$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft File: 6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft (raw, json) Hash identifier: 40QE0mwwcVe+Z1CHoQf15CzO50kC/MXQkN2OGLsGZQ4= Subject key identifier: BB:17:8D:EC:AF:99:0C:4F:33:2C:7E:41:6D:76:94:BE:87:A8:80:BC Authority key identifier: E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44 Certificate issuer: /CN=A9157E9C/serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944 Certificate serial: 04B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft Manifest number: 04A3 Signing time: Thu 21 May 2026 00:00:49 +0000 Manifest this update: Thu 21 May 2026 00:00:48 +0000 Manifest next update: Thu 28 May 2026 00:00:48 +0000 Files and hashes: 1: 6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl (hash: 5nl38tRsC6XIr8bL6tgGjt3k6hjRlA4oLVzk6IIHt5k=) 2: 438C7C387D6F11ECBCDC721DC4F9AE02.roa (hash: N2OHhfn+CsWn9uM8g1Ofmnj7ymg7gw2Y4/3DtYOdMeg=) 3: E3CD40BE7D6611ECBA65C232C4F9AE02.roa (hash: WD9MrIU1Zj3w+mVYD7v9tJ6t/TRXPSfmjh+WqlfPWrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 00:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1202 (0x4b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157E9C, serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944 Validity Not Before: May 21 00:00:48 2026 GMT Not After : May 28 00:00:48 2026 GMT Subject: CN=6a0e4b30-53b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d0:f3:be:ea:da:4c:a4:50:04:51:f9:42:47: 8c:57:1f:dc:24:0b:34:4c:a7:6f:9f:dc:9f:d0:33: ad:1a:42:12:e1:04:64:5a:18:e4:ca:41:d2:88:7c: 3a:37:ee:7f:12:91:ae:b3:98:7c:07:d2:20:7c:59: b1:76:32:ff:0e:bf:ba:e4:45:f3:4b:63:46:af:17: 64:fa:1f:a4:3f:d7:7d:35:e0:2c:c4:35:bf:53:48: 5c:90:06:4b:fb:9b:3e:8e:4d:02:1f:cc:01:13:80: f4:93:2d:01:9c:d9:94:e1:e3:6b:4f:15:e3:42:b9: 62:1e:5e:26:d4:57:32:90:f0:a8:6c:79:04:b4:d8: 38:1d:a4:60:37:27:67:03:46:7e:37:b6:98:f2:ca: 36:1e:de:5f:9e:d5:e7:cd:41:7f:d5:8e:9f:ca:d8: 66:3f:2d:68:d5:a0:cf:17:5f:73:67:4b:72:21:d3: e1:5b:ae:4f:13:ad:5a:35:32:d7:d5:42:1a:8a:70: 27:29:1f:37:3f:c9:71:e1:75:9b:cd:65:4a:59:ae: e9:da:f2:30:e2:c6:19:d4:b6:fa:6e:e4:71:15:21: e5:5c:be:57:11:09:4e:d6:b6:27:93:c1:03:ef:39: a5:03:88:f6:7f:74:db:06:b7:7a:92:48:50:ec:0f: 30:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:17:8D:EC:AF:99:0C:4F:33:2C:7E:41:6D:76:94:BE:87:A8:80:BC X509v3 Authority Key Identifier: keyid:E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:11:a0:0e:71:53:e7:1d:12:ec:ff:1f:09:bc:cc:60:e5:bb: 90:c4:80:50:5a:bf:7b:e3:db:07:42:66:68:fc:0f:c7:e3:08: 6c:55:07:c6:56:83:10:53:5f:d9:6c:3a:e3:37:77:92:7f:5c: 71:35:64:18:e2:91:10:e7:0b:c4:60:c4:3e:0f:eb:7c:6d:cf: 19:b7:ae:6e:3c:b4:64:23:03:23:47:4f:05:64:46:eb:9b:47: 02:47:5e:f2:86:10:3d:30:49:e5:7a:3a:81:4a:7a:71:3e:9c: 12:ad:ae:aa:75:71:a3:77:02:95:4c:b0:13:aa:d5:93:bd:c2: d6:0e:16:51:e0:c4:67:77:42:75:62:89:64:35:1f:55:89:3b: 38:bc:bc:c2:69:6b:45:b8:5e:48:f2:23:94:e3:8f:9d:ee:ef: 3c:18:80:1c:f9:47:77:e4:3a:93:c4:ec:03:21:7f:33:32:c9: 23:f6:f3:53:39:a9:11:4b:0c:62:0a:f0:d8:49:84:53:ad:6a: fe:92:4a:2d:10:60:d9:0c:7a:be:11:1e:7a:3f:66:8a:88:c2: f7:0c:e9:4e:07:9d:7b:41:15:5b:f9:96:72:ac:49:68:38:24: 27:dd:ff:04:cf:c9:c8:91:c1:c0:c2:91:a6:66:6b:33:10:ad: c4:7c:f3:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdFOUMxMTAvBgNVBAUTKEU5OUZGMDQ0OEIwQkRBMzc3MUNEQzRBOTZDNTlGN0M5 RjlDODc5NDQwHhcNMjYwNTIxMDAwMDQ4WhcNMjYwNTI4MDAwMDQ4WjAYMRYwFAYD VQQDEw02YTBlNGIzMC01M2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl9DzvuraTKRQBFH5QkeMVx/cJAs0TKdvn9yf0DOtGkIS4QRkWhjkykHSiHw6 N+5/EpGus5h8B9IgfFmxdjL/Dr+65EXzS2NGrxdk+h+kP9d9NeAsxDW/U0hckAZL +5s+jk0CH8wBE4D0ky0BnNmU4eNrTxXjQrliHl4m1FcykPCobHkEtNg4HaRgNydn A0Z+N7aY8so2Ht5fntXnzUF/1Y6fythmPy1o1aDPF19zZ0tyIdPhW65PE61aNTLX 1UIainAnKR83P8lx4XWbzWVKWa7p2vIw4sYZ1Lb6buRxFSHlXL5XEQlO1rYnk8ED 7zmlA4j2f3TbBrd6kkhQ7A8wNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLsXjeyv mQxPMyx+QW12lL6HqIC8MB8GA1UdIwQYMBaAFOmf8ESLC9o3cc3EqWxZ98n5yHlE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0U5Qy81MEM5OTNDRTdE NjMxMUVDQUM1QzdGMUVDNEY5QUUwMi82Wl93UklzTDJqZHh6Y1NwYkZuM3lmbkll VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaX3dSSXNMMmpkeHpjU3BiRm4zeWZuSWVVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0U5Qy81MEM5OTNDRTdENjMxMUVDQUM1QzdGMUVDNEY5QUUwMi82Wl93UklzTDJq ZHh6Y1NwYkZuM3lmbkllVVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALxGgDnFT5x0S7P8fCbzMYOW7kMSAUFq/e+PbB0JmaPwPx+MIbFUHxlaDEFNf 2Ww64zd3kn9ccTVkGOKREOcLxGDEPg/rfG3PGbeubjy0ZCMDI0dPBWRG65tHAkde 8oYQPTBJ5Xo6gUp6cT6cEq2uqnVxo3cClUywE6rVk73C1g4WUeDEZ3dCdWKJZDUf VYk7OLy8wmlrRbheSPIjlOOPne7vPBiAHPlHd+Q6k8TsAyF/MzLJI/bzUzmpEUsM Ygrw2EmEU61q/pJKLRBg2Qx6vhEeej9miojC9wzpTgede0EVW/mWcqxJaDgkJ93/ BM/JyJHBwMKRpmZrMxCtxHzzMA== -----END CERTIFICATE-----Generated at Thu May 21 10:53:13 2026 by rpki-client