$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft File: cLDwRtLzp0OW6Cx56OPazyYLOe4.mft (raw, json) Hash identifier: hFhHzKNZXBpM/GcAXfC2HCdrdI15EWo9WmNd8Igaq1M= Subject key identifier: 27:7B:D0:1F:26:4D:41:B1:7D:7D:EE:13:1F:F1:DF:93:87:43:3F:2C Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE Certificate issuer: /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Certificate serial: 256A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft Manifest number: 2519 Signing time: Fri 22 May 2026 15:45:00 +0000 Manifest this update: Fri 22 May 2026 15:44:59 +0000 Manifest next update: Fri 29 May 2026 15:44:59 +0000 Files and hashes: 1: cLDwRtLzp0OW6Cx56OPazyYLOe4.crl (hash: ZOTnH8Ioy8xNWrU2xDTMrOT/ZJh0Y6VTGS1l58FhSsU=) 2: 1A8324E28DF311E7B616ED66C4F9AE02.roa (hash: 37H7DlDGt5zyspx4N+tp7884fvWIo9yVuwDwYkYs1vc=) 3: 19C92BC88DF311E7B616ED66C4F9AE02.roa (hash: Z57FcLeHOXE4FQr1H3gsMHiwR0lsoB7VwA++ms9f+rU=) 4: 83684F548DF411E7A230506DC4F9AE02.roa (hash: Vucpt8cNLIPa7MveYqDXrFjKUxNzUPcP0AThZUfXmKY=) 5: 5C9B073691CD11E7AD932563C4F9AE02.roa (hash: rhZdem/yB2N5yxIXttCZNN7uNnxyIKc4DGGegwS/vBI=) 6: 027532E6385F11EAA879692AC4F9AE02.roa (hash: 2gxrJKiKVkIgn35QkTWVZrxGPd77GmobHZenpWck2Zk=) 7: E080F3508DFC11E7A7F08785C4F9AE02.roa (hash: KhrCjvTQLiloL8K/3NqtmjsbmB4Ne/NweqS1S0eVa5E=) 8: B2ED9AEE913311E79B98C45BC4F9AE02.roa (hash: 4p7xuTRKQKo9EV6xSef1vx2zbkSfZNIDKxG3aW/02qQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 May 2026 15:44:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9578 (0x256a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B6AA, serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Validity Not Before: May 22 15:44:59 2026 GMT Not After : May 29 15:44:59 2026 GMT Subject: CN=6a1079fc-5197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3f:f9:72:7a:1f:d1:87:e3:d7:7d:d9:ae:ad: f5:ad:b4:7a:20:a7:1b:a4:f7:80:f7:8b:75:c7:db: ca:a7:c9:33:e8:40:f7:d6:16:45:6c:fd:80:9d:36: 23:1f:ab:cb:94:02:c2:a5:2a:e0:1b:c8:44:aa:12: 77:cf:63:73:78:77:84:26:83:c6:97:2d:b8:7b:46: 63:a9:16:46:b5:70:77:91:21:f4:6b:4c:3b:17:17: 7f:df:da:9c:8d:1e:de:87:d3:f2:ce:0c:63:76:3a: 79:e1:cc:60:dc:06:67:fb:d7:52:29:e3:e8:13:d2: 6d:6d:63:9a:39:ae:aa:d6:73:6b:4f:6c:91:63:f2: 7d:1a:fe:4c:42:7c:f2:72:a8:7f:a1:38:18:6f:62: 48:49:0a:24:e9:20:4a:e7:f8:f8:3b:5b:fe:ba:1e: cb:56:3e:af:0b:34:eb:5b:b4:91:d1:99:5e:be:a8: 38:db:d0:0e:ca:e6:b3:79:59:60:52:1f:18:75:3e: fd:08:55:a3:aa:87:f8:d8:de:16:1c:1e:db:ca:94: 67:81:39:35:ff:50:2d:23:78:8e:1b:cf:1a:e2:5f: ca:f7:6c:cb:e1:9c:d8:07:24:b7:b3:49:0d:53:ea: e0:ce:a9:8e:d3:f4:19:44:7d:0d:26:d7:d6:48:f9: be:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:7B:D0:1F:26:4D:41:B1:7D:7D:EE:13:1F:F1:DF:93:87:43:3F:2C X509v3 Authority Key Identifier: keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:07:4a:69:dd:70:e9:2f:3d:eb:1d:b8:0d:d4:54:cf:bc:7c: 22:31:6f:ad:89:50:0e:19:e6:83:33:c2:25:a7:5e:5b:a3:44: c2:41:d4:ff:21:be:f3:47:3c:ec:a1:ab:45:8a:7a:92:28:a4: 25:65:fa:5c:32:ac:78:c3:24:47:b6:8f:d6:8b:4d:3f:6f:18: b3:28:6c:e0:89:26:e3:8e:e2:82:5b:38:ac:48:79:87:88:eb: db:fe:f6:34:bb:ad:d4:03:26:44:79:d4:ab:52:7c:19:36:49: 72:30:5b:ae:78:ed:41:94:75:21:54:d2:22:74:35:40:ee:6d: cc:c1:c6:ce:0f:3d:f2:da:9b:c4:ff:c7:eb:1b:dd:34:1c:15: c6:d2:0a:f7:17:04:b9:27:72:63:0b:ca:46:4d:7f:e1:29:3f: 35:bf:c6:4a:75:9a:42:b5:2b:22:64:a4:95:fd:95:d4:c7:57: 31:26:c4:69:f0:c2:5f:73:3c:f4:5f:2c:60:b4:de:da:19:f5: 28:a5:fd:ce:ba:97:2c:3a:df:30:7d:0c:df:12:94:27:2d:10: c1:8f:00:19:53:5d:a1:22:cc:2f:8b:7a:e1:3d:b3:d1:39:85: 5c:40:6c:ce:98:0e:d8:15:5a:e1:8c:dd:d3:99:c8:38:f4:83: d1:5c:66:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI2QUExMTAvBgNVBAUTKDcwQjBGMDQ2RDJGM0E3NDM5NkU4MkM3OUU4RTNEQUNG MjYwQjM5RUUwHhcNMjYwNTIyMTU0NDU5WhcNMjYwNTI5MTU0NDU5WjAYMRYwFAYD VQQDEw02YTEwNzlmYy01MTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArD/5cnof0Yfj133Zrq31rbR6IKcbpPeA94t1x9vKp8kz6ED31hZFbP2AnTYj H6vLlALCpSrgG8hEqhJ3z2NzeHeEJoPGly24e0ZjqRZGtXB3kSH0a0w7Fxd/39qc jR7eh9Pyzgxjdjp54cxg3AZn+9dSKePoE9JtbWOaOa6q1nNrT2yRY/J9Gv5MQnzy cqh/oTgYb2JISQok6SBK5/j4O1v+uh7LVj6vCzTrW7SR0Zlevqg429AOyuazeVlg Uh8YdT79CFWjqof42N4WHB7bypRngTk1/1AtI3iOG88a4l/K92zL4ZzYByS3s0kN U+rgzqmO0/QZRH0NJtfWSPm+uwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCd70B8m TUGxfX3uEx/x35OHQz8sMB8GA1UdIwQYMBaAFHCw8EbS86dDlugseejj2s8mCznu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjZBQS80NkM3RjE3MjRG MTYxMUU1OEQyQTMzMjdDNEY5QUUwMi9jTER3UnRMenAwT1c2Q3g1Nk9QYXp5WUxP ZTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMRHdSdEx6cDBPVzZDeDU2T1BhenlZTE9lNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjZBQS80NkM3RjE3MjRGMTYxMUU1OEQyQTMzMjdDNEY5QUUwMi9jTER3UnRMenAw T1c2Q3g1Nk9QYXp5WUxPZTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALAdKad1w6S896x24DdRUz7x8IjFvrYlQDhnmgzPCJadeW6NEwkHU/yG+80c8 7KGrRYp6kiikJWX6XDKseMMkR7aP1otNP28Ysyhs4Ikm447igls4rEh5h4jr2/72 NLut1AMmRHnUq1J8GTZJcjBbrnjtQZR1IVTSInQ1QO5tzMHGzg898tqbxP/H6xvd NBwVxtIK9xcEuSdyYwvKRk1/4Sk/Nb/GSnWaQrUrImSklf2V1MdXMSbEafDCX3M8 9F8sYLTe2hn1KKX9zrqXLDrfMH0M3xKUJy0QwY8AGVNdoSLML4t64T2z0TmFXEBs zpgO2BVa4Yzd05nIOPSD0VxmhA== -----END CERTIFICATE-----Generated at Sat May 23 07:57:19 2026 by rpki-client