$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft File: nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft (raw, json) Hash identifier: co9BnZHUXYKIa8EGDLB66JoPO71mgh4C0T8fYLtK5BA= Subject key identifier: 52:FB:6A:EE:CD:FF:06:5F:46:AA:F6:D2:6E:22:23:95:E5:98:41:B4 Authority key identifier: 9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A Certificate issuer: /CN=A91EF19E/serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A Certificate serial: 2AC5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft Manifest number: 2AB8 Signing time: Wed 20 May 2026 14:23:48 +0000 Manifest this update: Wed 20 May 2026 14:23:47 +0000 Manifest next update: Wed 27 May 2026 14:23:47 +0000 Files and hashes: 1: nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl (hash: YCeNb/VL0+nz1ThcUrMhe0j36YOgt9+xHZa1Bk8TZfw=) 2: F9722F8255C411E9A0FEF781C4F9AE02.roa (hash: qeOImN/OPXFrmVSnTa/uFkjmKzAD8SUjcGoXbzqtLu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 14:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10949 (0x2ac5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF19E, serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A Validity Not Before: May 20 14:23:47 2026 GMT Not After : May 27 14:23:47 2026 GMT Subject: CN=6a0dc3f3-287d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:02:6c:dd:06:a1:42:99:e2:b5:cd:21:2d:99: 8c:ef:b8:1b:9f:1b:42:2f:0f:d3:e4:2d:2e:1a:48: a4:a0:c9:b2:91:c2:5e:e2:f6:a9:b6:48:c7:ba:5b: 03:e6:1d:da:04:c1:4c:4d:cd:69:5a:63:16:c5:ca: 47:95:0a:92:45:87:eb:3f:56:c2:27:9b:c0:fa:1b: f6:60:63:56:f8:a0:89:69:e1:f7:5e:09:9c:1b:e2: 27:67:ed:a7:87:88:a0:30:cd:1f:3d:de:fb:92:fa: 01:68:0d:45:19:fb:1e:01:ac:d9:83:ac:02:b4:e0: 43:75:b5:6e:0b:78:bf:f9:01:90:88:76:b5:dc:24: 2c:72:b4:3b:83:a6:cc:9a:a0:4a:16:e7:d8:96:45: d9:c5:bc:a7:dc:ac:74:96:5b:66:d1:b3:e9:43:d1: 6c:d1:4b:00:20:cb:e3:f6:a9:f0:40:dd:02:4b:1a: ad:15:08:3e:db:f4:be:ff:e1:22:12:74:46:fd:8a: 97:83:9e:dd:e8:b4:ac:9e:44:ba:f8:b8:89:64:14: 7c:57:cd:0d:65:ad:9c:b0:30:9a:50:72:f3:3b:d1: 63:0d:5e:7a:5c:9c:24:1c:74:31:7c:8a:75:0c:0b: dc:1a:d5:f9:00:ce:57:4a:94:ef:b9:d9:54:1c:4b: 97:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FB:6A:EE:CD:FF:06:5F:46:AA:F6:D2:6E:22:23:95:E5:98:41:B4 X509v3 Authority Key Identifier: keyid:9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:00:19:d6:4e:cd:d5:ed:8d:e1:5f:cf:44:a5:9f:c5:18:7c: 1e:09:28:48:01:00:b4:0a:2c:73:66:c0:a4:6a:d6:c4:97:2d: eb:f3:10:7e:ab:7d:12:16:dc:e9:9a:45:e5:e7:ad:62:9a:06: 50:4f:7e:dc:49:6b:6d:71:82:7c:00:03:b4:6a:49:e3:80:cc: 87:68:e8:b6:33:4a:07:de:e7:77:08:38:c8:be:62:91:13:6d: c8:56:dc:d1:92:61:4f:89:0f:61:33:4b:68:d6:e8:9e:4d:6d: 5e:df:96:a0:5f:1d:75:2e:fd:a7:45:ce:37:fb:3a:06:42:2b: ab:9c:1d:a6:12:d1:6f:32:11:d1:54:45:1f:94:e3:fc:e8:0d: 62:05:eb:68:a7:76:23:0d:12:6f:e0:f6:2c:e0:87:06:5d:3d: 6f:c5:24:46:cb:9f:f5:56:d8:67:a2:d2:da:85:79:d2:3a:be: ad:d8:0b:25:07:e9:5c:1a:16:d4:c9:cd:6f:84:70:02:43:67: d0:e2:b7:6f:8f:d7:4e:48:bc:a2:fc:06:8c:2a:a6:c8:a0:94: 03:79:81:ea:89:09:4e:55:92:7e:c4:f3:a5:7d:28:e8:8e:67: a6:94:3b:06:ad:c9:f5:15:ff:6a:18:2a:e9:07:c7:ad:61:4d: cd:0e:58:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxOUUxMTAvBgNVBAUTKDlFMUYxOUE3RTE4RDhCQ0VEMjNFRjJFREFCMTlFODU0 MzhFN0YwOEEwHhcNMjYwNTIwMTQyMzQ3WhcNMjYwNTI3MTQyMzQ3WjAYMRYwFAYD VQQDEw02YTBkYzNmMy0yODdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2gJs3QahQpnitc0hLZmM77gbnxtCLw/T5C0uGkikoMmykcJe4vaptkjHulsD 5h3aBMFMTc1pWmMWxcpHlQqSRYfrP1bCJ5vA+hv2YGNW+KCJaeH3XgmcG+InZ+2n h4igMM0fPd77kvoBaA1FGfseAazZg6wCtOBDdbVuC3i/+QGQiHa13CQscrQ7g6bM mqBKFufYlkXZxbyn3Kx0lltm0bPpQ9Fs0UsAIMvj9qnwQN0CSxqtFQg+2/S+/+Ei EnRG/YqXg57d6LSsnkS6+LiJZBR8V80NZa2csDCaUHLzO9FjDV56XJwkHHQxfIp1 DAvcGtX5AM5XSpTvudlUHEuXmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFL7au7N /wZfRqr20m4iI5XlmEG0MB8GA1UdIwQYMBaAFJ4fGafhjYvO0j7y7asZ6FQ45/CK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE5RS9BOTNFOTkzRTM0 MEQxMUU0OUVDOTgxNjNDNEY5QUUwMi9uaDhacC1HTmk4N1NQdkx0cXhub1ZEam44 SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25oOFpwLUdOaTg3U1B2THRxeG5vVkRqbjhJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE5RS9BOTNFOTkzRTM0MEQxMUU0OUVDOTgxNjNDNEY5QUUwMi9uaDhacC1HTmk4 N1NQdkx0cXhub1ZEam44SW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADwAZ1k7N1e2N4V/PRKWfxRh8HgkoSAEAtAosc2bApGrWxJct6/MQfqt9Ehbc 6ZpF5eetYpoGUE9+3ElrbXGCfAADtGpJ44DMh2jotjNKB97ndwg4yL5ikRNtyFbc 0ZJhT4kPYTNLaNbonk1tXt+WoF8ddS79p0XON/s6BkIrq5wdphLRbzIR0VRFH5Tj /OgNYgXraKd2Iw0Sb+D2LOCHBl09b8UkRsuf9VbYZ6LS2oV50jq+rdgLJQfpXBoW 1MnNb4RwAkNn0OK3b4/XTki8ovwGjCqmyKCUA3mB6okJTlWSfsTzpX0o6I5nppQ7 Bq3J9RX/ahgq6QfHrWFNzQ5YHQ== -----END CERTIFICATE-----Generated at Thu May 21 12:36:38 2026 by rpki-client