$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft File: -D3DokbRIVGsh6dyzsoO3SFfhio.mft (raw, json) Hash identifier: vdXiNIHqXiJ9Ck49kWmc/ST/PW0VuKu/cJskRjhdbL4= Subject key identifier: 59:E5:30:3E:38:60:BD:3A:0A:66:DD:BE:F5:E1:9F:8E:20:D0:7F:44 Authority key identifier: F8:3D:C3:A2:46:D1:21:51:AC:87:A7:72:CE:CA:0E:DD:21:5F:86:2A Certificate issuer: /CN=A91DDFF2/serialNumber=F83DC3A246D12151AC87A772CECA0EDD215F862A Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft Manifest number: 019B Signing time: Thu 21 May 2026 04:20:06 +0000 Manifest this update: Thu 21 May 2026 04:20:05 +0000 Manifest next update: Thu 28 May 2026 04:20:05 +0000 Files and hashes: 1: -D3DokbRIVGsh6dyzsoO3SFfhio.crl (hash: G1adB+EJVAOizkyyJ1Dp2/E/WpTE+LxTR7EBA+tpJEc=) 2: EC7311FEE5C311EEBF217685C4F9AE02.roa (hash: nCvz3RU6o2FWhURZ/L0SyrKbzGjsC9xVoGzwhNL9hs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.crl rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 04:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDFF2, serialNumber=F83DC3A246D12151AC87A772CECA0EDD215F862A Validity Not Before: May 21 04:20:05 2026 GMT Not After : May 28 04:20:05 2026 GMT Subject: CN=6a0e87f6-703d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:59:1b:05:ba:c1:05:24:8b:29:57:66:c8:aa: 3b:a5:b2:3c:cf:e0:aa:26:44:c1:96:16:bf:d1:fb: e3:34:4c:7f:c9:a5:e0:55:06:62:ab:1c:cd:e7:40: 34:fa:1c:ac:07:ee:73:c0:7f:87:cd:d7:bd:60:7c: be:4c:83:5c:2e:6b:50:d9:dc:4f:3c:f7:cc:59:a8: 81:db:bf:0e:ce:12:8e:75:6c:b6:de:7a:90:03:90: c7:ba:46:df:df:81:eb:15:c1:3b:bd:5f:8c:3b:76: c5:71:40:98:04:ed:7a:7a:3f:37:10:3f:e5:5e:5f: c5:5f:e2:9c:b8:6c:a8:d1:dc:63:93:7c:ec:9b:4e: fb:d5:39:57:6d:41:93:6d:b1:57:22:b7:87:d5:32: e2:7a:1a:10:e4:f5:a5:50:bd:17:9d:bd:26:17:21: 52:19:86:c9:32:6f:1d:01:35:ef:1a:20:e0:e3:c0: 67:08:e2:34:98:f0:34:c2:df:3a:2f:60:90:54:2e: a5:21:68:2d:70:e3:32:ce:f2:f9:d1:b2:31:2c:84: 62:26:a9:11:a2:0a:5a:bd:95:7b:ac:88:08:b9:af: 16:62:0f:f2:42:db:31:f1:28:48:66:b2:a6:a4:34: d0:41:00:c7:91:2a:7c:10:6d:2f:b2:65:c2:1c:ba: 78:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E5:30:3E:38:60:BD:3A:0A:66:DD:BE:F5:E1:9F:8E:20:D0:7F:44 X509v3 Authority Key Identifier: keyid:F8:3D:C3:A2:46:D1:21:51:AC:87:A7:72:CE:CA:0E:DD:21:5F:86:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:98:b5:9a:e2:9c:6d:e9:55:aa:85:11:2b:32:d3:7d:57:f6: 68:c3:64:24:de:c8:92:5e:6a:59:d7:4a:1f:cf:4f:61:25:31: 99:0c:fb:a7:e6:af:a5:2a:f7:b6:6d:cc:cb:9a:64:8b:c8:d0: a5:9c:00:3a:2c:dd:7f:f9:08:cb:f3:0c:e6:90:00:84:61:7d: 4c:7a:2e:b6:d3:77:8d:39:bd:34:10:10:58:c9:6f:69:be:23: 4f:55:e5:e2:e6:30:bb:0b:02:2c:8a:8e:3a:e3:84:69:f9:f7: b5:b8:9b:96:77:7a:79:b9:9f:1d:45:ea:bf:f6:89:ac:ea:11: b3:4e:ed:70:c0:7a:7f:89:28:92:50:b4:85:93:87:b1:99:ec: bd:bd:20:61:90:1a:5d:af:bf:c1:15:f5:74:8a:0d:23:49:fb: 95:bd:c7:34:ec:02:2a:c2:10:79:80:87:14:39:f3:f2:57:19: 89:d5:18:1b:95:34:cc:6b:61:1a:1a:43:38:9a:72:bc:c7:64: f0:9c:9a:34:f3:46:b0:80:e2:37:d9:13:90:de:2a:be:b4:c1: 47:85:e1:91:e1:30:df:78:d1:6e:2d:33:df:26:27:e3:97:eb: b6:15:92:7a:58:a0:1f:e6:ef:75:5f:64:47:b8:c2:3d:01:0f: 9d:1d:40:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERGRjIxMTAvBgNVBAUTKEY4M0RDM0EyNDZEMTIxNTFBQzg3QTc3MkNFQ0EwRURE MjE1Rjg2MkEwHhcNMjYwNTIxMDQyMDA1WhcNMjYwNTI4MDQyMDA1WjAYMRYwFAYD VQQDEw02YTBlODdmNi03MDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA81kbBbrBBSSLKVdmyKo7pbI8z+CqJkTBlha/0fvjNEx/yaXgVQZiqxzN50A0 +hysB+5zwH+Hzde9YHy+TINcLmtQ2dxPPPfMWaiB278OzhKOdWy23nqQA5DHukbf 34HrFcE7vV+MO3bFcUCYBO16ej83ED/lXl/FX+KcuGyo0dxjk3zsm0771TlXbUGT bbFXIreH1TLiehoQ5PWlUL0Xnb0mFyFSGYbJMm8dATXvGiDg48BnCOI0mPA0wt86 L2CQVC6lIWgtcOMyzvL50bIxLIRiJqkRogpavZV7rIgIua8WYg/yQtsx8ShIZrKm pDTQQQDHkSp8EG0vsmXCHLp46wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFnlMD44 YL06CmbdvvXhn44g0H9EMB8GA1UdIwQYMBaAFPg9w6JG0SFRrIencs7KDt0hX4Yq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREZGMi9DOUFGMjkzNEU1 QzExMUVFOThEQkU5NjJDNEY5QUUwMi8tRDNEb2tiUklWR3NoNmR5enNvTzNTRmZo aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1EM0Rva2JSSVZHc2g2ZHl6c29PM1NGZmhpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REZGMi9DOUFGMjkzNEU1QzExMUVFOThEQkU5NjJDNEY5QUUwMi8tRDNEb2tiUklW R3NoNmR5enNvTzNTRmZoaW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK5i1muKcbelVqoURKzLTfVf2aMNkJN7Ikl5qWddKH89PYSUxmQz7p+avpSr3 tm3My5pki8jQpZwAOizdf/kIy/MM5pAAhGF9THouttN3jTm9NBAQWMlvab4jT1Xl 4uYwuwsCLIqOOuOEafn3tbiblnd6ebmfHUXqv/aJrOoRs07tcMB6f4koklC0hZOH sZnsvb0gYZAaXa+/wRX1dIoNI0n7lb3HNOwCKsIQeYCHFDnz8lcZidUYG5U0zGth GhpDOJpyvMdk8JyaNPNGsIDiN9kTkN4qvrTBR4XhkeEw33jRbi0z3yYn45frthWS eligH+bvdV9kR7jCPQEPnR1A8Q== -----END CERTIFICATE-----Generated at Thu May 21 09:36:40 2026 by rpki-client