$ rpki-client -vvf rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft File: k-dhjM_iZIDXknoYcbrYP--d9IQ.mft (raw, json) Hash identifier: DXVD4KsCmk68ctcBc50V9fPKqJJvrroYXY6kZ38WzV0= Subject key identifier: 79:39:C6:D4:3E:63:7E:B8:54:0D:F0:8D:AA:B9:4A:F5:29:01:3A:1D Authority key identifier: 93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84 Certificate issuer: /CN=A915F438/serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484 Certificate serial: 25EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft Manifest number: 25D1 Signing time: Thu 28 May 2026 15:40:08 +0000 Manifest this update: Thu 28 May 2026 15:40:07 +0000 Manifest next update: Thu 04 Jun 2026 15:40:07 +0000 Files and hashes: 1: k-dhjM_iZIDXknoYcbrYP--d9IQ.crl (hash: hmlA5IucOaJy2tU/DKhDJSTs409z1HxilxnbytIkHNQ=) 2: 657B47B61C2F11E880C4ED7BC4F9AE02.roa (hash: 1ghEv7poKGW1kihPQdkAbm84XN1Xrk7KTTqEVU0zlnI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 15:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9708 (0x25ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F438, serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484 Validity Not Before: May 28 15:40:07 2026 GMT Not After : Jun 4 15:40:07 2026 GMT Subject: CN=6a1861d8-8ddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:39:9c:8f:d4:d6:be:ad:99:e6:49:0b:1c:ac: a7:2f:e8:64:a9:03:53:46:b3:67:46:88:3d:21:b6: d5:7e:4b:60:3c:0d:c0:ac:0d:30:02:f9:2a:cd:b1: db:22:4c:1f:6a:ec:78:ea:70:2e:b7:9c:cb:49:82: 3c:1d:50:f6:ca:cb:af:8e:25:e4:64:06:8f:a0:a4: 54:10:e4:45:f3:f9:b4:f6:28:8e:0e:7b:64:f0:ec: e7:87:e2:a8:0e:d4:af:cd:c2:c4:43:0a:35:a2:e5: d0:b3:9b:52:8c:10:eb:8e:ba:38:7b:34:22:15:74: 91:f7:3d:22:00:05:1b:7b:f3:18:06:54:0a:65:e8: 0d:e8:38:87:11:ac:cb:17:a1:de:58:80:4a:50:18: 3d:d8:34:df:2b:19:00:fa:d8:c0:c5:eb:79:5d:7c: 41:07:5e:f1:fe:b2:a3:72:dd:14:7d:44:74:1d:9c: 27:54:ee:52:f6:4a:a3:1c:6a:74:37:54:f4:6a:78: de:1f:6c:39:ac:9d:ab:56:0e:56:03:c9:fd:e4:66: c3:be:8b:95:12:17:63:89:30:5b:c6:31:98:78:38: a0:b8:f5:88:cf:96:84:ee:8e:54:af:a6:83:29:ef: 32:66:0d:18:3d:76:0a:c3:02:ea:39:21:c5:5e:ad: e6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:39:C6:D4:3E:63:7E:B8:54:0D:F0:8D:AA:B9:4A:F5:29:01:3A:1D X509v3 Authority Key Identifier: keyid:93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d0:a0:ec:67:73:cc:51:1f:05:b0:80:bf:f4:36:21:6e:59: 21:24:b4:3e:4a:7b:d5:b0:ad:b5:54:04:3f:21:c4:7e:19:6a: 88:2c:ce:6b:6e:df:61:00:96:36:c8:e2:bd:24:34:fd:b5:b6: 4e:52:0d:cb:bf:49:c4:f9:61:a2:8d:3b:fe:b1:5e:37:de:08: 33:e4:83:72:2d:d0:be:c6:d0:3f:9f:30:1b:dc:c6:b6:e1:a9: 25:dc:b5:46:e6:65:61:4f:ef:70:f4:94:9b:c4:80:c2:dc:3a: 2c:4d:97:89:72:4a:fe:9f:ef:82:c4:ed:dc:38:75:9a:e7:52: 7f:c6:ac:b6:a3:fd:e5:68:59:24:2d:9b:07:26:3e:9c:14:ff: f8:7d:e6:3f:c7:e8:82:93:15:b8:69:85:83:d7:39:30:03:af: 2f:a5:83:f1:30:fe:8b:04:a6:f3:a6:7e:cb:48:f8:18:aa:e9: 61:15:94:fe:9f:c5:0e:93:81:a7:ed:ef:34:a8:4c:40:9c:88: f2:26:e4:e6:3f:8f:8d:2b:81:39:7f:43:18:b2:37:09:08:bb: c9:8d:ec:de:29:08:e2:c3:6b:c8:11:38:33:67:cd:fc:55:35: 16:ab:d9:61:d0:02:77:e5:08:6f:79:af:bb:96:c6:f9:93:7a: 32:7a:40:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY0MzgxMTAvBgNVBAUTKDkzRTc2MThDQ0ZFMjY0ODBENzkyN0ExODcxQkFEODNG RUY5REY0ODQwHhcNMjYwNTI4MTU0MDA3WhcNMjYwNjA0MTU0MDA3WjAYMRYwFAYD VQQDEw02YTE4NjFkOC04ZGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTmcj9TWvq2Z5kkLHKynL+hkqQNTRrNnRog9IbbVfktgPA3ArA0wAvkqzbHb Ikwfaux46nAut5zLSYI8HVD2ysuvjiXkZAaPoKRUEORF8/m09iiODntk8Oznh+Ko DtSvzcLEQwo1ouXQs5tSjBDrjro4ezQiFXSR9z0iAAUbe/MYBlQKZegN6DiHEazL F6HeWIBKUBg92DTfKxkA+tjAxet5XXxBB17x/rKjct0UfUR0HZwnVO5S9kqjHGp0 N1T0anjeH2w5rJ2rVg5WA8n95GbDvouVEhdjiTBbxjGYeDiguPWIz5aE7o5Ur6aD Ke8yZg0YPXYKwwLqOSHFXq3mawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHk5xtQ+ Y364VA3wjaq5SvUpATodMB8GA1UdIwQYMBaAFJPnYYzP4mSA15J6GHG62D/vnfSE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjQzOC9CN0VGNTNGRTJC NEUxMUU1QUNCQkRGM0FDNEY5QUUwMi9rLWRoak1faVpJRFhrbm9ZY2JyWVAtLWQ5 SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2stZGhqTV9pWklEWGtub1ljYnJZUC0tZDlJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjQzOC9CN0VGNTNGRTJCNEUxMUU1QUNCQkRGM0FDNEY5QUUwMi9rLWRoak1faVpJ RFhrbm9ZY2JyWVAtLWQ5SVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi9Cg7GdzzFEfBbCAv/Q2IW5ZISS0Pkp71bCttVQEPyHEfhlqiCzOa27fYQCW NsjivSQ0/bW2TlINy79JxPlhoo07/rFeN94IM+SDci3QvsbQP58wG9zGtuGpJdy1 RuZlYU/vcPSUm8SAwtw6LE2XiXJK/p/vgsTt3Dh1mudSf8astqP95WhZJC2bByY+ nBT/+H3mP8fogpMVuGmFg9c5MAOvL6WD8TD+iwSm86Z+y0j4GKrpYRWU/p/FDpOB p+3vNKhMQJyI8ibk5j+PjSuBOX9DGLI3CQi7yY3s3ikI4sNryBE4M2fN/FU1FqvZ YdACd+UIb3mvu5bG+ZN6MnpAPg== -----END CERTIFICATE-----Generated at Sat May 30 00:52:58 2026 by rpki-client