$ rpki-client -vvf rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.mft File: a0-8524QyfbwCQHlAC-OEPPpr38.mft (raw, json) Hash identifier: 5LhGbvk+MUE/tE+1DThgIUJSsDCwYV4gxDQ+p/M5xMs= Subject key identifier: DC:D7:12:A9:01:92:B4:BF:68:22:ED:4E:37:71:34:80:90:5B:C2:76 Authority key identifier: 6B:4F:BC:E7:6E:10:C9:F6:F0:09:01:E5:00:2F:8E:10:F3:E9:AF:7F Certificate issuer: /CN=A912AEAB/serialNumber=6B4FBCE76E10C9F6F00901E5002F8E10F3E9AF7F Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0-8524QyfbwCQHlAC-OEPPpr38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.mft Manifest number: 29 Signing time: Tue 19 May 2026 08:39:54 +0000 Manifest this update: Tue 19 May 2026 08:39:53 +0000 Manifest next update: Tue 26 May 2026 08:39:53 +0000 Files and hashes: 1: a0-8524QyfbwCQHlAC-OEPPpr38.crl (hash: 2/+JDVC7PrYS55laqqjsLNtce5C21ztKYFCarr9iEos=) 2: 05CB75D01B4E11F190BF0D05243D8C67.roa (hash: lrrFG4FOYK4jJ7hdWejojL07VsNHzzAXyxtZaYMmJy0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.crl rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0-8524QyfbwCQHlAC-OEPPpr38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:39:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AEAB, serialNumber=6B4FBCE76E10C9F6F00901E5002F8E10F3E9AF7F Validity Not Before: May 19 08:39:53 2026 GMT Not After : May 26 08:39:53 2026 GMT Subject: CN=6a0c21da-7778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:83:f0:31:7f:2e:be:74:1c:af:ff:46:92:80: 3a:23:de:77:d1:1c:df:12:31:f1:b0:7f:a0:7d:0e: dd:96:61:76:9d:4d:1b:18:cd:d9:4d:85:bb:57:9f: 53:a4:eb:70:32:d9:11:82:af:19:cc:f8:e0:c4:b0: 42:d7:e8:43:c6:2a:4a:2f:e8:ff:09:9a:e8:dc:2f: c9:85:8b:fa:2c:18:ac:08:14:9f:7c:3c:94:b6:85: 89:30:48:ad:04:3c:be:2f:1d:5c:e9:8e:1f:b4:01: d2:c9:4c:25:46:63:a0:80:8e:07:c0:8a:72:c1:52: 78:d1:18:cd:1d:c0:fb:65:32:2c:2d:21:7e:b6:6f: bb:b7:1a:58:ce:73:f1:fe:e1:d4:94:31:19:f0:9f: 8f:c4:6c:83:65:68:99:b2:09:0d:70:06:7f:19:b0: 65:93:96:bf:c4:d6:c1:44:bc:49:db:e4:17:46:c7: 59:72:06:49:ec:c4:20:13:73:a7:df:c4:eb:ab:ba: a1:16:91:f4:2c:3e:b7:5a:2a:98:99:1d:a1:8e:70: 98:fd:f4:ab:e7:6e:59:e6:84:4c:b7:b1:e2:d4:8f: 20:df:bb:61:03:98:de:5f:44:99:6e:07:44:e1:04: ce:1e:dd:24:cc:29:6e:7a:1f:54:45:f7:98:c8:63: 50:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D7:12:A9:01:92:B4:BF:68:22:ED:4E:37:71:34:80:90:5B:C2:76 X509v3 Authority Key Identifier: keyid:6B:4F:BC:E7:6E:10:C9:F6:F0:09:01:E5:00:2F:8E:10:F3:E9:AF:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0-8524QyfbwCQHlAC-OEPPpr38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:34:ef:05:8d:4e:98:a2:f5:26:15:36:e3:29:76:54:90:37: 40:20:48:44:be:1b:cb:f3:cd:b1:d0:7f:91:f4:01:1b:8e:db: 2a:07:b8:0d:3d:d4:0d:c2:2d:a3:2b:40:21:98:2a:1a:4d:06: 7f:10:59:51:e7:1f:4e:ea:0d:b9:89:23:e4:de:d2:a9:a6:e4: 5e:17:b4:e4:ea:65:4d:af:d6:72:fb:50:b2:89:35:16:7f:35: 6a:5c:8a:7e:b1:25:4d:17:b6:34:df:62:42:41:a9:f2:ce:e7: b9:0c:12:42:0d:74:81:f4:0e:a2:89:34:61:30:4c:dd:11:f3: f6:bc:a0:3a:37:7d:b9:fd:ff:e7:80:f4:e1:4a:b8:31:17:b0: 08:72:94:dd:15:54:a7:3f:3d:a6:42:97:a8:90:68:c6:42:33: ef:33:41:3e:66:bb:be:88:0c:34:86:bb:b1:ed:bd:b6:bd:90: c1:7f:cc:86:12:74:4c:07:aa:e1:d3:6e:67:06:ae:c7:11:2d: 83:bb:47:3e:71:d8:ce:98:3f:b5:e6:d7:c9:87:bc:2f:bc:62: df:a1:c6:2f:46:f5:9d:ef:4f:7c:c5:9d:6a:cc:64:27:f7:5f: 95:00:53:8e:8a:61:b9:70:57:2b:b3:f2:5f:34:fa:cb:cf:f0: 43:e6:12:ba -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QUVBQjExMC8GA1UEBRMoNkI0RkJDRTc2RTEwQzlGNkYwMDkwMUU1MDAyRjhFMTBG M0U5QUY3RjAeFw0yNjA1MTkwODM5NTNaFw0yNjA1MjYwODM5NTNaMBgxFjAUBgNV BAMTDTZhMGMyMWRhLTc3NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCig/Axfy6+dByv/0aSgDoj3nfRHN8SMfGwf6B9Dt2WYXadTRsYzdlNhbtXn1Ok 63Ay2RGCrxnM+ODEsELX6EPGKkov6P8JmujcL8mFi/osGKwIFJ98PJS2hYkwSK0E PL4vHVzpjh+0AdLJTCVGY6CAjgfAinLBUnjRGM0dwPtlMiwtIX62b7u3GljOc/H+ 4dSUMRnwn4/EbINlaJmyCQ1wBn8ZsGWTlr/E1sFEvEnb5BdGx1lyBknsxCATc6ff xOuruqEWkfQsPrdaKpiZHaGOcJj99KvnblnmhEy3seLUjyDfu2EDmN5fRJluB0Th BM4e3STMKW56H1RF95jIY1DVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3NcSqQGS tL9oIu1ON3E0gJBbwnYwHwYDVR0jBBgwFoAUa0+8524QyfbwCQHlAC+OEPPpr38w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBRUFCLzlEODczNjA0MUI0 QzExRjFCNkRFRjdFRDIxM0Q4QzY3L2EwLTg1MjRReWZid0NRSGxBQy1PRVBQcHIz OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYTAtODUyNFF5ZmJ3Q1FIbEFDLU9FUFBwcjM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB RUFCLzlEODczNjA0MUI0QzExRjFCNkRFRjdFRDIxM0Q4QzY3L2EwLTg1MjRReWZi d0NRSGxBQy1PRVBQcHIzOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBhNO8FjU6YovUmFTbjKXZUkDdAIEhEvhvL882x0H+R9AEbjtsqB7gNPdQNwi2j K0AhmCoaTQZ/EFlR5x9O6g25iSPk3tKppuReF7Tk6mVNr9Zy+1CyiTUWfzVqXIp+ sSVNF7Y032JCQanyzue5DBJCDXSB9A6iiTRhMEzdEfP2vKA6N325/f/ngPThSrgx F7AIcpTdFVSnPz2mQpeokGjGQjPvM0E+Zru+iAw0hrux7b22vZDBf8yGEnRMB6rh 025nBq7HES2Du0c+cdjOmD+15tfJh7wvvGLfocYvRvWd7098xZ1qzGQn91+VAFOO imG5cFcrs/JfNPrLz/BD5hK6 -----END CERTIFICATE-----Generated at Thu May 21 10:22:32 2026 by rpki-client