$ rpki-client -vvf rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft File: eSD4yoTskTxpqY1UNxIJtDTDMZE.mft (raw, json) Hash identifier: zNtNIi2foyxlXc3u2BPhs/4TElyzUcIwreriAvj4QFM= Subject key identifier: 91:B9:D5:AE:E8:77:90:51:34:23:25:97:C5:5B:75:82:14:94:0D:92 Authority key identifier: 79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91 Certificate issuer: /CN=A914A554/serialNumber=7920F8CA84EC913C69A98D54371209B434C33191 Certificate serial: 013E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft Manifest number: 012C Signing time: Thu 21 May 2026 05:46:00 +0000 Manifest this update: Thu 21 May 2026 05:46:00 +0000 Manifest next update: Thu 28 May 2026 05:46:00 +0000 Files and hashes: 1: eSD4yoTskTxpqY1UNxIJtDTDMZE.crl (hash: DoyVemEeDSauGshp63VCnZmNha/8kWYfwGy7asdOpFk=) 2: F561A3BE935811EF97E1194EC4F9AE02.roa (hash: eH0IL4ttz3YsPdM6Yy4322cKAtAuMUPayUG/Znc6O7g=) 3: E188EE7A935711EFBE98944CC4F9AE02.roa (hash: +BzmtEHFPYhJd7eBI+fhK9pFudklIV0KEa7Qtl+OyT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 05:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A554, serialNumber=7920F8CA84EC913C69A98D54371209B434C33191 Validity Not Before: May 21 05:46:00 2026 GMT Not After : May 28 05:46:00 2026 GMT Subject: CN=6a0e9c18-27d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1f:d5:ca:4d:8a:6b:b7:7c:b5:52:3b:be:47: 36:ce:4d:91:c3:b0:fc:b5:ff:14:18:92:0f:7b:ff: 1f:c1:4f:b2:cc:af:ac:ef:65:46:ab:b0:23:c9:c5: 11:29:59:f0:b9:d4:73:7a:e3:9c:91:44:e9:71:ca: 6d:59:d7:82:62:98:a9:8f:d2:bc:98:fa:d9:97:fa: a2:a6:57:e9:9f:b7:22:fb:c9:93:00:51:fd:02:b4: 0d:f0:83:63:39:d1:7b:12:81:b3:01:ae:c9:80:ef: ea:86:e9:73:09:21:7a:9b:64:72:6f:c3:d7:8d:1b: 80:7a:65:d8:03:ac:41:08:ea:04:f7:a6:40:63:5b: 7e:30:55:a9:27:f5:6e:76:f8:3b:29:d1:3f:c3:30: ac:6c:d4:fb:3e:f3:b7:3f:4a:24:40:d9:d8:a3:c5: 66:e6:f6:28:75:8b:b3:01:c4:44:2a:c5:2e:ea:7e: 9c:3b:f1:0d:11:ac:f4:63:d5:45:94:4e:68:a8:f9: f6:ea:38:6a:de:07:7d:cd:52:69:11:59:0e:6c:79: c1:7a:1a:d9:95:e4:56:3c:df:ea:48:aa:39:cd:dd: 41:ef:79:9c:9f:06:9a:b8:c9:8a:5f:d2:92:83:27: b8:af:32:d7:cc:79:a5:52:22:56:ba:ed:1b:42:c4: c7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B9:D5:AE:E8:77:90:51:34:23:25:97:C5:5B:75:82:14:94:0D:92 X509v3 Authority Key Identifier: keyid:79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:73:64:d9:8a:e6:73:d1:83:4e:9e:85:8f:fc:84:86:f4:3c: 92:c0:78:18:af:eb:c7:99:40:15:33:5c:c2:fa:89:f2:e1:93: 32:73:4b:a6:99:fd:3d:dc:5a:ea:b5:6a:19:8c:cd:5a:53:e6: 8a:b5:53:d9:e0:20:1f:eb:1d:f6:04:f3:3c:eb:6e:64:5e:4a: 13:a0:f1:64:98:37:4f:c6:c9:13:d1:66:08:28:48:12:80:39: 31:d8:37:db:b4:0c:ab:e5:54:58:25:11:40:31:59:fb:af:b2: f4:34:7e:22:aa:a4:75:a3:57:16:53:a2:67:9f:df:7c:61:c7: 80:dd:31:72:71:0a:c7:55:46:8a:b9:9f:c2:79:fe:d9:87:3a: 68:01:51:1c:39:78:e4:d6:2d:c7:47:ec:3b:35:5d:3e:a0:6c: ca:e1:96:e2:b7:8a:c4:15:68:62:b9:da:98:88:4d:dc:d5:e8: 71:97:0b:80:d1:33:7b:5a:ce:4a:c1:3e:2c:15:69:25:ff:ee: 82:5a:86:54:d0:ef:a7:05:cb:95:c8:eb:1a:f3:d2:f7:86:65: ed:ea:78:3a:d2:7d:89:f5:83:d6:ea:3a:95:ca:87:91:62:72: ed:8e:f4:40:51:59:64:fe:87:bc:0e:82:76:02:4a:d9:b7:3c: 7d:59:30:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1NTQxMTAvBgNVBAUTKDc5MjBGOENBODRFQzkxM0M2OUE5OEQ1NDM3MTIwOUI0 MzRDMzMxOTEwHhcNMjYwNTIxMDU0NjAwWhcNMjYwNTI4MDU0NjAwWjAYMRYwFAYD VQQDEw02YTBlOWMxOC0yN2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAth/Vyk2Ka7d8tVI7vkc2zk2Rw7D8tf8UGJIPe/8fwU+yzK+s72VGq7AjycUR KVnwudRzeuOckUTpccptWdeCYpipj9K8mPrZl/qiplfpn7ci+8mTAFH9ArQN8INj OdF7EoGzAa7JgO/qhulzCSF6m2Ryb8PXjRuAemXYA6xBCOoE96ZAY1t+MFWpJ/Vu dvg7KdE/wzCsbNT7PvO3P0okQNnYo8Vm5vYodYuzAcREKsUu6n6cO/ENEaz0Y9VF lE5oqPn26jhq3gd9zVJpEVkObHnBehrZleRWPN/qSKo5zd1B73mcnwaauMmKX9KS gye4rzLXzHmlUiJWuu0bQsTH7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJG51a7o d5BRNCMll8VbdYIUlA2SMB8GA1UdIwQYMBaAFHkg+MqE7JE8aamNVDcSCbQ0wzGR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU1NC83OUY4OTk4Mjkz NTYxMUVGQThFREVCMzNDNEY5QUUwMi9lU0Q0eW9Uc2tUeHBxWTFVTnhJSnREVERN WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VTRDR5b1Rza1R4cHFZMVVOeElKdERURE1aRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTU1NC83OUY4OTk4MjkzNTYxMUVGQThFREVCMzNDNEY5QUUwMi9lU0Q0eW9Uc2tU eHBxWTFVTnhJSnREVERNWkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgHNk2Yrmc9GDTp6Fj/yEhvQ8ksB4GK/rx5lAFTNcwvqJ8uGTMnNLppn9Pdxa 6rVqGYzNWlPmirVT2eAgH+sd9gTzPOtuZF5KE6DxZJg3T8bJE9FmCChIEoA5Mdg3 27QMq+VUWCURQDFZ+6+y9DR+IqqkdaNXFlOiZ5/ffGHHgN0xcnEKx1VGirmfwnn+ 2Yc6aAFRHDl45NYtx0fsOzVdPqBsyuGW4reKxBVoYrnamIhN3NXocZcLgNEze1rO SsE+LBVpJf/uglqGVNDvpwXLlcjrGvPS94Zl7ep4OtJ9ifWD1uo6lcqHkWJy7Y70 QFFZZP6HvA6CdgJK2bc8fVkwcg== -----END CERTIFICATE-----Generated at Thu May 21 10:53:39 2026 by rpki-client