$ rpki-client -vvf rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft File: 2dCjxqTde6e0VN6uAa9nryxUxDM.mft (raw, json) Hash identifier: mBgcVYm8NOtuxFycGZBk6zyj/ubS1YvZdRUKkz2r2b0= Subject key identifier: 89:0E:0E:30:18:73:58:1C:B4:F2:F9:F1:82:1F:5E:AA:78:AF:AD:A2 Authority key identifier: D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33 Certificate issuer: /CN=A915C9B7/serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433 Certificate serial: 08A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft Manifest number: 0898 Signing time: Wed 20 May 2026 20:35:08 +0000 Manifest this update: Wed 20 May 2026 20:35:08 +0000 Manifest next update: Wed 27 May 2026 20:35:08 +0000 Files and hashes: 1: 2dCjxqTde6e0VN6uAa9nryxUxDM.crl (hash: m7UTw910UM6530V8xWv8aWvnKQk5icDXMBV+7NjXKxA=) 2: 12A47D4E9CDB11EF857FB626C4F9AE02.roa (hash: 1GModq8GVTp3VBZ+WmjSYkW1Bqq/2XyaBR4joVrXKaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.crl rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 20:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2213 (0x8a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C9B7, serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433 Validity Not Before: May 20 20:35:08 2026 GMT Not After : May 27 20:35:08 2026 GMT Subject: CN=6a0e1afc-6562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f2:8c:a0:ef:a0:07:3f:50:7a:4b:67:65:66: 23:bc:e0:f8:0c:7f:94:e2:c2:58:d4:a1:20:5b:b2: 0e:56:4c:4c:5f:e4:08:54:a1:9f:7e:23:ba:1e:82: a6:81:68:20:3b:c9:e5:d8:b9:ba:b3:16:34:72:d4: e2:c6:9f:09:10:e9:d2:51:75:8b:82:21:c0:cf:f1: aa:d2:93:e9:20:35:6f:82:0d:90:d6:dc:42:c2:fa: 6a:14:c3:93:00:20:d4:be:ca:77:df:0f:bd:65:89: 6b:d2:3c:9e:a0:c8:8a:89:59:b9:b6:43:96:aa:99: 02:82:bf:19:29:b1:5f:ca:45:55:3f:4e:96:8b:12: a2:a4:e2:38:4d:b8:f1:eb:c5:93:9b:3e:c6:35:3f: 6c:ed:e0:e7:f0:b9:45:e2:38:3a:93:6f:0f:56:ba: 69:1c:e2:5c:f9:85:fc:a3:df:ba:23:4e:3e:2c:c2: d8:5d:3c:04:29:ed:81:5e:d7:22:84:50:06:5b:f9: 40:0e:f4:a8:b6:31:ba:92:79:63:b4:e5:b1:48:02: c5:4c:0c:3c:de:28:1f:b1:73:4b:14:dc:fb:b6:60: 32:4c:e3:25:1b:96:92:2c:4e:6e:d4:97:d9:6e:be: 72:6a:0c:2a:5e:11:c4:2e:ca:f4:77:f7:4a:51:c2: 41:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:0E:0E:30:18:73:58:1C:B4:F2:F9:F1:82:1F:5E:AA:78:AF:AD:A2 X509v3 Authority Key Identifier: keyid:D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:87:e6:b1:d8:70:ff:3c:66:b5:6f:26:62:c9:47:22:68:ff: cb:90:a3:a7:f2:8b:8d:bf:43:ff:3a:04:f7:70:21:ae:c0:d2: 1f:ba:66:9a:07:c7:f2:3c:16:4c:60:0b:4a:43:b2:b9:c5:85: ad:ff:d6:e9:df:10:ee:15:46:aa:c4:9c:70:a1:1f:f6:8f:e6: 45:b3:a4:b0:37:84:ab:1a:f7:1d:a0:4e:fe:f1:75:81:41:7a: 4f:46:81:cd:85:08:8f:a5:f5:93:64:ce:0f:b4:26:5b:8f:ee: 7d:5e:06:7c:95:b0:b4:4a:69:4d:e3:64:8c:47:17:b8:26:3d: 94:c4:ff:1a:d2:46:e0:c1:98:f1:84:4e:b7:02:4f:ec:d3:13: 54:3c:fc:5f:26:92:03:d8:d2:2a:cf:8a:c1:5c:b1:8f:c7:20: 82:dd:64:19:4f:b6:a4:45:d9:69:0e:42:f0:12:79:e8:cf:4e: 99:23:d7:b7:14:4e:c0:59:36:20:f5:b2:e2:28:89:47:21:d5: bb:05:eb:37:ec:12:b0:52:5e:e4:67:83:ad:7c:e1:40:e1:4c: 3c:d2:ee:35:3d:27:f9:8c:1e:06:bf:fa:7e:d2:b3:5f:30:b5: 66:1e:1f:27:2e:f2:a5:ae:03:bf:d1:a9:53:92:8d:63:f2:58: 0b:4f:ba:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM5QjcxMTAvBgNVBAUTKEQ5RDBBM0M2QTRERDdCQTdCNDU0REVBRTAxQUY2N0FG MkM1NEM0MzMwHhcNMjYwNTIwMjAzNTA4WhcNMjYwNTI3MjAzNTA4WjAYMRYwFAYD VQQDEw02YTBlMWFmYy02NTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPKMoO+gBz9QektnZWYjvOD4DH+U4sJY1KEgW7IOVkxMX+QIVKGffiO6HoKm gWggO8nl2Lm6sxY0ctTixp8JEOnSUXWLgiHAz/Gq0pPpIDVvgg2Q1txCwvpqFMOT ACDUvsp33w+9ZYlr0jyeoMiKiVm5tkOWqpkCgr8ZKbFfykVVP06WixKipOI4Tbjx 68WTmz7GNT9s7eDn8LlF4jg6k28PVrppHOJc+YX8o9+6I04+LMLYXTwEKe2BXtci hFAGW/lADvSotjG6knljtOWxSALFTAw83igfsXNLFNz7tmAyTOMlG5aSLE5u1JfZ br5yagwqXhHELsr0d/dKUcJBtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIkODjAY c1gctPL58YIfXqp4r62iMB8GA1UdIwQYMBaAFNnQo8ak3XuntFTergGvZ68sVMQz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzlCNy84QzI2NEZEMkVF NUExMUVBQUQ3NjkwMzNDNEY5QUUwMi8yZENqeHFUZGU2ZTBWTjZ1QWE5bnJ5eFV4 RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJkQ2p4cVRkZTZlMFZONnVBYTlucnl4VXhETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzlCNy84QzI2NEZEMkVFNUExMUVBQUQ3NjkwMzNDNEY5QUUwMi8yZENqeHFUZGU2 ZTBWTjZ1QWE5bnJ5eFV4RE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcYfmsdhw/zxmtW8mYslHImj/y5Cjp/KLjb9D/zoE93AhrsDSH7pmmgfH8jwW TGALSkOyucWFrf/W6d8Q7hVGqsSccKEf9o/mRbOksDeEqxr3HaBO/vF1gUF6T0aB zYUIj6X1k2TOD7QmW4/ufV4GfJWwtEppTeNkjEcXuCY9lMT/GtJG4MGY8YROtwJP 7NMTVDz8XyaSA9jSKs+KwVyxj8cggt1kGU+2pEXZaQ5C8BJ56M9OmSPXtxROwFk2 IPWy4iiJRyHVuwXrN+wSsFJe5GeDrXzhQOFMPNLuNT0n+YweBr/6ftKzXzC1Zh4f Jy7ypa4Dv9GpU5KNY/JYC0+64A== -----END CERTIFICATE-----Generated at Thu May 21 10:58:24 2026 by rpki-client