$ rpki-client -vvf rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft File: _dVXSqazoje0NmmVfYUzlZPcHpo.mft (raw, json) Hash identifier: 7SuvtdA2vEEeoCK16ItoAWYaWT+cJTVM9PLI7jTNpMs= Subject key identifier: F1:DC:54:A4:A9:77:EF:EC:CC:BA:D8:F0:D1:76:1B:0D:99:95:12:5A Authority key identifier: FD:D5:57:4A:A6:B3:A2:37:B4:36:69:95:7D:85:33:95:93:DC:1E:9A Certificate issuer: /CN=A91F609C/serialNumber=FDD5574AA6B3A237B43669957D85339593DC1E9A Certificate serial: 0351 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft Manifest number: 0349 Signing time: Thu 21 May 2026 01:04:22 +0000 Manifest this update: Thu 21 May 2026 01:04:22 +0000 Manifest next update: Thu 28 May 2026 01:04:22 +0000 Files and hashes: 1: _dVXSqazoje0NmmVfYUzlZPcHpo.crl (hash: gbleFLdd8Ym+Ru7M2TUBdEB/YwAkM/7fd8nBrA7dmxY=) 2: 06E87B54046711ED95A3495FC4F9AE02.roa (hash: R9jdVpy+qpEyzogbluazuQ5kKtc3aY56mxNQcSBuCZs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.crl rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 01:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 849 (0x351) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F609C, serialNumber=FDD5574AA6B3A237B43669957D85339593DC1E9A Validity Not Before: May 21 01:04:22 2026 GMT Not After : May 28 01:04:22 2026 GMT Subject: CN=6a0e5a16-3af3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:58:34:83:c6:33:a1:d5:6c:14:98:d0:7a:8b: c4:09:12:12:cd:8a:9a:e2:94:02:0f:fc:f2:d2:9e: bd:f1:54:e8:c0:32:05:3f:f0:1c:bd:1e:2c:97:a6: c8:60:8a:b9:ca:1c:8e:10:4b:d2:a0:90:85:9b:c4: be:cc:15:57:33:32:ff:68:d3:38:ea:83:6c:98:db: 10:19:6e:6f:c2:41:65:35:ab:ab:07:13:0a:df:9b: c0:3b:c5:0f:bd:fe:10:dc:6d:07:af:c9:6b:e8:41: 49:44:8d:1d:2e:c2:dc:67:82:55:f1:c9:fa:37:46: 2f:df:86:36:3e:71:2c:20:6f:16:69:cf:35:8e:47: 40:3a:5b:82:28:0a:92:0c:80:26:fa:f7:cf:d3:af: 08:8d:a2:f8:d8:06:cb:e7:35:40:27:f1:7c:52:0f: 17:25:2b:40:1e:2f:d8:50:27:ee:8c:3c:6b:22:66: 87:d1:86:65:5e:25:5b:2c:1b:88:03:f0:5e:e6:63: dc:50:54:b3:e6:36:ba:09:e5:55:97:b2:15:e6:a3: ae:b9:ef:5c:ca:28:9d:f1:33:b5:33:5d:2d:3d:91: 17:07:b2:4e:56:74:b2:18:b9:c0:75:96:8d:c7:4d: 94:b3:a1:6a:a2:63:1d:b0:b1:af:6d:98:e5:57:b0: d1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DC:54:A4:A9:77:EF:EC:CC:BA:D8:F0:D1:76:1B:0D:99:95:12:5A X509v3 Authority Key Identifier: keyid:FD:D5:57:4A:A6:B3:A2:37:B4:36:69:95:7D:85:33:95:93:DC:1E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:58:43:e0:99:5a:e4:49:0f:78:66:71:1c:2b:51:ad:2c:ae: f1:01:ad:99:d2:f6:a4:80:67:0b:fc:ba:ef:cc:25:7c:67:46: ee:d7:c7:4e:1f:05:66:63:2b:56:37:11:c1:21:8c:fb:aa:ba: d0:33:2b:4b:3d:2b:fb:fb:79:92:3f:54:fa:08:19:cf:4c:bc: 8b:ec:69:99:63:2d:39:3a:5d:0b:4b:85:af:a7:d8:99:87:a9: da:f5:d7:f5:4d:fe:57:08:fc:23:b9:dc:22:fa:ba:12:42:df: 6b:79:fd:35:15:44:03:a5:87:bd:00:ce:d5:6a:25:a2:3d:5e: da:6b:c8:2b:a0:c3:27:1c:40:53:7c:1c:75:b9:46:bc:0a:9e: 55:e4:0b:d7:ba:0f:6f:ef:29:c9:15:a7:af:f2:1c:fa:49:f1: bd:1e:e2:61:67:3a:a1:18:42:0a:d9:64:2e:3e:89:11:40:f5: 46:0c:a9:4e:89:62:d0:db:13:97:94:93:c4:d0:26:1e:e3:f4: 6a:ab:05:fc:eb:0c:4c:aa:08:cf:ee:56:2a:52:1e:76:62:d3: 1a:f6:ec:b1:c6:13:49:1f:99:94:09:92:9d:91:3e:36:77:68: 6b:ab:1e:cd:1f:05:6e:3f:0f:db:9c:af:66:68:72:b6:ec:62: 9f:96:d4:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYwOUMxMTAvBgNVBAUTKEZERDU1NzRBQTZCM0EyMzdCNDM2Njk5NTdEODUzMzk1 OTNEQzFFOUEwHhcNMjYwNTIxMDEwNDIyWhcNMjYwNTI4MDEwNDIyWjAYMRYwFAYD VQQDEw02YTBlNWExNi0zYWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Vg0g8YzodVsFJjQeovECRISzYqa4pQCD/zy0p698VTowDIFP/AcvR4sl6bI YIq5yhyOEEvSoJCFm8S+zBVXMzL/aNM46oNsmNsQGW5vwkFlNaurBxMK35vAO8UP vf4Q3G0Hr8lr6EFJRI0dLsLcZ4JV8cn6N0Yv34Y2PnEsIG8Wac81jkdAOluCKAqS DIAm+vfP068IjaL42AbL5zVAJ/F8Ug8XJStAHi/YUCfujDxrImaH0YZlXiVbLBuI A/Be5mPcUFSz5ja6CeVVl7IV5qOuue9cyiid8TO1M10tPZEXB7JOVnSyGLnAdZaN x02Us6FqomMdsLGvbZjlV7DR/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPHcVKSp d+/szLrY8NF2Gw2ZlRJaMB8GA1UdIwQYMBaAFP3VV0qms6I3tDZplX2FM5WT3B6a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjA5Qy8wQUE1N0M2QzA0 NjUxMUVEOUM4NUYxNUVDNEY5QUUwMi9fZFZYU3Fhem9qZTBObW1WZllVemxaUGNI cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19kVlhTcWF6b2plME5tbVZmWVV6bFpQY0hwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjA5Qy8wQUE1N0M2QzA0NjUxMUVEOUM4NUYxNUVDNEY5QUUwMi9fZFZYU3Fhem9q ZTBObW1WZllVemxaUGNIcG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwFhD4Jla5EkPeGZxHCtRrSyu8QGtmdL2pIBnC/y678wlfGdG7tfHTh8FZmMr VjcRwSGM+6q60DMrSz0r+/t5kj9U+ggZz0y8i+xpmWMtOTpdC0uFr6fYmYep2vXX 9U3+Vwj8I7ncIvq6EkLfa3n9NRVEA6WHvQDO1Woloj1e2mvIK6DDJxxAU3wcdblG vAqeVeQL17oPb+8pyRWnr/Ic+knxvR7iYWc6oRhCCtlkLj6JEUD1RgypToli0NsT l5STxNAmHuP0aqsF/OsMTKoIz+5WKlIedmLTGvbsscYTSR+ZlAmSnZE+Nndoa6se zR8Fbj8P25yvZmhytuxin5bUSA== -----END CERTIFICATE-----Generated at Thu May 21 10:17:44 2026 by rpki-client