$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft File: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft (raw, json) Hash identifier: gPwOpEjPVI40Tlwm0D7qjPfYUE+u663noh6BcYUlv0E= Subject key identifier: 5F:E4:43:8F:05:6D:E5:33:E2:22:1D:34:34:17:29:98:A8:5A:D9:D1 Authority key identifier: 4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A Certificate issuer: /CN=A91FDEFE/serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft Manifest number: 0124 Signing time: Thu 21 May 2026 05:54:35 +0000 Manifest this update: Thu 21 May 2026 05:54:34 +0000 Manifest next update: Thu 28 May 2026 05:54:34 +0000 Files and hashes: 1: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl (hash: 1BFKTCEkBU+6I8PO+KF63gWUtXSpgVY3A/8gzlUKdNY=) 2: 669FD05EA53911EFBE261371C4F9AE02.roa (hash: iXPPbRwODBTS92FzdfuvK5J3jl/IZyMATy+kQwe/++Q=) 3: 12B6D40E37C511F19788E36ABE833773.roa (hash: f5bzM7j+pO8fCnEBI50cYrv56JA2HlZHuSFXp1GJx88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 05:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDEFE, serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A Validity Not Before: May 21 05:54:34 2026 GMT Not After : May 28 05:54:34 2026 GMT Subject: CN=6a0e9e1a-f20f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4b:21:99:ca:a3:95:71:fd:d9:cc:4a:4f:a3: aa:1c:63:eb:f2:ed:ad:59:fa:6a:b4:b2:8b:46:b5: 4b:e1:d1:f1:a4:92:92:ff:cd:39:8e:4c:46:f7:0a: 06:56:37:1a:a1:c1:aa:71:55:53:05:37:97:8c:d5: b9:3c:a8:6c:d8:b1:58:bc:e4:9c:af:17:74:e5:8f: e6:6b:77:af:47:0c:09:d9:3e:47:40:55:0d:82:0a: 7d:ac:25:08:52:0a:13:71:f1:5f:f6:f5:6c:d5:b0: 3a:f4:be:78:ca:98:6a:f2:93:6a:c0:0e:c8:97:7d: 72:90:a5:c6:3c:7b:bf:93:c9:f0:69:2e:30:93:9a: 8f:28:01:d9:15:4f:ee:66:ea:c3:79:40:ce:82:b6: 36:fa:54:aa:17:1c:0e:db:67:e5:ce:d6:26:41:0d: 69:db:97:96:92:97:f9:d3:8e:13:e7:1d:91:2b:9d: 8d:3a:26:a6:31:18:73:5c:d6:d6:95:41:0e:c7:fe: 10:a2:fb:59:ca:af:4a:35:3c:31:c3:e5:26:ed:48: 35:7d:80:83:f4:e2:22:4e:95:55:00:c5:fc:ba:4a: f0:f3:b4:67:1b:6b:16:de:bf:ce:30:8a:20:25:ab: 1d:b8:30:0b:36:e3:e2:81:84:3b:06:cf:da:47:0a: 17:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E4:43:8F:05:6D:E5:33:E2:22:1D:34:34:17:29:98:A8:5A:D9:D1 X509v3 Authority Key Identifier: keyid:4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:22:e7:04:e3:15:df:e6:79:e0:ea:bb:b3:80:da:b4:b5:d2: d1:e7:50:0c:d7:04:d5:34:5b:dd:b5:39:86:e0:82:ea:b6:70: bd:96:dd:eb:4f:d3:e7:19:cb:92:fa:6f:0f:5f:23:57:ee:86: 60:9e:51:f8:85:ea:d9:37:20:43:94:c3:72:2e:ac:a6:0f:85: 99:81:55:f2:1c:ad:ee:da:05:d0:2e:68:7e:23:77:ac:0e:f1: a0:89:17:8a:01:c3:35:fe:89:51:42:98:76:35:af:83:06:0e: 7c:c2:13:89:fe:d6:4a:6d:47:d9:1f:d9:a0:90:ec:ad:e1:eb: 56:dd:a9:f8:26:34:7e:fb:0f:57:d3:6e:c3:b8:96:bc:2c:9d: 2d:0d:23:d3:35:57:05:f7:05:14:d7:26:c0:17:42:bf:a7:3d: 75:fd:dc:b4:da:94:4c:e9:dc:a4:c0:61:4c:71:2e:c9:0c:54: 66:c9:70:f7:bd:d4:41:89:2b:cc:fc:3a:a5:af:6b:02:04:f0: 62:ec:de:27:87:01:f8:f3:18:0f:9a:93:9d:f6:e9:77:a3:ac: 25:96:9f:72:cc:dc:ec:8f:cd:80:4c:f7:e5:4d:31:54:bb:7e: a9:52:30:a8:03:97:98:f3:70:8b:ab:e9:44:35:60:2e:62:b6: 02:8e:7c:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRFRkUxMTAvBgNVBAUTKDRGRTFCMzVGOUFEODI4MUI2NkY0NzAzMUY1MDdFMEVF N0Q1NDIxMUEwHhcNMjYwNTIxMDU1NDM0WhcNMjYwNTI4MDU1NDM0WjAYMRYwFAYD VQQDEw02YTBlOWUxYS1mMjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm0shmcqjlXH92cxKT6OqHGPr8u2tWfpqtLKLRrVL4dHxpJKS/805jkxG9woG VjcaocGqcVVTBTeXjNW5PKhs2LFYvOScrxd05Y/ma3evRwwJ2T5HQFUNggp9rCUI UgoTcfFf9vVs1bA69L54yphq8pNqwA7Il31ykKXGPHu/k8nwaS4wk5qPKAHZFU/u ZurDeUDOgrY2+lSqFxwO22flztYmQQ1p25eWkpf5044T5x2RK52NOiamMRhzXNbW lUEOx/4QovtZyq9KNTwxw+Um7Ug1fYCD9OIiTpVVAMX8ukrw87RnG2sW3r/OMIog JasduDALNuPigYQ7Bs/aRwoXoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF/kQ48F beUz4iIdNDQXKZioWtnRMB8GA1UdIwQYMBaAFE/hs1+a2CgbZvRwMfUH4O59VCEa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREVGRS8xOTRCNzkyMEE1 MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9ULUd6WDVyWUtCdG05SEF4OVFmZzduMVVJ Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtR3pYNXJZS0J0bTlIQXg5UWZnN24xVUlSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REVGRS8xOTRCNzkyMEE1MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9ULUd6WDVyWUtC dG05SEF4OVFmZzduMVVJUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdyLnBOMV3+Z54Oq7s4DatLXS0edQDNcE1TRb3bU5huCC6rZwvZbd60/T5xnL kvpvD18jV+6GYJ5R+IXq2TcgQ5TDci6spg+FmYFV8hyt7toF0C5ofiN3rA7xoIkX igHDNf6JUUKYdjWvgwYOfMITif7WSm1H2R/ZoJDsreHrVt2p+CY0fvsPV9Nuw7iW vCydLQ0j0zVXBfcFFNcmwBdCv6c9df3ctNqUTOncpMBhTHEuyQxUZslw973UQYkr zPw6pa9rAgTwYuzeJ4cB+PMYD5qTnfbpd6OsJZafcszc7I/NgEz35U0xVLt+qVIw qAOXmPNwi6vpRDVgLmK2Ao58cQ== -----END CERTIFICATE-----Generated at Thu May 21 11:59:08 2026 by rpki-client