$ rpki-client -vvf rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft File: f1QPcIZAQhpialmxa5Q_AzutP_Y.mft (raw, json) Hash identifier: +6CrvAzKvGe03T3Rrb9FvLJ2daluWl2bzTn4lUSC6Bs= Subject key identifier: 3B:C2:59:40:C4:87:80:42:EF:DD:69:76:55:6A:20:B2:2C:92:3B:E2 Authority key identifier: 7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6 Certificate issuer: /CN=A915B53A/serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6 Certificate serial: 0D28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft Manifest number: 0D15 Signing time: Wed 20 May 2026 18:10:37 +0000 Manifest this update: Wed 20 May 2026 18:10:36 +0000 Manifest next update: Wed 27 May 2026 18:10:36 +0000 Files and hashes: 1: f1QPcIZAQhpialmxa5Q_AzutP_Y.crl (hash: 0OBSSEIicG6kDJJksDHilmfrd9n8OKliF1xusO5naHw=) 2: AF905A0C021111EAA331B072C4F9AE02.roa (hash: qd9STy+iZzB+BWK7tdr5s3ge+XISfdZKjAs1tWz1RCs=) 3: 88C6F3B64EBA11F1A27D1DFDCC833773.roa (hash: +GXbWJ8DH4MXu8C2FQdeX12xA8wLfLkGkqve6/PrmJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3368 (0xd28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B53A, serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6 Validity Not Before: May 20 18:10:36 2026 GMT Not After : May 27 18:10:36 2026 GMT Subject: CN=6a0df91d-5049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c6:ca:58:01:74:28:99:db:03:67:87:d9:f8: e1:82:af:d2:e6:b4:b9:2f:e3:4b:f0:05:ec:25:c8: 38:62:22:b3:bf:14:f5:85:e3:d8:1a:2f:04:f3:40: 2e:78:cf:48:70:7c:3f:8e:dd:97:eb:d8:75:08:a6: 34:3f:62:77:16:3f:44:80:b2:8d:43:bc:4d:93:13: e5:c4:40:b5:f3:43:cc:bc:34:3b:84:d6:97:c0:10: 33:e6:51:2f:93:f4:6a:d2:ec:01:c4:5d:67:ea:c8: ac:12:01:b2:d4:f0:6d:21:50:d4:51:d2:6c:96:77: a6:15:d5:50:41:13:d5:36:28:9f:8a:2d:a3:38:16: 4b:60:89:5f:55:ae:13:1c:5e:94:cc:ef:65:a9:54: 7d:8e:56:5f:33:a5:88:c9:87:1d:de:f3:b7:f4:4c: 53:82:2f:45:47:af:3a:74:3a:9f:95:26:3f:34:99: df:cb:22:b1:5d:0f:4f:05:d8:c2:98:2a:40:f0:26: 3f:e9:d5:3f:cc:1a:31:be:50:a5:4a:d6:54:df:ef: 64:2c:b4:39:9c:6f:99:3d:7a:90:e8:80:8d:f5:7f: 96:d8:c4:46:e6:32:9f:c3:2c:57:12:76:30:6d:44: 11:47:36:34:04:ea:f6:25:f1:24:69:36:a2:f0:28: 09:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C2:59:40:C4:87:80:42:EF:DD:69:76:55:6A:20:B2:2C:92:3B:E2 X509v3 Authority Key Identifier: keyid:7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:83:2d:93:a4:92:07:b2:77:72:24:0c:e7:46:68:3f:e8:7e: fa:06:d6:fb:dc:93:be:d1:e3:a4:78:70:06:a6:60:42:e5:d2: e7:c9:96:a2:02:5a:fb:5a:f7:9d:b6:b9:e5:b5:ac:99:d9:3c: ee:e4:0a:50:0c:0c:ad:7b:97:a1:cc:7b:58:bf:5a:11:f6:4c: 7c:2a:65:02:3b:e0:8a:17:26:25:52:01:6f:12:1f:7e:cd:2f: 43:68:3f:5f:03:04:d2:0f:5b:12:18:28:0a:2d:f5:96:92:cd: b8:d0:ca:23:34:08:75:4f:62:f2:4e:c2:3a:03:e2:3f:5a:a5: e3:65:6f:09:c7:84:03:0c:b1:22:11:21:9f:cd:69:b0:f5:1a: d7:26:e8:b5:a7:bf:7a:91:b4:40:97:42:de:c0:40:48:0a:68: 17:c3:14:f0:1d:f0:0b:55:ed:d3:fe:49:fa:18:50:e7:01:8a: 3d:4e:ea:80:5e:bb:d2:e0:88:e4:14:b5:23:f0:72:80:3c:5c: 6f:e6:c3:84:01:e7:fa:82:d8:a9:4d:75:d5:b7:d7:7a:d5:0e: 4b:ec:53:0b:38:fd:74:a2:75:8f:2b:cd:b6:ad:82:ab:23:10: 4c:5b:b8:dd:a8:63:99:a0:6a:01:1e:87:35:60:c8:12:9e:97: 66:be:a4:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1M0ExMTAvBgNVBAUTKDdGNTQwRjcwODY0MDQyMUE2MjZBNTlCMTZCOTQzRjAz M0JBRDNGRjYwHhcNMjYwNTIwMTgxMDM2WhcNMjYwNTI3MTgxMDM2WjAYMRYwFAYD VQQDEw02YTBkZjkxZC01MDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4sbKWAF0KJnbA2eH2fjhgq/S5rS5L+NL8AXsJcg4YiKzvxT1hePYGi8E80Au eM9IcHw/jt2X69h1CKY0P2J3Fj9EgLKNQ7xNkxPlxEC180PMvDQ7hNaXwBAz5lEv k/Rq0uwBxF1n6sisEgGy1PBtIVDUUdJslnemFdVQQRPVNiifii2jOBZLYIlfVa4T HF6UzO9lqVR9jlZfM6WIyYcd3vO39ExTgi9FR686dDqflSY/NJnfyyKxXQ9PBdjC mCpA8CY/6dU/zBoxvlClStZU3+9kLLQ5nG+ZPXqQ6ICN9X+W2MRG5jKfwyxXEnYw bUQRRzY0BOr2JfEkaTai8CgJiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDvCWUDE h4BC791pdlVqILIskjviMB8GA1UdIwQYMBaAFH9UD3CGQEIaYmpZsWuUPwM7rT/2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzQS8yQ0Q2QjM4QzAy MTAxMUVBQUUwNzk5NkZDNEY5QUUwMi9mMVFQY0laQVFocGlhbG14YTVRX0F6dXRQ X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YxUVBjSVpBUWhwaWFsbXhhNVFfQXp1dFBfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzQS8yQ0Q2QjM4QzAyMTAxMUVBQUUwNzk5NkZDNEY5QUUwMi9mMVFQY0laQVFo cGlhbG14YTVRX0F6dXRQX1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmoMtk6SSB7J3ciQM50ZoP+h++gbW+9yTvtHjpHhwBqZgQuXS58mWogJa+1r3 nba55bWsmdk87uQKUAwMrXuXocx7WL9aEfZMfCplAjvgihcmJVIBbxIffs0vQ2g/ XwME0g9bEhgoCi31lpLNuNDKIzQIdU9i8k7COgPiP1ql42VvCceEAwyxIhEhn81p sPUa1ybotae/epG0QJdC3sBASApoF8MU8B3wC1Xt0/5J+hhQ5wGKPU7qgF670uCI 5BS1I/BygDxcb+bDhAHn+oLYqU111bfXetUOS+xTCzj9dKJ1jyvNtq2CqyMQTFu4 3ahjmaBqAR6HNWDIEp6XZr6kPA== -----END CERTIFICATE-----Generated at Thu May 21 10:16:06 2026 by rpki-client