$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.mft File: _d0zZyPk_yht6VYjX0y7nlvItHs.mft (raw, json) Hash identifier: 4eOW6PWY6T7W3YAYMsVV16cjpUmoHFiWzgeb1i6rgpI= Subject key identifier: 86:87:F6:1E:01:ED:5B:D3:D1:AE:78:B8:D6:DF:26:3F:E7:14:88:D5 Authority key identifier: FD:DD:33:67:23:E4:FF:28:6D:E9:56:23:5F:4C:BB:9E:5B:C8:B4:7B Certificate issuer: /CN=A911EA03/serialNumber=FDDD336723E4FF286DE956235F4CBB9E5BC8B47B Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_d0zZyPk_yht6VYjX0y7nlvItHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.mft Manifest number: 24 Signing time: Thu 21 May 2026 09:00:55 +0000 Manifest this update: Thu 21 May 2026 09:00:54 +0000 Manifest next update: Thu 28 May 2026 09:00:54 +0000 Files and hashes: 1: _d0zZyPk_yht6VYjX0y7nlvItHs.crl (hash: JomHTk92msBjlCJ6paPiozy5dNwtKQdsEmW8PNIyOng=) 2: 2789337224DD11F19E4B5BF6AD833773.roa (hash: PQr+ebVrtCzdXKAWNzsRyzxT+aGxBF4TMLTLw4pn3Sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.crl rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_d0zZyPk_yht6VYjX0y7nlvItHs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EA03, serialNumber=FDDD336723E4FF286DE956235F4CBB9E5BC8B47B Validity Not Before: May 21 09:00:54 2026 GMT Not After : May 28 09:00:54 2026 GMT Subject: CN=6a0ec9c7-fa4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b5:5f:73:82:4f:0b:16:8c:4e:bf:91:7b:ce: 7a:11:a6:9c:cb:c2:db:92:9a:09:57:3a:97:c9:f7: 90:73:f8:19:03:5d:51:92:2c:d8:be:48:20:4a:65: 79:94:ca:91:0c:f3:1c:16:0d:49:17:67:6a:b2:57: e6:34:f6:18:72:d1:91:c2:5f:75:9f:f0:7f:59:5a: 3d:2b:d4:28:f2:a9:38:f2:4b:2f:87:16:e5:8a:03: 98:f9:c9:a1:f7:bc:8b:5d:be:43:58:22:f8:68:1c: 03:5c:ad:e6:c4:fc:aa:0f:15:e6:49:77:fb:75:09: 5d:bd:65:a6:ca:cd:55:19:91:91:46:af:1f:11:35: 35:c5:48:5c:e8:c8:2a:d2:f2:7e:c8:a1:c9:7f:08: 8c:a5:91:d9:f8:ae:10:47:84:c9:82:46:96:bf:00: 08:d0:39:38:77:d0:10:ea:9a:2a:6e:49:85:a8:76: 92:2a:d6:d4:bd:7c:01:e8:e1:69:dc:66:21:e3:2f: 08:e7:43:9b:53:b8:c6:7e:c6:a1:83:1d:d8:9e:eb: b0:25:c8:20:7e:63:c0:0b:5b:c5:8d:51:d7:37:f6: 54:73:fa:c9:b0:9d:cd:f7:38:32:bc:9b:40:b0:5a: 59:5f:bd:78:f0:7d:38:0f:20:f7:62:08:44:40:93: 10:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:87:F6:1E:01:ED:5B:D3:D1:AE:78:B8:D6:DF:26:3F:E7:14:88:D5 X509v3 Authority Key Identifier: keyid:FD:DD:33:67:23:E4:FF:28:6D:E9:56:23:5F:4C:BB:9E:5B:C8:B4:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_d0zZyPk_yht6VYjX0y7nlvItHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c6:9a:06:a4:9e:e6:ef:1b:7d:c2:83:d7:2f:3b:26:6c:b0: 6a:ab:11:a1:41:eb:83:ea:b2:eb:cf:b3:ab:7f:93:0f:62:b9: d8:84:ed:fa:42:fb:ca:ce:03:a9:ea:0b:76:96:14:6a:de:5b: 12:46:31:4b:a5:45:85:1c:25:f8:8e:d4:9d:3a:92:33:4f:ae: ff:01:42:fd:de:23:c7:9c:6f:73:cf:f2:8a:b9:91:3d:af:e8: 1f:a4:8e:bd:db:ca:07:a4:e7:af:f1:2a:96:b9:67:60:0d:94: c3:9f:87:b4:a3:bf:20:29:6e:64:03:b9:f9:56:fc:e9:66:3d: 69:98:91:8d:d8:7c:84:5a:6f:75:c7:bb:b6:28:f5:eb:3b:2c: 6a:6f:05:57:b6:b2:8e:f6:67:73:d1:8f:96:b4:f7:65:ae:3f: 39:1d:f6:cb:06:ca:63:68:98:1f:2a:0a:9b:b4:55:c7:cd:13: db:19:c3:19:70:67:00:b2:7f:60:54:f3:58:74:5e:4c:4f:4e: 96:28:65:27:81:17:dd:26:3f:97:91:ce:45:9b:8d:32:b6:2f: d7:7a:8c:8e:5c:a4:b6:b5:02:a8:41:5c:c0:9a:d0:45:c7:fc: 8d:e1:f7:44:9a:98:97:26:8a:d9:15:76:4b:34:12:d1:29:0f: a1:96:81:a8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RUEwMzExMC8GA1UEBRMoRkRERDMzNjcyM0U0RkYyODZERTk1NjIzNUY0Q0JCOUU1 QkM4QjQ3QjAeFw0yNjA1MjEwOTAwNTRaFw0yNjA1MjgwOTAwNTRaMBgxFjAUBgNV BAMTDTZhMGVjOWM3LWZhNGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTtV9zgk8LFoxOv5F7znoRppzLwtuSmglXOpfJ95Bz+BkDXVGSLNi+SCBKZXmU ypEM8xwWDUkXZ2qyV+Y09hhy0ZHCX3Wf8H9ZWj0r1CjyqTjySy+HFuWKA5j5yaH3 vItdvkNYIvhoHANcrebE/KoPFeZJd/t1CV29ZabKzVUZkZFGrx8RNTXFSFzoyCrS 8n7Iocl/CIylkdn4rhBHhMmCRpa/AAjQOTh30BDqmipuSYWodpIq1tS9fAHo4Wnc ZiHjLwjnQ5tTuMZ+xqGDHdie67AlyCB+Y8ALW8WNUdc39lRz+smwnc33ODK8m0Cw WllfvXjwfTgPIPdiCERAkxAdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhof2HgHt W9PRrni41t8mP+cUiNUwHwYDVR0jBBgwFoAU/d0zZyPk/yht6VYjX0y7nlvItHsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFQTAzL0NCREZGNkFBMjRE QzExRjFBQUY1QjM0QUFEODMzNzczL19kMHpaeVBrX3lodDZWWWpYMHk3bmx2SXRI cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvX2Qwelp5UGtfeWh0NlZZalgweTdubHZJdEhzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF QTAzL0NCREZGNkFBMjREQzExRjFBQUY1QjM0QUFEODMzNzczL19kMHpaeVBrX3lo dDZWWWpYMHk3bmx2SXRIcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAqxpoGpJ7m7xt9woPXLzsmbLBqqxGhQeuD6rLrz7Orf5MPYrnYhO36QvvKzgOp 6gt2lhRq3lsSRjFLpUWFHCX4jtSdOpIzT67/AUL93iPHnG9zz/KKuZE9r+gfpI69 28oHpOev8SqWuWdgDZTDn4e0o78gKW5kA7n5VvzpZj1pmJGN2HyEWm91x7u2KPXr OyxqbwVXtrKO9mdz0Y+WtPdlrj85HfbLBspjaJgfKgqbtFXHzRPbGcMZcGcAsn9g VPNYdF5MT06WKGUngRfdJj+Xkc5Fm40yti/XeoyOXKS2tQKoQVzAmtBFx/yN4fdE mpiXJorZFXZLNBLRKQ+hloGo -----END CERTIFICATE-----Generated at Thu May 21 12:25:54 2026 by rpki-client