$ rpki-client -vvf rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft File: D0a9vHSQTl34KfAVlbUcqqIBuds.mft (raw, json) Hash identifier: 1MT9vGL1wVNTteYjLHJPz9+Ri6EY/eQ74YVvzo8EtQE= Subject key identifier: F5:DA:5C:7F:86:A5:5D:DA:DC:98:D6:55:B9:2B:37:9D:27:6C:85:85 Authority key identifier: 0F:46:BD:BC:74:90:4E:5D:F8:29:F0:15:95:B5:1C:AA:A2:01:B9:DB Certificate issuer: /CN=A91449E2/serialNumber=0F46BDBC74904E5DF829F01595B51CAAA201B9DB Certificate serial: 023C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D0a9vHSQTl34KfAVlbUcqqIBuds.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft Manifest number: 0238 Signing time: Thu 21 May 2026 02:35:33 +0000 Manifest this update: Thu 21 May 2026 02:35:33 +0000 Manifest next update: Thu 28 May 2026 02:35:33 +0000 Files and hashes: 1: D0a9vHSQTl34KfAVlbUcqqIBuds.crl (hash: e2TlcPNloxcr8XFXE728/6J+KbkxsPku3BwFtW/00zc=) 2: 568D8AACF00511ED9239BC6EC4F9AE02.roa (hash: yPVfb1MOazkpM9yPxxW2+TeE6FVQ8h/jpcjwh9yPTZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.crl rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D0a9vHSQTl34KfAVlbUcqqIBuds.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:35:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 572 (0x23c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91449E2, serialNumber=0F46BDBC74904E5DF829F01595B51CAAA201B9DB Validity Not Before: May 21 02:35:33 2026 GMT Not After : May 28 02:35:33 2026 GMT Subject: CN=6a0e6f75-fd80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:20:d0:50:10:b1:fc:4a:c9:5e:18:1a:6a:a7: d4:e9:94:00:06:06:ab:d7:7c:47:aa:c2:1f:13:c2: 24:34:3a:cd:42:c4:9b:5a:36:b1:75:c2:a7:95:b9: f9:ca:0a:38:98:2f:a1:63:c0:f6:d1:b5:f3:f0:ee: cf:a8:67:40:24:e6:a7:f3:6e:41:3a:8b:98:7f:cf: 99:b0:ac:d3:af:61:69:69:52:67:a0:da:8e:a2:4e: 0b:3e:33:8e:0d:05:16:e9:45:99:e6:39:f8:81:b4: cc:34:4a:3a:f2:68:46:12:57:1e:0f:53:b7:4f:97: c8:c5:db:69:bf:b3:6e:ba:7b:61:32:a8:a8:73:2f: b5:c3:ae:85:4f:7f:eb:10:ff:db:c0:cb:b2:58:78: 0b:26:74:ff:10:7f:aa:4b:d7:3d:48:be:e7:91:32: c5:f1:75:27:0e:67:e4:1f:15:03:d6:0f:f4:d9:7c: 01:ca:1b:1a:af:63:da:8e:39:eb:ce:0b:45:82:fc: 3d:1c:90:2d:07:9c:e5:17:c1:14:d9:39:36:5b:02: 7a:0f:ec:a8:57:5f:a1:d1:bd:df:88:37:45:73:ea: 21:2c:51:6f:1d:82:14:e9:3e:d7:0f:a0:d0:44:43: 28:90:4c:e7:a6:e2:a1:e0:14:21:9d:df:01:25:49: 6d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:DA:5C:7F:86:A5:5D:DA:DC:98:D6:55:B9:2B:37:9D:27:6C:85:85 X509v3 Authority Key Identifier: keyid:0F:46:BD:BC:74:90:4E:5D:F8:29:F0:15:95:B5:1C:AA:A2:01:B9:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D0a9vHSQTl34KfAVlbUcqqIBuds.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:e1:43:6f:4c:8f:29:2b:6e:dd:23:27:07:39:25:c8:63:8e: 21:38:3a:05:91:c5:f3:15:b9:8d:6f:bb:0d:b4:37:3a:62:3c: 90:2f:dd:bc:1e:bb:e4:72:a1:4e:2b:41:16:23:e2:83:92:ae: 01:58:5b:5a:10:20:74:eb:a7:45:53:18:2f:c1:47:99:19:bc: ff:f1:31:97:62:2e:33:dc:db:7a:5f:fc:a7:1b:0d:9d:38:9d: 36:97:02:3e:c2:54:34:90:57:fd:09:eb:36:1f:db:93:87:5b: 5d:3f:73:0e:86:4c:4c:49:3e:bf:69:1d:1a:c6:53:0f:82:a7: 7d:d6:af:a2:fe:fd:fc:71:d7:7b:a5:60:a8:f8:24:05:b8:8a: 09:3d:5e:83:c5:7e:6f:31:bb:aa:e1:d5:81:8e:25:48:33:3c: e6:c9:c6:55:0b:0c:fc:63:ef:59:d1:26:3a:8f:02:d8:4d:4e: 21:20:ce:58:e9:f2:92:d1:38:6c:46:d0:c3:77:9d:11:04:45: 44:39:07:b8:24:45:cd:3c:bd:4c:86:02:9a:69:0d:63:8c:57: 4b:86:a2:b9:35:05:90:4b:81:11:b2:88:3e:47:01:eb:bc:d0: 18:61:91:a8:b3:61:e8:3a:14:70:10:73:98:0d:a8:8d:9f:62: f3:fd:d5:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ5RTIxMTAvBgNVBAUTKDBGNDZCREJDNzQ5MDRFNURGODI5RjAxNTk1QjUxQ0FB QTIwMUI5REIwHhcNMjYwNTIxMDIzNTMzWhcNMjYwNTI4MDIzNTMzWjAYMRYwFAYD VQQDEw02YTBlNmY3NS1mZDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArSDQUBCx/ErJXhgaaqfU6ZQABgar13xHqsIfE8IkNDrNQsSbWjaxdcKnlbn5 ygo4mC+hY8D20bXz8O7PqGdAJOan825BOouYf8+ZsKzTr2FpaVJnoNqOok4LPjOO DQUW6UWZ5jn4gbTMNEo68mhGElceD1O3T5fIxdtpv7NuunthMqiocy+1w66FT3/r EP/bwMuyWHgLJnT/EH+qS9c9SL7nkTLF8XUnDmfkHxUD1g/02XwByhsar2Pajjnr zgtFgvw9HJAtB5zlF8EU2Tk2WwJ6D+yoV1+h0b3fiDdFc+ohLFFvHYIU6T7XD6DQ REMokEznpuKh4BQhnd8BJUltHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPXaXH+G pV3a3JjWVbkrN50nbIWFMB8GA1UdIwQYMBaAFA9Gvbx0kE5d+CnwFZW1HKqiAbnb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDlFMi9CNjQ0MzM4NEVG RkYxMUVEODU1NkVFNTRDNEY5QUUwMi9EMGE5dkhTUVRsMzRLZkFWbGJVY3FxSUJ1 ZHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QwYTl2SFNRVGwzNEtmQVZsYlVjcXFJQnVkcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDlFMi9CNjQ0MzM4NEVGRkYxMUVEODU1NkVFNTRDNEY5QUUwMi9EMGE5dkhTUVRs MzRLZkFWbGJVY3FxSUJ1ZHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALuFDb0yPKStu3SMnBzklyGOOITg6BZHF8xW5jW+7DbQ3OmI8kC/dvB675HKh TitBFiPig5KuAVhbWhAgdOunRVMYL8FHmRm8//Exl2IuM9zbel/8pxsNnTidNpcC PsJUNJBX/QnrNh/bk4dbXT9zDoZMTEk+v2kdGsZTD4Knfdavov79/HHXe6VgqPgk BbiKCT1eg8V+bzG7quHVgY4lSDM85snGVQsM/GPvWdEmOo8C2E1OISDOWOnyktE4 bEbQw3edEQRFRDkHuCRFzTy9TIYCmmkNY4xXS4aiuTUFkEuBEbKIPkcB67zQGGGR qLNh6DoUcBBzmA2ojZ9i8/3VYQ== -----END CERTIFICATE-----Generated at Thu May 21 09:30:44 2026 by rpki-client