$ rpki-client -vvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft File: uHa2DaKzyctmxyu5_Kc77ssR_dE.mft (raw, json) Hash identifier: APdjQEo3kCF5vChDkb5Jzc/wMdN9NE8m9ZaPkYMIaaM= Subject key identifier: BF:A1:21:8E:71:89:4D:8F:51:5B:35:99:54:29:DA:CD:EC:6A:4B:2E Authority key identifier: B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1 Certificate issuer: /CN=A912611F/serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1 Certificate serial: 10A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft Manifest number: 1A71 Signing time: Wed 20 May 2026 17:21:06 +0000 Manifest this update: Wed 20 May 2026 17:21:05 +0000 Manifest next update: Wed 27 May 2026 17:21:05 +0000 Files and hashes: 1: uHa2DaKzyctmxyu5_Kc77ssR_dE.crl (hash: jWdZgvM+r8adv4XQbxPOMyerWhkrR/cZc5ttbrN4hc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:21:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4256 (0x10a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912611F, serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1 Validity Not Before: May 20 17:21:05 2026 GMT Not After : May 27 17:21:05 2026 GMT Subject: CN=6a0ded82-23e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9a:c1:13:71:67:4e:34:3c:fa:55:6d:ca:41: 86:fd:51:9c:a7:3b:49:4d:c7:17:6c:87:a0:c6:83: e4:60:e3:31:fd:16:11:9a:ae:a3:98:c5:01:d3:e4: 80:04:b9:0e:6e:46:01:0c:38:25:ac:6e:76:87:55: dc:f6:ac:b0:c3:54:55:54:57:fe:3a:a1:71:e4:78: 78:93:97:09:01:d8:4e:e2:80:61:5f:bb:54:80:b6: 88:36:93:cd:0b:c2:a1:82:2a:7e:a4:0b:ad:e1:00: 78:0a:a4:a9:20:65:33:ce:d4:29:06:5f:9f:3e:6c: 5e:db:62:3c:ba:a7:95:53:fb:a5:cb:9f:d4:30:9f: 79:2e:0f:9c:06:67:e4:51:dc:e7:3b:7e:a4:18:53: 36:04:75:e2:c4:98:e2:af:cd:0e:8a:ce:92:57:de: 51:8e:62:79:31:98:92:8e:ad:8b:b1:07:1d:ad:b6: ec:bf:74:8a:0c:43:8c:36:e3:29:e9:1e:ad:44:6a: ca:85:4f:4c:d9:e8:3c:37:28:22:6d:af:07:a6:20: e1:20:de:e1:de:9c:1b:08:1d:56:78:49:e2:7e:3b: b9:8c:ff:47:0d:0b:c7:60:7d:17:32:64:59:36:7c: d9:31:c4:20:5d:f6:6b:38:80:59:ff:ea:aa:3b:c9: 54:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A1:21:8E:71:89:4D:8F:51:5B:35:99:54:29:DA:CD:EC:6A:4B:2E X509v3 Authority Key Identifier: keyid:B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:fa:80:46:61:c3:03:94:a7:0d:a9:b0:5b:91:69:cd:f9:32: dd:df:a2:8b:bb:6b:7e:8f:ca:90:3f:1b:40:ce:eb:b7:84:a2: 0a:cd:cd:b6:59:7a:83:36:9e:a8:41:34:7e:90:4b:92:3b:36: fc:a2:70:2f:8c:1a:f5:68:55:fa:7c:5a:97:ff:07:de:43:5d: c8:16:a8:4f:55:0f:38:c8:a2:cc:a0:96:52:e7:28:db:0b:8d: 0e:4d:15:ec:31:84:61:07:95:6a:ac:c5:59:29:3c:3f:6c:a2: 29:2c:bb:58:68:6a:1a:c5:95:54:b7:d1:88:40:d9:0f:fc:b7: 7b:86:6c:18:6e:af:38:76:55:aa:b4:35:c4:73:11:7f:1d:ab: 9e:b4:2f:ce:a3:64:ef:1b:aa:70:1f:78:27:68:df:5c:ec:e9: c8:69:1e:a5:d3:82:1c:66:eb:32:a5:58:fe:dd:e9:93:58:dd: 09:e8:92:03:22:ae:78:b4:6f:d5:ef:71:e8:e2:d8:a1:29:b7: 48:22:94:dc:07:f2:b1:cf:f8:3a:c0:ce:6a:12:20:30:90:a8: a2:ff:48:4c:4d:ce:07:7c:ba:1e:6b:10:3f:da:38:55:d1:7d: ae:ad:26:46:dd:7f:dd:95:ef:ec:d4:9f:b7:2d:22:6b:94:77: 94:2d:4c:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYxMUYxMTAvBgNVBAUTKEI4NzZCNjBEQTJCM0M5Q0I2NkM3MkJCOUZDQTczQkVF Q0IxMUZERDEwHhcNMjYwNTIwMTcyMTA1WhcNMjYwNTI3MTcyMTA1WjAYMRYwFAYD VQQDEw02YTBkZWQ4Mi0yM2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5rBE3FnTjQ8+lVtykGG/VGcpztJTccXbIegxoPkYOMx/RYRmq6jmMUB0+SA BLkObkYBDDglrG52h1Xc9qyww1RVVFf+OqFx5Hh4k5cJAdhO4oBhX7tUgLaINpPN C8Khgip+pAut4QB4CqSpIGUzztQpBl+fPmxe22I8uqeVU/uly5/UMJ95Lg+cBmfk UdznO36kGFM2BHXixJjir80Ois6SV95RjmJ5MZiSjq2LsQcdrbbsv3SKDEOMNuMp 6R6tRGrKhU9M2eg8Nygiba8HpiDhIN7h3pwbCB1WeEnifju5jP9HDQvHYH0XMmRZ NnzZMcQgXfZrOIBZ/+qqO8lUhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL+hIY5x iU2PUVs1mVQp2s3saksuMB8GA1UdIwQYMBaAFLh2tg2is8nLZscrufynO+7LEf3R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjExRi80QThCMDRFQTRD N0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenljdG14eXU1X0tjNzdzc1Jf ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VIYTJEYUt6eWN0bXh5dTVfS2M3N3NzUl9kRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjExRi80QThCMDRFQTRDN0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenlj dG14eXU1X0tjNzdzc1JfZEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACvqARmHDA5SnDamwW5Fpzfky3d+ii7trfo/KkD8bQM7rt4SiCs3Ntll6gzae qEE0fpBLkjs2/KJwL4wa9WhV+nxal/8H3kNdyBaoT1UPOMiizKCWUuco2wuNDk0V 7DGEYQeVaqzFWSk8P2yiKSy7WGhqGsWVVLfRiEDZD/y3e4ZsGG6vOHZVqrQ1xHMR fx2rnrQvzqNk7xuqcB94J2jfXOzpyGkepdOCHGbrMqVY/t3pk1jdCeiSAyKueLRv 1e9x6OLYoSm3SCKU3Afysc/4OsDOahIgMJCoov9ITE3OB3y6HmsQP9o4VdF9rq0m Rt1/3ZXv7NSfty0ia5R3lC1Myw== -----END CERTIFICATE-----Generated at Thu May 21 10:16:19 2026 by rpki-client