$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft File: 24aQ9k5_gyrPw6am6EIdQXfIlPY.mft (raw, json) Hash identifier: AyQRV8iJz4nbpPhYoyRAu4U5cY1Z2hH+qQJrHcarQ/o= Subject key identifier: 46:1E:FC:5B:E3:76:AE:53:4A:D3:EC:BF:E3:6E:51:C2:12:EB:BB:2D Authority key identifier: DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6 Certificate issuer: /CN=A91F0FAA/serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6 Certificate serial: 023A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft Manifest number: 0235 Signing time: Thu 21 May 2026 02:38:49 +0000 Manifest this update: Thu 21 May 2026 02:38:48 +0000 Manifest next update: Thu 28 May 2026 02:38:48 +0000 Files and hashes: 1: 24aQ9k5_gyrPw6am6EIdQXfIlPY.crl (hash: nDNaY+lfKAoEAk5g/+GO5325ZUCInapj2kF4iNuP0KI=) 2: 6B5723D8F89F11ED8F29921CC4F9AE02.roa (hash: oThRjVHDmoFWRnFR0NxIEVr1V8eRjzhqrwR3MFXCY2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.crl rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:38:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 570 (0x23a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0FAA, serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6 Validity Not Before: May 21 02:38:48 2026 GMT Not After : May 28 02:38:48 2026 GMT Subject: CN=6a0e7038-ac38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d1:67:9e:fd:11:da:e0:10:83:56:f7:d3:ce: 94:40:a8:41:2b:c3:f3:cc:4a:08:95:4d:ba:ab:b4: 68:33:0d:93:56:9e:17:5b:d0:46:80:a5:49:aa:bc: 58:09:09:fd:00:ae:c7:26:0b:42:ca:1f:5b:45:6f: 38:f6:25:f8:8b:09:14:8e:20:12:ab:d7:34:48:82: 12:4c:a3:76:e4:4e:a5:8d:d9:54:0b:57:dd:27:22: ea:48:e3:81:de:3a:93:02:81:9a:f2:59:00:8b:17: 71:10:f0:81:5d:3a:02:8b:15:d1:1a:3a:8d:69:02: 82:29:a4:dd:45:a1:84:ff:08:35:2b:7f:6a:5a:52: 6a:46:f6:60:3d:d0:d5:be:23:19:a3:b5:75:03:3c: 4e:fd:7f:11:2d:4e:99:fe:2e:43:6a:a0:63:ac:33: 6c:fc:90:e2:dd:32:28:68:41:aa:fe:5c:d9:0b:b5: 29:67:f0:b7:84:56:49:20:fc:77:07:f1:22:6c:a7: 9c:9e:e4:56:44:81:9e:67:fb:63:82:94:88:6b:3b: 6d:48:8e:d7:04:37:c2:ea:0a:04:3f:5c:b3:59:3e: 9a:8d:11:ec:53:7d:19:5f:fc:1f:73:11:04:14:7b: 66:48:a1:80:a2:ba:f8:b8:8c:8b:6b:43:eb:18:73: 46:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:1E:FC:5B:E3:76:AE:53:4A:D3:EC:BF:E3:6E:51:C2:12:EB:BB:2D X509v3 Authority Key Identifier: keyid:DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption eb:7f:4c:66:c2:33:28:44:a6:7d:15:52:7c:bd:3c:7a:cb:d4: 36:b4:1c:7c:0d:90:2c:b8:c7:a6:60:6f:14:f3:99:9d:80:9a: f6:b6:3d:a8:21:0b:ea:0c:15:67:3b:7e:03:99:80:07:7c:e2: b7:05:62:83:14:6a:96:c6:29:9e:e8:60:8e:53:39:c7:a4:51: 7b:a6:cc:a9:6c:02:c3:f1:96:6a:08:ad:21:28:0d:7b:0f:8c: ed:5b:e2:8b:b3:75:40:34:df:cb:1f:65:84:82:3f:d4:44:4e: d1:2d:65:ad:a9:cb:33:db:1b:b7:e2:ae:85:66:a9:8b:58:0f: b7:92:48:cd:a4:56:a3:37:46:66:f3:93:66:b8:9b:b9:86:85: 21:9b:5f:c1:29:81:e7:d7:9e:33:4f:78:b6:1c:cd:7e:2b:bd: 79:4d:3e:24:36:af:72:fd:07:80:37:52:e2:d0:a6:e8:92:ef: ac:de:f4:4e:e7:e7:ff:c1:ec:5b:5a:74:cb:5f:a3:c7:ac:ed: 66:c9:de:dd:5e:27:10:c7:73:01:e4:8c:05:de:5c:72:d3:e7: 70:7f:77:99:4d:be:af:d6:86:bc:8a:31:91:13:ca:a8:da:62: aa:77:da:e0:c8:6a:8e:c2:1b:ca:db:66:be:19:70:33:79:12: f0:e8:33:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGQUExMTAvBgNVBAUTKERCODY5MEY2NEU3RjgzMkFDRkMzQTZBNkU4NDIxRDQx NzdDODk0RjYwHhcNMjYwNTIxMDIzODQ4WhcNMjYwNTI4MDIzODQ4WjAYMRYwFAYD VQQDEw02YTBlNzAzOC1hYzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo9Fnnv0R2uAQg1b3086UQKhBK8PzzEoIlU26q7RoMw2TVp4XW9BGgKVJqrxY CQn9AK7HJgtCyh9bRW849iX4iwkUjiASq9c0SIISTKN25E6ljdlUC1fdJyLqSOOB 3jqTAoGa8lkAixdxEPCBXToCixXRGjqNaQKCKaTdRaGE/wg1K39qWlJqRvZgPdDV viMZo7V1AzxO/X8RLU6Z/i5DaqBjrDNs/JDi3TIoaEGq/lzZC7UpZ/C3hFZJIPx3 B/EibKecnuRWRIGeZ/tjgpSIazttSI7XBDfC6goEP1yzWT6ajRHsU30ZX/wfcxEE FHtmSKGAorr4uIyLa0PrGHNGwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEYe/Fvj dq5TStPsv+NuUcIS67stMB8GA1UdIwQYMBaAFNuGkPZOf4Mqz8OmpuhCHUF3yJT2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZBQS9GRTEwMUNDQ0Y4 OTgxMUVEODYyMzVGNjhDNEY5QUUwMi8yNGFROWs1X2d5clB3NmFtNkVJZFFYZkls UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI0YVE5azVfZ3lyUHc2YW02RUlkUVhmSWxQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEZBQS9GRTEwMUNDQ0Y4OTgxMUVEODYyMzVGNjhDNEY5QUUwMi8yNGFROWs1X2d5 clB3NmFtNkVJZFFYZklsUFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA639MZsIzKESmfRVSfL08esvUNrQcfA2QLLjHpmBvFPOZnYCa9rY9qCEL6gwV Zzt+A5mAB3zitwVigxRqlsYpnuhgjlM5x6RRe6bMqWwCw/GWagitISgNew+M7Vvi i7N1QDTfyx9lhII/1ERO0S1lranLM9sbt+KuhWapi1gPt5JIzaRWozdGZvOTZrib uYaFIZtfwSmB59eeM094thzNfiu9eU0+JDavcv0HgDdS4tCm6JLvrN70Tufn/8Hs W1p0y1+jx6ztZsne3V4nEMdzAeSMBd5cctPncH93mU2+r9aGvIoxkRPKqNpiqnfa 4MhqjsIbyttmvhlwM3kS8Ogzfg== -----END CERTIFICATE-----Generated at Thu May 21 11:14:49 2026 by rpki-client