$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft File: G5HVFg99VrcFqFFsahz0L0ln71Y.mft (raw, json) Hash identifier: uDtqHfC6gBzQgjHOSsnPdjso/mN5FWzhja+eNGuFo3M= Subject key identifier: EC:78:C5:C7:A0:BE:50:69:00:26:88:19:A8:17:9C:29:EF:C8:68:97 Authority key identifier: 1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 Certificate issuer: /CN=A91EF554/serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Certificate serial: 09F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft Manifest number: 09EF Signing time: Sat 16 May 2026 19:49:24 +0000 Manifest this update: Sat 16 May 2026 19:49:24 +0000 Manifest next update: Sat 23 May 2026 19:49:24 +0000 Files and hashes: 1: G5HVFg99VrcFqFFsahz0L0ln71Y.crl (hash: TLcpaUGWvmtAsJdb4f0jDKfgKfcdIp5pDJj+c2w6ajU=) 2: A37D1F4AF51A11F08A3A39E6586F56BC.roa (hash: jR0WlKY8LzR2LUBl37yUqlZt1qZx888jsAWYo1rjx1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 19:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2553 (0x9f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF554, serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Validity Not Before: May 16 19:49:24 2026 GMT Not After : May 23 19:49:24 2026 GMT Subject: CN=6a08ca44-ad06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:07:b9:41:57:87:7c:43:77:ac:30:8f:b0:d8: 63:32:ef:f9:1b:2b:8b:be:10:68:2a:2e:93:bf:a7: 8d:fa:64:72:fe:c9:23:61:d0:85:d7:b0:a5:1d:7c: cb:c5:45:5c:c7:2c:17:c6:8a:bf:25:48:a9:3e:41: da:fe:a3:01:8b:16:d5:c4:ea:f1:60:65:eb:6e:25: 1f:1e:4f:25:a3:24:ce:3d:40:91:e0:8c:9f:dc:f9: 69:17:9d:11:4c:61:ce:46:59:ae:27:f5:6e:83:96: e6:f0:9d:f5:f5:85:0b:b7:6c:26:40:9b:19:6d:a4: a8:b5:97:f4:4c:43:c1:e2:69:e8:93:fd:2b:e1:bc: ad:0c:e3:dc:dc:b4:bf:9f:0b:fd:67:6c:78:b8:30: f1:0a:a8:12:8b:c7:96:ce:a2:7d:71:eb:df:c1:14: fb:a6:9f:3c:5f:49:3a:6f:3f:22:f2:a0:93:aa:9d: ab:7b:af:64:5c:fb:d9:f6:2d:b0:62:89:a2:e8:73: fd:46:5c:97:5c:08:c7:36:0b:e5:b9:33:62:a4:d5: b0:04:d9:fe:f4:c6:78:82:2d:14:aa:bb:f0:f6:dc: 89:f2:3d:70:39:39:c1:f9:81:6c:9e:ed:bf:23:e3: c6:64:ff:28:4f:d3:3a:13:89:44:a5:76:6e:a7:e9: e6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:78:C5:C7:A0:BE:50:69:00:26:88:19:A8:17:9C:29:EF:C8:68:97 X509v3 Authority Key Identifier: keyid:1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:18:e7:73:7e:f1:09:4c:45:86:42:03:c9:0d:87:7d:75:0c: d9:b5:a2:a1:e0:af:df:d6:33:b3:42:37:e3:f9:cd:72:4b:8d: d9:8b:7a:8c:40:70:f9:f0:b9:71:bd:9f:f8:7d:01:db:9c:b0: 6d:bd:49:e9:e5:31:63:50:96:a7:bc:b4:35:03:60:18:a1:37: f1:d5:af:c6:2a:e9:9c:95:8e:ef:d3:7f:d6:fa:1e:27:84:1c: e4:0a:64:15:93:9e:51:b5:9a:f5:be:af:85:07:fd:31:34:94: f4:5f:63:e6:5c:46:7c:9a:a3:bd:8b:f7:b4:53:17:2c:78:cc: 76:6d:92:74:aa:88:35:ba:ae:85:6b:da:87:14:dd:33:a3:e4: 54:db:9c:7f:91:fc:39:f6:83:41:df:d7:d6:6b:ea:1c:26:02: 62:a1:03:ac:e6:f3:a2:b0:5f:c8:04:f4:0b:08:8d:23:bf:39: b3:a4:fb:02:ee:ef:13:33:e8:c4:8e:2a:2d:75:f0:bf:fa:b8: 72:ed:7f:78:3c:48:86:2c:ff:ca:a9:e2:bf:74:5a:5e:fa:cd: 62:74:49:93:b7:7c:fc:54:30:94:db:3b:d0:3a:a0:13:ba:c5: a7:02:7c:a6:2c:36:c6:14:20:f5:fc:28:3b:35:89:43:e8:b5: 82:eb:ec:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1NTQxMTAvBgNVBAUTKDFCOTFENTE2MEY3RDU2QjcwNUE4NTE2QzZBMUNGNDJG NDk2N0VGNTYwHhcNMjYwNTE2MTk0OTI0WhcNMjYwNTIzMTk0OTI0WjAYMRYwFAYD VQQDEw02YTA4Y2E0NC1hZDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwe5QVeHfEN3rDCPsNhjMu/5GyuLvhBoKi6Tv6eN+mRy/skjYdCF17ClHXzL xUVcxywXxoq/JUipPkHa/qMBixbVxOrxYGXrbiUfHk8loyTOPUCR4Iyf3PlpF50R TGHORlmuJ/Vug5bm8J319YULt2wmQJsZbaSotZf0TEPB4mnok/0r4bytDOPc3LS/ nwv9Z2x4uDDxCqgSi8eWzqJ9cevfwRT7pp88X0k6bz8i8qCTqp2re69kXPvZ9i2w Yomi6HP9RlyXXAjHNgvluTNipNWwBNn+9MZ4gi0Uqrvw9tyJ8j1wOTnB+YFsnu2/ I+PGZP8oT9M6E4lEpXZup+nmcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOx4xceg vlBpACaIGagXnCnvyGiXMB8GA1UdIwQYMBaAFBuR1RYPfVa3BahRbGoc9C9JZ+9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU1NC9FQjFDQkJFMjlF NUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZyY0ZxRkZzYWh6MEwwbG43 MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c1SFZGZzk5VnJjRnFGRnNhaHowTDBsbjcxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjU1NC9FQjFDQkJFMjlFNUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZy Y0ZxRkZzYWh6MEwwbG43MVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnRjnc37xCUxFhkIDyQ2HfXUM2bWioeCv39Yzs0I34/nNckuN2Yt6jEBw+fC5 cb2f+H0B25ywbb1J6eUxY1CWp7y0NQNgGKE38dWvxirpnJWO79N/1voeJ4Qc5Apk FZOeUbWa9b6vhQf9MTSU9F9j5lxGfJqjvYv3tFMXLHjMdm2SdKqINbquhWvahxTd M6PkVNucf5H8OfaDQd/X1mvqHCYCYqEDrObzorBfyAT0CwiNI785s6T7Au7vEzPo xI4qLXXwv/q4cu1/eDxIhiz/yqniv3RaXvrNYnRJk7d8/FQwlNs70DqgE7rFpwJ8 piw2xhQg9fwoOzWJQ+i1guvsWA== -----END CERTIFICATE-----Generated at Sun May 17 04:16:29 2026 by rpki-client