$ rpki-client -vvf rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft File: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft (raw, json) Hash identifier: i5r3oXnjWDnsfcKaJsM5wW+c2R0CuaHqeQdguV0lo+Y= Subject key identifier: 1D:2F:17:0E:09:F9:D4:A3:C5:EC:EB:C4:FD:3C:E8:06:13:7C:8F:CE Authority key identifier: B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD Certificate issuer: /CN=A911BE38/serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD Certificate serial: 02AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft Manifest number: 02A2 Signing time: Thu 21 May 2026 01:37:55 +0000 Manifest this update: Thu 21 May 2026 01:37:55 +0000 Manifest next update: Thu 28 May 2026 01:37:55 +0000 Files and hashes: 1: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl (hash: sVds64Wt2mCskqGxEvh3gGJqEjnwmxk9l4oxmh9NTK4=) 2: 417DA2566D5E11EE831C802AC4F9AE02.roa (hash: PDnEhXpybcfU5TbW/vsPqy6UwZtYUKAhQ/oRyYe81/U=) 3: 59DD05DA541E11EDB324CE7DC4F9AE02.roa (hash: P7sSHVPuY1Kf596MnR9z8qqEbhcKodu0GCazYWuA9b8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 01:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 687 (0x2af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BE38, serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD Validity Not Before: May 21 01:37:55 2026 GMT Not After : May 28 01:37:55 2026 GMT Subject: CN=6a0e61f3-7923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bd:b0:28:71:75:bc:4e:cf:b8:ca:a7:ee:25: 5a:65:d6:83:5f:ee:23:1c:f3:c8:e4:3e:d7:dc:ef: c8:43:cf:92:b7:c0:44:c8:bb:37:b1:33:74:e6:c5: 76:1f:b6:86:cf:a1:46:03:e6:5d:e9:27:ad:e7:86: 75:31:21:6c:ec:8b:c2:c1:1e:0e:57:92:34:97:e6: 67:1c:ef:b9:d3:f4:57:23:d7:f0:58:97:e7:b7:4c: 17:ef:f7:b1:5a:66:dd:3a:da:24:1e:0a:99:15:c0: d1:70:ab:72:78:f1:60:6a:c4:14:2a:33:80:6b:0f: 79:8b:d5:21:12:39:a5:11:57:9c:93:2e:93:0b:b2: c1:c7:7b:fc:15:45:ea:57:e7:bb:74:69:91:e5:54: 0e:46:04:4d:fd:b4:a9:b3:0b:9b:90:df:98:18:54: 8b:49:75:c2:b6:49:a1:fc:c3:43:da:0b:7f:68:67: d5:50:0d:1b:29:44:3a:7e:d8:db:ef:2d:c3:d1:09: 88:6b:81:b6:78:be:f9:82:24:9e:6f:90:25:bf:25: b6:ea:84:eb:01:5e:57:db:6f:0a:2b:60:0d:78:a1: d2:6d:0b:12:5b:f7:b5:14:ce:12:d7:c0:40:99:7c: 4a:e5:20:a5:8b:1a:cf:a1:07:bb:ae:0e:15:96:b0: e6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:2F:17:0E:09:F9:D4:A3:C5:EC:EB:C4:FD:3C:E8:06:13:7C:8F:CE X509v3 Authority Key Identifier: keyid:B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:80:6c:e4:41:c9:bc:9a:32:6d:ed:f9:0b:1d:d4:14:79:1f: a7:bd:fd:10:15:e6:bd:40:95:f7:2f:26:93:90:1f:de:7b:ee: 7b:ef:e5:ea:47:5a:fd:1a:c2:64:9b:29:3b:a3:3c:00:12:1e: a1:81:2e:a4:43:d2:be:26:5a:a1:73:18:55:4d:aa:21:0e:eb: 54:27:2d:86:da:2a:0f:ee:d9:0a:b7:e6:00:c5:fe:f0:0b:65: 73:ca:dd:34:04:9a:e7:e4:85:0b:0f:62:43:bc:86:d4:aa:84: 5f:18:60:aa:05:bc:46:55:03:e6:bb:83:5d:91:16:3f:a2:32: 5e:13:42:e0:77:91:23:ea:94:bc:a5:b4:e9:2d:18:79:43:9c: 75:89:98:c6:bb:2e:cf:85:a4:e2:5a:8c:bb:5a:70:bf:55:a8: ba:8e:14:8c:c9:12:e8:e1:4c:13:01:f9:ec:36:4a:ba:eb:ee: d5:23:b2:26:1b:09:b8:8b:97:9e:8c:af:47:8e:b9:7d:3a:f8: 71:70:69:d7:50:3e:f5:f3:6b:b9:2d:6a:b3:7a:73:17:5f:6c: d5:ff:a2:22:e0:61:e3:aa:54:dd:ac:00:a1:ff:1a:6c:8e:1e: 2e:32:f7:ab:f8:64:fa:de:02:b4:05:f2:d5:8f:7a:92:47:36: cc:97:7b:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJFMzgxMTAvBgNVBAUTKEIxOEM0Mzc0MzQ2NjkyMURCMDQyNUU3MzY3RDU1QzI4 RUU0QUYxQ0QwHhcNMjYwNTIxMDEzNzU1WhcNMjYwNTI4MDEzNzU1WjAYMRYwFAYD VQQDEw02YTBlNjFmMy03OTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr72wKHF1vE7PuMqn7iVaZdaDX+4jHPPI5D7X3O/IQ8+St8BEyLs3sTN05sV2 H7aGz6FGA+Zd6Set54Z1MSFs7IvCwR4OV5I0l+ZnHO+50/RXI9fwWJfnt0wX7/ex WmbdOtokHgqZFcDRcKtyePFgasQUKjOAaw95i9UhEjmlEVecky6TC7LBx3v8FUXq V+e7dGmR5VQORgRN/bSpswubkN+YGFSLSXXCtkmh/MND2gt/aGfVUA0bKUQ6ftjb 7y3D0QmIa4G2eL75giSeb5AlvyW26oTrAV5X228KK2ANeKHSbQsSW/e1FM4S18BA mXxK5SClixrPoQe7rg4VlrDmLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB0vFw4J +dSjxezrxP086AYTfI/OMB8GA1UdIwQYMBaAFLGMQ3Q0ZpIdsEJec2fVXCjuSvHN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkUzOC82REEyRDlCMjU0 MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWtoMndRbDV6WjlWY0tPNUs4 YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NZeERkRFJta2gyd1FsNXpaOVZjS081SzhjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkUzOC82REEyRDlCMjU0MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWto MndRbDV6WjlWY0tPNUs4YzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV4Bs5EHJvJoybe35Cx3UFHkfp739EBXmvUCV9y8mk5Af3nvue+/l6kda/RrC ZJspO6M8ABIeoYEupEPSviZaoXMYVU2qIQ7rVCcthtoqD+7ZCrfmAMX+8Atlc8rd NASa5+SFCw9iQ7yG1KqEXxhgqgW8RlUD5ruDXZEWP6IyXhNC4HeRI+qUvKW06S0Y eUOcdYmYxrsuz4Wk4lqMu1pwv1Wouo4UjMkS6OFMEwH57DZKuuvu1SOyJhsJuIuX noyvR465fTr4cXBp11A+9fNruS1qs3pzF19s1f+iIuBh46pU3awAof8abI4eLjL3 q/hk+t4CtAXy1Y96kkc2zJd7Aw== -----END CERTIFICATE-----Generated at Thu May 21 11:03:47 2026 by rpki-client