$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB5C6/B63591DE329C11F196D7EBCCCB833773/nID3XsZz_EiUE3dEZP47gW1LrsU.mft File: nID3XsZz_EiUE3dEZP47gW1LrsU.mft (raw, json) Hash identifier: ps7Og9SB5aNvhN+Vg+B0OSaSfE9/sEHujre6p4+DhDo= Subject key identifier: 22:E3:CE:22:5B:E0:CA:06:11:BB:F7:BB:2D:0A:81:30:BC:39:50:FA Authority key identifier: 9C:80:F7:5E:C6:73:FC:48:94:13:77:44:64:FE:3B:81:6D:4B:AE:C5 Certificate issuer: /CN=A91FB5C6/serialNumber=9C80F75EC673FC489413774464FE3B816D4BAEC5 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nID3XsZz_EiUE3dEZP47gW1LrsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB5C6/B63591DE329C11F196D7EBCCCB833773/nID3XsZz_EiUE3dEZP47gW1LrsU.mft Manifest number: 17 Signing time: Tue 19 May 2026 08:51:53 +0000 Manifest this update: Tue 19 May 2026 08:51:53 +0000 Manifest next update: Tue 26 May 2026 08:51:53 +0000 Files and hashes: 1: nID3XsZz_EiUE3dEZP47gW1LrsU.crl (hash: lYecKfjQvWi+8aMrReC766sne+nrDRF88NqRSkweHe0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB5C6/B63591DE329C11F196D7EBCCCB833773/nID3XsZz_EiUE3dEZP47gW1LrsU.crl rsync://rpki.apnic.net/member_repository/A91FB5C6/B63591DE329C11F196D7EBCCCB833773/nID3XsZz_EiUE3dEZP47gW1LrsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nID3XsZz_EiUE3dEZP47gW1LrsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB5C6, serialNumber=9C80F75EC673FC489413774464FE3B816D4BAEC5 Validity Not Before: May 19 08:51:53 2026 GMT Not After : May 26 08:51:53 2026 GMT Subject: CN=6a0c24a9-cfbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:28:3b:f9:6e:8c:f0:4a:7b:74:8e:70:8d:ee: 65:2b:f1:18:50:06:ec:c6:f0:a4:34:76:7e:0b:77: c4:d4:47:d7:40:64:55:2c:b0:80:6e:8e:fd:f7:df: f0:6c:61:ef:27:0e:e9:d3:51:0b:e9:8f:7f:2e:a3: 70:2e:0b:75:ff:0c:e1:cd:ee:0d:e8:8b:bb:07:ce: b5:ff:3e:d2:26:2e:fb:8e:32:06:93:56:00:d5:7e: 7e:bc:f7:78:14:cf:d8:b0:c7:fd:7b:ea:de:ea:1b: 68:fe:9d:d1:6c:e1:6a:bd:31:18:be:56:63:7c:21: 6c:15:b2:f0:00:2b:73:80:a6:8a:f6:c5:51:ec:30: f4:b8:27:f2:ac:97:17:1a:47:6c:5e:28:5b:b4:5c: 3c:8a:64:d8:b9:2f:f3:0e:44:d9:eb:c4:2d:2a:8a: 65:ff:05:2e:24:25:ed:8e:6b:b9:7f:09:a7:4c:ef: 6b:54:89:51:b1:15:0d:68:86:11:a1:c1:1a:bb:47: a2:bc:7a:2f:43:54:07:08:47:4d:ac:66:bc:81:77: 48:42:67:ba:cc:10:1b:74:6e:9c:bf:a1:8f:e6:25: bc:e4:1c:47:3f:8a:90:82:87:83:fb:c4:3e:e2:23: bb:5a:91:38:b8:31:47:26:59:73:f1:3d:1c:49:f3: 45:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E3:CE:22:5B:E0:CA:06:11:BB:F7:BB:2D:0A:81:30:BC:39:50:FA X509v3 Authority Key Identifier: keyid:9C:80:F7:5E:C6:73:FC:48:94:13:77:44:64:FE:3B:81:6D:4B:AE:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB5C6/B63591DE329C11F196D7EBCCCB833773/nID3XsZz_EiUE3dEZP47gW1LrsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nID3XsZz_EiUE3dEZP47gW1LrsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB5C6/B63591DE329C11F196D7EBCCCB833773/nID3XsZz_EiUE3dEZP47gW1LrsU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:e5:ba:a4:4d:38:a0:0d:8b:5a:f4:2e:f3:01:9c:36:f6:af: 9d:2a:6a:ae:b2:91:f6:3f:38:3f:d7:0c:ef:4f:06:18:1e:59: 29:58:66:10:9b:d5:ac:36:06:92:17:47:70:00:3b:53:67:76: 79:87:05:65:78:e9:4c:8d:f2:3d:4a:ca:6c:ae:fc:18:6a:c8: 85:b5:df:9c:3e:16:4b:31:b8:24:95:85:21:45:7c:9c:bc:8f: ea:f8:ab:7b:9b:b3:01:29:39:53:19:3d:80:bf:e8:1f:00:e6: 7d:b4:91:fb:5e:94:94:f6:09:1c:d7:56:e8:15:fc:cb:32:d1: f6:7c:94:96:93:83:88:1b:e0:97:1e:46:9f:d8:36:97:d1:37: 1e:80:ff:61:2b:56:85:80:b9:cf:6f:74:cf:8d:6b:01:e1:c6: 03:77:c9:ec:cd:d9:d8:e7:37:7c:26:0a:e1:56:65:be:4e:c4: c3:8a:6f:ad:b3:96:81:84:e2:04:79:41:ae:bd:25:79:a8:eb: 53:38:1d:41:6f:6f:7d:d2:28:0b:21:03:59:85:fe:be:33:ee: 5e:d6:6e:ed:27:90:23:cf:ce:5a:90:5b:9b:c0:60:3d:c3:77: 19:09:6c:2f:9b:0f:e1:17:45:6a:84:04:06:8e:78:12:0e:af: 36:ba:df:42 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QjVDNjExMC8GA1UEBRMoOUM4MEY3NUVDNjczRkM0ODk0MTM3NzQ0NjRGRTNCODE2 RDRCQUVDNTAeFw0yNjA1MTkwODUxNTNaFw0yNjA1MjYwODUxNTNaMBgxFjAUBgNV BAMTDTZhMGMyNGE5LWNmYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqKDv5bozwSnt0jnCN7mUr8RhQBuzG8KQ0dn4Ld8TUR9dAZFUssIBujv333/Bs Ye8nDunTUQvpj38uo3AuC3X/DOHN7g3oi7sHzrX/PtImLvuOMgaTVgDVfn6893gU z9iwx/176t7qG2j+ndFs4Wq9MRi+VmN8IWwVsvAAK3OApor2xVHsMPS4J/Kslxca R2xeKFu0XDyKZNi5L/MORNnrxC0qimX/BS4kJe2Oa7l/CadM72tUiVGxFQ1ohhGh wRq7R6K8ei9DVAcIR02sZryBd0hCZ7rMEBt0bpy/oY/mJbzkHEc/ipCCh4P7xD7i I7takTi4MUcmWXPxPRxJ80XRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUIuPOIlvg ygYRu/e7LQqBMLw5UPowHwYDVR0jBBgwFoAUnID3XsZz/EiUE3dEZP47gW1LrsUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCNUM2L0I2MzU5MURFMzI5 QzExRjE5NkQ3RUJDQ0NCODMzNzczL25JRDNYc1p6X0VpVUUzZEVaUDQ3Z1cxTHJz VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbklEM1hzWnpfRWlVRTNkRVpQNDdnVzFMcnNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC NUM2L0I2MzU5MURFMzI5QzExRjE5NkQ3RUJDQ0NCODMzNzczL25JRDNYc1p6X0Vp VUUzZEVaUDQ3Z1cxTHJzVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCF5bqkTTigDYta9C7zAZw29q+dKmquspH2Pzg/1wzvTwYYHlkpWGYQm9WsNgaS F0dwADtTZ3Z5hwVleOlMjfI9SspsrvwYasiFtd+cPhZLMbgklYUhRXycvI/q+Kt7 m7MBKTlTGT2Av+gfAOZ9tJH7XpSU9gkc11boFfzLMtH2fJSWk4OIG+CXHkaf2DaX 0TcegP9hK1aFgLnPb3TPjWsB4cYDd8nszdnY5zd8JgrhVmW+TsTDim+ts5aBhOIE eUGuvSV5qOtTOB1Bb2990igLIQNZhf6+M+5e1m7tJ5Ajz85akFubwGA9w3cZCWwv mw/hF0VqhAQGjngSDq82ut9C -----END CERTIFICATE-----Generated at Thu May 21 09:34:23 2026 by rpki-client