$ rpki-client -vvf rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft File: PSzMkYN0TcaWqFVry5BDhI6V33A.mft (raw, json) Hash identifier: izcWNYRC6z/KhH0sZ3sDqr+FGyxA32YO+fqjVKkidVE= Subject key identifier: 61:CB:31:9A:7D:62:FA:3C:50:2B:D3:B9:FC:10:EB:6E:E8:19:76:04 Authority key identifier: 3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70 Certificate issuer: /CN=A912D826/serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70 Certificate serial: 043D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft Manifest number: 042B Signing time: Thu 21 May 2026 00:25:26 +0000 Manifest this update: Thu 21 May 2026 00:25:26 +0000 Manifest next update: Thu 28 May 2026 00:25:26 +0000 Files and hashes: 1: PSzMkYN0TcaWqFVry5BDhI6V33A.crl (hash: z8k7dJc/B56KF6uCxXVWrm4pXdvWLyIlF9AvksVN2As=) 2: 804B03560A7211EE8FA2CD58C4F9AE02.roa (hash: i18vAYWYZqWUAwFZVSlGk7OxKqt1gz8XjzU2hmpsWh8=) 3: 69A20286514B11F0B8A8C66DC4F9AE02.roa (hash: NkI+pmzBqCxF9snRnYsLLFaunC0T93+l8haq4O7khjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 00:25:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1085 (0x43d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D826, serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70 Validity Not Before: May 21 00:25:26 2026 GMT Not After : May 28 00:25:26 2026 GMT Subject: CN=6a0e50f6-6ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:61:e3:c9:cb:28:cb:a6:6f:93:2a:f6:81:67: 2c:a7:dc:33:7f:ab:88:03:45:d9:d7:dc:76:5a:69: 43:01:4c:cf:49:77:29:f8:c6:38:b9:55:f8:f3:9e: 65:13:a5:2b:44:b8:5a:5f:39:71:b1:7a:2a:2f:2b: 9a:c3:d1:0e:98:8b:39:0e:e2:73:14:3b:4f:b1:ec: 8a:17:fd:d8:79:2a:91:35:66:fc:92:4d:80:65:b9: cb:8d:98:e4:6f:ed:3c:40:b0:2e:12:ad:0a:e0:fd: 53:6f:eb:5d:1e:09:11:87:f5:48:36:4e:99:34:07: 11:b4:cd:8e:5a:3a:9b:11:d8:7a:50:5a:d6:c5:ef: 1f:2f:ee:a3:5a:d9:25:36:e5:d7:47:90:0e:18:be: 83:3e:68:21:37:77:f5:ef:dc:26:2d:bc:a8:db:a1: 28:6d:4c:d6:5f:43:cc:40:d5:4d:23:bb:91:97:04: c6:01:ae:0b:75:bd:91:ca:ed:8f:bc:90:ed:1a:ea: d4:9c:cb:21:b3:21:c7:5d:c2:ff:68:2a:02:83:86: 58:08:00:b6:23:50:53:bc:56:39:e1:cf:e0:db:7b: a1:c1:e7:05:f9:0a:75:18:44:e4:ce:68:9e:bd:1b: eb:e1:ed:a6:a3:73:e1:d6:db:56:5d:3a:7b:61:5f: 82:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:CB:31:9A:7D:62:FA:3C:50:2B:D3:B9:FC:10:EB:6E:E8:19:76:04 X509v3 Authority Key Identifier: keyid:3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:2a:df:45:df:ce:dc:9b:a8:34:66:77:8b:36:16:d3:62:0f: 9c:ac:85:61:f1:10:99:9d:0e:fd:f2:73:6c:25:ac:ee:c0:ad: c3:d7:1b:bc:6e:c5:2c:73:59:4d:53:e8:a0:e2:ea:16:54:27: 3e:34:7d:7d:95:34:c1:51:c6:54:0a:5b:ac:b5:a6:7b:37:eb: 2d:df:40:13:2c:33:83:63:59:2c:18:28:c9:96:11:e8:27:08: db:a7:7d:25:38:00:79:db:21:fa:f1:8d:21:28:c2:9f:f7:9d: c2:cf:17:7a:b7:b8:07:3e:b3:20:17:61:dd:10:94:41:af:2b: 3f:28:30:85:1b:ec:fc:da:30:e1:e0:65:0f:f3:6d:d5:5f:74: 9d:41:8a:8c:15:c2:f2:67:17:8d:78:f8:86:7b:e0:21:51:12: 42:38:32:83:28:07:3b:c2:94:cc:be:01:c3:d4:80:47:da:32: 1f:6d:ac:2e:32:c7:6d:12:d3:30:40:e1:cc:93:9c:e3:57:5a: b8:12:d7:15:94:1e:ef:6b:dc:8b:56:19:17:6c:b4:ae:f1:6e: 66:b4:d2:1a:b7:cb:1b:0c:27:15:ed:3b:f1:86:e5:a8:ce:5c: ab:70:44:f4:9c:dc:06:b1:72:00:62:59:6c:b8:03:21:8d:37: e6:d2:b3:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ4MjYxMTAvBgNVBAUTKDNEMkNDQzkxODM3NDREQzY5NkE4NTU2QkNCOTA0Mzg0 OEU5NURGNzAwHhcNMjYwNTIxMDAyNTI2WhcNMjYwNTI4MDAyNTI2WjAYMRYwFAYD VQQDEw02YTBlNTBmNi02YmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmHjycsoy6Zvkyr2gWcsp9wzf6uIA0XZ19x2WmlDAUzPSXcp+MY4uVX4855l E6UrRLhaXzlxsXoqLyuaw9EOmIs5DuJzFDtPseyKF/3YeSqRNWb8kk2AZbnLjZjk b+08QLAuEq0K4P1Tb+tdHgkRh/VINk6ZNAcRtM2OWjqbEdh6UFrWxe8fL+6jWtkl NuXXR5AOGL6DPmghN3f179wmLbyo26EobUzWX0PMQNVNI7uRlwTGAa4Ldb2Ryu2P vJDtGurUnMshsyHHXcL/aCoCg4ZYCAC2I1BTvFY54c/g23uhwecF+Qp1GETkzmie vRvr4e2mo3Ph1ttWXTp7YV+C3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGHLMZp9 Yvo8UCvTufwQ627oGXYEMB8GA1UdIwQYMBaAFD0szJGDdE3GlqhVa8uQQ4SOld9w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDgyNi9DRjRFMUQ3NEFF NEExMUVDODQ2RjNGNjhDNEY5QUUwMi9QU3pNa1lOMFRjYVdxRlZyeTVCRGhJNlYz M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BTek1rWU4wVGNhV3FGVnJ5NUJEaEk2VjMzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDgyNi9DRjRFMUQ3NEFFNEExMUVDODQ2RjNGNjhDNEY5QUUwMi9QU3pNa1lOMFRj YVdxRlZyeTVCRGhJNlYzM0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbSrfRd/O3JuoNGZ3izYW02IPnKyFYfEQmZ0O/fJzbCWs7sCtw9cbvG7FLHNZ TVPooOLqFlQnPjR9fZU0wVHGVApbrLWmezfrLd9AEywzg2NZLBgoyZYR6CcI26d9 JTgAedsh+vGNISjCn/edws8Xere4Bz6zIBdh3RCUQa8rPygwhRvs/Now4eBlD/Nt 1V90nUGKjBXC8mcXjXj4hnvgIVESQjgygygHO8KUzL4Bw9SAR9oyH22sLjLHbRLT MEDhzJOc41dauBLXFZQe72vci1YZF2y0rvFuZrTSGrfLGwwnFe078YblqM5cq3BE 9JzcBrFyAGJZbLgDIY035tKzKg== -----END CERTIFICATE-----Generated at Thu May 21 10:14:48 2026 by rpki-client