$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft File: pOaGeeZ7phon9Pib0JKu5cH3ITk.mft (raw, json) Hash identifier: zIKKRe0OJOQ/uYqN+FsiZvrtiFiF+j9twUScSJAZbM0= Subject key identifier: A3:65:91:E8:22:0C:39:34:02:F0:35:1A:07:4A:A9:30:4A:CE:4F:0A Authority key identifier: A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39 Certificate issuer: /CN=A91E1B48/serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139 Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft Manifest number: 0128 Signing time: Thu 21 May 2026 05:45:35 +0000 Manifest this update: Thu 21 May 2026 05:45:34 +0000 Manifest next update: Thu 28 May 2026 05:45:34 +0000 Files and hashes: 1: pOaGeeZ7phon9Pib0JKu5cH3ITk.crl (hash: JSyZcpIK8KZWcWSEOScLDY61TDUzrP8MsB872oRq8jc=) 2: FB03B42C927411EF870E655AC4F9AE02.roa (hash: IoNbkBQReyDzJViXMom8CAS5Le63oVygKwA1bc/GSEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 05:45:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1B48, serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139 Validity Not Before: May 21 05:45:34 2026 GMT Not After : May 28 05:45:34 2026 GMT Subject: CN=6a0e9bff-f293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7c:a3:ce:cc:a8:0f:c0:e3:0a:d3:8f:4f:66: e1:8a:76:53:83:5d:8e:3b:fc:06:d7:f1:0d:57:db: 73:ca:0d:bd:89:3f:c9:ca:b5:0c:93:27:ef:8c:95: ad:0b:fc:e3:07:c9:6b:35:10:c5:c0:bf:5b:08:ad: 3b:78:6c:8a:47:1b:f2:a9:39:e9:7d:c0:58:28:b7: ac:e9:a4:20:aa:39:63:c3:37:5e:5c:e6:f1:53:25: de:92:84:c3:c5:d3:e3:57:f6:1b:2b:2c:a6:20:14: 5c:08:f8:f0:f4:5d:a5:51:4c:17:cc:a9:a5:69:d4: 87:3f:e7:ff:ac:ca:49:91:3d:d4:cc:9b:ae:bf:c5: d0:3a:1d:e4:60:79:c8:2b:3f:6e:81:db:de:7c:36: 41:a7:23:68:fa:49:fe:0b:82:6b:90:32:88:1c:c3: 34:47:8e:b6:c4:c7:fa:56:e5:0e:8a:8d:06:52:ee: aa:5d:3e:58:bc:27:31:73:03:66:c0:b5:0a:8d:ed: fd:9e:a2:bf:1e:bd:d3:6f:80:92:fd:4a:85:1f:30: 1f:de:9d:89:a4:e8:34:fa:87:20:8f:26:2a:d1:0d: 2c:e5:aa:89:38:60:06:29:53:6b:98:f2:09:d2:7b: fe:ee:a6:b9:2f:a1:55:48:90:ee:a6:a6:91:04:8f: 81:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:65:91:E8:22:0C:39:34:02:F0:35:1A:07:4A:A9:30:4A:CE:4F:0A X509v3 Authority Key Identifier: keyid:A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:a5:aa:86:23:92:10:23:81:3a:5f:07:17:a5:99:07:c9:04: 75:56:e5:5a:89:12:0f:2e:93:d2:cc:11:ec:37:85:2a:dc:cd: 08:47:89:3b:22:cc:1e:f6:33:2d:4b:73:99:65:d2:24:f8:3b: d8:b2:b6:a2:97:18:8b:8a:b9:ad:37:1d:f2:55:c7:c1:f3:8d: 07:43:78:2f:fe:b5:55:a0:40:a0:1e:f0:8d:5c:c0:65:0c:d8: ff:25:ce:a9:5c:5e:35:2b:57:93:cb:ef:ec:86:2a:54:ba:09: 9f:1b:f0:14:3a:a2:65:7d:ec:8f:55:2b:79:cf:d3:79:3c:82: 1c:d7:c5:6f:34:95:60:47:cc:ed:0f:d8:8d:17:2f:bc:f0:ea: 2d:fa:56:ee:69:f6:6c:2e:58:a6:ff:ec:a7:b2:92:24:08:3e: bf:38:b1:f6:59:1c:d3:7d:af:7e:0a:69:60:92:f0:54:3a:3b: c5:a1:a4:04:ea:db:25:d5:5b:91:ea:0a:5e:8e:5d:9b:5d:ae: 41:49:7e:f4:23:73:2c:ad:6b:25:96:10:e1:71:54:7e:91:a9: db:0c:52:db:e7:e0:8a:36:af:30:45:bd:22:df:87:ab:db:60: dc:a4:dc:70:2b:2e:d9:24:5d:67:a4:b1:30:4e:38:60:4b:6b: 31:1e:01:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFCNDgxMTAvBgNVBAUTKEE0RTY4Njc5RTY3QkE2MUEyN0Y0Rjg5QkQwOTJBRUU1 QzFGNzIxMzkwHhcNMjYwNTIxMDU0NTM0WhcNMjYwNTI4MDU0NTM0WjAYMRYwFAYD VQQDEw02YTBlOWJmZi1mMjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3yjzsyoD8DjCtOPT2bhinZTg12OO/wG1/ENV9tzyg29iT/JyrUMkyfvjJWt C/zjB8lrNRDFwL9bCK07eGyKRxvyqTnpfcBYKLes6aQgqjljwzdeXObxUyXekoTD xdPjV/YbKyymIBRcCPjw9F2lUUwXzKmladSHP+f/rMpJkT3UzJuuv8XQOh3kYHnI Kz9ugdvefDZBpyNo+kn+C4JrkDKIHMM0R462xMf6VuUOio0GUu6qXT5YvCcxcwNm wLUKje39nqK/Hr3Tb4CS/UqFHzAf3p2JpOg0+ocgjyYq0Q0s5aqJOGAGKVNrmPIJ 0nv+7qa5L6FVSJDupqaRBI+BrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKNlkegi DDk0AvA1GgdKqTBKzk8KMB8GA1UdIwQYMBaAFKTmhnnme6YaJ/T4m9CSruXB9yE5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUI0OC82NkY1NzY0NDky NzQxMUVGQkY4NjRBM0RDNEY5QUUwMi9wT2FHZWVaN3Bob245UGliMEpLdTVjSDNJ VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BPYUdlZVo3cGhvbjlQaWIwSkt1NWNIM0lUay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUI0OC82NkY1NzY0NDkyNzQxMUVGQkY4NjRBM0RDNEY5QUUwMi9wT2FHZWVaN3Bo b245UGliMEpLdTVjSDNJVGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUaWqhiOSECOBOl8HF6WZB8kEdVblWokSDy6T0swR7DeFKtzNCEeJOyLMHvYz LUtzmWXSJPg72LK2opcYi4q5rTcd8lXHwfONB0N4L/61VaBAoB7wjVzAZQzY/yXO qVxeNStXk8vv7IYqVLoJnxvwFDqiZX3sj1Urec/TeTyCHNfFbzSVYEfM7Q/YjRcv vPDqLfpW7mn2bC5Ypv/sp7KSJAg+vzix9lkc032vfgppYJLwVDo7xaGkBOrbJdVb keoKXo5dm12uQUl+9CNzLK1rJZYQ4XFUfpGp2wxS2+fgijavMEW9It+Hq9tg3KTc cCsu2SRdZ6SxME44YEtrMR4B9w== -----END CERTIFICATE-----Generated at Thu May 21 10:54:39 2026 by rpki-client