$ rpki-client -vvf rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft File: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft (raw, json) Hash identifier: QDpoHcApNR+ucxXCkIkkfhXotJ3yLpS9EZVyK4HO1yw= Subject key identifier: FB:CF:B2:50:EF:53:C0:94:AC:2D:FE:A8:03:3D:78:66:30:41:1E:60 Authority key identifier: EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E Certificate issuer: /CN=A9154B7E/serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E Certificate serial: 0B6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft Manifest number: 0B52 Signing time: Wed 20 May 2026 19:15:11 +0000 Manifest this update: Wed 20 May 2026 19:15:11 +0000 Manifest next update: Wed 27 May 2026 19:15:11 +0000 Files and hashes: 1: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl (hash: pxjiG5IP9mfbqbLNDR7LV97I+lEcPueScqzMaZJFqg8=) 2: 2996029C591611EA86D2A42DC4F9AE02.roa (hash: YoQLzF1Lm5yCnjPw539aGKaVVb5igGFfhZc6/2536gM=) 3: 144D1F865F7F11EBB5C08239C4F9AE02.roa (hash: a98jB4MSjv/smFnJ8Lz82VIPKbQpi9CPszl7PwTNJ3k=) 4: 45A83CC809EE11EBAD92B66BC4F9AE02.roa (hash: zxbNBeuYEf6c+f0pWWpGgn67zb1hnSTjyBGEz1Av9Hk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 19:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2925 (0xb6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154B7E, serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E Validity Not Before: May 20 19:15:11 2026 GMT Not After : May 27 19:15:11 2026 GMT Subject: CN=6a0e083f-f743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:17:02:e0:01:b5:3d:03:c6:41:4d:96:fe:8f: d6:e4:18:c0:b4:49:87:05:3a:e5:b3:4e:d7:8f:56: b2:30:29:c9:57:1b:2e:c0:46:26:bd:a3:d6:f7:29: 1d:77:d7:06:51:0b:33:d7:17:f2:29:6f:57:97:90: 2b:ed:92:75:33:87:7c:b7:88:cb:ec:8d:c0:ab:f4: be:57:35:a9:73:37:ba:ca:e6:6e:63:39:29:81:22: 72:28:94:a0:c4:21:32:5b:b5:cc:ac:52:48:e5:12: 8f:1f:d7:8c:8d:00:b9:17:02:46:31:11:19:68:eb: 3f:0f:bb:10:13:b7:5c:ea:c3:ae:2f:ed:d5:e0:a9: d9:aa:ea:07:c5:37:2c:b9:19:04:80:22:7e:89:be: b3:c3:e3:04:86:ac:fc:4c:d8:39:2b:66:90:bc:3d: 5d:40:83:20:93:c7:d2:1a:e0:6d:ba:24:09:8d:43: 1b:fe:fb:87:9d:e3:91:a6:ab:dc:27:14:7e:71:d8: 88:db:1f:86:dd:e7:81:88:7d:9e:0c:cd:da:af:01: 83:85:f1:ef:93:3a:ff:0e:85:1f:9d:a9:d9:dc:ba: 3b:da:1f:1d:4b:aa:78:9e:63:1c:b4:e1:70:da:b7: 00:aa:5c:56:c1:17:70:a6:ce:e4:17:e4:33:40:a5: 05:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:CF:B2:50:EF:53:C0:94:AC:2D:FE:A8:03:3D:78:66:30:41:1E:60 X509v3 Authority Key Identifier: keyid:EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:31:ee:cb:a5:a8:a6:d1:ee:d7:53:36:92:1b:2f:d2:47:2d: 12:e4:2d:fa:f3:ed:03:a7:bb:5d:3b:1d:0e:8d:ac:5a:93:31: 59:96:71:a2:bf:5b:a4:2a:38:83:c1:a9:6b:bc:9a:d1:24:0a: 23:fc:47:74:f5:a5:56:c3:d7:e7:2b:fc:4c:b4:e6:b5:c5:f2: 90:87:7a:b3:fc:70:6f:a9:31:13:91:54:6c:1a:69:24:33:4c: 4a:85:8c:0d:c6:b5:c0:2d:3d:29:32:04:f3:62:4d:a6:d6:e0: a4:99:42:0a:dc:d4:81:89:21:f2:ff:44:d1:c5:0d:b2:51:46: d8:2a:d7:a0:9f:63:5f:ed:21:70:d0:00:66:0e:2b:21:c9:18: b4:66:9a:2e:7f:ee:e1:01:b2:53:f5:23:8f:af:56:6e:7e:49: 18:19:96:a2:47:63:2a:d5:d7:c8:12:05:f1:f6:31:d2:e6:3f: 24:75:47:b2:a0:45:b7:85:b8:b8:a9:23:71:bc:4f:a0:ef:87: f6:e1:1f:2e:b2:dd:03:8c:28:ba:43:36:d5:87:33:cc:6c:2e: 3a:75:d4:64:9a:a7:12:de:30:53:91:d9:6e:16:a5:c3:16:51: b6:9b:f3:6a:ab:2d:61:53:ed:22:f7:ab:e4:ed:9a:ed:dd:2a: 13:05:6f:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRCN0UxMTAvBgNVBAUTKEVBRjE1MkJEMURENDcwRUY3M0E1MUQ0Qjk1MUQ0RkEw QUE0Q0NEOEUwHhcNMjYwNTIwMTkxNTExWhcNMjYwNTI3MTkxNTExWjAYMRYwFAYD VQQDEw02YTBlMDgzZi1mNzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRcC4AG1PQPGQU2W/o/W5BjAtEmHBTrls07Xj1ayMCnJVxsuwEYmvaPW9ykd d9cGUQsz1xfyKW9Xl5Ar7ZJ1M4d8t4jL7I3Aq/S+VzWpcze6yuZuYzkpgSJyKJSg xCEyW7XMrFJI5RKPH9eMjQC5FwJGMREZaOs/D7sQE7dc6sOuL+3V4KnZquoHxTcs uRkEgCJ+ib6zw+MEhqz8TNg5K2aQvD1dQIMgk8fSGuBtuiQJjUMb/vuHneORpqvc JxR+cdiI2x+G3eeBiH2eDM3arwGDhfHvkzr/DoUfnanZ3Lo72h8dS6p4nmMctOFw 2rcAqlxWwRdwps7kF+QzQKUFgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPvPslDv U8CUrC3+qAM9eGYwQR5gMB8GA1UdIwQYMBaAFOrxUr0d1HDvc6UdS5UdT6CqTM2O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEI3RS8zRjM1QzA4NDU5 MTUxMUVBQjNGMkExMkNDNEY5QUUwMi82dkZTdlIzVWNPOXpwUjFMbFIxUG9LcE16 WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ2RlN2UjNVY085enBSMUxsUjFQb0twTXpZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEI3RS8zRjM1QzA4NDU5MTUxMUVBQjNGMkExMkNDNEY5QUUwMi82dkZTdlIzVWNP OXpwUjFMbFIxUG9LcE16WTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhjHuy6WoptHu11M2khsv0kctEuQt+vPtA6e7XTsdDo2sWpMxWZZxor9bpCo4 g8Gpa7ya0SQKI/xHdPWlVsPX5yv8TLTmtcXykId6s/xwb6kxE5FUbBppJDNMSoWM Dca1wC09KTIE82JNptbgpJlCCtzUgYkh8v9E0cUNslFG2CrXoJ9jX+0hcNAAZg4r IckYtGaaLn/u4QGyU/Ujj69Wbn5JGBmWokdjKtXXyBIF8fYx0uY/JHVHsqBFt4W4 uKkjcbxPoO+H9uEfLrLdA4woukM21YczzGwuOnXUZJqnEt4wU5HZbhalwxZRtpvz aqstYVPtIver5O2a7d0qEwVvxQ== -----END CERTIFICATE-----Generated at Thu May 21 10:19:19 2026 by rpki-client