$ rpki-client -vvf rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft File: 2AV3_jUc7BMvwP-hiIerDHRrFPI.mft (raw, json) Hash identifier: kSZSMeS364zH2T+nguzR4WG5NecCtUwYpCLY6ngXQlQ= Subject key identifier: CA:63:CB:9F:63:67:48:A5:5B:AA:89:C0:AC:4E:67:4C:59:57:72:78 Authority key identifier: D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2 Certificate issuer: /CN=A9169FA9/serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2 Certificate serial: 024D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft Manifest number: 0248 Signing time: Thu 21 May 2026 02:27:57 +0000 Manifest this update: Thu 21 May 2026 02:27:57 +0000 Manifest next update: Thu 28 May 2026 02:27:57 +0000 Files and hashes: 1: 2AV3_jUc7BMvwP-hiIerDHRrFPI.crl (hash: HqmLfAj2M97rxq66R3cMez+VVGjmU9mo15pJToLR6Sg=) 2: 732F4132D85E11EDB34ED618C4F9AE02.roa (hash: ayWEsS+ZrZ8bPfPsMRSq4bj/hoO5bdoB3syH3D04L4M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 589 (0x24d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169FA9, serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2 Validity Not Before: May 21 02:27:57 2026 GMT Not After : May 28 02:27:57 2026 GMT Subject: CN=6a0e6dad-81bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cd:ef:44:42:ab:62:90:83:fa:3a:4d:7a:34: c4:6e:41:ed:dd:a7:8f:97:20:c4:6e:79:db:d7:91: 90:d5:11:de:e7:78:23:ab:04:44:d7:70:80:dd:e3: 43:ea:46:21:38:f7:d3:4a:30:d1:64:3d:f4:dc:f5: 21:fa:92:95:32:33:ad:a0:2c:35:6d:a5:28:ee:07: 35:ad:79:22:18:7b:a5:80:e6:f1:d8:fa:ad:af:2b: 8f:a7:2d:0d:60:4c:45:cd:1f:90:f7:ef:67:a0:ad: 1e:e5:b3:8d:01:3e:b4:81:fa:fb:02:8e:d8:ba:18: 4a:ca:3e:05:20:db:34:e7:e4:e9:81:45:65:2d:af: 9b:79:33:d2:10:6e:f8:e0:11:ec:27:3c:27:79:f2: 94:7b:d1:df:95:70:f9:3c:68:62:69:ba:36:4f:05: 8a:39:cc:ea:a7:35:83:1b:ed:ce:3f:51:cd:09:15: 7f:74:4e:60:5c:d6:a6:dc:bf:62:ae:36:64:c9:a3: c9:d2:80:ed:e5:67:bb:6c:c7:85:48:b9:d4:b3:f9: 13:27:73:e7:a7:6c:cb:70:32:ad:ab:eb:b0:2d:88: 7c:c1:37:28:38:ed:2c:41:9d:c1:54:b2:e0:8a:6b: b3:81:a1:0d:45:75:b8:48:46:10:7f:c0:5a:7c:8e: bf:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:63:CB:9F:63:67:48:A5:5B:AA:89:C0:AC:4E:67:4C:59:57:72:78 X509v3 Authority Key Identifier: keyid:D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:5e:23:ec:bc:5a:42:f8:dd:de:ec:d8:84:a3:ff:94:c4:8c: 2b:44:e5:3d:59:ca:07:f5:b4:7c:b4:93:b9:c8:70:c7:a7:4a: cf:0b:ff:a3:03:c0:90:23:76:70:7a:cb:66:28:1d:df:8c:8f: 8c:7c:6f:e4:94:9e:37:36:1c:f9:0d:44:d9:ad:05:99:a1:82: 09:18:de:cb:95:da:0b:22:62:aa:9a:36:0a:f5:9a:9c:ba:4f: fe:4f:91:28:9f:11:12:d6:80:46:1e:9f:92:ce:fe:1d:22:26: 97:ee:a1:7d:1c:0d:7e:7d:f6:e0:18:c0:22:2b:bd:e0:ee:42: 8c:5f:78:f6:c9:21:f9:33:51:e5:03:4f:5c:31:0f:95:0c:45: 05:ec:41:85:f0:d1:2d:a3:e7:5a:a7:d4:99:c6:96:01:2e:5a: 64:cf:0a:94:01:ed:05:98:dc:db:7b:6b:44:c5:d1:eb:79:0b: 77:09:b8:8b:ed:25:a4:10:e9:45:02:d6:78:c2:c9:b9:3f:c4: 4b:e8:22:47:76:1b:1f:58:a1:76:98:ff:35:0e:79:9d:c3:c6: ba:e1:31:6e:ee:f2:10:b1:7f:6f:8b:22:c2:6c:78:96:af:64: e3:7b:cc:b0:d8:d2:eb:01:9d:35:82:7b:c6:ea:c5:d2:c9:a7: 66:1a:27:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlGQTkxMTAvBgNVBAUTKEQ4MDU3N0ZFMzUxQ0VDMTMyRkMwRkZBMTg4ODdBQjBD NzQ2QjE0RjIwHhcNMjYwNTIxMDIyNzU3WhcNMjYwNTI4MDIyNzU3WjAYMRYwFAYD VQQDEw02YTBlNmRhZC04MWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArc3vREKrYpCD+jpNejTEbkHt3aePlyDEbnnb15GQ1RHe53gjqwRE13CA3eND 6kYhOPfTSjDRZD303PUh+pKVMjOtoCw1baUo7gc1rXkiGHulgObx2PqtryuPpy0N YExFzR+Q9+9noK0e5bONAT60gfr7Ao7YuhhKyj4FINs05+TpgUVlLa+beTPSEG74 4BHsJzwnefKUe9HflXD5PGhiabo2TwWKOczqpzWDG+3OP1HNCRV/dE5gXNam3L9i rjZkyaPJ0oDt5We7bMeFSLnUs/kTJ3Pnp2zLcDKtq+uwLYh8wTcoOO0sQZ3BVLLg imuzgaENRXW4SEYQf8BafI6/gQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMpjy59j Z0ilW6qJwKxOZ0xZV3J4MB8GA1UdIwQYMBaAFNgFd/41HOwTL8D/oYiHqwx0axTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUZBOS83QzBGNEQ4MkQ4 NUExMUVEODgxQUM4MTJDNEY5QUUwMi8yQVYzX2pVYzdCTXZ3UC1oaUllckRIUnJG UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJBVjNfalVjN0JNdndQLWhpSWVyREhSckZQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUZBOS83QzBGNEQ4MkQ4NUExMUVEODgxQUM4MTJDNEY5QUUwMi8yQVYzX2pVYzdC TXZ3UC1oaUllckRIUnJGUEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFl4j7LxaQvjd3uzYhKP/lMSMK0TlPVnKB/W0fLSTuchwx6dKzwv/owPAkCN2 cHrLZigd34yPjHxv5JSeNzYc+Q1E2a0FmaGCCRjey5XaCyJiqpo2CvWanLpP/k+R KJ8REtaARh6fks7+HSIml+6hfRwNfn324BjAIiu94O5CjF949skh+TNR5QNPXDEP lQxFBexBhfDRLaPnWqfUmcaWAS5aZM8KlAHtBZjc23trRMXR63kLdwm4i+0lpBDp RQLWeMLJuT/ES+giR3YbH1ihdpj/NQ55ncPGuuExbu7yELF/b4siwmx4lq9k43vM sNjS6wGdNYJ7xurF0smnZhonXg== -----END CERTIFICATE-----Generated at Thu May 21 09:39:15 2026 by rpki-client