$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft File: G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft (raw, json) Hash identifier: Aqpzo2WU89U2wPxWB7C7QqhuhNOUQrR2RqQ1p68LXYE= Subject key identifier: D4:A7:72:E9:D9:D1:08:56:71:B3:34:A5:C4:67:EE:4E:9A:25:66:21 Authority key identifier: 1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52 Certificate issuer: /CN=A91F67BB/serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752 Certificate serial: 1220 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft Manifest number: 11F0 Signing time: Wed 20 May 2026 17:09:37 +0000 Manifest this update: Wed 20 May 2026 17:09:36 +0000 Manifest next update: Wed 27 May 2026 17:09:36 +0000 Files and hashes: 1: G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl (hash: 3PsQ2SOu2YysSxq7kLXmK8HnVfbG67XCHweUqCbVYmY=) 2: FB675E140F0311E997412A4EC4F9AE02.roa (hash: WZDgNlhW0pwPMejNqxRBtwXZLqcsEeCsrEz1azRWYbQ=) 3: 294F19380E5111E988F3C34BC4F9AE02.roa (hash: 2Hp6M6BntVmhWo1ReGblit19qNRWTDvqJP9qHcur32s=) 4: FAC7FE320F0311E997412A4EC4F9AE02.roa (hash: ltuiI8TZuMv/G/t/Ztpq7bP81fIn8XtBMrkmf8/fbBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4640 (0x1220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67BB, serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752 Validity Not Before: May 20 17:09:36 2026 GMT Not After : May 27 17:09:36 2026 GMT Subject: CN=6a0dead1-5f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c5:f1:f1:ac:d0:af:68:e9:3a:cd:d5:55:cc: b8:49:0c:fe:51:bd:72:47:f1:c7:bc:52:b1:2b:56: 9b:ee:4c:c6:2e:fe:54:75:31:72:74:c3:8c:fc:52: 30:99:65:6e:58:07:4a:bc:2e:f4:ab:21:42:d3:af: 2d:ba:01:58:b5:74:f7:13:3a:c1:df:c7:3e:3d:7d: a0:f2:34:c7:e9:a5:e4:bc:1d:66:de:2b:82:7b:ba: 89:5e:6d:c6:89:86:38:04:91:19:b9:43:40:4a:39: ab:8a:d2:7a:f5:2f:1a:7f:c3:f6:bb:d8:b9:a5:46: 66:de:8b:5c:d0:3e:47:d6:d9:40:2a:28:a2:79:bb: 2b:a4:8e:68:c5:87:59:6b:fb:dd:4e:21:f0:6b:09: d4:f4:f8:8a:2c:3a:9c:0b:4c:18:86:ac:c6:0e:aa: 2f:c6:0f:1a:63:80:fc:e2:a9:74:ff:2c:e7:6b:09: 23:2b:09:64:dd:2f:a0:97:5c:c9:4a:2e:11:1f:24: e0:48:ca:7b:74:ee:f5:67:0b:1e:85:c8:06:6e:19: 2f:5f:d7:a9:94:41:32:51:87:06:79:8a:f3:4a:c7: 57:42:8d:19:37:77:c8:bf:a5:05:c3:74:fd:d1:67: 25:09:ad:9a:5f:ab:69:32:fc:9d:89:0a:b2:77:16: 7b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A7:72:E9:D9:D1:08:56:71:B3:34:A5:C4:67:EE:4E:9A:25:66:21 X509v3 Authority Key Identifier: keyid:1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:96:b5:7c:60:ff:65:62:d5:4d:03:e4:ed:24:cf:77:1f:e3: 4f:2c:5a:c9:36:47:cc:cf:af:1c:6b:b1:94:b8:c5:5d:a7:84: f5:30:ad:ba:2e:a2:c8:02:82:41:86:bd:70:65:07:2c:c9:dd: 13:51:d6:59:45:ef:09:5e:a5:6b:3d:a1:61:0f:c6:0f:5b:4e: 0b:51:73:d0:49:0b:42:3e:91:ef:58:2a:b8:fc:94:ac:00:81: 27:d0:cc:98:87:e6:9b:a4:15:b1:e6:85:83:d9:25:0d:eb:e1: 7e:42:63:c8:1a:24:80:b8:ad:5f:f7:79:16:5a:d0:f2:ea:21: 1f:f5:e5:a4:89:52:5a:36:4c:d8:9a:62:7f:d7:09:5b:66:6e: 53:95:a9:99:ca:e6:c8:f1:f0:03:2a:21:2f:7c:5c:1a:ec:f2: 46:80:ae:d4:a4:fd:35:05:d4:70:b7:9f:64:76:54:71:90:a9: 7a:96:69:fc:40:0c:22:37:d4:15:35:23:1a:2c:1b:7d:2f:e6: d0:1b:dc:02:48:d9:5f:fd:b9:3c:27:48:a2:ec:11:72:cb:27: db:2b:9c:62:f8:41:79:ed:5d:42:e2:d2:69:2d:92:52:4f:fa: ea:f0:db:84:b5:04:09:f4:2f:2e:cf:f4:e2:cf:f3:b8:e0:1a: 30:66:29:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3QkIxMTAvBgNVBAUTKDFCRjVBOEQ5NENFMDZDRTMwMUZDMzVEODY5RjcwRDc0 MEQ3MDk3NTIwHhcNMjYwNTIwMTcwOTM2WhcNMjYwNTI3MTcwOTM2WjAYMRYwFAYD VQQDEw02YTBkZWFkMS01ZjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8Xx8azQr2jpOs3VVcy4SQz+Ub1yR/HHvFKxK1ab7kzGLv5UdTFydMOM/FIw mWVuWAdKvC70qyFC068tugFYtXT3EzrB38c+PX2g8jTH6aXkvB1m3iuCe7qJXm3G iYY4BJEZuUNASjmritJ69S8af8P2u9i5pUZm3otc0D5H1tlAKiiiebsrpI5oxYdZ a/vdTiHwawnU9PiKLDqcC0wYhqzGDqovxg8aY4D84ql0/yznawkjKwlk3S+gl1zJ Si4RHyTgSMp7dO71ZwsehcgGbhkvX9eplEEyUYcGeYrzSsdXQo0ZN3fIv6UFw3T9 0WclCa2aX6tpMvydiQqydxZ7EQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNSncunZ 0QhWcbM0pcRn7k6aJWYhMB8GA1UdIwQYMBaAFBv1qNlM4GzjAfw12Gn3DXQNcJdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdCQi9DOURCODlFRTBF M0UxMUU5ODM2RjQwMTRDNEY5QUUwMi9HX1dvMlV6Z2JPTUJfRFhZYWZjTmRBMXds MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dfV28yVXpnYk9NQl9EWFlhZmNOZEExd2wxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjdCQi9DOURCODlFRTBFM0UxMUU5ODM2RjQwMTRDNEY5QUUwMi9HX1dvMlV6Z2JP TUJfRFhZYWZjTmRBMXdsMUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD5a1fGD/ZWLVTQPk7STPdx/jTyxayTZHzM+vHGuxlLjFXaeE9TCtui6iyAKC QYa9cGUHLMndE1HWWUXvCV6laz2hYQ/GD1tOC1Fz0EkLQj6R71gquPyUrACBJ9DM mIfmm6QVseaFg9klDevhfkJjyBokgLitX/d5FlrQ8uohH/XlpIlSWjZM2Jpif9cJ W2ZuU5WpmcrmyPHwAyohL3xcGuzyRoCu1KT9NQXUcLefZHZUcZCpepZp/EAMIjfU FTUjGiwbfS/m0BvcAkjZX/25PCdIouwRcssn2yucYvhBee1dQuLSaS2SUk/66vDb hLUECfQvLs/04s/zuOAaMGYp+g== -----END CERTIFICATE-----Generated at Thu May 21 10:27:46 2026 by rpki-client