$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft File: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft (raw, json) Hash identifier: k9iqUqkoaY7LEE7HynkWHbIU9YHXieYCw2U7x1TJr60= Subject key identifier: E3:BD:99:99:64:73:98:76:68:E0:49:64:92:B3:7B:F6:5C:EC:19:8B Authority key identifier: F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32 Certificate issuer: /CN=A91F6D91/serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32 Certificate serial: 0717 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft Manifest number: 06F0 Signing time: Wed 20 May 2026 22:15:51 +0000 Manifest this update: Wed 20 May 2026 22:15:51 +0000 Manifest next update: Wed 27 May 2026 22:15:51 +0000 Files and hashes: 1: 9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl (hash: wXEfTuhBUn0EYNUGvYMpOX1zIvnNDs0J9jtqmt4io38=) 2: 0E2711E6830711ECB472CA0AC4F9AE02.roa (hash: WguzFNpnFOiKG7d1mZy9kPuySEP+TVOdHsdPXP/TGHU=) 3: 105CB01A830711ECB472CA0AC4F9AE02.roa (hash: vlSukquMRVvRP714pQfSW9JCKpx/XhQZSDVUjHWXm3o=) 4: 0F6980C0830711ECB472CA0AC4F9AE02.roa (hash: ZiymFWnj3M1tXq26ZhLnNIDxD9Ed+EUoE2p91PflS5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 22:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1815 (0x717) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6D91, serialNumber=F6718A5E5E42D08E253A2FB300FF09C3F5351D32 Validity Not Before: May 20 22:15:51 2026 GMT Not After : May 27 22:15:51 2026 GMT Subject: CN=6a0e3297-5466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7e:59:79:13:c0:8a:f5:f8:ff:6f:39:f0:3b: 18:68:99:a2:d9:75:0b:6b:f1:99:dd:55:4f:86:79: e5:e1:47:ce:05:80:d5:17:c6:53:74:09:2d:85:cd: 87:88:d2:40:9a:5d:29:50:f2:d6:14:12:7b:41:11: 91:65:da:b3:1f:69:f7:89:f3:eb:a7:d6:3b:85:32: 85:36:1b:d0:0e:0e:05:74:3f:51:c7:f2:95:80:be: 89:86:4e:2e:cf:00:2d:00:5a:dc:55:4f:4a:5e:01: 94:81:33:7b:99:68:de:4f:ca:47:50:7d:e7:5f:1f: 5a:b2:6d:5c:2f:29:64:73:f6:26:34:ed:a5:98:a2: 1c:2a:7f:a0:6c:a0:0e:3a:f1:58:d8:62:75:4e:27: 23:6d:55:be:61:2c:25:c7:23:fc:2f:c8:07:cb:07: b6:b5:27:8d:92:d3:24:c4:e5:86:a0:f8:11:ec:5e: 37:5b:fb:e5:0a:1e:4e:be:eb:99:b7:9f:78:5d:08: 01:37:75:1d:93:c6:1b:f7:bb:2e:da:15:6f:60:b0: 79:f8:fe:0e:3b:49:92:b3:2d:d6:22:2e:81:62:12: 91:75:84:ad:22:77:bc:d7:db:13:79:85:ae:85:01: 1e:ce:aa:c6:13:f1:cf:51:b8:12:6c:14:38:87:04: dc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BD:99:99:64:73:98:76:68:E0:49:64:92:B3:7B:F6:5C:EC:19:8B X509v3 Authority Key Identifier: keyid:F6:71:8A:5E:5E:42:D0:8E:25:3A:2F:B3:00:FF:09:C3:F5:35:1D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D91/E517F2B69AE511EB837F135EC4F9AE02/9nGKXl5C0I4lOi-zAP8Jw_U1HTI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:c6:d5:4b:40:e6:ac:e6:b8:a1:6b:6d:50:40:0e:f5:44:e3: 97:8d:a4:05:f1:53:86:d4:c0:f9:ae:86:bd:4b:21:9a:60:81: 23:20:48:2e:9d:d1:3a:14:91:6e:a2:30:e2:21:c7:90:26:31: 33:79:80:4f:54:9b:6f:77:65:c0:6b:e3:b4:9b:5a:01:a9:03: d5:75:9c:b8:46:8a:ce:9e:09:ce:49:d8:74:1b:35:20:09:d3: c7:6d:e6:82:e0:8e:0c:18:2f:c5:f7:c8:63:63:0a:a9:0a:f8: 3a:68:b6:1f:7e:6a:4b:64:70:d1:75:78:64:55:fb:fb:9f:3c: 7b:bd:24:a4:86:a0:e9:2c:8f:82:97:7e:56:94:45:70:6f:8d: d1:87:e9:7c:81:51:83:6f:d9:08:c5:17:d0:00:77:f8:36:62: 64:05:4b:c0:5a:89:cc:f7:28:f3:b9:34:2e:d6:7f:4d:28:4d: 70:ad:89:46:5c:ab:b4:12:7f:4c:d0:b3:04:ce:5e:5b:b4:18: 23:20:30:a9:6d:37:aa:1f:15:00:ce:e2:1f:08:ae:7d:67:21: f8:df:96:76:95:c5:fe:55:dd:cf:90:0b:3e:d7:ad:66:a7:1d: 5a:5e:52:12:2d:7d:e5:42:92:87:86:c8:6c:b4:ff:75:f2:56: 6e:51:9b:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZEOTExMTAvBgNVBAUTKEY2NzE4QTVFNUU0MkQwOEUyNTNBMkZCMzAwRkYwOUMz RjUzNTFEMzIwHhcNMjYwNTIwMjIxNTUxWhcNMjYwNTI3MjIxNTUxWjAYMRYwFAYD VQQDEw02YTBlMzI5Ny01NDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt35ZeRPAivX4/2858DsYaJmi2XULa/GZ3VVPhnnl4UfOBYDVF8ZTdAkthc2H iNJAml0pUPLWFBJ7QRGRZdqzH2n3ifPrp9Y7hTKFNhvQDg4FdD9Rx/KVgL6Jhk4u zwAtAFrcVU9KXgGUgTN7mWjeT8pHUH3nXx9asm1cLylkc/YmNO2lmKIcKn+gbKAO OvFY2GJ1TicjbVW+YSwlxyP8L8gHywe2tSeNktMkxOWGoPgR7F43W/vlCh5OvuuZ t594XQgBN3Udk8Yb97su2hVvYLB5+P4OO0mSsy3WIi6BYhKRdYStIne819sTeYWu hQEezqrGE/HPUbgSbBQ4hwTc7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOO9mZlk c5h2aOBJZJKze/Zc7BmLMB8GA1UdIwQYMBaAFPZxil5eQtCOJTovswD/CcP1NR0y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkQ5MS9FNTE3RjJCNjlB RTUxMUVCODM3RjEzNUVDNEY5QUUwMi85bkdLWGw1QzBJNGxPaS16QVA4SndfVTFI VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluR0tYbDVDMEk0bE9pLXpBUDhKd19VMUhUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkQ5MS9FNTE3RjJCNjlBRTUxMUVCODM3RjEzNUVDNEY5QUUwMi85bkdLWGw1QzBJ NGxPaS16QVA4SndfVTFIVEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEMbVS0DmrOa4oWttUEAO9UTjl42kBfFThtTA+a6GvUshmmCBIyBILp3ROhSR bqIw4iHHkCYxM3mAT1Sbb3dlwGvjtJtaAakD1XWcuEaKzp4JzknYdBs1IAnTx23m guCODBgvxffIY2MKqQr4Omi2H35qS2Rw0XV4ZFX7+588e70kpIag6SyPgpd+VpRF cG+N0YfpfIFRg2/ZCMUX0AB3+DZiZAVLwFqJzPco87k0LtZ/TShNcK2JRlyrtBJ/ TNCzBM5eW7QYIyAwqW03qh8VAM7iHwiufWch+N+WdpXF/lXdz5ALPtetZqcdWl5S Ei195UKSh4bIbLT/dfJWblGblg== -----END CERTIFICATE-----Generated at Thu May 21 09:37:35 2026 by rpki-client