$ rpki-client -vvf rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft File: jZcXcn1ujusjgHsxPAWNA1b_4WI.mft (raw, json) Hash identifier: 7WFROyzAtRPpioCM3mbWGnUBBs2cs/byAfYNQyT73dg= Subject key identifier: 22:8E:F8:C3:A6:E4:C0:0D:D9:6D:08:25:13:BF:CC:00:F8:F0:F8:27 Authority key identifier: 8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62 Certificate issuer: /CN=A916B53B/serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft Manifest number: 0152 Signing time: Thu 21 May 2026 05:11:57 +0000 Manifest this update: Thu 21 May 2026 05:11:56 +0000 Manifest next update: Thu 28 May 2026 05:11:56 +0000 Files and hashes: 1: jZcXcn1ujusjgHsxPAWNA1b_4WI.crl (hash: KziyJY0GjdsvOsNAY1EB+s/GO+SjhofqsvRfCRSKmME=) 2: A7E24C00ABF411F0A0B37937C4F9AE02.roa (hash: LbBS+EYlpmA67fkMLKgg4SD3EO+91MGCCTOWRrb0obs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 05:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B53B, serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162 Validity Not Before: May 21 05:11:56 2026 GMT Not After : May 28 05:11:56 2026 GMT Subject: CN=6a0e941d-0b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8d:76:86:5d:49:78:d9:fc:66:07:6c:72:12: f8:c7:de:de:3e:a9:37:b5:05:79:e2:4c:7f:46:aa: 4b:9e:46:ef:d9:54:fd:d9:00:57:b5:de:a2:c9:d8: 0c:1e:50:15:8a:5a:63:66:7d:f7:e9:32:a2:b3:50: 18:b4:78:14:fd:f1:3b:b1:e1:55:f2:a1:57:8a:36: 3e:2b:a5:cf:b9:fc:6b:0f:90:6f:59:9f:32:a6:6d: 19:79:4c:38:fc:6b:74:e6:3d:b0:74:cd:3f:e6:77: 28:54:61:e1:12:a6:e5:3b:7b:24:ea:df:49:61:5f: 8b:65:69:98:f2:d4:2e:9c:5c:d3:db:d0:cd:18:b5: 09:d6:9e:a7:78:a2:33:db:fa:59:40:b0:6b:2c:e4: 02:ef:d4:6d:96:ce:a2:ea:f7:e4:fd:48:c8:f2:02: e9:47:23:07:67:e7:ba:0e:ff:19:e9:14:b4:ce:81: 0e:6f:9a:7b:68:63:74:2c:da:7f:33:40:10:be:8b: c2:98:8e:e4:7e:11:b5:9b:8b:df:e7:75:29:89:e1: 32:60:3e:21:6c:39:db:32:25:dd:f5:4f:45:4c:7e: c8:b5:68:33:6f:3c:47:44:1a:b5:4a:5d:ab:d9:5e: 43:86:f0:59:69:8e:c3:0b:5a:ac:99:81:9a:5e:e6: 35:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8E:F8:C3:A6:E4:C0:0D:D9:6D:08:25:13:BF:CC:00:F8:F0:F8:27 X509v3 Authority Key Identifier: keyid:8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:8a:e2:5e:e5:65:32:5c:a1:42:bd:8a:a5:3b:bd:fc:cc:ac: 9d:b1:39:86:f9:0b:eb:bf:65:97:60:0b:4b:3b:d7:ce:6d:d6: 52:2f:6c:71:f6:90:af:72:85:b5:d4:00:0b:00:f4:a5:3d:97: 77:a8:06:a7:2a:a8:81:1c:f0:d9:a8:2d:e1:30:17:34:11:5a: 81:cd:87:a9:59:bb:4e:91:bc:d9:5e:3a:59:ea:fc:02:7d:3f: 5a:e5:ce:f2:ad:c9:c6:2d:1a:b8:cf:f7:6c:81:9d:55:72:c3: f1:99:fb:2a:63:9b:29:9c:d1:8c:c9:52:39:1b:8a:35:4b:c9: 79:d5:cf:d1:a9:2c:cb:9e:0a:c8:90:92:e4:bb:a2:f4:17:22: 78:bc:6a:40:29:a9:20:90:ac:14:28:7b:ef:42:1c:c3:20:62: 35:1b:57:51:da:81:3d:d3:83:e2:fb:65:fb:da:5f:20:9c:23: c5:ff:e8:98:51:d6:d6:51:4b:cf:71:f0:06:79:89:75:25:e8: e5:52:34:d9:ad:70:d5:a9:a1:30:e8:bc:c8:f3:0e:61:98:fa: eb:61:7a:45:e4:ae:43:18:c7:85:3f:bd:f6:5b:0b:d4:3b:85: 0c:5a:32:f8:24:54:76:75:4e:ee:8b:26:1c:ac:92:fa:ca:d6: fa:eb:12:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI1M0IxMTAvBgNVBAUTKDhEOTcxNzcyN0Q2RThFRUIyMzgwN0IzMTNDMDU4RDAz NTZGRkUxNjIwHhcNMjYwNTIxMDUxMTU2WhcNMjYwNTI4MDUxMTU2WjAYMRYwFAYD VQQDEw02YTBlOTQxZC0wYjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl412hl1JeNn8ZgdschL4x97ePqk3tQV54kx/RqpLnkbv2VT92QBXtd6iydgM HlAVilpjZn336TKis1AYtHgU/fE7seFV8qFXijY+K6XPufxrD5BvWZ8ypm0ZeUw4 /Gt05j2wdM0/5ncoVGHhEqblO3sk6t9JYV+LZWmY8tQunFzT29DNGLUJ1p6neKIz 2/pZQLBrLOQC79Rtls6i6vfk/UjI8gLpRyMHZ+e6Dv8Z6RS0zoEOb5p7aGN0LNp/ M0AQvovCmI7kfhG1m4vf53UpieEyYD4hbDnbMiXd9U9FTH7ItWgzbzxHRBq1Sl2r 2V5DhvBZaY7DC1qsmYGaXuY1wQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCKO+MOm 5MAN2W0IJRO/zAD48PgnMB8GA1UdIwQYMBaAFI2XF3J9bo7rI4B7MTwFjQNW/+Fi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjUzQi8yMDMyM0E4MjU5 REQxMUVGQkFENEMyODZDNEY5QUUwMi9qWmNYY24xdWp1c2pnSHN4UEFXTkExYl80 V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2paY1hjbjF1anVzamdIc3hQQVdOQTFiXzRXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjUzQi8yMDMyM0E4MjU5REQxMUVGQkFENEMyODZDNEY5QUUwMi9qWmNYY24xdWp1 c2pnSHN4UEFXTkExYl80V0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl4riXuVlMlyhQr2KpTu9/MysnbE5hvkL679ll2ALSzvXzm3WUi9scfaQr3KF tdQACwD0pT2Xd6gGpyqogRzw2agt4TAXNBFagc2HqVm7TpG82V46Wer8An0/WuXO 8q3Jxi0auM/3bIGdVXLD8Zn7KmObKZzRjMlSORuKNUvJedXP0aksy54KyJCS5Lui 9BcieLxqQCmpIJCsFCh770IcwyBiNRtXUdqBPdOD4vtl+9pfIJwjxf/omFHW1lFL z3HwBnmJdSXo5VI02a1w1amhMOi8yPMOYZj662F6ReSuQxjHhT+99lsL1DuFDFoy +CRUdnVO7osmHKyS+srW+usScA== -----END CERTIFICATE-----Generated at Thu May 21 10:16:22 2026 by rpki-client