$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.mft File: nGKQqKEuiIZBN0PX8QV39DkWnH0.mft (raw, json) Hash identifier: /ZMnWS5Dc15MjWIMOIA//78Ff0ereuPleJKFglMXgcE= Subject key identifier: 4A:ED:A9:FC:61:B2:19:94:97:27:1A:E6:67:68:06:23:3C:09:29:12 Authority key identifier: 9C:62:90:A8:A1:2E:88:86:41:37:43:D7:F1:05:77:F4:39:16:9C:7D Certificate issuer: /CN=A91FCA47/serialNumber=9C6290A8A12E8886413743D7F10577F439169C7D Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nGKQqKEuiIZBN0PX8QV39DkWnH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.mft Manifest number: 20 Signing time: Tue 19 May 2026 08:45:35 +0000 Manifest this update: Tue 19 May 2026 08:45:34 +0000 Manifest next update: Tue 26 May 2026 08:45:34 +0000 Files and hashes: 1: nGKQqKEuiIZBN0PX8QV39DkWnH0.crl (hash: VceVVffMbGH6IW+yvmrWvY8O22PiIbn4+bnWqlb6RZA=) 2: E3BDC64224D411F191B1E656AB833773.roa (hash: AIltHDKkxFZaiNdMv+LKbbe7L1vKTPjxvnacYsn/9PA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.crl rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nGKQqKEuiIZBN0PX8QV39DkWnH0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:45:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCA47, serialNumber=9C6290A8A12E8886413743D7F10577F439169C7D Validity Not Before: May 19 08:45:34 2026 GMT Not After : May 26 08:45:34 2026 GMT Subject: CN=6a0c232f-6df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:86:99:20:68:70:de:2c:3f:5c:88:1a:19:40: db:3b:46:f0:9a:ea:2c:51:71:24:a9:36:bf:f9:a0: 01:f4:e4:85:c2:31:e7:4a:fd:d7:80:75:a4:cf:45: 12:8d:1f:85:3d:00:e3:b0:c5:e9:93:a1:75:23:8a: 85:3f:50:cf:c4:49:64:8e:e9:5f:c6:9f:fa:ac:91: 53:a1:9f:05:57:6e:f9:db:b3:11:31:ae:80:69:16: f4:c8:ca:2d:33:eb:9e:02:d1:b4:33:42:15:ca:be: 50:9a:43:d1:9b:ef:df:67:a4:36:3c:69:f7:6b:73: c4:3d:ab:c6:cf:4a:27:95:48:f2:4d:7c:00:f9:dd: 49:06:a3:f1:d0:ae:ea:11:6d:17:02:9b:f2:71:b2: 69:f7:8b:55:05:d2:7e:cf:40:c4:b8:a3:41:7e:4c: fc:3e:21:47:7d:6c:fe:3c:29:36:2c:b5:04:48:1c: 44:fc:f1:e4:30:25:23:62:2f:d9:92:3e:cb:3e:98: 29:e4:a2:ba:ce:63:23:73:41:b3:fb:9b:01:7b:c5: db:4f:4f:6d:15:e1:56:86:04:bf:a5:df:52:b5:fe: 5b:fb:d0:06:e4:b9:8e:d7:61:b4:06:3b:bd:a5:b1: 41:95:04:af:2d:98:0c:4b:1a:99:76:d1:5d:5e:61: fb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:ED:A9:FC:61:B2:19:94:97:27:1A:E6:67:68:06:23:3C:09:29:12 X509v3 Authority Key Identifier: keyid:9C:62:90:A8:A1:2E:88:86:41:37:43:D7:F1:05:77:F4:39:16:9C:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nGKQqKEuiIZBN0PX8QV39DkWnH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:e3:c0:1b:91:d8:47:bc:d4:99:62:17:85:ac:ac:34:df:33: bc:7e:a6:be:70:be:dd:69:6c:34:ef:a9:d1:be:74:f3:3e:83: ef:85:71:63:d3:bc:76:a9:f3:62:93:2a:2d:46:1e:86:9e:84: af:6d:d6:50:8d:3b:99:41:c8:47:95:33:c8:21:a2:6f:67:fe: 9b:60:84:28:81:09:ec:e1:a1:90:5e:60:48:fa:dd:4c:91:ce: ab:2f:d5:75:cf:b9:b3:9c:fb:44:42:fc:60:ce:7e:98:13:3d: c0:1b:60:0e:f4:ff:9f:a8:ff:c0:d1:02:1a:cb:01:33:da:89: fd:1f:e3:de:be:58:a0:4a:82:15:4d:03:f8:33:a1:e2:4e:93: b3:8a:19:2f:90:4f:ee:ff:3f:7f:f0:b6:fe:f2:25:86:49:58: 7a:2c:3b:7b:a8:1d:2f:bc:42:46:f5:85:5c:38:95:9d:85:3b: 92:10:aa:90:e3:d5:f5:01:e8:d4:7d:73:77:5d:a3:61:fe:3b: 2f:79:5f:b8:1d:42:96:7d:ec:a7:50:5a:15:bd:42:76:c2:dc: 80:88:8b:08:e5:0d:c6:17:69:e2:5a:41:b1:39:5f:a6:89:1f: 5f:c5:3d:27:97:8a:1a:94:55:1c:a7:e5:f4:a8:a1:63:b5:9f: 91:f5:94:ae -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Q0E0NzExMC8GA1UEBRMoOUM2MjkwQThBMTJFODg4NjQxMzc0M0Q3RjEwNTc3RjQz OTE2OUM3RDAeFw0yNjA1MTkwODQ1MzRaFw0yNjA1MjYwODQ1MzRaMBgxFjAUBgNV BAMTDTZhMGMyMzJmLTZkZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJhpkgaHDeLD9ciBoZQNs7RvCa6ixRcSSpNr/5oAH05IXCMedK/deAdaTPRRKN H4U9AOOwxemToXUjioU/UM/ESWSO6V/Gn/qskVOhnwVXbvnbsxExroBpFvTIyi0z 654C0bQzQhXKvlCaQ9Gb799npDY8afdrc8Q9q8bPSieVSPJNfAD53UkGo/HQruoR bRcCm/Jxsmn3i1UF0n7PQMS4o0F+TPw+IUd9bP48KTYstQRIHET88eQwJSNiL9mS Pss+mCnkorrOYyNzQbP7mwF7xdtPT20V4VaGBL+l31K1/lv70AbkuY7XYbQGO72l sUGVBK8tmAxLGpl20V1eYfuBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUSu2p/GGy GZSXJxrmZ2gGIzwJKRIwHwYDVR0jBBgwFoAUnGKQqKEuiIZBN0PX8QV39DkWnH0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDQTQ3Lzk1RTc2RDYwMjRE NDExRjE4QUFBMDk0MkFCODMzNzczL25HS1FxS0V1aUlaQk4wUFg4UVYzOURrV25I MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbkdLUXFLRXVpSVpCTjBQWDhRVjM5RGtXbkgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD QTQ3Lzk1RTc2RDYwMjRENDExRjE4QUFBMDk0MkFCODMzNzczL25HS1FxS0V1aUla Qk4wUFg4UVYzOURrV25IMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAu48AbkdhHvNSZYheFrKw03zO8fqa+cL7daWw076nRvnTzPoPvhXFj07x2qfNi kyotRh6GnoSvbdZQjTuZQchHlTPIIaJvZ/6bYIQogQns4aGQXmBI+t1Mkc6rL9V1 z7mznPtEQvxgzn6YEz3AG2AO9P+fqP/A0QIaywEz2on9H+PevligSoIVTQP4M6Hi TpOzihkvkE/u/z9/8Lb+8iWGSVh6LDt7qB0vvEJG9YVcOJWdhTuSEKqQ49X1AejU fXN3XaNh/jsveV+4HUKWfeynUFoVvUJ2wtyAiIsI5Q3GF2niWkGxOV+miR9fxT0n l4oalFUcp+X0qKFjtZ+R9ZSu -----END CERTIFICATE-----Generated at Thu May 21 10:39:32 2026 by rpki-client