$ rpki-client -vvf rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft File: tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft (raw, json) Hash identifier: Ik3O1YKrDHzbX/zGD236sd6f07CwoRQRBIKSVU/2X8Y= Subject key identifier: F5:26:FC:96:A4:73:78:A9:97:D0:7A:A0:E0:97:DD:2A:99:DB:D3:A1 Authority key identifier: B6:7C:D4:F3:0A:DC:19:50:B9:2D:C3:49:8F:9B:53:52:66:05:BF:76 Certificate issuer: /CN=A9154FFD/serialNumber=B67CD4F30ADC1950B92DC3498F9B53526605BF76 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft Manifest number: 6D Signing time: Thu 21 May 2026 07:59:21 +0000 Manifest this update: Thu 21 May 2026 07:59:20 +0000 Manifest next update: Thu 28 May 2026 07:59:20 +0000 Files and hashes: 1: tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl (hash: yS77SexNN80w8DEU9ybOsubluNKl0/87qV8MToEe81o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 07:59:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154FFD, serialNumber=B67CD4F30ADC1950B92DC3498F9B53526605BF76 Validity Not Before: May 21 07:59:20 2026 GMT Not After : May 28 07:59:20 2026 GMT Subject: CN=6a0ebb58-ded3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:cf:c7:86:0b:f4:88:df:55:d0:3c:4b:19:5b: 38:89:ed:62:48:e6:f0:a3:83:18:83:82:c9:53:2a: 41:cf:28:04:18:2b:0b:1f:62:ab:c0:c4:26:eb:57: 96:13:54:ec:7e:cb:68:10:94:af:37:8b:62:d0:5a: 2e:51:1a:0a:f0:29:67:56:0f:a3:b7:9b:9c:93:d9: 83:fd:19:57:24:69:d7:04:17:48:03:da:b4:e2:b7: 9b:90:ae:21:51:d5:4d:60:ed:56:ed:a3:cc:a6:2f: f6:86:09:5b:25:c1:e2:a0:d8:de:69:dd:38:36:4d: c6:f5:e6:93:1c:e8:10:e9:9e:50:47:40:2f:93:d1: 50:eb:c6:c7:c3:ee:8a:ac:6c:69:63:68:0f:9d:88: ad:b2:94:3f:be:e7:52:ce:d6:46:a4:54:c2:2e:60: 59:58:22:60:3b:7c:25:14:0a:a1:cd:1f:f8:3e:41: 25:84:61:44:3f:d2:fc:73:09:32:60:50:ad:6f:5e: 02:84:28:88:0f:9b:73:77:f7:11:f6:1d:99:23:33: 09:cc:92:4d:eb:84:8d:59:be:9a:28:10:24:16:e2: 39:ae:c2:ca:0e:96:3c:0d:5a:8b:73:1c:10:93:e4: c4:83:20:da:5a:ea:dc:c0:5a:9f:7e:fb:1b:04:83: b3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:26:FC:96:A4:73:78:A9:97:D0:7A:A0:E0:97:DD:2A:99:DB:D3:A1 X509v3 Authority Key Identifier: keyid:B6:7C:D4:F3:0A:DC:19:50:B9:2D:C3:49:8F:9B:53:52:66:05:BF:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:fb:f2:9d:97:08:46:de:a0:20:38:8a:37:c4:66:eb:21:ea: 56:0f:a1:5d:58:0e:00:93:57:de:f3:21:32:e2:35:b1:73:d4: fe:29:8e:f1:94:bf:2a:ec:c6:6a:d4:2e:85:21:6c:b9:2b:3e: 44:28:d1:81:46:1c:05:ea:11:94:15:aa:71:e8:11:8d:d0:78: 39:66:9e:3e:e8:83:70:76:f2:2f:3a:04:0b:4e:ab:63:e0:6c: 54:5d:fa:f4:69:76:28:3c:5a:1d:bf:e1:0e:3f:87:a2:ee:2b: a3:e9:dc:eb:66:fd:77:2b:cd:20:cb:fe:34:ab:04:5f:7f:dc: 62:e1:3a:ff:54:21:29:b7:15:47:97:15:43:a1:69:9b:0b:bf: c0:dd:4e:43:0b:25:33:52:d1:29:ce:3d:c5:90:5e:db:3b:ce: c6:4f:f4:58:06:1d:9e:e9:8b:50:7f:20:59:78:9c:c8:85:e8: b0:53:00:41:0d:32:64:09:78:b7:9b:c7:e7:09:3b:d8:dd:78: c2:00:2a:a7:3e:d1:9b:0f:17:34:00:b2:7d:db:27:f8:89:a6: 13:4d:a2:27:8d:d1:c0:c5:3b:6e:06:e1:16:20:ad:2b:ce:64: cd:2c:33:1e:09:6e:18:4b:f2:39:8b:3b:32:e6:df:3e:03:32: ff:97:02:c7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NEZGRDExMC8GA1UEBRMoQjY3Q0Q0RjMwQURDMTk1MEI5MkRDMzQ5OEY5QjUzNTI2 NjA1QkY3NjAeFw0yNjA1MjEwNzU5MjBaFw0yNjA1MjgwNzU5MjBaMBgxFjAUBgNV BAMTDTZhMGViYjU4LWRlZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoz8eGC/SI31XQPEsZWziJ7WJI5vCjgxiDgslTKkHPKAQYKwsfYqvAxCbrV5YT VOx+y2gQlK83i2LQWi5RGgrwKWdWD6O3m5yT2YP9GVckadcEF0gD2rTit5uQriFR 1U1g7Vbto8ymL/aGCVslweKg2N5p3Tg2Tcb15pMc6BDpnlBHQC+T0VDrxsfD7oqs bGljaA+diK2ylD++51LO1kakVMIuYFlYImA7fCUUCqHNH/g+QSWEYUQ/0vxzCTJg UK1vXgKEKIgPm3N39xH2HZkjMwnMkk3rhI1ZvpooECQW4jmuwsoOljwNWotzHBCT 5MSDINpa6tzAWp9++xsEg7OrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU9Sb8lqRz eKmX0Hqg4JfdKpnb06EwHwYDVR0jBBgwFoAUtnzU8wrcGVC5LcNJj5tTUmYFv3Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0RkZEL0VFRTY4QzY0QjQ4 ODExRjBBNzQyRjU3RUM0RjlBRTAyL3RuelU4d3JjR1ZDNUxjTkpqNXRUVW1ZRnYz WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdG56VTh3cmNHVkM1TGNOSmo1dFRVbVlGdjNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 RkZEL0VFRTY4QzY0QjQ4ODExRjBBNzQyRjU3RUM0RjlBRTAyL3RuelU4d3JjR1ZD NUxjTkpqNXRUVW1ZRnYzWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDb+/KdlwhG3qAgOIo3xGbrIepWD6FdWA4Ak1fe8yEy4jWxc9T+KY7xlL8q7MZq 1C6FIWy5Kz5EKNGBRhwF6hGUFapx6BGN0Hg5Zp4+6INwdvIvOgQLTqtj4GxUXfr0 aXYoPFodv+EOP4ei7iuj6dzrZv13K80gy/40qwRff9xi4Tr/VCEptxVHlxVDoWmb C7/A3U5DCyUzUtEpzj3FkF7bO87GT/RYBh2e6YtQfyBZeJzIheiwUwBBDTJkCXi3 m8fnCTvY3XjCACqnPtGbDxc0ALJ92yf4iaYTTaInjdHAxTtuBuEWIK0rzmTNLDMe CW4YS/I5izsy5t8+AzL/lwLH -----END CERTIFICATE-----Generated at Thu May 21 10:15:12 2026 by rpki-client