$ rpki-client -vvf rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft File: 3604bKySNIOAxXSS2xjyvIScUoY.mft (raw, json) Hash identifier: Qm89mYi6Z3hYo0MFLMwDNS6bi1wSx7Q/vQmGGgaP2tU= Subject key identifier: 8B:E5:11:EC:75:46:46:21:29:4B:9A:8E:B2:F9:EC:1D:6C:30:5F:94 Authority key identifier: DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 Certificate issuer: /CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Certificate serial: 0A0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft Manifest number: 09F0 Signing time: Wed 20 May 2026 19:53:19 +0000 Manifest this update: Wed 20 May 2026 19:53:18 +0000 Manifest next update: Wed 27 May 2026 19:53:18 +0000 Files and hashes: 1: 3604bKySNIOAxXSS2xjyvIScUoY.crl (hash: WK5LKDbToYHC9BRxwFHS673rpPAfaCovluFz8OnKJEo=) 2: 361E40F8B7B411F09BC03F67C4F9AE02.roa (hash: ZLV8EGcNrcT7gsZ4PlTT+xsnBeM4Q23N20Z6Aox07W4=) 3: D3EAA0323F5A11F1AA7533B3A4833773.roa (hash: EWIgC3Wx3EH+woWoBUJtb6p5aUIWmHrjOLQsDMOov48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 19:53:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2572 (0xa0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E36B, serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Validity Not Before: May 20 19:53:18 2026 GMT Not After : May 27 19:53:18 2026 GMT Subject: CN=6a0e112f-f138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:03:15:9c:1f:be:93:36:7a:ef:de:89:b5:b4: b3:24:f0:c0:24:34:11:65:61:cd:15:11:9c:fa:b4: 72:23:81:aa:95:48:20:f5:09:65:de:bc:d2:38:da: da:ca:66:ae:84:bb:fd:c9:dc:b5:2e:1b:8a:6f:df: d5:55:0b:39:b9:ac:e3:02:72:74:5b:cc:4b:ca:fb: 84:c4:7c:39:f5:19:a7:ab:93:01:c1:1d:4c:f6:fe: 32:54:01:9d:01:7f:5a:b0:14:d9:60:10:91:c9:49: a1:2b:01:24:a5:77:b9:d4:15:8e:8d:84:3b:d9:e5: fb:65:49:e2:97:95:a2:e6:78:46:17:fe:75:96:e6: 6a:29:6f:3b:91:00:8f:5d:0a:b6:45:99:d9:1c:ea: c3:44:33:e2:54:17:93:52:20:05:9c:b6:2c:35:db: 90:f3:90:8f:d9:09:9f:cc:05:57:cb:a3:a3:7a:8d: 3f:80:7d:5b:82:d6:aa:e8:cb:28:75:21:09:55:12: 38:ee:83:33:90:bc:db:59:1e:1b:2e:92:21:5b:bb: 7d:46:3b:2f:57:1c:79:32:ac:75:7e:1b:6b:ef:d1: 1b:dd:ea:b7:b2:bc:05:ef:7e:97:6f:60:55:05:1d: c3:17:28:d0:de:3a:61:d2:75:37:06:c4:91:26:eb: b4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E5:11:EC:75:46:46:21:29:4B:9A:8E:B2:F9:EC:1D:6C:30:5F:94 X509v3 Authority Key Identifier: keyid:DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:1d:b5:51:5f:7a:8f:02:89:04:0a:7e:63:e4:d4:bc:81:c9: 17:cd:56:24:5f:9c:6b:1b:45:2b:ac:93:b0:44:3e:1f:c8:4f: 9f:d1:1a:8b:4c:8d:b8:3b:95:63:05:3c:f4:c0:41:97:56:f9: 45:9a:fd:d0:16:5d:4f:de:4c:3b:19:34:f0:15:55:bc:5a:ce: b0:13:c2:26:87:f6:1b:23:e3:ef:fc:ac:59:9b:7d:a1:3b:c8: 2b:77:51:c6:5c:49:83:24:94:83:4b:4d:45:dd:2a:39:a4:68: 9f:e8:a1:35:2f:0b:52:97:17:58:ae:88:b3:9d:31:ca:1e:5a: 57:f0:e6:c1:c3:f6:c3:75:0e:46:28:ec:b8:0a:c9:0c:be:ba: fe:53:52:0f:cf:7a:88:ac:4c:04:68:5d:d7:64:d6:ad:e2:b3: 81:1b:fa:51:2b:10:27:dc:00:79:03:cc:07:73:17:d3:e0:b7: fd:88:f2:20:8d:49:ab:0b:9b:07:50:bc:96:f8:94:fd:8b:90: 4b:d9:b1:f4:aa:34:ca:ca:80:8f:67:72:ce:a4:4c:e2:35:b5: ca:39:cb:ba:83:8b:44:6e:0b:a8:74:2e:f2:c2:62:48:5a:25: 61:3b:ba:74:0b:10:a9:9d:40:92:a3:3b:17:2b:31:b4:b6:38: bb:b1:62:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UzNkIxMTAvBgNVBAUTKERGQUQzODZDQUM5MjM0ODM4MEM1NzQ5MkRCMThGMkJD ODQ5QzUyODYwHhcNMjYwNTIwMTk1MzE4WhcNMjYwNTI3MTk1MzE4WjAYMRYwFAYD VQQDEw02YTBlMTEyZi1mMTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwMVnB++kzZ6796JtbSzJPDAJDQRZWHNFRGc+rRyI4GqlUgg9Qll3rzSONra ymauhLv9ydy1LhuKb9/VVQs5uazjAnJ0W8xLyvuExHw59Rmnq5MBwR1M9v4yVAGd AX9asBTZYBCRyUmhKwEkpXe51BWOjYQ72eX7ZUnil5Wi5nhGF/51luZqKW87kQCP XQq2RZnZHOrDRDPiVBeTUiAFnLYsNduQ85CP2QmfzAVXy6Ojeo0/gH1bgtaq6Mso dSEJVRI47oMzkLzbWR4bLpIhW7t9RjsvVxx5Mqx1fhtr79Eb3eq3srwF736Xb2BV BR3DFyjQ3jph0nU3BsSRJuu0AwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIvlEex1 RkYhKUuajrL57B1sMF+UMB8GA1UdIwQYMBaAFN+tOGyskjSDgMV0ktsY8ryEnFKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTM2Qi83QzJDNjI0MEEw OTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05JT0F4WFNTMnhqeXZJU2NV b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM2MDRiS3lTTklPQXhYU1MyeGp5dklTY1VvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTM2Qi83QzJDNjI0MEEwOTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05J T0F4WFNTMnhqeXZJU2NVb1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqB21UV96jwKJBAp+Y+TUvIHJF81WJF+caxtFK6yTsEQ+H8hPn9Eai0yNuDuV YwU89MBBl1b5RZr90BZdT95MOxk08BVVvFrOsBPCJof2GyPj7/ysWZt9oTvIK3dR xlxJgySUg0tNRd0qOaRon+ihNS8LUpcXWK6Is50xyh5aV/DmwcP2w3UORijsuArJ DL66/lNSD896iKxMBGhd12TWreKzgRv6USsQJ9wAeQPMB3MX0+C3/YjyII1Jqwub B1C8lviU/YuQS9mx9Ko0ysqAj2dyzqRM4jW1yjnLuoOLRG4LqHQu8sJiSFolYTu6 dAsQqZ1AkqM7FysxtLY4u7Fiqg== -----END CERTIFICATE-----Generated at Thu May 21 09:36:13 2026 by rpki-client