0d:a1:2a:5f:a2: cd:d3:d5:a8:22:60:ef:64:12:49:0d:50:27:b8:c2:38:f6:96: b4:8e:4a:ca:0e:05:bf:50:cf:db:a9:f4:5c:77:52:80:60:b8: c9:21:ba:74:49:db:8f:85:e8:66:16:74:52:ce:04:b3:53:2a: d5:ba:0e:62:06:33:12:f4:a2:90:e2:e5:23:b5:74:c2:9c:89: 56:7a:09:bb:08:3b:5f:e5:de:48:c8:7f:e1:1a:90:e7:d1:1c: 81:bc:4c:e8:ec:16:a1:93:5d:c7:92:9b:d2:de:d4:1c:75:4d: f6:cf:dd:e1:ee:79:43:3c:33:fe:9e:a9:8b:9c:7a:67:85:a1: e9:ea:76:31:12:dd:5e:f2:ce:09:27:df:d7:71:6c:29:2f:30: c1:e8:be:e7:eb:b4:e5:f3:f2:6c:5a:00:a3:9a:df:92:c8:91: bd:46:b9:da:93:61:b4:a9:31:8c:4d:69:66:61:40:02:62:14: 9c:25:d3:de:95:15:67:32:2a:f3:fe:a2:3e:12:7c:60:4c:a0: 78:d5:37:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk1OUYxMTAvBgNVBAUTKDgwODQwMTcyM0MyRTQxODQ1NkFGOUEwRkIyNUY4QzMy MUM0OTcwQ0IwHhcNMjYwNTIwMjEwMTI0WhcNMjYwNTI3MjEwMTI0WjAYMRYwFAYD VQQDEw02YTBlMjEyNS1jZDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMse5NbkWtSV5qzM4Dsrp0e0ZHU7Po0H+l/TRx31XMejddMBnwWYoBZC8Z1E SJiab61wpl7O/mIQ3xvi95g+PrtmBkxneKzVDPRvqLC3CH/aJx7BfE+HUrML0sSY hkkObAB4xHzLL/TsLnMqvQgsK9B+uS3rZJGiWdym4NM4fmBtLxnN0cmmoSomae7t 03Mg9RxZ13pzF4FEopA3McFfA20kkqO2tbwN+OIsOWWHl2S0IhyWD+VprZEbR85R YNXSSTV7qr/Sr97aiCMpopnprEIqWQo8X2XDmLRwth9MY71GuunhvsjAJbeiXD+S D6TyIHDoA/zPs5yMpn9M5ql7swIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCllArfR cdW9hun8K4pdruJgxbmUMB8GA1UdIwQYMBaAFICEAXI8LkGEVq+aD7JfjDIcSXDL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTU5Ri8wNjgxMDBFQTEz RjExMUVCOTc0RDk3NEVDNEY5QUUwMi9nSVFCY2p3dVFZUldyNW9Qc2wtTU1oeEpj TXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dJUUJjand1UVlSV3I1b1BzbC1NTWh4SmNNcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTU5Ri8wNjgxMDBFQTEzRjExMUVCOTc0RDk3NEVDNEY5QUUwMi9nSVFCY2p3dVFZ UldyNW9Qc2wtTU1oeEpjTXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM5aLw0TLpP3C2T9fuhJVCfpa+Xs7AoPoUGR7x3k2/Sl9TRxMn5cZukovjToT LdSfkA2hKl+izdPVqCJg72QSSQ1QJ7jCOPaWtI5Kyg4Fv1DP26n0XHdSgGC4ySG6 dEnbj4XoZhZ0Us4Es1Mq1boOYgYzEvSikOLlI7V0wpyJVnoJuwg7X+XeSMh/4RqQ 59EcgbxM6OwWoZNdx5Kb0t7UHHVN9s/d4e55Qzwz/p6pi5x6Z4Wh6ep2MRLdXvLO CSff13FsKS8wwei+5+u05fPybFoAo5rfksiRvUa52pNhtKkxjE1pZmFAAmIUnCXT 3pUVZzIq8/6iPhJ8YEygeNU3gg== -----END CERTIFICATE-----Generated at Thu May 21 11:14:39 2026 by rpki-client