$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft File: phNuUOlJjgSdC00vGGf6GxiRxO8.mft (raw, json) Hash identifier: ItJPqvuEnA6FDvYpQpsjjoQkJecG6FTjDvxlp7l1xpw= Subject key identifier: C6:67:22:4C:2A:89:DA:0E:04:73:AF:C6:AB:59:25:41:46:10:01:AE Authority key identifier: A6:13:6E:50:E9:49:8E:04:9D:0B:4D:2F:18:67:FA:1B:18:91:C4:EF Certificate issuer: /CN=A91EC5DE/serialNumber=A6136E50E9498E049D0B4D2F1867FA1B1891C4EF Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft Manifest number: 99 Signing time: Thu 21 May 2026 07:33:42 +0000 Manifest this update: Thu 21 May 2026 07:33:42 +0000 Manifest next update: Thu 28 May 2026 07:33:42 +0000 Files and hashes: 1: phNuUOlJjgSdC00vGGf6GxiRxO8.crl (hash: 1ygwKKqrthCz3stvC0mXBhWJ67AUUwp0qzLenoI8Bgs=) 2: F8E93410A85C11F0A2A48E76C4F9AE02.roa (hash: zwjQpeKdJOSFl0zaBPDuSlSa1uw+y3+L/xCcosdfy9o=) 3: C3CEEDC47DF011F097DBDD12C4F9AE02.roa (hash: UAqsRf7T5xk/tW0W7gNLXY7xtnRSTJeiphCUdFbB9X0=) 4: 46DAB9387DF011F0A392A111C4F9AE02.roa (hash: AQcKmsJt9IJs5jIdeC1sHVoe6SkebbETdV2pwOULpzc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.crl rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 07:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC5DE, serialNumber=A6136E50E9498E049D0B4D2F1867FA1B1891C4EF Validity Not Before: May 21 07:33:42 2026 GMT Not After : May 28 07:33:42 2026 GMT Subject: CN=6a0eb556-dbdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:50:2a:bf:4f:3a:b7:5f:8a:80:1a:03:d2:bb: 27:ef:45:1d:20:bb:ee:4b:5c:7b:eb:15:4f:d2:50: e0:82:af:c7:8f:a7:57:dd:e2:36:aa:c2:1a:4e:31: 90:f7:4d:a5:66:7e:f3:53:79:f0:0e:79:f3:3e:b5: 48:2e:ba:50:22:61:96:98:f8:a1:04:7f:cf:90:3d: f8:55:f4:18:36:c0:58:4b:9d:4c:9b:35:48:5a:f8: 56:7b:3a:2b:c5:08:6e:05:6d:23:b6:98:06:01:17: 3e:90:0e:f2:00:f8:91:01:2d:62:5b:34:64:50:1e: e4:1c:d8:0e:b6:e4:56:e9:7c:6c:43:4d:67:60:5f: cb:46:94:58:53:3c:d4:12:52:41:15:67:97:ee:4d: b1:26:cb:84:3c:25:93:ce:e4:62:24:19:81:01:90: bd:77:e1:2a:14:77:a6:86:13:40:9f:59:e8:b7:20: c8:0a:2d:10:c9:11:d7:2b:e9:45:9a:8f:52:a7:6d: 61:94:89:8d:60:be:81:71:87:c1:bd:d5:ba:31:9c: 2f:67:23:c7:a1:dc:94:ff:ab:1a:7e:26:8d:9d:71: b3:f0:e7:cc:90:d6:4a:38:b0:f9:70:b6:11:0d:76: 1d:c3:aa:b9:bd:1a:bb:82:9a:9e:62:db:f7:c0:1c: a3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:67:22:4C:2A:89:DA:0E:04:73:AF:C6:AB:59:25:41:46:10:01:AE X509v3 Authority Key Identifier: keyid:A6:13:6E:50:E9:49:8E:04:9D:0B:4D:2F:18:67:FA:1B:18:91:C4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:80:29:06:73:89:ca:79:1a:ba:87:96:b7:94:01:59:e7:8f: 76:1c:09:5d:56:7b:ac:54:8e:7b:d3:ae:f2:d0:8b:10:d5:f9: 95:9f:a3:b9:b4:05:52:35:1a:b8:28:9e:92:17:da:97:60:97: af:0d:de:09:1d:dd:8a:5c:dc:37:24:38:74:e8:f8:6c:6c:d3: fa:c4:e4:b2:b1:67:9d:30:74:86:fd:b3:2d:3d:ca:58:96:19: b1:ea:59:73:fe:29:bb:c8:9a:f3:2a:e0:42:69:9a:94:19:70: d6:2f:44:6f:6c:46:2b:89:0e:18:d0:14:7f:89:d7:78:e6:2b: f8:4c:08:a1:6a:fa:dd:e6:cb:79:87:fc:e3:d8:c3:a4:a9:e1: 8d:c6:9e:6e:73:47:2d:50:da:8c:a9:b5:56:04:d0:fc:15:4c: 20:9a:0c:2e:7d:81:54:22:82:28:09:54:b4:cd:af:08:ed:48: c4:25:c4:83:1a:b5:9e:0a:3c:be:89:d2:f0:72:d3:c5:44:0c: 12:24:71:d7:fd:0b:79:e1:23:32:21:81:04:b4:19:cb:e6:e2: 94:95:1a:24:1c:e8:5a:41:3a:ce:59:e6:49:f0:90:b3:b8:27: 17:3b:07:f1:96:78:1b:d5:c9:91:f0:6a:ef:c7:34:75:36:f3: e7:a4:14:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM1REUxMTAvBgNVBAUTKEE2MTM2RTUwRTk0OThFMDQ5RDBCNEQyRjE4NjdGQTFC MTg5MUM0RUYwHhcNMjYwNTIxMDczMzQyWhcNMjYwNTI4MDczMzQyWjAYMRYwFAYD VQQDEw02YTBlYjU1Ni1kYmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVAqv086t1+KgBoD0rsn70UdILvuS1x76xVP0lDggq/Hj6dX3eI2qsIaTjGQ 902lZn7zU3nwDnnzPrVILrpQImGWmPihBH/PkD34VfQYNsBYS51MmzVIWvhWezor xQhuBW0jtpgGARc+kA7yAPiRAS1iWzRkUB7kHNgOtuRW6XxsQ01nYF/LRpRYUzzU ElJBFWeX7k2xJsuEPCWTzuRiJBmBAZC9d+EqFHemhhNAn1notyDICi0QyRHXK+lF mo9Sp21hlImNYL6BcYfBvdW6MZwvZyPHodyU/6safiaNnXGz8OfMkNZKOLD5cLYR DXYdw6q5vRq7gpqeYtv3wByjnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMZnIkwq idoOBHOvxqtZJUFGEAGuMB8GA1UdIwQYMBaAFKYTblDpSY4EnQtNLxhn+hsYkcTv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzVERS84NzYyQ0QxQTc0 MjIxMUYwODc1Q0FDMzNDNEY5QUUwMi9waE51VU9sSmpnU2RDMDB2R0dmNkd4aVJ4 TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BoTnVVT2xKamdTZEMwMHZHR2Y2R3hpUnhPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzVERS84NzYyQ0QxQTc0MjIxMUYwODc1Q0FDMzNDNEY5QUUwMi9waE51VU9sSmpn U2RDMDB2R0dmNkd4aVJ4TzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa4ApBnOJynkauoeWt5QBWeePdhwJXVZ7rFSOe9Ou8tCLENX5lZ+jubQFUjUa uCiekhfal2CXrw3eCR3dilzcNyQ4dOj4bGzT+sTksrFnnTB0hv2zLT3KWJYZsepZ c/4pu8ia8yrgQmmalBlw1i9Eb2xGK4kOGNAUf4nXeOYr+EwIoWr63ebLeYf849jD pKnhjcaebnNHLVDajKm1VgTQ/BVMIJoMLn2BVCKCKAlUtM2vCO1IxCXEgxq1ngo8 vonS8HLTxUQMEiRx1/0LeeEjMiGBBLQZy+bilJUaJBzoWkE6zlnmSfCQs7gnFzsH 8ZZ4G9XJkfBq78c0dTbz56QUgQ== -----END CERTIFICATE-----Generated at Thu May 21 13:19:08 2026 by rpki-client