$ rpki-client -vvf rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft File: UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft (raw, json) Hash identifier: 70LwzcKv+u2x/VwXSwMXKpr7bSE8LYWGSU88ABsTkU8= Subject key identifier: 27:DC:D9:2C:4B:90:C4:18:E7:21:56:F8:A9:A5:C5:FB:BE:6D:EE:D4 Authority key identifier: 53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF Certificate issuer: /CN=A9159967/serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF Certificate serial: 214A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft Manifest number: 2127 Signing time: Wed 20 May 2026 15:56:13 +0000 Manifest this update: Wed 20 May 2026 15:56:13 +0000 Manifest next update: Wed 27 May 2026 15:56:13 +0000 Files and hashes: 1: UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl (hash: kJpk5VAEsEi1A+J6FMX/s4sYRogTPjfofJsnHcd3LgA=) 2: F79267D61E4011E6945BEB0DC4F9AE02.roa (hash: ybHfR/5xx3UHYBd525TGkptsJesZi6Lna1QGzoVxLoo=) 3: 2991FB703EBC11F0B4390D6CC4F9AE02.roa (hash: IX69yIubs1cdWLw+u1/cJ2ESvxKouHlRxob5F2MvTs0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 15:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8522 (0x214a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159967, serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF Validity Not Before: May 20 15:56:13 2026 GMT Not After : May 27 15:56:13 2026 GMT Subject: CN=6a0dd99d-477b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:00:50:e1:ab:72:f1:8c:3c:c9:a5:9c:c2:55: 90:7e:d0:79:ec:6f:b7:3a:6c:8b:03:db:10:65:9e: 62:20:63:d2:1e:93:53:3d:52:21:4b:62:99:71:a2: 3d:8a:d4:61:08:5f:8b:1f:18:55:b1:fd:13:59:b7: 4b:49:3a:b3:7f:c8:00:26:33:a0:72:92:e6:dd:42: a6:33:47:e7:ae:a0:cb:e1:70:b7:03:09:f8:3c:d2: 92:24:53:24:dd:1b:7e:eb:47:9c:59:73:f9:0d:9e: 82:5a:d3:7c:0e:4c:f2:5e:8b:c7:51:37:17:87:cd: 95:c9:73:15:32:57:80:c6:09:a9:e6:d9:66:54:21: 60:a8:91:68:fe:eb:a6:44:f6:6b:dd:71:9c:d5:4e: 82:e3:88:32:58:d5:08:52:01:c2:5c:2e:cc:79:1c: f6:bb:d3:78:cb:56:27:58:34:51:75:e6:dc:22:b0: a7:c7:58:9e:00:af:ac:65:ea:16:ac:48:d2:08:2d: 46:27:92:52:00:6e:3a:29:fa:d5:77:d5:97:a8:d8: db:87:ec:b0:6a:b3:19:e1:a7:53:5e:ad:b9:8d:10: 16:20:eb:3e:9a:63:d6:6a:b2:e7:04:cc:a6:7d:ea: d9:51:b5:14:2b:96:a0:c8:e0:05:3a:c6:83:c0:ec: ba:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DC:D9:2C:4B:90:C4:18:E7:21:56:F8:A9:A5:C5:FB:BE:6D:EE:D4 X509v3 Authority Key Identifier: keyid:53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:ea:56:a5:ee:a4:f5:64:e4:94:33:b5:d2:dc:f3:f2:39:12: 7a:b4:62:7c:5c:02:b0:ff:db:49:24:65:0b:03:b6:4a:ea:4f: 77:0a:d9:2a:40:e4:72:b1:95:ba:1a:c1:6a:3c:ed:bd:06:2c: 17:f7:7e:2c:1b:b7:95:91:7e:f2:4c:85:16:63:ce:8e:88:3e: 41:53:09:d5:71:83:cf:b8:11:19:ab:cf:d6:34:5d:d0:f1:c0: 94:e7:e9:93:e7:9a:6a:0f:f2:fa:11:85:95:4f:1b:eb:ec:99: 72:2a:0b:b7:6a:18:b5:ca:d8:fe:49:18:3f:43:6f:4b:10:60: 65:ab:ef:6c:2f:90:4d:d6:a4:5d:0b:b7:6e:48:89:e3:ba:11: b0:6c:28:61:5f:b0:c4:3b:9d:13:e1:f4:0c:3f:cb:3c:03:ab: 57:d5:35:41:5e:8b:d0:de:4d:9c:d9:fb:b0:f5:cf:43:41:11: 1f:fb:cb:cc:29:1d:be:e5:59:7d:9a:61:79:c2:59:75:75:c4: 63:72:56:f3:de:ff:8a:e8:93:08:18:80:9b:26:d1:45:8e:d5: 5a:23:e9:97:3b:60:91:ff:ee:d7:69:fb:a4:cc:47:4e:7b:c1: 28:3b:10:4b:5e:13:a5:46:c1:f3:95:e7:6f:a5:d5:9d:4e:f7: c4:e5:83:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk5NjcxMTAvBgNVBAUTKDUzMzBFRUVFQjBEMEE5NTM1RkFDODUwNUU3MzU4NDNB RjZDRTYwQUYwHhcNMjYwNTIwMTU1NjEzWhcNMjYwNTI3MTU1NjEzWjAYMRYwFAYD VQQDEw02YTBkZDk5ZC00NzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2wBQ4aty8Yw8yaWcwlWQftB57G+3OmyLA9sQZZ5iIGPSHpNTPVIhS2KZcaI9 itRhCF+LHxhVsf0TWbdLSTqzf8gAJjOgcpLm3UKmM0fnrqDL4XC3Awn4PNKSJFMk 3Rt+60ecWXP5DZ6CWtN8DkzyXovHUTcXh82VyXMVMleAxgmp5tlmVCFgqJFo/uum RPZr3XGc1U6C44gyWNUIUgHCXC7MeRz2u9N4y1YnWDRRdebcIrCnx1ieAK+sZeoW rEjSCC1GJ5JSAG46KfrVd9WXqNjbh+ywarMZ4adTXq25jRAWIOs+mmPWarLnBMym ferZUbUUK5agyOAFOsaDwOy6OQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCfc2SxL kMQY5yFW+Kmlxfu+be7UMB8GA1UdIwQYMBaAFFMw7u6w0KlTX6yFBec1hDr2zmCv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTk2Ny8wQkJGMjU3ODE1 QTkxMUU2OTEyRDQyM0JDNEY5QUUwMi9VekR1N3JEUXFWTmZySVVGNXpXRU92Yk9Z SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6RHU3ckRRcVZOZnJJVUY1eldFT3ZiT1lLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTk2Ny8wQkJGMjU3ODE1QTkxMUU2OTEyRDQyM0JDNEY5QUUwMi9VekR1N3JEUXFW TmZySVVGNXpXRU92Yk9ZSzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuepWpe6k9WTklDO10tzz8jkSerRifFwCsP/bSSRlCwO2SupPdwrZKkDkcrGV uhrBajztvQYsF/d+LBu3lZF+8kyFFmPOjog+QVMJ1XGDz7gRGavP1jRd0PHAlOfp k+eaag/y+hGFlU8b6+yZcioLt2oYtcrY/kkYP0NvSxBgZavvbC+QTdakXQu3bkiJ 47oRsGwoYV+wxDudE+H0DD/LPAOrV9U1QV6L0N5NnNn7sPXPQ0ERH/vLzCkdvuVZ fZphecJZdXXEY3JW897/iuiTCBiAmybRRY7VWiPplztgkf/u12n7pMxHTnvBKDsQ S14TpUbB85Xnb6XVnU73xOWDwQ== -----END CERTIFICATE-----Generated at Thu May 21 09:39:20 2026 by rpki-client