$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft File: u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft (raw, json) Hash identifier: Xa9bQX7OjbPXIHmZ/8i06f2rKBtsxA7KKPJRh200UgM= Subject key identifier: 0C:24:2F:AC:64:A5:B2:26:DE:8A:D8:D1:A2:21:36:45:D3:B3:3A:22 Authority key identifier: BB:57:55:5F:82:AA:20:A5:1C:1B:48:F7:B2:6C:35:67:F5:A1:E7:BB Certificate issuer: /CN=A9152D28/serialNumber=BB57555F82AA20A51C1B48F7B26C3567F5A1E7BB Certificate serial: 0227 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft Manifest number: 0220 Signing time: Thu 21 May 2026 02:54:48 +0000 Manifest this update: Thu 21 May 2026 02:54:47 +0000 Manifest next update: Thu 28 May 2026 02:54:47 +0000 Files and hashes: 1: u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl (hash: pKDms0b47B7YlBcs/s7qmTbv6ufiITA9dEWML+Yv7mI=) 2: E94B9DBC34EC11EE94A16565C4F9AE02.roa (hash: Ny3isw6umsC+HWLP+QGmuoxGo7jIpWZVWqHK1TweF80=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:54:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D28, serialNumber=BB57555F82AA20A51C1B48F7B26C3567F5A1E7BB Validity Not Before: May 21 02:54:47 2026 GMT Not After : May 28 02:54:47 2026 GMT Subject: CN=6a0e73f8-0468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:cb:40:a7:db:b0:a6:14:4d:1b:d5:a6:14:76: 5c:63:86:8a:40:d6:fd:d0:28:51:0d:f7:c9:bb:b5: 90:26:0c:c5:92:ab:2e:3f:ed:e3:a4:05:43:a3:c9: 1a:c1:67:d3:c7:ef:77:3b:99:cb:80:0c:a6:0c:d1: 08:99:d9:78:6c:9c:6d:e9:66:69:9e:fc:25:da:69: bf:0d:f7:0c:8c:78:87:f2:f5:b3:52:3d:ab:1a:0a: 97:d8:1a:65:b7:f9:12:cf:ca:e4:bd:86:5d:60:c9: 7e:af:0d:70:61:28:ef:c3:a7:f5:98:b0:8e:d3:b9: 8b:f0:6d:3e:c6:cf:a1:c7:64:08:66:48:61:a1:ee: 01:e1:5e:32:db:97:0e:02:2e:98:5a:a8:09:3f:1a: f9:a2:f5:ab:44:e4:b1:d8:74:7a:2c:23:96:3f:76: 13:42:aa:57:8a:0b:08:13:0e:02:6f:0e:6d:99:b5: c5:b1:13:ec:38:f5:8d:dd:35:1f:b2:4a:db:26:c9: 97:b6:c0:fc:5c:10:78:b8:a9:42:dc:01:bd:7a:55: 96:43:8e:cc:59:1a:7c:71:a8:61:d6:a2:07:0a:f5: f7:9e:43:52:90:28:99:e0:ca:de:00:d6:b3:ca:94: 62:fe:57:16:62:1e:fd:43:a7:36:f9:6b:75:aa:78: 00:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:24:2F:AC:64:A5:B2:26:DE:8A:D8:D1:A2:21:36:45:D3:B3:3A:22 X509v3 Authority Key Identifier: keyid:BB:57:55:5F:82:AA:20:A5:1C:1B:48:F7:B2:6C:35:67:F5:A1:E7:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:8b:84:2f:79:00:77:c0:a7:ca:c4:25:a9:30:7e:e0:45:28: 85:38:56:b1:c9:43:0e:ad:f6:95:cb:fc:92:35:e6:3a:8b:0b: 95:9d:0b:38:60:56:32:a4:85:d8:9e:e7:2e:73:41:c3:12:13: 95:00:d3:26:1b:e2:7d:15:3c:b3:2a:d1:32:0a:66:b0:07:ed: b4:21:ee:e9:60:5a:0c:88:19:26:53:85:73:da:60:8e:ed:a4: 48:cb:a0:1e:86:c0:73:a8:e6:ce:b6:21:72:dd:71:31:62:96: 85:1e:1f:6b:68:27:cb:14:34:92:5b:43:6b:56:d6:6d:ca:3c: 6f:36:59:39:3c:9c:d1:bb:62:c9:27:fd:5a:6f:ad:45:bf:fd: 07:3c:62:20:c3:4e:5d:3b:f5:5e:28:4b:76:7f:85:19:3b:16: 96:02:5b:b1:9a:be:54:09:dd:2b:b0:42:ee:7c:7d:ca:9b:53: 3a:d8:a8:9e:21:49:05:5e:3d:ce:dc:8b:5f:08:e9:75:83:e1: 7f:e5:3e:4a:5e:39:b5:e9:ba:8e:89:1f:ae:4d:33:59:43:72: 72:00:6f:20:be:1c:c0:c7:42:8f:97:cb:34:88:12:16:58:c3: 57:43:ee:47:ac:02:60:0e:b6:e6:29:1e:0a:4e:b8:3b:40:4e: ee:d1:10:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMjgxMTAvBgNVBAUTKEJCNTc1NTVGODJBQTIwQTUxQzFCNDhGN0IyNkMzNTY3 RjVBMUU3QkIwHhcNMjYwNTIxMDI1NDQ3WhcNMjYwNTI4MDI1NDQ3WjAYMRYwFAYD VQQDEw02YTBlNzNmOC0wNDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4MtAp9uwphRNG9WmFHZcY4aKQNb90ChRDffJu7WQJgzFkqsuP+3jpAVDo8ka wWfTx+93O5nLgAymDNEImdl4bJxt6WZpnvwl2mm/DfcMjHiH8vWzUj2rGgqX2Bpl t/kSz8rkvYZdYMl+rw1wYSjvw6f1mLCO07mL8G0+xs+hx2QIZkhhoe4B4V4y25cO Ai6YWqgJPxr5ovWrROSx2HR6LCOWP3YTQqpXigsIEw4Cbw5tmbXFsRPsOPWN3TUf skrbJsmXtsD8XBB4uKlC3AG9elWWQ47MWRp8cahh1qIHCvX3nkNSkCiZ4MreANaz ypRi/lcWYh79Q6c2+Wt1qngA+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAwkL6xk pbIm3orY0aIhNkXTszoiMB8GA1UdIwQYMBaAFLtXVV+CqiClHBtI97JsNWf1oee7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQyOC9BRjkzRDE2MjIy MjYxMUVFODlBRTc2ODNDNEY5QUUwMi91MWRWWDRLcUlLVWNHMGozc213MVpfV2g1 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxZFZYNEtxSUtVY0cwajNzbXcxWl9XaDU3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQyOC9BRjkzRDE2MjIyMjYxMUVFODlBRTc2ODNDNEY5QUUwMi91MWRWWDRLcUlL VWNHMGozc213MVpfV2g1N3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMYuEL3kAd8CnysQlqTB+4EUohThWsclDDq32lcv8kjXmOosLlZ0LOGBWMqSF 2J7nLnNBwxITlQDTJhvifRU8syrRMgpmsAfttCHu6WBaDIgZJlOFc9pgju2kSMug HobAc6jmzrYhct1xMWKWhR4fa2gnyxQ0kltDa1bWbco8bzZZOTyc0btiySf9Wm+t Rb/9BzxiIMNOXTv1XihLdn+FGTsWlgJbsZq+VAndK7BC7nx9yptTOtioniFJBV49 ztyLXwjpdYPhf+U+Sl45tem6jokfrk0zWUNycgBvIL4cwMdCj5fLNIgSFljDV0Pu R6wCYA625ikeCk64O0BO7tEQmA== -----END CERTIFICATE-----Generated at Thu May 21 10:28:07 2026 by rpki-client