$ rpki-client -vvf rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft File: v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft (raw, json) Hash identifier: FA2V2fR4ofxI1VZAF/wT4ew3SZQUdVr1OBe73dRw3AM= Subject key identifier: 0E:68:87:83:12:B9:42:E3:B3:B3:0C:FD:38:7D:B1:C5:28:4D:B7:AA Authority key identifier: BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34 Certificate issuer: /CN=A9167FF5/serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834 Certificate serial: 025E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft Manifest number: 0258 Signing time: Thu 21 May 2026 02:18:36 +0000 Manifest this update: Thu 21 May 2026 02:18:35 +0000 Manifest next update: Thu 28 May 2026 02:18:35 +0000 Files and hashes: 1: v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl (hash: KlxBfCOQArNtPBODtqX9cE3Kzoy5cDUSfLGbC7OvlWM=) 2: DCEA0362C17C11ED92AD7D85C4F9AE02.roa (hash: tbYd8JflLqAHQOW0BH5GJ8PqKcZMxydsXpsTFe7lGrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:18:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 606 (0x25e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167FF5, serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834 Validity Not Before: May 21 02:18:35 2026 GMT Not After : May 28 02:18:35 2026 GMT Subject: CN=6a0e6b7c-7a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1a:be:45:cd:52:89:e9:86:16:f1:72:70:21: 60:5a:fc:da:24:78:41:6d:77:5d:47:db:e1:45:bb: 9e:00:29:18:c8:78:f5:73:1f:33:3f:aa:96:a9:57: 35:78:36:4f:e8:b3:36:bd:dd:43:71:68:14:0c:c2: 25:76:f4:40:05:ae:d7:7b:b6:a9:8c:3b:76:56:e7: 20:2a:a7:aa:85:c5:16:cb:68:92:5b:1e:27:a7:c9: 0c:60:61:b4:a4:3a:17:d0:9b:24:4f:c4:78:40:c6: 96:96:77:70:d6:ea:17:4a:88:d8:62:de:ff:2f:9d: 88:ce:75:90:df:17:ef:b5:d1:03:94:c2:08:96:28: 98:0f:ce:6e:1a:a1:79:f4:66:10:38:98:c5:3a:a1: d7:24:c3:71:6b:5c:84:21:15:65:fa:bc:ff:68:3a: 81:76:ff:0b:cf:81:d1:29:6c:e2:56:56:bb:37:5e: 31:d3:e3:05:5f:72:15:83:94:3f:4b:8c:ce:a1:fe: 48:72:43:9d:b2:c8:71:95:dd:29:96:78:7b:c0:49: 67:ae:6e:d1:e4:90:4a:0d:cc:77:14:44:12:74:95: 44:23:07:f6:d2:e6:63:05:3b:01:aa:35:3f:4a:ca: 21:05:6d:3e:42:57:e1:df:07:08:55:85:2c:dc:3d: cf:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:68:87:83:12:B9:42:E3:B3:B3:0C:FD:38:7D:B1:C5:28:4D:B7:AA X509v3 Authority Key Identifier: keyid:BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:52:66:3a:17:d7:fd:a6:63:56:53:04:86:98:ed:6a:33:1b: de:28:1c:05:4b:df:c8:5a:d7:85:93:b4:f9:57:ff:d0:1c:dc: 9f:78:e5:bd:e1:83:4d:53:9a:19:bd:3c:91:7c:d5:d2:62:06: 53:64:b8:f4:ad:12:d7:98:ae:64:d6:08:f3:c3:c0:09:11:07: 80:81:e3:65:b5:62:43:40:d7:de:28:28:4f:9a:17:73:4d:3f: 3d:e8:50:d3:e5:ab:31:f1:6b:16:36:75:7d:02:1f:0b:7f:38: 0b:2f:38:4b:3d:94:52:2a:57:ef:28:24:1c:0f:c1:4e:13:01: ce:54:f7:d2:8c:fd:ce:aa:50:80:51:7c:84:d8:4f:72:7c:4b: 06:33:1e:f8:2d:52:d1:3a:c4:ad:41:2b:b4:85:e5:86:dd:db: d9:71:dd:87:ad:57:c8:89:fc:8e:2a:fd:5f:f6:7f:1e:7e:30: e9:44:f2:b0:ce:2a:2c:0c:24:e6:29:3e:de:97:b9:74:89:1b: e1:f3:26:76:46:1b:fb:c9:62:c2:5b:0d:79:2a:97:8d:5f:3c: a4:d0:e2:50:1c:dd:05:9d:db:4c:f1:67:52:5c:7c:1d:93:0d: 0b:e4:29:5a:1a:f8:3c:30:53:3b:de:d0:a5:34:e3:33:c8:d5: d5:9f:51:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGRjUxMTAvBgNVBAUTKEJGQUYyMzYzNzU3NzI5RUUwNUFCMjFCNzFEMjA1QUI0 MThFMUI4MzQwHhcNMjYwNTIxMDIxODM1WhcNMjYwNTI4MDIxODM1WjAYMRYwFAYD VQQDEw02YTBlNmI3Yy03YTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRq+Rc1SiemGFvFycCFgWvzaJHhBbXddR9vhRbueACkYyHj1cx8zP6qWqVc1 eDZP6LM2vd1DcWgUDMIldvRABa7Xe7apjDt2VucgKqeqhcUWy2iSWx4np8kMYGG0 pDoX0JskT8R4QMaWlndw1uoXSojYYt7/L52IznWQ3xfvtdEDlMIIliiYD85uGqF5 9GYQOJjFOqHXJMNxa1yEIRVl+rz/aDqBdv8Lz4HRKWziVla7N14x0+MFX3IVg5Q/ S4zOof5IckOdsshxld0plnh7wElnrm7R5JBKDcx3FEQSdJVEIwf20uZjBTsBqjU/ SsohBW0+Qlfh3wcIVYUs3D3PsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA5oh4MS uULjs7MM/Th9scUoTbeqMB8GA1UdIwQYMBaAFL+vI2N1dynuBashtx0gWrQY4bg0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0ZGNS8yNzIwNDM5MkMx NzgxMUVEQUY1NEE5NUZDNEY5QUUwMi92NjhqWTNWM0tlNEZxeUczSFNCYXRCamh1 RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y2OGpZM1YzS2U0RnF5RzNIU0JhdEJqaHVEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0ZGNS8yNzIwNDM5MkMxNzgxMUVEQUY1NEE5NUZDNEY5QUUwMi92NjhqWTNWM0tl NEZxeUczSFNCYXRCamh1RFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhVJmOhfX/aZjVlMEhpjtajMb3igcBUvfyFrXhZO0+Vf/0Bzcn3jlveGDTVOa Gb08kXzV0mIGU2S49K0S15iuZNYI88PACREHgIHjZbViQ0DX3igoT5oXc00/PehQ 0+WrMfFrFjZ1fQIfC384Cy84Sz2UUipX7ygkHA/BThMBzlT30oz9zqpQgFF8hNhP cnxLBjMe+C1S0TrErUErtIXlht3b2XHdh61XyIn8jir9X/Z/Hn4w6UTysM4qLAwk 5ik+3pe5dIkb4fMmdkYb+8liwlsNeSqXjV88pNDiUBzdBZ3bTPFnUlx8HZMNC+Qp Whr4PDBTO97QpTTjM8jV1Z9RYg== -----END CERTIFICATE-----Generated at Thu May 21 09:38:34 2026 by rpki-client