$ rpki-client -vvf rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.mft File: N3RqhpOzuD9QHXFdEDC5VHK-OvY.mft (raw, json) Hash identifier: jTlZnCNq9WkwmdhdZUt8i/WIEw/Im+LLYZ8NcWJ+PyI= Subject key identifier: 7C:2F:E8:C3:AB:76:A8:25:33:4D:BE:04:96:BE:A0:2C:00:D6:BC:FB Authority key identifier: 37:74:6A:86:93:B3:B8:3F:50:1D:71:5D:10:30:B9:54:72:BE:3A:F6 Certificate issuer: /CN=A91F53A5/serialNumber=37746A8693B3B83F501D715D1030B95472BE3AF6 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N3RqhpOzuD9QHXFdEDC5VHK-OvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.mft Manifest number: 08 Signing time: Thu 21 May 2026 00:45:48 +0000 Manifest this update: Thu 21 May 2026 00:45:47 +0000 Manifest next update: Thu 28 May 2026 00:45:47 +0000 Files and hashes: 1: N3RqhpOzuD9QHXFdEDC5VHK-OvY.crl (hash: 0k7K3cylFNyoSWJdUO8rsYU9pT6D/6M7J7Nv4kP+SjA=) 2: 8F3BB5304DCD11F191088215B4833773.roa (hash: lA3Zts59kRJf+K26QY68A9dBrBr6aTNWe+CFgHwsnZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.crl rsync://rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N3RqhpOzuD9QHXFdEDC5VHK-OvY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 00:45:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F53A5, serialNumber=37746A8693B3B83F501D715D1030B95472BE3AF6 Validity Not Before: May 21 00:45:47 2026 GMT Not After : May 28 00:45:47 2026 GMT Subject: CN=6a0e55bc-448d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f3:1c:98:ca:e1:00:ed:8d:43:8a:7e:76:7d: 32:20:41:d6:bf:24:49:75:17:ea:d4:10:1f:0c:a5: 39:55:02:70:b9:1c:9d:57:49:3b:d7:50:71:d7:27: fb:fd:f3:81:97:41:6d:4a:b0:da:49:fe:90:5e:af: 11:b7:7f:3f:28:f4:06:aa:67:00:8e:22:f1:b5:16: bc:3d:1b:f6:59:65:f2:81:1b:08:55:d7:04:b6:3a: 98:1e:e1:9d:05:b9:e0:6b:ed:1c:3e:7b:9e:7d:5e: 96:27:74:7b:d8:4a:8e:f1:60:1c:27:ef:b9:4f:b3: ed:6b:d4:dc:4e:7b:db:dc:bc:0d:15:b8:71:4f:c8: 7f:61:d7:1f:c2:f2:35:8e:20:fc:f2:50:f2:8c:cc: db:0d:5f:1a:a2:0f:61:69:30:fe:72:17:92:66:e8: 69:92:4b:6b:32:57:82:ae:3e:b1:a2:bb:d0:84:cb: b3:f2:3f:34:21:cc:64:9b:ad:de:1e:4b:1f:23:5a: 35:9d:ac:d9:98:8d:33:16:74:b1:79:3e:48:e1:b7: 4f:a9:55:7e:99:d9:69:c6:c6:67:5e:c8:b7:94:1a: 4c:d9:8f:a6:34:f7:5c:a0:10:cc:ef:a8:5a:ee:42: 3f:a3:47:ed:ab:11:a4:10:b6:f9:f1:c0:1b:77:cc: 71:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:2F:E8:C3:AB:76:A8:25:33:4D:BE:04:96:BE:A0:2C:00:D6:BC:FB X509v3 Authority Key Identifier: keyid:37:74:6A:86:93:B3:B8:3F:50:1D:71:5D:10:30:B9:54:72:BE:3A:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N3RqhpOzuD9QHXFdEDC5VHK-OvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53A5/0FAABCDC4CFE11F19849B3B9AF833773/N3RqhpOzuD9QHXFdEDC5VHK-OvY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:d0:7c:c7:31:30:3f:2b:55:4f:36:a8:0b:f2:d5:85:17:2f: fd:28:06:64:a2:6a:b3:7c:7b:c1:f4:72:bb:25:d5:2b:b6:8a: b8:5d:4c:7d:55:bc:19:ba:36:d8:86:9d:0f:82:d4:f1:85:98: 58:60:b3:07:9d:d5:79:6e:24:ad:f9:d9:1c:0b:c3:6e:3c:f7: 7b:13:2c:c4:df:cd:db:eb:b2:d3:98:42:c6:61:09:53:22:db: e3:92:99:c8:11:f6:57:64:eb:1e:b1:6e:21:ce:77:be:bb:39: c3:eb:0b:e1:41:d5:23:bf:bd:46:59:4b:7c:57:f3:94:4f:57: 42:78:28:8f:91:37:1b:f8:51:f9:2f:05:bb:d0:ac:77:a8:63: 27:b4:1f:89:80:39:04:18:86:34:87:e7:34:7d:a6:b8:9f:55: 08:25:97:b8:f6:0d:b9:9f:70:fa:14:74:98:6e:e8:dc:e5:0f: 9f:e1:85:d1:d9:56:4f:e6:d7:96:ee:da:54:f5:25:8e:16:35: 8d:a5:b6:6c:f8:8e:43:7f:e5:4d:07:98:78:b7:f0:d9:05:f9: 62:69:a6:12:41:b2:7a:c7:ac:99:ad:f9:0e:45:cc:63:f8:87: 26:55:f1:65:ec:15:b3:30:a2:a4:2a:30:e5:f2:72:34:dd:0d: f6:1d:1a:77 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTNBNTExMC8GA1UEBRMoMzc3NDZBODY5M0IzQjgzRjUwMUQ3MTVEMTAzMEI5NTQ3 MkJFM0FGNjAeFw0yNjA1MjEwMDQ1NDdaFw0yNjA1MjgwMDQ1NDdaMBgxFjAUBgNV BAMTDTZhMGU1NWJjLTQ0OGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCE8xyYyuEA7Y1Din52fTIgQda/JEl1F+rUEB8MpTlVAnC5HJ1XSTvXUHHXJ/v9 84GXQW1KsNpJ/pBerxG3fz8o9AaqZwCOIvG1Frw9G/ZZZfKBGwhV1wS2Opge4Z0F ueBr7Rw+e559XpYndHvYSo7xYBwn77lPs+1r1NxOe9vcvA0VuHFPyH9h1x/C8jWO IPzyUPKMzNsNXxqiD2FpMP5yF5Jm6GmSS2syV4KuPrGiu9CEy7PyPzQhzGSbrd4e Sx8jWjWdrNmYjTMWdLF5Pkjht0+pVX6Z2WnGxmdeyLeUGkzZj6Y091ygEMzvqFru Qj+jR+2rEaQQtvnxwBt3zHGnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUfC/ow6t2 qCUzTb4Elr6gLADWvPswHwYDVR0jBBgwFoAUN3RqhpOzuD9QHXFdEDC5VHK+OvYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1M0E1LzBGQUFCQ0RDNENG RTExRjE5ODQ5QjNCOUFGODMzNzczL04zUnFocE96dUQ5UUhYRmRFREM1VkhLLU92 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTjNScWhwT3p1RDlRSFhGZEVEQzVWSEstT3ZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 M0E1LzBGQUFCQ0RDNENGRTExRjE5ODQ5QjNCOUFGODMzNzczL04zUnFocE96dUQ5 UUhYRmRFREM1VkhLLU92WS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCr0HzHMTA/K1VPNqgL8tWFFy/9KAZkomqzfHvB9HK7JdUrtoq4XUx9VbwZujbY hp0PgtTxhZhYYLMHndV5biSt+dkcC8NuPPd7EyzE383b67LTmELGYQlTItvjkpnI EfZXZOsesW4hzne+uznD6wvhQdUjv71GWUt8V/OUT1dCeCiPkTcb+FH5LwW70Kx3 qGMntB+JgDkEGIY0h+c0faa4n1UIJZe49g25n3D6FHSYbujc5Q+f4YXR2VZP5teW 7tpU9SWOFjWNpbZs+I5Df+VNB5h4t/DZBfliaaYSQbJ6x6yZrfkORcxj+IcmVfFl 7BWzMKKkKjDl8nI03Q32HRp3 -----END CERTIFICATE-----Generated at Thu May 21 12:52:57 2026 by rpki-client