$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft File: gDB5urLx9rO5qsQR30qCw_BqZXE.mft (raw, json) Hash identifier: b0bRfJi15HCiMmAI3mTOqE2nTinIgLEgyRf/Im7/CM4= Subject key identifier: EF:24:0D:97:37:D2:FF:BC:13:E2:4B:87:E5:FE:24:3C:A8:8C:69:33 Authority key identifier: 80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71 Certificate issuer: /CN=A91E5642/serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571 Certificate serial: 0A70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft Manifest number: 0A5C Signing time: Wed 20 May 2026 19:42:52 +0000 Manifest this update: Wed 20 May 2026 19:42:52 +0000 Manifest next update: Wed 27 May 2026 19:42:52 +0000 Files and hashes: 1: gDB5urLx9rO5qsQR30qCw_BqZXE.crl (hash: 4DFUHM5iY9AYyNcA27Rey7Ca3EL+pMuTZJc6eilWgK0=) 2: 49484A22DDBE11F0A59AB1524A6F56BC.roa (hash: EUoTZeexjkbb7zufCQtahAm8AEeFMiE7APDK7et0hJY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.crl rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 19:42:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2672 (0xa70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5642, serialNumber=803079BAB2F1F6B3B9AAC411DF4A82C3F06A6571 Validity Not Before: May 20 19:42:52 2026 GMT Not After : May 27 19:42:52 2026 GMT Subject: CN=6a0e0ebc-5a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e2:17:d3:bc:8d:ad:c6:9b:50:61:fb:d7:12: c4:78:95:73:c8:43:f8:6e:5e:a0:1f:b2:3d:fb:fb: 7a:1e:10:ca:2f:21:6e:cb:09:d3:a7:64:fc:49:30: c4:01:c2:4f:5a:5e:3e:0d:41:0f:46:01:82:29:df: 9a:15:11:c3:36:92:ca:ba:2f:4c:38:ef:29:ac:7a: f7:4d:76:33:8c:6c:07:e5:db:49:46:54:7f:06:e0: 27:cd:be:3a:4a:ae:87:b4:ab:92:c0:1c:c8:7c:45: 99:7e:96:bf:3a:d0:ee:4d:08:35:0d:0a:df:9f:c9: dc:b8:96:95:03:1d:84:d9:b3:e2:4e:db:1f:bd:67: 8b:79:97:24:02:55:82:3a:47:07:d1:7b:cc:7d:42: f5:e6:99:89:82:b6:22:d9:2d:b1:b3:a8:c8:1e:8d: eb:37:2d:40:49:d1:f0:5c:1c:74:9c:37:e1:38:19: 79:9e:ab:a7:5a:09:a6:57:20:25:f5:ad:06:92:5d: a9:95:10:b6:fd:00:6c:90:be:f9:f5:40:87:46:42: 6a:e8:dc:96:3e:3c:46:38:8e:fd:cf:6d:90:48:62: 93:1c:48:15:d8:85:c4:92:f7:5f:4f:62:87:70:a2: 73:75:02:d1:7f:c9:2d:88:67:e3:a1:b6:dc:85:0c: 2c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:24:0D:97:37:D2:FF:BC:13:E2:4B:87:E5:FE:24:3C:A8:8C:69:33 X509v3 Authority Key Identifier: keyid:80:30:79:BA:B2:F1:F6:B3:B9:AA:C4:11:DF:4A:82:C3:F0:6A:65:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDB5urLx9rO5qsQR30qCw_BqZXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5642/1040F32C8AFA11EA9B28A929C4F9AE02/gDB5urLx9rO5qsQR30qCw_BqZXE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:d7:9a:c6:93:85:ed:0b:77:8f:97:a7:5a:2d:31:2f:5f:6a: 63:ea:71:56:52:4b:1e:ac:20:50:a5:a8:c8:c5:bb:74:ad:e7: d5:09:7b:52:9e:d3:8e:45:ab:e4:e1:68:6f:aa:e3:69:ea:9d: d9:b4:ce:60:3f:f3:8a:ab:5c:f8:a4:af:aa:dd:e9:4f:bb:57: 30:61:d7:e6:ae:14:dc:e9:5f:f1:eb:27:81:98:35:6c:f5:31: bd:e0:3f:91:71:e1:82:0e:6a:fa:a3:f0:61:27:9e:59:d1:81: 66:b7:6a:f9:0e:ab:eb:fb:36:bb:19:ff:08:24:b4:9d:9f:f5: 75:7d:8e:ce:38:ff:f5:9f:ca:39:ba:a0:8a:80:77:9a:a4:2a: cb:b0:05:f8:78:20:85:1f:82:f6:e9:03:6a:b4:f1:38:f8:12: c3:e8:0e:94:33:e6:01:79:97:63:9e:2f:ce:18:2d:84:8d:ba: 4c:d3:26:3c:d3:28:a2:af:3c:5a:51:da:d4:2e:97:87:c5:a0: 3c:2b:66:f7:af:e8:19:1c:8f:64:4f:f2:63:04:aa:c8:5b:28: 0a:04:84:d6:a5:3c:c7:ca:19:42:df:77:e8:82:e3:80:c8:70: ee:00:cd:9c:2f:4b:2b:22:cb:e9:23:30:cf:a4:03:c9:9c:78: f8:91:56:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU2NDIxMTAvBgNVBAUTKDgwMzA3OUJBQjJGMUY2QjNCOUFBQzQxMURGNEE4MkMz RjA2QTY1NzEwHhcNMjYwNTIwMTk0MjUyWhcNMjYwNTI3MTk0MjUyWjAYMRYwFAYD VQQDEw02YTBlMGViYy01YTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+IX07yNrcabUGH71xLEeJVzyEP4bl6gH7I9+/t6HhDKLyFuywnTp2T8STDE AcJPWl4+DUEPRgGCKd+aFRHDNpLKui9MOO8prHr3TXYzjGwH5dtJRlR/BuAnzb46 Sq6HtKuSwBzIfEWZfpa/OtDuTQg1DQrfn8ncuJaVAx2E2bPiTtsfvWeLeZckAlWC OkcH0XvMfUL15pmJgrYi2S2xs6jIHo3rNy1ASdHwXBx0nDfhOBl5nqunWgmmVyAl 9a0Gkl2plRC2/QBskL759UCHRkJq6NyWPjxGOI79z22QSGKTHEgV2IXEkvdfT2KH cKJzdQLRf8ktiGfjobbchQwsVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO8kDZc3 0v+8E+JLh+X+JDyojGkzMB8GA1UdIwQYMBaAFIAwebqy8fazuarEEd9KgsPwamVx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTY0Mi8xMDQwRjMyQzhB RkExMUVBOUIyOEE5MjlDNEY5QUUwMi9nREI1dXJMeDlyTzVxc1FSMzBxQ3dfQnFa WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dEQjV1ckx4OXJPNXFzUVIzMHFDd19CcVpYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTY0Mi8xMDQwRjMyQzhBRkExMUVBOUIyOEE5MjlDNEY5QUUwMi9nREI1dXJMeDly TzVxc1FSMzBxQ3dfQnFaWEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcNeaxpOF7Qt3j5enWi0xL19qY+pxVlJLHqwgUKWoyMW7dK3n1Ql7Up7TjkWr 5OFob6rjaeqd2bTOYD/ziqtc+KSvqt3pT7tXMGHX5q4U3Olf8esngZg1bPUxveA/ kXHhgg5q+qPwYSeeWdGBZrdq+Q6r6/s2uxn/CCS0nZ/1dX2Ozjj/9Z/KObqgioB3 mqQqy7AF+HgghR+C9ukDarTxOPgSw+gOlDPmAXmXY54vzhgthI26TNMmPNMooq88 WlHa1C6Xh8WgPCtm96/oGRyPZE/yYwSqyFsoCgSE1qU8x8oZQt936ILjgMhw7gDN nC9LKyLL6SMwz6QDyZx4+JFWjw== -----END CERTIFICATE-----Generated at Thu May 21 13:24:33 2026 by rpki-client