$ rpki-client -vvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft File: rYW34Ys6FvU-kpOKM07Guz64tjA.mft (raw, json) Hash identifier: VPJDGJbN7RMHvJQIQ2v9vS4R0fLdocJSg0jrnZqCWFw= Subject key identifier: DE:0D:14:35:75:9C:94:EC:91:B7:B0:CC:D5:31:59:CF:BD:41:C5:B2 Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30 Certificate issuer: /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630 Certificate serial: 0232 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft Manifest number: 0220 Signing time: Thu 21 May 2026 02:51:11 +0000 Manifest this update: Thu 21 May 2026 02:51:10 +0000 Manifest next update: Thu 28 May 2026 02:51:10 +0000 Files and hashes: 1: rYW34Ys6FvU-kpOKM07Guz64tjA.crl (hash: aG0GuYfS7mdOuf85eYpVUKmgOFOZBYCMJTsDOGBT92A=) 2: B97D647C1A8811EEB5AE963CC4F9AE02.roa (hash: NpABsuTNt3Of0zFwuT3M1C2R99zLqBty3uuQSGUzpfg=) 3: A8C501F61B2A11EE84F40B3AC4F9AE02.roa (hash: kgK3NjgQxpDJ05PetKW0f4eD4WtSWH7QBEKwm+5D1qk=) 4: A9321C0A1B2A11EE84F40B3AC4F9AE02.roa (hash: tRTg+EzOsPEBd/CyA9yv6uVUIfA6399PeHgHdLPDFdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 562 (0x232) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FBB2, serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630 Validity Not Before: May 21 02:51:10 2026 GMT Not After : May 28 02:51:10 2026 GMT Subject: CN=6a0e731e-4882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8d:a1:96:5d:27:dc:2a:e8:61:2c:4a:c0:5e: 6c:66:a2:20:9a:d0:19:8e:72:0f:9c:3f:cc:a7:87: a6:39:8f:0a:49:7c:59:5c:69:a7:83:4c:d3:7f:4a: 70:cf:30:6e:62:64:5b:db:70:6f:23:90:98:e3:f3: c4:4e:6f:ab:0a:6d:0b:df:55:b4:13:c1:70:8c:db: 2b:ee:0f:c2:f8:28:16:0f:4c:9f:2d:7d:a3:bf:87: 3b:ab:74:96:34:7e:80:e7:56:53:c1:2c:f2:c1:09: 77:88:73:45:d1:0d:c8:07:ed:e7:c7:08:06:94:3c: 31:4a:0d:42:52:59:9d:41:97:65:73:29:f5:f2:3d: f0:c6:b6:d2:69:75:f6:3e:12:bb:81:60:cc:4d:77: c8:37:de:24:8c:8a:ea:5b:eb:7a:8a:cd:8d:3d:91: 88:d0:96:68:e5:20:1f:af:be:86:0e:2b:cd:72:11: cf:15:0b:e5:30:7c:13:3b:8d:13:63:17:fe:0c:63: 97:ad:1a:55:94:1b:14:d7:7c:38:25:ca:e7:7d:3a: cf:c0:84:58:62:3e:1f:b6:fd:3a:dc:09:7e:45:04: 6d:ae:69:35:0a:5e:e3:f7:dd:5e:c0:24:66:ed:bc: fc:18:4c:d9:21:09:3a:e1:a6:27:28:21:63:0e:d3: 9e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:0D:14:35:75:9C:94:EC:91:B7:B0:CC:D5:31:59:CF:BD:41:C5:B2 X509v3 Authority Key Identifier: keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:7f:c9:41:30:77:b3:91:e8:38:87:01:b5:62:a5:7e:55:60: 38:e2:e4:ac:62:86:9f:ca:dc:98:60:c7:ee:ac:eb:48:32:1d: 4d:6d:ee:67:2d:25:c8:32:c4:6a:18:a6:b3:04:ac:47:4e:72: 29:d5:42:ab:30:3a:ec:4e:cf:51:6b:37:ec:ad:5c:34:9c:fb: bd:41:ce:27:a6:cf:61:a3:99:5d:4f:21:26:3c:44:d9:69:34: 88:fc:6f:a4:d1:a9:2d:be:61:76:ac:84:88:2d:4a:66:dd:23: ef:53:dc:4d:46:76:cb:7e:38:cc:7e:f5:52:88:4e:6e:9d:98: 6f:22:08:12:fc:f7:4d:80:63:b5:05:1f:8a:10:6a:40:e1:71: 79:c8:36:6e:a4:b0:e3:38:5b:1b:50:69:43:3f:90:36:5c:b8: c9:2d:71:a7:ec:5a:64:fc:92:84:2f:88:8a:bc:6e:36:c5:bf: 1c:05:c5:51:62:a1:69:be:02:b0:af:7f:4a:cd:5c:8c:1a:cf: 5d:cf:57:43:b9:8c:98:63:79:c0:a9:1d:8d:e7:cb:17:d4:ca: 33:21:75:61:a6:c8:2e:92:ef:03:f8:64:2e:76:81:e8:74:34: 19:40:d8:02:6b:fc:18:21:03:2d:c3:03:c1:7d:ad:87:a1:78: cf:77:02:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZCQjIxMTAvBgNVBAUTKEFEODVCN0UxOEIzQTE2RjUzRTkyOTM4QTMzNEVDNkJC M0VCOEI2MzAwHhcNMjYwNTIxMDI1MTEwWhcNMjYwNTI4MDI1MTEwWjAYMRYwFAYD VQQDEw02YTBlNzMxZS00ODgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmo2hll0n3CroYSxKwF5sZqIgmtAZjnIPnD/Mp4emOY8KSXxZXGmng0zTf0pw zzBuYmRb23BvI5CY4/PETm+rCm0L31W0E8FwjNsr7g/C+CgWD0yfLX2jv4c7q3SW NH6A51ZTwSzywQl3iHNF0Q3IB+3nxwgGlDwxSg1CUlmdQZdlcyn18j3wxrbSaXX2 PhK7gWDMTXfIN94kjIrqW+t6is2NPZGI0JZo5SAfr76GDivNchHPFQvlMHwTO40T Yxf+DGOXrRpVlBsU13w4JcrnfTrPwIRYYj4ftv063Al+RQRtrmk1Cl7j991ewCRm 7bz8GEzZIQk64aYnKCFjDtOeWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN4NFDV1 nJTskbewzNUxWc+9QcWyMB8GA1UdIwQYMBaAFK2Ft+GLOhb1PpKTijNOxrs+uLYw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkJCMi8wRTI3MDU0NDFB ODYxMUVFQTBBQTg3MTZDNEY5QUUwMi9yWVczNFlzNkZ2VS1rcE9LTTA3R3V6NjR0 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JZVzM0WXM2RnZVLWtwT0tNMDdHdXo2NHRqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkJCMi8wRTI3MDU0NDFBODYxMUVFQTBBQTg3MTZDNEY5QUUwMi9yWVczNFlzNkZ2 VS1rcE9LTTA3R3V6NjR0akEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwX/JQTB3s5HoOIcBtWKlflVgOOLkrGKGn8rcmGDH7qzrSDIdTW3uZy0lyDLE ahimswSsR05yKdVCqzA67E7PUWs37K1cNJz7vUHOJ6bPYaOZXU8hJjxE2Wk0iPxv pNGpLb5hdqyEiC1KZt0j71PcTUZ2y344zH71UohObp2YbyIIEvz3TYBjtQUfihBq QOFxecg2bqSw4zhbG1BpQz+QNly4yS1xp+xaZPyShC+IirxuNsW/HAXFUWKhab4C sK9/Ss1cjBrPXc9XQ7mMmGN5wKkdjefLF9TKMyF1YabILpLvA/hkLnaB6HQ0GUDY Amv8GCEDLcMDwX2th6F4z3cC8w== -----END CERTIFICATE-----Generated at Fri May 22 15:15:49 2026 by rpki-client