$ rpki-client -vvf rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft File: 2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft (raw, json) Hash identifier: xqhFvd91TkuekXxigxKZwjiacCw3mIkcNgkab/FVoTc= Subject key identifier: 09:BE:C9:21:A5:1F:FB:31:0B:99:5E:65:6D:EB:7B:04:0F:E1:39:00 Authority key identifier: D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C Certificate issuer: /CN=A913664F/serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C Certificate serial: 025C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft Manifest number: 0249 Signing time: Thu 21 May 2026 02:29:27 +0000 Manifest this update: Thu 21 May 2026 02:29:26 +0000 Manifest next update: Thu 28 May 2026 02:29:26 +0000 Files and hashes: 1: 2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl (hash: RXUxJitpE08oUD0G2avg4c4KdCSOUNnMf7aPs+OhlMQ=) 2: B1E75D08DD7F11ED815F9B4DC4F9AE02.roa (hash: jCFeHTOEaf/tAa5ix+hQ/UsUVIVpLzQ1m9SstZe2Zt0=) 3: D2677928DD9811EDB2BBBA09C4F9AE02.roa (hash: hCwx0DM5AZe2LmvT1nwHBj2xXRoQx2u9h5+OYamek6Q=) 4: D1DDFDECDD9811EDB2BBBA09C4F9AE02.roa (hash: DS+0KFmcBE9DXzoqd+clX1iffNG/TJDheFzOy8o3k5w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:29:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 604 (0x25c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913664F, serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C Validity Not Before: May 21 02:29:26 2026 GMT Not After : May 28 02:29:26 2026 GMT Subject: CN=6a0e6e07-4037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:74:47:80:fc:2d:b5:5d:0b:d9:95:0a:6c:e8: d9:29:de:50:63:86:88:be:85:88:9f:5a:bf:2b:0b: b3:51:c6:50:54:b9:c2:28:57:90:6d:36:0f:4a:6b: f1:f4:ee:dd:7c:fb:7c:47:fa:dc:f6:0e:91:1d:0e: a0:88:26:1f:d8:1b:98:2f:e9:79:86:d8:b8:d4:be: eb:f1:f0:58:60:db:00:54:ee:1e:e4:8f:90:6e:c2: ea:81:16:18:50:99:30:54:2b:16:0d:7e:eb:45:92: 7d:9f:5d:d9:bb:05:02:01:51:7f:3e:58:da:3c:da: b5:6a:5d:2c:0a:63:0a:01:96:a6:27:3a:cb:b4:f7: 52:e5:c1:3e:31:4d:4d:9b:05:90:9c:ca:b7:dd:54: 24:85:d9:fa:4c:c8:f2:14:01:8b:e5:da:47:d0:03: c1:6a:0d:0e:41:1a:96:48:27:28:dd:e6:87:53:ff: ab:88:a2:0c:ba:ba:35:7e:e5:b4:32:74:64:ec:89: 41:c2:40:34:55:54:1c:a8:d6:2c:3d:38:17:6e:73: e2:31:14:2c:bf:f5:da:e8:13:e3:7e:ea:e2:20:ee: 93:ec:bb:bc:4b:7c:82:15:37:f7:9e:38:23:43:7a: 63:01:d4:9a:86:87:c0:4b:eb:fe:e6:79:87:38:cb: 5d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:BE:C9:21:A5:1F:FB:31:0B:99:5E:65:6D:EB:7B:04:0F:E1:39:00 X509v3 Authority Key Identifier: keyid:D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:2e:90:eb:23:67:53:7a:1f:5c:25:eb:fe:64:7a:22:b7:b8: 32:e8:f1:48:fa:90:ff:ff:3b:16:2f:7d:0d:a8:ef:25:b3:3b: 5b:85:6e:46:dc:0a:a4:61:f3:02:ad:7a:ab:94:3f:31:f0:cd: a3:67:a7:4e:64:3c:6f:d0:5e:cf:84:91:65:d7:a0:69:37:78: fe:39:9d:2c:77:db:e1:48:4c:79:c2:35:ce:92:d0:ba:0b:e0: 57:de:c1:fe:a1:3e:68:b2:e7:f6:16:c7:5d:58:01:96:fa:73: 8d:bb:5d:2b:cb:91:9a:cf:06:27:fa:1a:27:64:aa:78:75:86: d5:84:23:29:ca:d0:d9:00:1d:0b:85:13:52:ec:2d:e4:c6:d7: 8f:88:69:74:ff:93:8c:7a:34:42:69:85:bb:61:6e:59:60:d3: 27:6d:d5:bd:06:f8:1a:9e:ac:57:fc:b0:56:63:05:1d:0d:4f: 64:d1:09:fb:bd:1f:93:ff:8c:d5:bf:2c:43:78:fc:05:aa:b1: 6a:7b:73:33:33:c8:79:0d:c1:4a:13:04:cb:43:be:26:9f:47: d7:4c:b2:e0:b7:e3:bd:27:5a:a2:8f:af:64:14:17:83:1b:40: 48:a6:69:4b:21:b7:d4:b7:c2:4d:f0:c6:7f:86:5d:e7:49:6b: 21:10:e6:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY2NEYxMTAvBgNVBAUTKEQ5OTAyQzRFOTQ3MkM3QUQ1MDgyODEyRkE3RDA3NzE0 NkFCN0NCOUMwHhcNMjYwNTIxMDIyOTI2WhcNMjYwNTI4MDIyOTI2WjAYMRYwFAYD VQQDEw02YTBlNmUwNy00MDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAonRHgPwttV0L2ZUKbOjZKd5QY4aIvoWIn1q/KwuzUcZQVLnCKFeQbTYPSmvx 9O7dfPt8R/rc9g6RHQ6giCYf2BuYL+l5hti41L7r8fBYYNsAVO4e5I+QbsLqgRYY UJkwVCsWDX7rRZJ9n13ZuwUCAVF/PljaPNq1al0sCmMKAZamJzrLtPdS5cE+MU1N mwWQnMq33VQkhdn6TMjyFAGL5dpH0APBag0OQRqWSCco3eaHU/+riKIMuro1fuW0 MnRk7IlBwkA0VVQcqNYsPTgXbnPiMRQsv/Xa6BPjfuriIO6T7Lu8S3yCFTf3njgj Q3pjAdSahofAS+v+5nmHOMtdkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAm+ySGl H/sxC5leZW3rewQP4TkAMB8GA1UdIwQYMBaAFNmQLE6UcsetUIKBL6fQdxRqt8uc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjY0Ri8xRTA4NTRBRURE N0QxMUVEOTFBMDQ2NERDNEY5QUUwMi8yWkFzVHBSeXg2MVFnb0V2cDlCM0ZHcTN5 NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJaQXNUcFJ5eDYxUWdvRXZwOUIzRkdxM3k1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjY0Ri8xRTA4NTRBRUREN0QxMUVEOTFBMDQ2NERDNEY5QUUwMi8yWkFzVHBSeXg2 MVFnb0V2cDlCM0ZHcTN5NXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdC6Q6yNnU3ofXCXr/mR6Ire4MujxSPqQ//87Fi99DajvJbM7W4VuRtwKpGHz Aq16q5Q/MfDNo2enTmQ8b9Bez4SRZdegaTd4/jmdLHfb4UhMecI1zpLQugvgV97B /qE+aLLn9hbHXVgBlvpzjbtdK8uRms8GJ/oaJ2SqeHWG1YQjKcrQ2QAdC4UTUuwt 5MbXj4hpdP+TjHo0QmmFu2FuWWDTJ23VvQb4Gp6sV/ywVmMFHQ1PZNEJ+70fk/+M 1b8sQ3j8BaqxantzMzPIeQ3BShMEy0O+Jp9H10yy4LfjvSdaoo+vZBQXgxtASKZp SyG31LfCTfDGf4Zd50lrIRDmJw== -----END CERTIFICATE-----Generated at Thu May 21 09:39:00 2026 by rpki-client