$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft File: azpu8rvlhOJwDYYifvSaOc24Hc4.mft (raw, json) Hash identifier: JFqoX5NkyYlcD4T3nKe3mGqbSGk/IHM10QPhjKAy2r0= Subject key identifier: 9C:87:B4:09:A4:44:70:41:19:DF:21:ED:F7:22:65:B0:89:B5:92:EB Authority key identifier: 6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE Certificate issuer: /CN=A91FA00A/serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE Certificate serial: 0384 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft Manifest number: 0370 Signing time: Thu 21 May 2026 00:57:50 +0000 Manifest this update: Thu 21 May 2026 00:57:50 +0000 Manifest next update: Thu 28 May 2026 00:57:50 +0000 Files and hashes: 1: azpu8rvlhOJwDYYifvSaOc24Hc4.crl (hash: zD0Na9BNzo7I0JPKUaKc+0R3xzN4XhxeIaIk/1iGR3U=) 2: 937AFB607E3611EEAD05495AC4F9AE02.roa (hash: jw62AuKYcLU+o7CElN93+zYrOGkOkAOws+22gA0aEog=) 3: E7D03568F89011ECB5F98148C4F9AE02.roa (hash: /GgklwwSBikULn43rGtHG5wL0AHIDwWQqbAtpZ3bJj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 00:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 900 (0x384) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA00A, serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE Validity Not Before: May 21 00:57:50 2026 GMT Not After : May 28 00:57:50 2026 GMT Subject: CN=6a0e588e-0999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:85:b9:6a:c1:96:6e:16:70:34:3c:63:fe:c0: 8c:37:33:b7:bd:94:46:72:93:05:dc:09:59:e1:c4: ad:48:89:8a:c3:56:ab:bb:a2:b4:09:cd:02:51:ac: e3:c6:ab:45:64:13:27:f3:b4:77:93:6b:2c:e7:19: 78:aa:22:0a:ad:3e:99:fd:b8:0f:c4:43:ee:ad:66: b4:95:44:de:9e:0b:c5:ce:79:b2:b1:66:1c:f3:65: 70:f1:98:de:ed:2b:f2:df:3d:14:6e:7f:5f:98:2a: 61:cf:5b:28:87:45:bb:7a:9b:9c:9c:28:14:ec:78: b2:47:f9:73:80:9d:b6:27:0b:00:c8:ac:3b:ee:6c: ac:f2:dd:d1:d4:31:eb:af:ba:83:62:6a:93:c8:6b: 35:18:40:79:09:d0:8d:55:b8:61:5c:8a:ba:f9:46: 40:3c:86:d4:c6:f9:51:ec:5e:e7:08:74:53:75:69: 4f:53:4b:7a:1b:39:11:a4:07:e3:7d:c2:6b:a9:a1: aa:8f:3d:c1:82:8b:69:7f:1a:4d:36:80:f7:0a:51: 86:34:b7:02:42:35:c6:c5:fc:e6:33:4d:97:2a:f4: b7:ca:60:23:ae:47:ae:5a:ef:d3:2f:0e:07:e6:94: da:54:4f:49:03:7f:b0:a3:ab:c0:7a:ae:d0:28:59: a8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:87:B4:09:A4:44:70:41:19:DF:21:ED:F7:22:65:B0:89:B5:92:EB X509v3 Authority Key Identifier: keyid:6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:49:e8:e5:49:24:f1:ae:53:eb:a7:fb:a5:c2:4d:3a:b6:a4: 87:f3:4c:6b:d5:8f:8a:af:36:6a:1d:17:ee:85:b3:98:f5:6e: f6:e9:3d:3d:48:d6:d6:18:24:4a:bc:3b:49:cd:78:d3:f4:1e: 7e:08:9a:4b:f0:ff:02:91:2b:da:f3:03:be:30:f5:c4:29:ee: b6:d1:af:40:bc:47:c9:b4:9b:f8:1a:bd:c9:e2:a9:97:ba:38: 54:77:1c:95:2a:9b:df:d4:1c:f7:a8:77:c3:c6:e4:81:b1:fb: 9a:42:5d:a3:bd:f0:a4:ec:13:64:38:31:49:7a:70:b8:10:d3: bd:c8:c6:f2:1d:a6:44:b8:5e:88:17:09:0a:94:72:ee:4a:c4: 55:24:61:22:2b:a4:8c:0f:ec:fb:99:8c:d5:fc:99:5b:20:30: 07:34:df:58:9b:55:16:fe:a4:4e:a3:61:6e:c6:14:58:01:f1: 2b:76:2c:34:e9:dc:e6:ad:9f:fa:d4:1c:ab:88:ad:d0:28:f0: a6:cb:19:41:49:d3:fd:3a:6c:c3:be:0c:db:7e:dc:72:17:a9: 62:84:9e:6f:44:51:f9:ad:e5:d6:61:08:79:0b:98:68:93:f0: fc:85:c9:54:69:eb:eb:44:41:a7:83:3b:58:a6:6c:9c:68:b0: 2e:c9:11:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkEwMEExMTAvBgNVBAUTKDZCM0E2RUYyQkJFNTg0RTI3MDBEODYyMjdFRjQ5QTM5 Q0RCODFEQ0UwHhcNMjYwNTIxMDA1NzUwWhcNMjYwNTI4MDA1NzUwWjAYMRYwFAYD VQQDEw02YTBlNTg4ZS0wOTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8IW5asGWbhZwNDxj/sCMNzO3vZRGcpMF3AlZ4cStSImKw1aru6K0Cc0CUazj xqtFZBMn87R3k2ss5xl4qiIKrT6Z/bgPxEPurWa0lUTengvFznmysWYc82Vw8Zje 7Svy3z0Ubn9fmCphz1soh0W7epucnCgU7HiyR/lzgJ22JwsAyKw77mys8t3R1DHr r7qDYmqTyGs1GEB5CdCNVbhhXIq6+UZAPIbUxvlR7F7nCHRTdWlPU0t6GzkRpAfj fcJrqaGqjz3BgotpfxpNNoD3ClGGNLcCQjXGxfzmM02XKvS3ymAjrkeuWu/TLw4H 5pTaVE9JA3+wo6vAeq7QKFmodQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJyHtAmk RHBBGd8h7fciZbCJtZLrMB8GA1UdIwQYMBaAFGs6bvK75YTicA2GIn70mjnNuB3O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTAwQS8zQUE5NEIzNkY4 OEIxMUVDOUVDQkUyM0RDNEY5QUUwMi9henB1OHJ2bGhPSndEWVlpZnZTYU9jMjRI YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F6cHU4cnZsaE9Kd0RZWWlmdlNhT2MyNEhjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTAwQS8zQUE5NEIzNkY4OEIxMUVDOUVDQkUyM0RDNEY5QUUwMi9henB1OHJ2bGhP SndEWVlpZnZTYU9jMjRIYzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK0no5Ukk8a5T66f7pcJNOrakh/NMa9WPiq82ah0X7oWzmPVu9uk9PUjW1hgk Srw7Sc140/QefgiaS/D/ApEr2vMDvjD1xCnuttGvQLxHybSb+Bq9yeKpl7o4VHcc lSqb39Qc96h3w8bkgbH7mkJdo73wpOwTZDgxSXpwuBDTvcjG8h2mRLheiBcJCpRy 7krEVSRhIiukjA/s+5mM1fyZWyAwBzTfWJtVFv6kTqNhbsYUWAHxK3YsNOnc5q2f +tQcq4it0CjwpssZQUnT/Tpsw74M237cchepYoSeb0RR+a3l1mEIeQuYaJPw/IXJ VGnr60RBp4M7WKZsnGiwLskRnA== -----END CERTIFICATE-----Generated at Thu May 21 10:28:08 2026 by rpki-client