$ rpki-client -vvf rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft File: Satd0R3JItzI8j3VqSxplN1wNQQ.mft (raw, json) Hash identifier: zlyrWcE8Tbz8KgzVvDSbBkZeoSDKEknuwsUEivj9D4k= Subject key identifier: D8:6F:36:4E:91:4E:14:A2:41:8C:4F:20:BB:78:7C:B0:45:1F:F0:2E Authority key identifier: 49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04 Certificate issuer: /CN=A916593B/serialNumber=49AB5DD11DC922DCC8F23DD5A92C6994DD703504 Certificate serial: 0414 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft Manifest number: 0407 Signing time: Thu 21 May 2026 00:32:18 +0000 Manifest this update: Thu 21 May 2026 00:32:18 +0000 Manifest next update: Thu 28 May 2026 00:32:18 +0000 Files and hashes: 1: Satd0R3JItzI8j3VqSxplN1wNQQ.crl (hash: GunYnrgDRhZJB3L/aXYoP/R9Uxw2GVUJ7K1rwXPuoxI=) 2: 718673B6BB7F11EC9E187F19C4F9AE02.roa (hash: vBsafuWlA5fDTGa/5s57fr9OWMHZTtKdoWY5g838LV8=) 3: 83A55CAE190111F1924FB715213D8C67.roa (hash: nlTRTD0+8MZz2UjHUQp1Ig/zh1Jia7bSOziI2rZb1o0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.crl rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 00:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1044 (0x414) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916593B, serialNumber=49AB5DD11DC922DCC8F23DD5A92C6994DD703504 Validity Not Before: May 21 00:32:18 2026 GMT Not After : May 28 00:32:18 2026 GMT Subject: CN=6a0e5292-fd12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2a:dc:83:e6:e9:69:53:4a:08:aa:00:4a:c5: 8d:1b:67:38:16:84:db:48:54:6b:ea:96:7d:60:8d: 52:5d:89:87:41:36:c2:07:5b:9a:31:b9:d3:1d:8f: eb:c5:c2:46:84:b5:a2:57:f0:30:28:bb:9e:f7:d5: 41:e6:8e:6c:80:5d:08:f3:e7:76:1f:2c:99:2d:01: 86:bd:74:ba:cf:1c:63:45:ff:a5:69:3c:3a:89:94: 6c:f6:eb:00:b8:6b:e1:7d:e1:7b:18:65:ac:c2:dc: 7b:7a:63:76:e7:24:05:9d:95:46:d5:da:a9:7f:e5: 53:0b:92:14:1d:42:a5:9b:3e:e0:88:2f:e9:7f:0a: 7a:8b:bd:44:41:d0:46:04:7a:9c:f0:89:7b:a8:14: 5a:15:7f:05:0b:c4:be:4d:24:9f:1c:e0:84:c4:f7: 45:5f:da:e8:d0:77:e8:b6:96:b2:0f:2a:55:26:50: ff:36:f5:15:c1:c9:e7:48:7d:3e:ef:fe:e6:86:39: a0:53:fa:ff:5c:8b:74:34:57:95:d8:11:32:bf:ea: a2:de:14:d6:3a:bb:b1:15:c1:7f:2b:04:d5:92:1b: 53:58:7c:28:fd:3b:13:b7:64:24:dd:b4:9f:e8:31: 15:c8:d5:5e:76:09:7c:37:2e:b2:02:d8:e4:83:38: bd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6F:36:4E:91:4E:14:A2:41:8C:4F:20:BB:78:7C:B0:45:1F:F0:2E X509v3 Authority Key Identifier: keyid:49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:11:bd:52:1b:aa:7e:2e:a0:6a:4c:e9:f6:12:6e:f4:42:81: 4a:62:d8:0e:a5:4b:9e:14:a3:58:ba:30:f6:46:e6:fe:56:00: 27:70:37:51:df:6e:5c:ef:97:3e:ee:9e:f0:11:4f:ad:4a:4f: 11:d6:aa:45:5a:37:1f:3d:b6:4f:8e:27:16:6e:6d:ac:cc:3e: 21:d0:71:24:fa:de:d4:44:7e:f4:c7:e4:4f:2a:c5:52:2a:3e: b0:48:1e:10:53:36:6e:97:e2:72:a3:2e:56:ea:62:1f:17:4b: f5:9b:53:e8:8e:15:fe:ff:df:27:98:d8:51:a9:1c:54:8a:c0: c3:bc:18:08:0e:68:15:42:69:46:db:1b:87:cb:d2:20:75:4c: ee:0e:7f:5e:78:0b:0c:5b:55:ab:75:7e:f7:57:80:56:a7:fb: 39:0d:a3:e9:fc:12:5e:4a:95:ba:da:a0:3b:5d:a5:9c:e5:b4: 23:86:a8:26:ff:5a:9a:a8:96:ba:81:6f:9b:cf:04:f8:15:b4: 66:07:14:56:07:f3:17:eb:7b:56:22:a8:54:cf:d7:40:e5:80: bd:04:fe:79:12:cc:5a:a4:18:17:39:18:be:c2:5e:94:e4:7b: 08:f9:27:76:20:1a:4a:cb:b7:3a:0b:68:ed:e1:2b:e0:83:bc: 36:aa:c4:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU5M0IxMTAvBgNVBAUTKDQ5QUI1REQxMURDOTIyRENDOEYyM0RENUE5MkM2OTk0 REQ3MDM1MDQwHhcNMjYwNTIxMDAzMjE4WhcNMjYwNTI4MDAzMjE4WjAYMRYwFAYD VQQDEw02YTBlNTI5Mi1mZDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqyrcg+bpaVNKCKoASsWNG2c4FoTbSFRr6pZ9YI1SXYmHQTbCB1uaMbnTHY/r xcJGhLWiV/AwKLue99VB5o5sgF0I8+d2HyyZLQGGvXS6zxxjRf+laTw6iZRs9usA uGvhfeF7GGWswtx7emN25yQFnZVG1dqpf+VTC5IUHUKlmz7giC/pfwp6i71EQdBG BHqc8Il7qBRaFX8FC8S+TSSfHOCExPdFX9ro0HfotpayDypVJlD/NvUVwcnnSH0+ 7/7mhjmgU/r/XIt0NFeV2BEyv+qi3hTWOruxFcF/KwTVkhtTWHwo/TsTt2Qk3bSf 6DEVyNVedgl8Ny6yAtjkgzi9HQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNhvNk6R ThSiQYxPILt4fLBFH/AuMB8GA1UdIwQYMBaAFEmrXdEdySLcyPI91aksaZTdcDUE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTkzQi8xMDNDN0QxQ0JC N0ExMUVDODI5RUU4MERDNEY5QUUwMi9TYXRkMFIzSkl0ekk4ajNWcVN4cGxOMXdO UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NhdGQwUjNKSXR6SThqM1ZxU3hwbE4xd05RUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTkzQi8xMDNDN0QxQ0JCN0ExMUVDODI5RUU4MERDNEY5QUUwMi9TYXRkMFIzSkl0 ekk4ajNWcVN4cGxOMXdOUVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOhG9Uhuqfi6gakzp9hJu9EKBSmLYDqVLnhSjWLow9kbm/lYAJ3A3Ud9uXO+X Pu6e8BFPrUpPEdaqRVo3Hz22T44nFm5trMw+IdBxJPre1ER+9MfkTyrFUio+sEge EFM2bpficqMuVupiHxdL9ZtT6I4V/v/fJ5jYUakcVIrAw7wYCA5oFUJpRtsbh8vS IHVM7g5/XngLDFtVq3V+91eAVqf7OQ2j6fwSXkqVutqgO12lnOW0I4aoJv9amqiW uoFvm88E+BW0ZgcUVgfzF+t7ViKoVM/XQOWAvQT+eRLMWqQYFzkYvsJelOR7CPkn diAaSsu3Ogto7eEr4IO8NqrEJg== -----END CERTIFICATE-----Generated at Thu May 21 10:52:57 2026 by rpki-client