$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft File: ngVdNc8yklM1zJQMyIKLY91gcws.mft (raw, json) Hash identifier: XNztJDnaeRnWrq2FG33iGhLWtuBXMqg5nYKdttV1R3Y= Subject key identifier: 36:F4:00:FD:35:FC:EB:CD:6B:9B:DD:67:CF:1C:E2:46:6A:4B:2F:E4 Authority key identifier: 9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B Certificate issuer: /CN=A915BC2A/serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B Certificate serial: 024F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft Manifest number: 0243 Signing time: Thu 21 May 2026 02:29:55 +0000 Manifest this update: Thu 21 May 2026 02:29:55 +0000 Manifest next update: Thu 28 May 2026 02:29:55 +0000 Files and hashes: 1: ngVdNc8yklM1zJQMyIKLY91gcws.crl (hash: 84qGl/FXVLzelJgSvPZ1q+0D4kJcpKDammIcnpTxefw=) 2: 398211B2DE1C11ED8935D41DC4F9AE02.roa (hash: fdMdK5Sd7Plh2Ippunexfav/xQdX66KfuslWneo0vak=) 3: 3A173FE4DE1C11ED8935D41DC4F9AE02.roa (hash: 7FMFrX0Xi2B0+fD25UfLuQbjzYJ8bpG2QcEFzbPEZL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 591 (0x24f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BC2A, serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B Validity Not Before: May 21 02:29:55 2026 GMT Not After : May 28 02:29:55 2026 GMT Subject: CN=6a0e6e23-6a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8c:b5:b4:5b:62:2b:6f:4f:c4:fd:6c:b7:b4: 1c:0c:13:f3:b8:ee:97:f9:e8:90:23:e5:44:d6:d9: 0e:7c:79:cb:74:e5:55:48:e1:b1:8b:c8:c2:79:6a: 12:81:db:ae:ed:07:a6:d3:52:15:2f:19:45:27:cd: be:f0:59:31:58:95:14:b3:07:41:3e:58:1a:8c:ed: 60:1f:06:84:bb:95:2e:b6:64:63:85:b0:26:87:61: d6:63:18:a7:12:6d:4d:e5:40:66:ab:9b:20:b4:6a: c2:25:d4:ce:f3:d4:df:0f:00:d7:12:75:02:52:77: 3c:81:8d:73:41:94:b1:f5:a6:8a:09:89:81:90:ce: 2b:b3:86:57:ca:5e:c0:d0:fc:3a:68:15:4d:f8:2e: dc:41:9b:96:82:21:9e:56:52:2e:a4:47:bb:08:64: e2:d7:a7:3c:8b:87:eb:cf:7e:d4:58:62:fe:de:6c: 25:b4:dd:40:91:4b:8a:1d:3a:81:d7:0f:94:31:4d: 5c:99:6f:ab:fb:fc:d8:4d:12:b9:fc:a9:fc:ea:36: bf:e1:7b:17:12:9f:c1:75:4f:15:b8:0f:22:ba:dc: 99:b4:0a:e5:99:e3:6b:f4:0c:ef:b1:4f:e1:51:11: f1:7f:26:68:7f:c0:e7:2c:4c:2f:f9:ca:19:62:59: 6a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F4:00:FD:35:FC:EB:CD:6B:9B:DD:67:CF:1C:E2:46:6A:4B:2F:E4 X509v3 Authority Key Identifier: keyid:9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:be:ac:5f:69:72:db:b5:3d:15:ba:4f:9d:27:16:55:b2:00: 34:a0:2f:45:a2:7f:67:80:da:b9:76:b6:7f:25:9d:fa:29:03: 05:75:42:7e:3a:fc:49:77:b9:e9:cc:1a:c2:e1:2b:70:6c:fd: 9a:f7:4a:1a:d8:d4:14:e3:40:d0:4f:24:e1:92:72:d7:4a:1b: d8:95:93:7f:51:70:f4:bd:43:f5:c0:41:fc:94:82:57:4d:df: 71:20:58:ef:56:24:76:d2:da:dc:4d:c3:08:f2:c6:19:cc:d6: 72:91:0d:ea:4d:2b:dd:e9:38:d9:45:cd:fd:ff:ed:79:62:4a: 70:eb:a1:bf:dd:17:1e:54:35:85:68:8a:eb:de:14:23:a0:3c: b8:b1:b3:48:94:a3:d2:3e:8d:74:fc:7b:79:e7:ea:04:37:f2: 5f:55:c4:dc:95:3e:d0:1d:19:83:dd:ef:27:9d:1d:8c:20:22: 09:9d:9d:12:9f:d1:a7:97:0f:3c:86:01:42:44:3b:b2:1c:bc: 3c:ba:52:94:42:84:20:e1:a5:b5:92:ef:d6:5f:42:7a:66:68: ec:ca:24:c1:c8:84:e9:dc:29:dc:66:d2:94:31:a8:92:c1:a7: 48:0d:23:e5:e9:df:77:0c:6e:57:28:5e:9a:94:e2:0d:23:2b: 65:c1:3e:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJDMkExMTAvBgNVBAUTKDlFMDU1RDM1Q0YzMjkyNTMzNUNDOTQwQ0M4ODI4QjYz REQ2MDczMEIwHhcNMjYwNTIxMDIyOTU1WhcNMjYwNTI4MDIyOTU1WjAYMRYwFAYD VQQDEw02YTBlNmUyMy02YTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2oy1tFtiK29PxP1st7QcDBPzuO6X+eiQI+VE1tkOfHnLdOVVSOGxi8jCeWoS gduu7Qem01IVLxlFJ82+8FkxWJUUswdBPlgajO1gHwaEu5UutmRjhbAmh2HWYxin Em1N5UBmq5sgtGrCJdTO89TfDwDXEnUCUnc8gY1zQZSx9aaKCYmBkM4rs4ZXyl7A 0Pw6aBVN+C7cQZuWgiGeVlIupEe7CGTi16c8i4frz37UWGL+3mwltN1AkUuKHTqB 1w+UMU1cmW+r+/zYTRK5/Kn86ja/4XsXEp/BdU8VuA8iutyZtArlmeNr9AzvsU/h URHxfyZof8DnLEwv+coZYllqFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDb0AP01 /OvNa5vdZ88c4kZqSy/kMB8GA1UdIwQYMBaAFJ4FXTXPMpJTNcyUDMiCi2PdYHML MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkMyQS9FRDlGOERCQURF MTExMUVEODVFQzBBNDlDNEY5QUUwMi9uZ1ZkTmM4eWtsTTF6SlFNeUlLTFk5MWdj d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25nVmROYzh5a2xNMXpKUU15SUtMWTkxZ2N3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkMyQS9FRDlGOERCQURFMTExMUVEODVFQzBBNDlDNEY5QUUwMi9uZ1ZkTmM4eWts TTF6SlFNeUlLTFk5MWdjd3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAL6sX2ly27U9FbpPnScWVbIANKAvRaJ/Z4DauXa2fyWd+ikDBXVCfjr8SXe5 6cwawuErcGz9mvdKGtjUFONA0E8k4ZJy10ob2JWTf1Fw9L1D9cBB/JSCV03fcSBY 71YkdtLa3E3DCPLGGczWcpEN6k0r3ek42UXN/f/teWJKcOuhv90XHlQ1hWiK694U I6A8uLGzSJSj0j6NdPx7eefqBDfyX1XE3JU+0B0Zg93vJ50djCAiCZ2dEp/Rp5cP PIYBQkQ7shy8PLpSlEKEIOGltZLv1l9CemZo7MokwciE6dwp3GbSlDGoksGnSA0j 5enfdwxuVyhempTiDSMrZcE+RA== -----END CERTIFICATE-----Generated at Thu May 21 09:36:30 2026 by rpki-client