$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft File: tOfjRK3ONthPHzq8zRSyTBUSu6o.mft (raw, json) Hash identifier: 6T9G6EjZw1jWzOT2TYSeOgv7d+shDd34L7mvN2Y2Ims= Subject key identifier: D6:D1:A8:4F:05:20:A9:D6:94:E9:A1:4D:36:C3:AA:9B:D7:CD:FA:64 Authority key identifier: B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA Certificate issuer: /CN=A911BDA9/serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft Manifest number: 015D Signing time: Thu 21 May 2026 05:04:20 +0000 Manifest this update: Thu 21 May 2026 05:04:19 +0000 Manifest next update: Thu 28 May 2026 05:04:19 +0000 Files and hashes: 1: tOfjRK3ONthPHzq8zRSyTBUSu6o.crl (hash: 3rqPYHwrwt+QOXzpkfsRlR9cJMcWndaSzX3Ndvhd1yM=) 2: 6A5F29CED8A511F0B3F453F094D3641D.roa (hash: x8Gadu5mzZc6qu26lRbm5uUV5MWN8eTQq1KShULlErA=) 3: 723720464ABE11EFA87EE85BC4F9AE02.roa (hash: /neZtyP8CB+i0xa/1UQQQx4y8u+LD3tIdTWWjj7eFPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 05:04:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDA9, serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA Validity Not Before: May 21 05:04:19 2026 GMT Not After : May 28 05:04:19 2026 GMT Subject: CN=6a0e9253-17a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bc:95:8c:26:f3:47:03:45:db:b0:4d:3a:5e: f5:15:8a:f2:52:73:85:58:75:73:94:f4:33:a1:9f: 0e:80:79:a7:f6:e5:0c:f1:e5:a5:c9:66:c3:1f:f9: 6b:89:28:c1:b3:3b:f8:02:60:b8:48:e4:db:10:ac: 29:63:c0:21:df:a1:f2:e4:5b:b9:5e:0c:ca:94:5a: 3e:9b:2f:9a:f4:23:7a:70:70:65:53:18:c8:97:41: ef:cb:a0:9c:40:d7:77:74:77:d6:9e:1a:17:22:e9: 49:fd:fa:e5:8c:f0:c0:ef:27:a2:8b:70:2c:59:32: af:e3:7e:b6:f9:6d:07:50:0e:a3:18:b9:a7:fa:e7: cb:aa:58:18:c1:1f:29:91:b9:fc:fa:25:1a:4a:ab: d2:2d:eb:be:5a:5b:99:4d:4b:89:4d:93:d2:1a:b1: 28:bd:5c:4b:4c:6b:69:ef:28:83:0f:b9:7d:79:56: c3:22:9b:d0:46:86:a2:0a:5b:46:51:2c:3e:76:fc: 91:34:c1:20:9b:05:cb:ba:73:96:0e:3e:45:da:32: be:9c:00:af:02:f1:00:ad:7c:d5:be:ab:80:95:07: b9:b1:f4:4e:4f:47:d8:9a:ad:7f:8b:ac:53:4a:4c: a1:6c:53:e8:c8:df:10:cd:66:f3:ff:28:5b:39:e6: e8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D1:A8:4F:05:20:A9:D6:94:E9:A1:4D:36:C3:AA:9B:D7:CD:FA:64 X509v3 Authority Key Identifier: keyid:B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:59:cd:0e:23:d6:42:2e:fe:30:c7:c4:53:97:a1:19:d0:cb: 2f:3b:9f:68:40:64:19:13:23:79:87:77:2e:f7:60:4f:0e:0c: 59:bc:ad:cc:e7:ea:8a:5e:29:ae:26:c1:00:ae:30:dc:c2:e2: 1b:1b:94:d1:13:50:75:51:52:65:18:52:ea:38:87:1c:ee:30: 01:f3:db:75:b4:75:98:7c:8f:0c:eb:b8:d6:60:dc:50:10:4d: a5:6f:86:ab:6f:d9:b4:3e:5f:f8:c1:2f:5a:0b:e4:ce:64:29: f3:dc:0a:e9:22:06:80:ff:c5:e1:f1:85:37:37:31:e1:a5:d0: 14:f0:6f:15:b8:5d:ac:b1:21:df:e8:32:fb:1c:0b:bb:37:9e: f9:a6:55:63:f1:00:00:02:49:de:b6:fb:88:5f:f7:66:48:23: 94:47:90:c1:04:56:6f:8a:68:64:10:0e:56:10:cc:a5:96:e4: b0:b3:71:d3:4a:e1:0d:57:9e:94:a4:87:fe:c1:74:46:cd:21: 35:3c:c5:e3:1c:9b:4e:c0:37:de:fd:4d:99:45:63:5f:62:65: 1f:ee:34:ad:c7:6d:fb:cc:ec:2a:f5:79:26:eb:73:25:c9:d9: 24:e9:b6:d6:9e:e0:8d:e9:d6:0a:8a:90:04:ae:2b:2a:22:eb: 42:9a:9b:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQTkxMTAvBgNVBAUTKEI0RTdFMzQ0QURDRTM2RDg0RjFGM0FCQ0NEMTRCMjRD MTUxMkJCQUEwHhcNMjYwNTIxMDUwNDE5WhcNMjYwNTI4MDUwNDE5WjAYMRYwFAYD VQQDEw02YTBlOTI1My0xN2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAobyVjCbzRwNF27BNOl71FYryUnOFWHVzlPQzoZ8OgHmn9uUM8eWlyWbDH/lr iSjBszv4AmC4SOTbEKwpY8Ah36Hy5Fu5XgzKlFo+my+a9CN6cHBlUxjIl0Hvy6Cc QNd3dHfWnhoXIulJ/frljPDA7yeii3AsWTKv4362+W0HUA6jGLmn+ufLqlgYwR8p kbn8+iUaSqvSLeu+WluZTUuJTZPSGrEovVxLTGtp7yiDD7l9eVbDIpvQRoaiCltG USw+dvyRNMEgmwXLunOWDj5F2jK+nACvAvEArXzVvquAlQe5sfROT0fYmq1/i6xT SkyhbFPoyN8QzWbz/yhbOebo+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNbRqE8F IKnWlOmhTTbDqpvXzfpkMB8GA1UdIwQYMBaAFLTn40StzjbYTx86vM0UskwVEruq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBOS8zNkE1MzBGNjQ0 QkQxMUVGQjczREI3N0JDNEY5QUUwMi90T2ZqUkszT050aFBIenE4elJTeVRCVVN1 Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RPZmpSSzNPTnRoUEh6cTh6UlN5VEJVU3U2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBOS8zNkE1MzBGNjQ0QkQxMUVGQjczREI3N0JDNEY5QUUwMi90T2ZqUkszT050 aFBIenE4elJTeVRCVVN1Nm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXVnNDiPWQi7+MMfEU5ehGdDLLzufaEBkGRMjeYd3LvdgTw4MWbytzOfqil4p ribBAK4w3MLiGxuU0RNQdVFSZRhS6jiHHO4wAfPbdbR1mHyPDOu41mDcUBBNpW+G q2/ZtD5f+MEvWgvkzmQp89wK6SIGgP/F4fGFNzcx4aXQFPBvFbhdrLEh3+gy+xwL uzee+aZVY/EAAAJJ3rb7iF/3ZkgjlEeQwQRWb4poZBAOVhDMpZbksLNx00rhDVee lKSH/sF0Rs0hNTzF4xybTsA33v1NmUVjX2JlH+40rcdt+8zsKvV5JutzJcnZJOm2 1p7gjenWCoqQBK4rKiLrQpqbmg== -----END CERTIFICATE-----Generated at Fri May 22 12:07:30 2026 by rpki-client