$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft File: df43qD7agAphAmCFh-30CJ2CQOA.mft (raw, json) Hash identifier: nigNUucxhAb/IJdV6bVExCgatujJY0CT7OQuMZH/Rl0= Subject key identifier: DB:7C:D0:95:4D:69:8E:4B:CF:00:CC:71:25:64:A4:4F:E1:7A:56:AD Authority key identifier: 75:FE:37:A8:3E:DA:80:0A:61:02:60:85:87:ED:F4:08:9D:82:40:E0 Certificate issuer: /CN=A91DC7AA/serialNumber=75FE37A83EDA800A6102608587EDF4089D8240E0 Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft Manifest number: CB Signing time: Thu 21 May 2026 06:57:56 +0000 Manifest this update: Thu 21 May 2026 06:57:55 +0000 Manifest next update: Thu 28 May 2026 06:57:55 +0000 Files and hashes: 1: df43qD7agAphAmCFh-30CJ2CQOA.crl (hash: a0hmqWcDTlVs/CQPejEubaIsf9CT6rAd5vAZWl4HWHs=) 2: A7C7EF962A8911F09526D35BC4F9AE02.roa (hash: HcYhHFFcvCKuaGxFRTIVt3Z+Wah4d0SujZ+rvqoNWCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.crl rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 06:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC7AA, serialNumber=75FE37A83EDA800A6102608587EDF4089D8240E0 Validity Not Before: May 21 06:57:55 2026 GMT Not After : May 28 06:57:55 2026 GMT Subject: CN=6a0eacf4-80a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:31:3f:80:af:11:67:f0:fd:8e:32:aa:8c:23: 7e:d9:5b:d3:6d:3a:a6:63:6f:88:22:56:97:2d:34: 2b:dc:e8:ca:57:e1:e6:9e:24:e0:01:14:4a:04:3f: 81:6c:33:c9:8c:ea:40:d4:1e:42:ef:19:6c:35:5c: e4:2d:cc:5e:f4:fe:e7:fc:77:e4:06:07:ef:e1:a6: 55:79:75:78:9d:ec:ac:89:75:6e:89:10:9a:32:88: c9:fd:f0:98:cb:1b:f0:75:25:a1:d7:79:35:e4:3c: ea:f4:14:8a:e5:29:b5:b3:01:93:bd:e6:b5:52:51: b1:c8:44:7f:6d:bc:9c:d5:a3:e8:2d:3e:dc:58:6c: a2:f3:f9:a7:e3:ff:72:6b:50:bd:91:8b:95:cb:42: b3:13:13:43:57:4d:9c:b3:3e:d6:5e:df:7f:55:e4: cb:5e:25:60:00:ab:bc:d6:39:38:e5:8c:f2:6f:e6: b6:1b:b7:8b:60:4b:ec:d0:95:67:df:e6:f4:8e:79: d6:5f:ac:8f:74:78:0d:cb:03:cf:00:e9:a4:bc:e2: 2f:17:77:72:31:24:8a:72:a0:eb:b9:94:8e:d2:4a: cf:d1:8b:3b:ab:11:6e:d5:06:59:06:90:d6:0a:d2: 01:b4:4c:e4:24:6b:db:f9:a1:25:4e:18:55:ed:ff: ee:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:7C:D0:95:4D:69:8E:4B:CF:00:CC:71:25:64:A4:4F:E1:7A:56:AD X509v3 Authority Key Identifier: keyid:75:FE:37:A8:3E:DA:80:0A:61:02:60:85:87:ED:F4:08:9D:82:40:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:30:28:80:28:e2:92:5d:2e:83:cc:49:c0:e0:85:f7:a8:20: 62:da:01:84:a4:f3:eb:23:b4:85:35:da:a0:da:eb:03:31:eb: 42:15:fc:90:05:86:31:02:ec:39:c2:16:4f:8e:21:22:d9:76: de:6c:54:de:9c:8a:6e:3e:f2:3e:ab:33:82:72:07:bb:46:a2: ee:cd:10:bd:2b:17:8d:ed:2f:fe:f0:fd:fc:67:b7:5c:6d:0d: 7f:38:78:fb:9e:22:00:94:1b:d9:71:59:86:0c:05:82:5b:89: ff:73:fa:90:e3:e8:65:27:2f:49:e5:cd:6f:79:f3:7d:0e:f4: 6b:a0:12:78:d0:d8:39:12:b4:23:9b:c1:db:66:7b:ba:b7:d2: ea:9c:f0:13:4c:10:85:ba:e9:88:2e:2c:4f:e2:a9:25:6a:6c: d4:97:44:3f:81:4c:6b:87:e9:07:7f:c5:6f:64:f4:0a:3f:d0: ff:78:93:e7:76:86:60:80:23:bb:ae:5a:40:41:7e:b8:07:69: 09:cf:48:30:61:e0:8e:00:b3:ac:56:61:a2:e4:87:69:ae:6c: 2a:f6:56:77:43:ed:e7:07:9c:da:75:57:b3:04:53:3f:92:eb: ca:dc:9f:c7:c2:c2:8f:07:5f:ba:fd:96:61:6d:11:62:62:8b: 77:05:78:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM3QUExMTAvBgNVBAUTKDc1RkUzN0E4M0VEQTgwMEE2MTAyNjA4NTg3RURGNDA4 OUQ4MjQwRTAwHhcNMjYwNTIxMDY1NzU1WhcNMjYwNTI4MDY1NzU1WjAYMRYwFAYD VQQDEw02YTBlYWNmNC04MGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoTE/gK8RZ/D9jjKqjCN+2VvTbTqmY2+IIlaXLTQr3OjKV+HmniTgARRKBD+B bDPJjOpA1B5C7xlsNVzkLcxe9P7n/HfkBgfv4aZVeXV4neysiXVuiRCaMojJ/fCY yxvwdSWh13k15Dzq9BSK5Sm1swGTvea1UlGxyER/bbyc1aPoLT7cWGyi8/mn4/9y a1C9kYuVy0KzExNDV02csz7WXt9/VeTLXiVgAKu81jk45Yzyb+a2G7eLYEvs0JVn 3+b0jnnWX6yPdHgNywPPAOmkvOIvF3dyMSSKcqDruZSO0krP0Ys7qxFu1QZZBpDW CtIBtEzkJGvb+aElThhV7f/ucQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNt80JVN aY5LzwDMcSVkpE/helatMB8GA1UdIwQYMBaAFHX+N6g+2oAKYQJghYft9AidgkDg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzdBQS9EMjJFREEzNDJB ODgxMUYwQTMwRDkxNTlDNEY5QUUwMi9kZjQzcUQ3YWdBcGhBbUNGaC0zMENKMkNR T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RmNDNxRDdhZ0FwaEFtQ0ZoLTMwQ0oyQ1FPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzdBQS9EMjJFREEzNDJBODgxMUYwQTMwRDkxNTlDNEY5QUUwMi9kZjQzcUQ3YWdB cGhBbUNGaC0zMENKMkNRT0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAozAogCjikl0ug8xJwOCF96ggYtoBhKTz6yO0hTXaoNrrAzHrQhX8kAWGMQLs OcIWT44hItl23mxU3pyKbj7yPqszgnIHu0ai7s0QvSsXje0v/vD9/Ge3XG0Nfzh4 +54iAJQb2XFZhgwFgluJ/3P6kOPoZScvSeXNb3nzfQ70a6ASeNDYORK0I5vB22Z7 urfS6pzwE0wQhbrpiC4sT+KpJWps1JdEP4FMa4fpB3/Fb2T0Cj/Q/3iT53aGYIAj u65aQEF+uAdpCc9IMGHgjgCzrFZhouSHaa5sKvZWd0Pt5wec2nVXswRTP5Lrytyf x8LCjwdfuv2WYW0RYmKLdwV4Mw== -----END CERTIFICATE-----Generated at Thu May 21 10:15:14 2026 by rpki-client