$ rpki-client -vvf rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft File: otDn34iradtuBZowZOTdweb8nRk.mft (raw, json) Hash identifier: gJYfB8a5XBDrgJ6psu11CPz5MhL8kvsxrJ0F/+nVHSs= Subject key identifier: 05:84:18:F9:E9:31:D5:D3:CF:34:DC:DC:8B:1A:3B:92:3E:3E:DC:8D Authority key identifier: A2:D0:E7:DF:88:AB:69:DB:6E:05:9A:30:64:E4:DD:C1:E6:FC:9D:19 Certificate issuer: /CN=A913D2D8/serialNumber=A2D0E7DF88AB69DB6E059A3064E4DDC1E6FC9D19 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft Manifest number: 5F Signing time: Thu 21 May 2026 08:11:48 +0000 Manifest this update: Thu 21 May 2026 08:11:48 +0000 Manifest next update: Thu 28 May 2026 08:11:48 +0000 Files and hashes: 1: otDn34iradtuBZowZOTdweb8nRk.crl (hash: yc9wi8tjQXzTapdzcScoMrb7ljFnzhBX56vekE42+YM=) 2: 86CCDF8EC91411F085F4A61BC4F9AE02.roa (hash: TtYj2sjHiscSoHGcXukyvA6H2jH+qg3mM5AVrWsmoS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.crl rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 08:11:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D2D8, serialNumber=A2D0E7DF88AB69DB6E059A3064E4DDC1E6FC9D19 Validity Not Before: May 21 08:11:48 2026 GMT Not After : May 28 08:11:48 2026 GMT Subject: CN=6a0ebe44-d567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:14:e4:0b:a2:cc:76:a6:4c:7a:c6:73:e9:9e: 4b:99:1a:25:9b:32:32:c2:23:4c:f3:a3:71:55:94: 1e:f4:2e:8c:c9:19:9b:c2:ae:24:8b:06:0e:1a:39: cf:ee:fd:df:db:85:62:ca:55:95:3f:bc:16:6e:cd: 6f:4b:da:5b:2a:1a:6b:30:c8:21:6a:50:c9:86:bd: ae:37:7a:4b:4c:6c:57:96:85:71:ba:1a:35:62:3b: 3b:ef:d4:55:46:7e:23:00:b0:82:24:50:6f:b5:da: 62:b5:9f:e9:23:0a:40:f9:63:88:45:88:b6:ca:32: 9e:6f:e7:5d:45:74:a8:6f:27:fa:4c:69:e2:30:a7: 8d:c0:c1:09:45:1f:01:84:99:39:40:94:c3:87:e0: 3c:1c:0c:c0:2b:15:a7:5b:cd:f6:04:a5:f6:0b:4e: ab:9e:7b:e9:dd:29:ab:fc:c4:cb:1c:d9:de:90:21: 76:c6:a6:af:44:b1:b9:af:28:68:5e:09:c2:1f:4e: 67:d0:68:0d:f5:a5:3d:77:2d:30:67:b0:cc:5f:97: f2:be:ce:39:f1:02:c1:5f:91:57:ba:dc:c2:b9:0d: 95:7e:a0:23:04:e5:e0:dc:e3:4f:32:f8:14:37:89: d4:d1:aa:8a:ea:88:3b:f4:95:3c:fc:82:0a:05:a4: bf:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:84:18:F9:E9:31:D5:D3:CF:34:DC:DC:8B:1A:3B:92:3E:3E:DC:8D X509v3 Authority Key Identifier: keyid:A2:D0:E7:DF:88:AB:69:DB:6E:05:9A:30:64:E4:DD:C1:E6:FC:9D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otDn34iradtuBZowZOTdweb8nRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D2D8/9496D74EC91111F0B001CE83C4F9AE02/otDn34iradtuBZowZOTdweb8nRk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:f6:ff:3a:bc:93:e0:4c:db:a9:3b:51:eb:35:5f:ff:1d:d8: af:a5:48:9b:97:05:3d:4f:41:30:01:58:7b:77:b7:a0:92:e1: 37:41:29:23:e3:54:f3:15:b3:66:28:15:ce:b6:f4:1d:a2:28: c2:bd:d6:c9:28:a4:74:4e:1d:5c:7f:fc:2c:cf:de:47:9a:08: 0e:1b:42:25:be:c2:97:a5:58:87:70:b9:fa:37:d3:1c:7a:9b: 06:00:68:65:16:25:e9:cc:f0:87:ec:76:4a:07:0f:87:76:b4: aa:5c:57:b1:57:8d:fd:89:e4:21:be:de:b4:45:b1:88:87:9b: 8b:27:0b:c7:84:6c:5b:19:66:7d:42:dd:24:9c:cc:c6:81:f1: 09:35:0a:10:7b:82:b8:63:52:4f:79:60:bb:6e:7f:3c:b2:cb: 9c:b3:a8:33:78:fe:9a:89:6e:72:62:4b:f5:db:fb:78:75:07: d9:3e:4a:da:e5:1f:c9:00:f5:27:b4:d7:15:9f:18:72:f0:ea: 56:cf:ed:0d:21:df:20:85:d0:01:ce:79:7b:13:d0:cf:1a:c2: b0:42:c4:06:2a:38:80:fa:58:c0:eb:a2:eb:5d:2e:8b:ea:2b: 0e:ef:35:74:b0:c2:9f:f5:8e:2b:bf:4f:e3:70:5a:00:9e:f4: f7:fd:2e:74 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RDJEODExMC8GA1UEBRMoQTJEMEU3REY4OEFCNjlEQjZFMDU5QTMwNjRFNEREQzFF NkZDOUQxOTAeFw0yNjA1MjEwODExNDhaFw0yNjA1MjgwODExNDhaMBgxFjAUBgNV BAMTDTZhMGViZTQ0LWQ1NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHFOQLosx2pkx6xnPpnkuZGiWbMjLCI0zzo3FVlB70LozJGZvCriSLBg4aOc/u /d/bhWLKVZU/vBZuzW9L2lsqGmswyCFqUMmGva43ektMbFeWhXG6GjViOzvv1FVG fiMAsIIkUG+12mK1n+kjCkD5Y4hFiLbKMp5v511FdKhvJ/pMaeIwp43AwQlFHwGE mTlAlMOH4DwcDMArFadbzfYEpfYLTquee+ndKav8xMsc2d6QIXbGpq9EsbmvKGhe CcIfTmfQaA31pT13LTBnsMxfl/K+zjnxAsFfkVe63MK5DZV+oCME5eDc408y+BQ3 idTRqorqiDv0lTz8ggoFpL8/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUBYQY+ekx 1dPPNNzcixo7kj4+3I0wHwYDVR0jBBgwFoAUotDn34iradtuBZowZOTdweb8nRkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNEMkQ4Lzk0OTZENzRFQzkx MTExRjBCMDAxQ0U4M0M0RjlBRTAyL290RG4zNGlyYWR0dUJab3daT1Rkd2ViOG5S ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb3REbjM0aXJhZHR1Qlpvd1pPVGR3ZWI4blJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE MkQ4Lzk0OTZENzRFQzkxMTExRjBCMDAxQ0U4M0M0RjlBRTAyL290RG4zNGlyYWR0 dUJab3daT1Rkd2ViOG5Say5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB19v86vJPgTNupO1HrNV//HdivpUiblwU9T0EwAVh7d7egkuE3QSkj41TzFbNm KBXOtvQdoijCvdbJKKR0Th1cf/wsz95HmggOG0IlvsKXpViHcLn6N9McepsGAGhl FiXpzPCH7HZKBw+HdrSqXFexV439ieQhvt60RbGIh5uLJwvHhGxbGWZ9Qt0knMzG gfEJNQoQe4K4Y1JPeWC7bn88ssucs6gzeP6aiW5yYkv12/t4dQfZPkra5R/JAPUn tNcVnxhy8OpWz+0NId8ghdABznl7E9DPGsKwQsQGKjiA+ljA66LrXS6L6isO7zV0 sMKf9Y4rv0/jcFoAnvT3/S50 -----END CERTIFICATE-----Generated at Thu May 21 10:15:38 2026 by rpki-client