$ rpki-client -vvf rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft File: rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft (raw, json) Hash identifier: ktrPWPNCr5R268F/jDOiJ+Ookng88x4X8hHMPK+N+FM= Subject key identifier: 60:D1:E2:3D:BF:37:2A:2E:D3:5A:9A:A0:18:00:82:C6:DB:AD:D4:9F Authority key identifier: AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 Certificate issuer: /CN=A9152C89/serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Certificate serial: 0541 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft Manifest number: 0533 Signing time: Wed 20 May 2026 23:35:23 +0000 Manifest this update: Wed 20 May 2026 23:35:22 +0000 Manifest next update: Wed 27 May 2026 23:35:22 +0000 Files and hashes: 1: rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl (hash: n2rXxRtpLCj95b59wHEEC2zdi9imwW9upHn202D64BI=) 2: 33DAC0AE640211EDA193F079C4F9AE02.roa (hash: ybViUyQ0AAqzvnSq9WOp3P59LX2uT96EcoWguD8yea0=) 3: 1291593861AC11ED9EFE1B4DC4F9AE02.roa (hash: JfzH8J7I3Xe9UEf/VNBPygrk3zbv7cEsEtGZ7BOGvr8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 23:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1345 (0x541) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152C89, serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Validity Not Before: May 20 23:35:22 2026 GMT Not After : May 27 23:35:22 2026 GMT Subject: CN=6a0e453b-0a2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:a2:f9:be:a8:9d:e6:34:ca:e6:29:7d:82:77: 70:07:2a:17:a4:5d:ff:8e:b9:7d:92:d7:ca:b0:cc: 39:0a:b3:e8:09:1f:84:10:4a:29:9a:54:1a:fd:0e: 22:e6:70:6a:0c:3c:69:93:21:25:c4:54:4e:ea:e3: 52:1c:eb:0f:ea:0c:fe:3e:6f:12:01:fd:ce:49:27: e7:0b:37:47:89:f9:fe:d9:eb:94:fd:a1:4b:d3:4a: e3:be:db:ae:f7:05:91:b5:41:d4:26:0e:3b:43:a1: ae:fa:e3:33:c7:60:bc:7a:6b:b8:a2:6a:44:ca:dd: ed:c5:fb:5f:24:50:2e:ea:98:ca:16:42:22:61:c0: 2b:57:54:39:f0:49:78:99:f1:03:0f:4a:25:b8:f7: 76:10:1c:4c:22:4f:29:aa:8a:19:16:d8:4f:8d:81: 6e:74:35:f1:dd:c7:8a:71:3d:65:78:68:c9:9a:4d: a1:1f:ae:0b:c0:96:d1:32:bf:79:06:28:12:9e:a8: 2c:5d:36:0e:78:1f:87:ff:6c:3c:32:fd:c3:75:3e: 3b:66:e7:ff:00:11:22:3b:86:cd:ea:2e:d5:8b:97: 23:2a:52:36:c8:12:7b:89:9e:49:4c:d5:c4:6e:d5: c0:14:35:be:ea:53:93:72:36:c2:b7:46:cb:56:4b: af:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D1:E2:3D:BF:37:2A:2E:D3:5A:9A:A0:18:00:82:C6:DB:AD:D4:9F X509v3 Authority Key Identifier: keyid:AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:4f:1d:7f:cc:04:10:31:27:e2:b7:3f:b0:7b:56:12:22:ed: e2:ae:ce:6f:af:30:a6:71:e3:43:f9:7a:d0:e2:c1:79:ef:2f: 19:43:08:8f:c9:8a:4f:1b:cf:40:07:e0:a3:c8:56:eb:e8:21: e7:e4:c4:ef:37:dc:7d:27:84:bd:71:d0:01:be:8c:97:f4:b2: 52:ad:66:2f:a0:d0:c0:92:cd:4e:4d:44:fd:cd:57:f3:2d:af: 75:16:e5:2f:1a:e3:d7:98:68:9d:f5:75:d5:fe:f6:bf:9c:8f: a4:0c:ba:60:26:f9:7e:7b:21:80:c2:9c:7c:98:1d:4a:59:c1: 55:5c:85:65:93:a5:af:61:fe:6c:68:c9:d8:6c:78:7d:f5:e0: ed:42:eb:24:c8:7e:c7:6e:64:0b:b5:0c:60:5d:4b:75:1d:a2: 22:75:36:16:3c:65:6e:a2:28:b3:3d:79:4f:88:9b:b5:86:91: 0e:b8:4f:6c:63:9c:15:4e:68:74:e2:47:49:83:7c:5c:e6:08: 65:df:f0:aa:ed:ce:d2:f4:5a:eb:4b:75:e5:6a:6c:dd:94:fc: b9:3e:36:d6:98:db:38:36:52:39:5a:95:be:e8:2a:4b:16:7a: 25:8d:78:f6:77:e2:32:82:45:f1:d5:5c:e7:6b:e5:49:b3:28: 52:68:6c:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJDODkxMTAvBgNVBAUTKEFDRDRGODMyRjZEODM5NzhCRTY5NTlENjk4M0ZFMzU4 RjNCN0E5MjUwHhcNMjYwNTIwMjMzNTIyWhcNMjYwNTI3MjMzNTIyWjAYMRYwFAYD VQQDEw02YTBlNDUzYi0wYTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA76L5vqid5jTK5il9gndwByoXpF3/jrl9ktfKsMw5CrPoCR+EEEopmlQa/Q4i 5nBqDDxpkyElxFRO6uNSHOsP6gz+Pm8SAf3OSSfnCzdHifn+2euU/aFL00rjvtuu 9wWRtUHUJg47Q6Gu+uMzx2C8emu4ompEyt3txftfJFAu6pjKFkIiYcArV1Q58El4 mfEDD0oluPd2EBxMIk8pqooZFthPjYFudDXx3ceKcT1leGjJmk2hH64LwJbRMr95 BigSnqgsXTYOeB+H/2w8Mv3DdT47Zuf/ABEiO4bN6i7Vi5cjKlI2yBJ7iZ5JTNXE btXAFDW+6lOTcjbCt0bLVkuvFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGDR4j2/ Nyou01qaoBgAgsbbrdSfMB8GA1UdIwQYMBaAFKzU+DL22Dl4vmlZ1pg/41jzt6kl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkM4OS84RkE5N0FGRTQ1 MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9YaS1hVm5XbURfaldQTzNx U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOVDRNdmJZT1hpLWFWbldtRF9qV1BPM3FTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkM4OS84RkE5N0FGRTQ1MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9Y aS1hVm5XbURfaldQTzNxU1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN08df8wEEDEn4rc/sHtWEiLt4q7Ob68wpnHjQ/l60OLBee8vGUMIj8mKTxvP QAfgo8hW6+gh5+TE7zfcfSeEvXHQAb6Ml/SyUq1mL6DQwJLNTk1E/c1X8y2vdRbl Lxrj15honfV11f72v5yPpAy6YCb5fnshgMKcfJgdSlnBVVyFZZOlr2H+bGjJ2Gx4 ffXg7ULrJMh+x25kC7UMYF1LdR2iInU2FjxlbqIosz15T4ibtYaRDrhPbGOcFU5o dOJHSYN8XOYIZd/wqu3O0vRa60t15Wps3ZT8uT421pjbODZSOVqVvugqSxZ6JY14 9nfiMoJF8dVc52vlSbMoUmhs4g== -----END CERTIFICATE-----Generated at Thu May 21 09:36:48 2026 by rpki-client