$ rpki-client -vvf rpki.apnic.net/member_repository/A913B25C/653BBBB424D711F1881BD2D0AB833773/RrMUYkbIqOvcBwyRKtn1czFjUfM.mft File: RrMUYkbIqOvcBwyRKtn1czFjUfM.mft (raw, json) Hash identifier: snl+3Kc6/BwnaoVzD3kpyTi30WIlAQ8FdFBfsd4MT+g= Subject key identifier: 9E:38:73:E3:0B:FE:DB:54:D7:0B:9D:2C:56:3D:28:A9:4F:77:57:B0 Authority key identifier: 46:B3:14:62:46:C8:A8:EB:DC:07:0C:91:2A:D9:F5:73:31:63:51:F3 Certificate issuer: /CN=A913B25C/serialNumber=46B3146246C8A8EBDC070C912AD9F573316351F3 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RrMUYkbIqOvcBwyRKtn1czFjUfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B25C/653BBBB424D711F1881BD2D0AB833773/RrMUYkbIqOvcBwyRKtn1czFjUfM.mft Manifest number: 21 Signing time: Thu 21 May 2026 09:00:25 +0000 Manifest this update: Thu 21 May 2026 09:00:25 +0000 Manifest next update: Thu 28 May 2026 09:00:25 +0000 Files and hashes: 1: RrMUYkbIqOvcBwyRKtn1czFjUfM.crl (hash: EnhcfBi305ort7gftozmyu+cuKl7tPdW1XKU5UG+5Gw=) 2: B7B0933824D711F1BC6B08E2AB833773.roa (hash: qfb5OhL2JYl88uq6Z6fcjDjGJqh3quT1pfhxv2w56CQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B25C/653BBBB424D711F1881BD2D0AB833773/RrMUYkbIqOvcBwyRKtn1czFjUfM.crl rsync://rpki.apnic.net/member_repository/A913B25C/653BBBB424D711F1881BD2D0AB833773/RrMUYkbIqOvcBwyRKtn1czFjUfM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RrMUYkbIqOvcBwyRKtn1czFjUfM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 09:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B25C, serialNumber=46B3146246C8A8EBDC070C912AD9F573316351F3 Validity Not Before: May 21 09:00:25 2026 GMT Not After : May 28 09:00:25 2026 GMT Subject: CN=6a0ec9a9-057d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f4:be:b1:0b:b4:e9:d5:9f:9b:cf:f1:a1:16: e2:63:29:f7:de:71:49:1d:0d:82:71:0f:13:df:2d: a7:9d:67:a6:75:f2:16:db:91:a8:27:0f:bb:c7:16: a4:c1:5d:ca:17:5a:a6:3d:69:d2:8f:d9:38:02:0f: ae:7d:1d:39:50:ab:3d:fe:41:c4:ce:95:5d:3d:2a: 60:20:6c:f4:2f:dc:61:41:b3:fc:0c:21:32:30:04: 76:f4:39:d0:c8:f3:62:0d:6a:06:e8:8a:99:66:fe: df:a2:c5:72:33:c0:2d:e6:85:62:49:44:ba:b8:55: 2f:6e:af:5c:e1:37:58:bb:40:50:b4:4b:02:6f:b8: db:43:b3:dd:4b:78:6b:98:d2:9e:0a:a8:17:93:7b: db:fc:cb:7f:c8:23:8c:f8:0e:d9:93:4e:8b:02:ae: 52:40:e7:b1:13:29:0c:c4:54:b1:2b:65:dc:88:f4: 0a:d3:64:56:db:98:c6:db:79:fb:cc:19:13:e5:da: 47:03:42:f6:1d:72:21:90:22:d2:5c:bf:47:0f:c2: 7d:60:29:cd:da:dc:4c:34:04:4c:80:4e:09:12:59: 74:b2:88:e7:76:bd:70:34:ab:be:bb:1e:43:68:7c: 66:de:c4:7a:10:33:59:ef:66:82:81:a0:30:08:55: 50:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:38:73:E3:0B:FE:DB:54:D7:0B:9D:2C:56:3D:28:A9:4F:77:57:B0 X509v3 Authority Key Identifier: keyid:46:B3:14:62:46:C8:A8:EB:DC:07:0C:91:2A:D9:F5:73:31:63:51:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B25C/653BBBB424D711F1881BD2D0AB833773/RrMUYkbIqOvcBwyRKtn1czFjUfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RrMUYkbIqOvcBwyRKtn1czFjUfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B25C/653BBBB424D711F1881BD2D0AB833773/RrMUYkbIqOvcBwyRKtn1czFjUfM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:4e:36:c6:cc:e0:ac:e2:77:25:b6:d3:ad:79:ef:4d:43:49: 0e:e0:3d:e9:b6:86:6d:6f:e0:9d:fd:80:6e:31:ca:c0:53:7f: 40:8e:b5:02:34:f8:51:80:42:51:a2:67:e6:33:e5:ea:f7:4b: e9:e0:a2:7a:47:8d:59:54:ab:07:61:82:d9:6c:8a:3e:80:44: 2a:1a:ec:65:ae:65:47:1d:45:91:39:20:27:e9:12:0b:4a:db: cb:aa:fd:e4:42:ce:a9:08:09:3f:e6:80:31:e7:06:46:da:2d: ce:dc:af:6d:d3:68:a4:43:fd:8f:57:34:17:35:ad:99:e3:58: d5:98:1e:78:85:e8:1c:62:40:13:80:43:4a:a9:18:9e:c7:92: 1d:20:a9:81:98:f5:7e:7f:2d:85:57:ec:b5:09:29:c1:3a:0c: 38:39:93:ec:c2:17:e9:60:fc:68:f2:11:04:45:7f:37:bb:27: c2:93:53:92:2e:7e:9f:17:5f:19:d0:c7:48:e8:d0:52:04:2a: 3e:f8:6a:f2:f5:57:ac:0a:20:ce:24:38:e6:06:c3:a2:8b:bb: f0:78:4b:d7:ad:c1:b3:cd:ee:c3:4d:4c:50:09:89:c7:be:ce: 4f:f6:af:2e:79:f0:5a:76:e8:5e:f8:3e:a5:a3:ae:4e:f6:f8: 79:11:c0:b3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QjI1QzExMC8GA1UEBRMoNDZCMzE0NjI0NkM4QThFQkRDMDcwQzkxMkFEOUY1NzMz MTYzNTFGMzAeFw0yNjA1MjEwOTAwMjVaFw0yNjA1MjgwOTAwMjVaMBgxFjAUBgNV BAMTDTZhMGVjOWE5LTA1N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDv9L6xC7Tp1Z+bz/GhFuJjKffecUkdDYJxDxPfLaedZ6Z18hbbkagnD7vHFqTB XcoXWqY9adKP2TgCD659HTlQqz3+QcTOlV09KmAgbPQv3GFBs/wMITIwBHb0OdDI 82INagboiplm/t+ixXIzwC3mhWJJRLq4VS9ur1zhN1i7QFC0SwJvuNtDs91LeGuY 0p4KqBeTe9v8y3/II4z4DtmTTosCrlJA57ETKQzEVLErZdyI9ArTZFbbmMbbefvM GRPl2kcDQvYdciGQItJcv0cPwn1gKc3a3Ew0BEyATgkSWXSyiOd2vXA0q767HkNo fGbexHoQM1nvZoKBoDAIVVBhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUnjhz4wv+ 21TXC50sVj0oqU93V7AwHwYDVR0jBBgwFoAURrMUYkbIqOvcBwyRKtn1czFjUfMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCMjVDLzY1M0JCQkI0MjRE NzExRjE4ODFCRDJEMEFCODMzNzczL1JyTVVZa2JJcU92Y0J3eVJLdG4xY3pGalVm TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUnJNVVlrYklxT3ZjQnd5Ukt0bjFjekZqVWZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC MjVDLzY1M0JCQkI0MjRENzExRjE4ODFCRDJEMEFCODMzNzczL1JyTVVZa2JJcU92 Y0J3eVJLdG4xY3pGalVmTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBITjbGzOCs4nclttOtee9NQ0kO4D3ptoZtb+Cd/YBuMcrAU39AjrUCNPhRgEJR omfmM+Xq90vp4KJ6R41ZVKsHYYLZbIo+gEQqGuxlrmVHHUWROSAn6RILStvLqv3k Qs6pCAk/5oAx5wZG2i3O3K9t02ikQ/2PVzQXNa2Z41jVmB54hegcYkATgENKqRie x5IdIKmBmPV+fy2FV+y1CSnBOgw4OZPswhfpYPxo8hEERX83uyfCk1OSLn6fF18Z 0MdI6NBSBCo++Gry9VesCiDOJDjmBsOii7vweEvXrcGzze7DTUxQCYnHvs5P9q8u efBaduhe+D6lo65O9vh5EcCz -----END CERTIFICATE-----Generated at Thu May 21 12:26:29 2026 by rpki-client