$ rpki-client -vvf rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.mft File: d5yg0JVwhQFufQNaTsuieBq3xQ8.mft (raw, json) Hash identifier: bd7W73J+csW/F2+kBMtUCJWJMh/WPuGA/TWedR6qWyI= Subject key identifier: A6:49:91:9F:FD:9C:1A:C0:BD:A1:18:18:86:18:1E:C9:68:2A:CC:05 Authority key identifier: 77:9C:A0:D0:95:70:85:01:6E:7D:03:5A:4E:CB:A2:78:1A:B7:C5:0F Certificate issuer: /CN=A9137157/serialNumber=779CA0D0957085016E7D035A4ECBA2781AB7C50F Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5yg0JVwhQFufQNaTsuieBq3xQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.mft Manifest number: 35 Signing time: Thu 21 May 2026 08:46:53 +0000 Manifest this update: Thu 21 May 2026 08:46:52 +0000 Manifest next update: Thu 28 May 2026 08:46:52 +0000 Files and hashes: 1: d5yg0JVwhQFufQNaTsuieBq3xQ8.crl (hash: SktAobXDAVxTccHj4fO8Ko/vw+asShp64PblXjXVnhI=) 2: 9AAB80560BD511F1920C67C12E3D8C67.roa (hash: kqV3oKn3iSJ05FgfTJc78t84aqKB7m6Xr2Ot/p1Zm1k=) 3: 55C25D260BD911F1B73B6397303D8C67.roa (hash: EKXgM16EsTst1A1QTtcnCCqDbQBrcCZuzsJr1SJRdww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.crl rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5yg0JVwhQFufQNaTsuieBq3xQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 08:46:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137157, serialNumber=779CA0D0957085016E7D035A4ECBA2781AB7C50F Validity Not Before: May 21 08:46:52 2026 GMT Not After : May 28 08:46:52 2026 GMT Subject: CN=6a0ec67c-ca8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bc:89:a2:7e:49:e2:73:05:d9:90:4c:61:6d: 8f:07:21:01:82:32:70:fe:0c:6b:da:55:73:08:82: 6a:aa:9d:72:06:a7:b7:c9:00:ff:fe:87:c2:51:7c: e7:2a:25:2b:34:ae:96:be:ac:2b:be:a5:3d:6b:d3: ca:ac:60:42:ef:b3:f3:14:e5:26:51:17:b8:ac:27: dc:0b:41:5d:80:a3:fd:45:cf:10:95:d6:70:dd:5f: 9e:48:19:03:ca:e7:75:c1:de:d1:3f:02:62:04:d4: 91:4a:49:ba:f9:81:7e:d2:a6:85:09:04:a2:b5:b2: fd:b4:aa:bc:99:ee:08:fd:57:d8:e7:97:49:01:79: 0d:5e:7c:aa:fa:0d:06:ef:f5:36:3f:14:0c:f7:40: 34:da:81:db:81:51:88:0a:78:7e:98:f0:52:2e:02: 28:98:e2:a0:d6:11:b4:08:aa:c9:b0:a9:04:cc:92: 8a:82:e3:ec:5f:7e:82:0d:ff:2d:5e:d9:4c:3f:e7: 4f:18:a6:5a:8a:8b:b4:f8:2b:3b:39:ee:5e:5b:1e: 2a:76:8b:07:de:33:a6:0a:44:16:c0:ec:81:03:55: f5:f5:5b:30:ef:66:c7:7e:55:20:d3:c9:b5:3f:af: 6a:46:de:05:09:c9:6c:e5:26:8f:0d:c6:45:e9:dd: 19:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:49:91:9F:FD:9C:1A:C0:BD:A1:18:18:86:18:1E:C9:68:2A:CC:05 X509v3 Authority Key Identifier: keyid:77:9C:A0:D0:95:70:85:01:6E:7D:03:5A:4E:CB:A2:78:1A:B7:C5:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5yg0JVwhQFufQNaTsuieBq3xQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:07:3b:6d:82:a2:6c:cd:48:f9:c1:62:f9:4d:23:00:35:fa: db:f9:e4:2c:51:f9:23:bb:25:21:00:12:27:6d:90:4a:2b:8b: dc:df:59:5a:cf:e6:2e:35:de:ba:a4:6f:1a:7c:7b:c8:6f:90: 3f:32:0f:70:5c:11:85:ae:1d:5c:bf:be:cd:49:3b:1f:22:58: 71:98:f7:4c:a1:85:c0:c4:c4:60:8e:d6:3b:c5:12:68:a2:04: e3:ef:83:a2:32:9a:bf:0e:ef:d3:55:e6:b8:4f:2f:58:63:6f: 34:6f:14:3a:d5:a9:2f:2d:bc:9a:13:bc:ca:d3:0d:c1:0d:de: e0:4a:a6:32:b4:be:d5:e6:92:e1:40:24:41:8f:d3:57:06:a7: f4:d7:a6:0e:74:ee:d7:cd:6a:00:8d:0b:d8:a8:c9:fe:ad:56: 2c:e0:aa:54:14:53:50:c1:0f:24:e6:60:4b:03:26:92:05:28: 40:98:49:2c:c8:db:ff:f4:b8:64:46:fb:07:0e:cc:26:a0:b6: fd:48:7b:4f:ea:96:75:5f:b7:3b:da:58:56:7f:d2:9d:ea:88: 76:bf:7f:da:7f:04:14:3f:58:a5:75:f3:f8:fa:74:27:ae:49: 32:04:47:1c:b6:bf:ec:d2:74:56:6f:3c:ed:ef:96:7a:84:06: df:e6:20:ad -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NzE1NzExMC8GA1UEBRMoNzc5Q0EwRDA5NTcwODUwMTZFN0QwMzVBNEVDQkEyNzgx QUI3QzUwRjAeFw0yNjA1MjEwODQ2NTJaFw0yNjA1MjgwODQ2NTJaMBgxFjAUBgNV BAMTDTZhMGVjNjdjLWNhOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNvImifknicwXZkExhbY8HIQGCMnD+DGvaVXMIgmqqnXIGp7fJAP/+h8JRfOcq JSs0rpa+rCu+pT1r08qsYELvs/MU5SZRF7isJ9wLQV2Ao/1FzxCV1nDdX55IGQPK 53XB3tE/AmIE1JFKSbr5gX7SpoUJBKK1sv20qryZ7gj9V9jnl0kBeQ1efKr6DQbv 9TY/FAz3QDTagduBUYgKeH6Y8FIuAiiY4qDWEbQIqsmwqQTMkoqC4+xffoIN/y1e 2Uw/508YplqKi7T4Kzs57l5bHip2iwfeM6YKRBbA7IEDVfX1WzDvZsd+VSDTybU/ r2pG3gUJyWzlJo8NxkXp3RnfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpkmRn/2c GsC9oRgYhhgeyWgqzAUwHwYDVR0jBBgwFoAUd5yg0JVwhQFufQNaTsuieBq3xQ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3MTU3LzY1Qjg4QjlDMEJD RjExRjFCQkQxRkVEQTJDM0Q4QzY3L2Q1eWcwSlZ3aFFGdWZRTmFUc3VpZUJxM3hR OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZDV5ZzBKVndoUUZ1ZlFOYVRzdWllQnEzeFE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3 MTU3LzY1Qjg4QjlDMEJDRjExRjFCQkQxRkVEQTJDM0Q4QzY3L2Q1eWcwSlZ3aFFG dWZRTmFUc3VpZUJxM3hROC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBwBzttgqJszUj5wWL5TSMANfrb+eQsUfkjuyUhABInbZBKK4vc31laz+YuNd66 pG8afHvIb5A/Mg9wXBGFrh1cv77NSTsfIlhxmPdMoYXAxMRgjtY7xRJoogTj74Oi Mpq/Du/TVea4Ty9YY280bxQ61akvLbyaE7zK0w3BDd7gSqYytL7V5pLhQCRBj9NX Bqf016YOdO7XzWoAjQvYqMn+rVYs4KpUFFNQwQ8k5mBLAyaSBShAmEksyNv/9Lhk RvsHDswmoLb9SHtP6pZ1X7c72lhWf9Kd6oh2v3/afwQUP1ildfP4+nQnrkkyBEcc tr/s0nRWbzzt75Z6hAbf5iCt -----END CERTIFICATE-----Generated at Thu May 21 11:58:48 2026 by rpki-client