$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft File: D59xWNvf-ipXrgJIfJgga3g4BJY.mft (raw, json) Hash identifier: tjj4pAvwBRD5OxLLkulxhZZTAoh1fCICuiskDHm2ARc= Subject key identifier: 65:AE:08:47:5C:F6:B5:A7:41:5A:A5:F1:0C:62:47:2C:3A:A0:C4:63 Authority key identifier: 0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 Certificate issuer: /CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft Manifest number: 0196 Signing time: Thu 21 May 2026 04:25:03 +0000 Manifest this update: Thu 21 May 2026 04:25:03 +0000 Manifest next update: Thu 28 May 2026 04:25:03 +0000 Files and hashes: 1: D59xWNvf-ipXrgJIfJgga3g4BJY.crl (hash: tGynLvSM/Cm1kVyKBqUDnKUwBROIu/QzPUW392x6iyE=) 2: 507476EE6BD811EFBDD72932C4F9AE02.roa (hash: irjK47i6Sld0YH0p5+DxVPsO0MEpAL8iYc9/ecny0Gs=) 3: 1132F3026BD811EF90DBC631C4F9AE02.roa (hash: RseQd9x0Qtjlynx4q/LTY8jY17t9oSxHJT5UuEAvOWU=) 4: CAF5E0EA6BDA11EF942AB06BC4F9AE02.roa (hash: NSdNu+vXnYcTSniUQqnt8p+QBPXnXEprmzukCezOx0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 04:25:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE9DC, serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Validity Not Before: May 21 04:25:03 2026 GMT Not After : May 28 04:25:03 2026 GMT Subject: CN=6a0e891f-985d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:22:c1:15:61:cf:31:52:d1:df:09:c8:1f:d2: e2:58:8b:8e:48:b0:24:3d:10:a1:36:3c:64:f0:a6: fc:2f:1f:69:07:67:95:b7:63:e9:ea:b9:a5:f2:72: e6:bd:27:22:e9:80:6b:6e:41:95:21:37:b3:b6:cb: 37:1d:95:80:37:19:00:f2:4f:92:8e:e1:d0:c9:25: b8:85:3f:fd:55:45:c1:62:60:93:4b:26:1f:9c:e9: d1:d7:e0:7f:0e:b3:9f:43:c1:82:3b:ac:4d:ff:66: f7:15:5e:93:95:7b:07:a6:57:4d:f4:15:4f:76:00: ca:d1:28:fd:db:30:20:39:2e:ce:6f:66:de:72:9a: f9:4f:4f:3f:2b:f6:6d:77:18:19:63:31:e7:04:32: 85:de:71:3a:b7:4d:de:fa:0c:bf:75:35:1c:92:1e: ba:0d:85:95:f7:72:d7:1e:2b:66:99:c9:c8:58:01: aa:ff:b5:4c:ba:41:a3:35:13:6b:2e:7c:3c:7e:31: 55:c0:b3:33:1a:2e:fa:90:3a:43:38:a7:be:53:61: 9f:6b:d1:35:7d:e9:04:e5:93:60:f9:6b:a4:b0:98: 91:2e:a1:ae:17:6f:b2:a8:8d:0e:0e:93:36:b5:5b: e1:2b:2c:4a:be:92:7f:4d:7c:d7:7b:6e:0f:b1:ab: ce:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:AE:08:47:5C:F6:B5:A7:41:5A:A5:F1:0C:62:47:2C:3A:A0:C4:63 X509v3 Authority Key Identifier: keyid:0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:59:49:27:97:ea:64:12:f5:72:6b:f1:93:7b:ac:14:ba:95: 6f:01:6b:64:44:53:83:3c:fe:2c:d4:05:d4:14:6d:ef:13:97: 96:9b:1f:cf:0c:32:a7:25:00:93:40:4a:49:2f:3c:4b:b5:57: bc:46:f3:06:d9:26:c5:83:22:3e:ff:2e:8d:b2:75:04:4a:36: 6c:5d:f4:32:6c:f2:37:ad:0f:99:31:7a:22:b8:90:6b:07:2a: 00:9d:73:5c:41:63:6c:ba:09:a2:aa:7e:2f:d4:16:96:b7:b7: b8:20:d0:ef:18:ea:54:53:3e:57:af:e3:93:19:9c:1b:45:69: ca:46:29:94:56:00:4f:d8:85:b0:d4:94:04:a6:e8:91:f6:96: 34:ac:68:c6:4b:38:cb:a2:4d:45:f0:6b:c3:a4:e1:ed:71:22: aa:1a:68:79:88:9f:da:8b:9b:c9:21:f0:a0:11:1a:9f:5c:8b: 20:fd:91:04:4a:b4:4f:b5:38:83:55:f8:4d:4e:8d:34:7a:9e: 1b:76:a4:aa:26:b0:b2:36:3f:45:7a:9a:77:38:4c:51:b0:e7: d5:37:3e:18:a3:e7:fc:02:ed:f2:d8:34:32:73:1b:60:83:e6: 00:4a:a9:f6:5b:46:7e:d7:c8:01:73:3a:4c:1c:aa:d0:b2:90: ce:65:65:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU5REMxMTAvBgNVBAUTKDBGOUY3MTU4REJERkZBMkE1N0FFMDI0ODdDOTgyMDZC NzgzODA0OTYwHhcNMjYwNTIxMDQyNTAzWhcNMjYwNTI4MDQyNTAzWjAYMRYwFAYD VQQDEw02YTBlODkxZi05ODVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkyLBFWHPMVLR3wnIH9LiWIuOSLAkPRChNjxk8Kb8Lx9pB2eVt2Pp6rml8nLm vSci6YBrbkGVITeztss3HZWANxkA8k+SjuHQySW4hT/9VUXBYmCTSyYfnOnR1+B/ DrOfQ8GCO6xN/2b3FV6TlXsHpldN9BVPdgDK0Sj92zAgOS7Ob2becpr5T08/K/Zt dxgZYzHnBDKF3nE6t03e+gy/dTUckh66DYWV93LXHitmmcnIWAGq/7VMukGjNRNr Lnw8fjFVwLMzGi76kDpDOKe+U2Gfa9E1fekE5ZNg+WuksJiRLqGuF2+yqI0ODpM2 tVvhKyxKvpJ/TXzXe24PsavO3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGWuCEdc 9rWnQVql8QxiRyw6oMRjMB8GA1UdIwQYMBaAFA+fcVjb3/oqV64CSHyYIGt4OASW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTlEQy82RUVDMUY1Q0VG RkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1pcFhyZ0pJZkpnZ2EzZzRC SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1OXhXTnZmLWlwWHJnSklmSmdnYTNnNEJKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTlEQy82RUVDMUY1Q0VGRkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1p cFhyZ0pJZkpnZ2EzZzRCSlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlFlJJ5fqZBL1cmvxk3usFLqVbwFrZERTgzz+LNQF1BRt7xOXlpsfzwwypyUA k0BKSS88S7VXvEbzBtkmxYMiPv8ujbJ1BEo2bF30MmzyN60PmTF6IriQawcqAJ1z XEFjbLoJoqp+L9QWlre3uCDQ7xjqVFM+V6/jkxmcG0VpykYplFYAT9iFsNSUBKbo kfaWNKxoxks4y6JNRfBrw6Th7XEiqhpoeYif2oubySHwoBEan1yLIP2RBEq0T7U4 g1X4TU6NNHqeG3akqiawsjY/RXqadzhMUbDn1Tc+GKPn/ALt8tg0MnMbYIPmAEqp 9ltGftfIAXM6TByq0LKQzmVlDg== -----END CERTIFICATE-----Generated at Thu May 21 09:37:09 2026 by rpki-client