$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft File: VCuU2GJc9xGWT9E3QSldJ616kAQ.mft (raw, json) Hash identifier: gFXFdVWLwUHTMtbo5t6hb9xlKGi8u6ILCmy9z3vTGVA= Subject key identifier: D1:F6:C9:F8:90:88:9E:22:B3:4D:57:4C:1F:25:C7:83:C7:2C:5D:76 Authority key identifier: 54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 Certificate issuer: /CN=A917B520/serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Certificate serial: 02C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft Manifest number: 0297 Signing time: Thu 21 May 2026 02:31:21 +0000 Manifest this update: Thu 21 May 2026 02:31:21 +0000 Manifest next update: Thu 28 May 2026 02:31:21 +0000 Files and hashes: 1: VCuU2GJc9xGWT9E3QSldJ616kAQ.crl (hash: 9sEzmi4UgquZHjKxw/AA66iaFgT1qh4rr8JYlIT3myo=) 2: 3352C1BAECFC11EFA398671BC4F9AE02.roa (hash: ByTjShjzlXNDkMN69/J18p3VnbTj5vjjzwheoKvtWG4=) 3: 232F9552F80D11F0AED4E007706F56BC.roa (hash: 1VQhLb/1DZcPUazmrGPc7TJ13JYFfVY10cAzsAWEN8k=) 4: 05F505961AA311F0A475D464C4F9AE02.roa (hash: xZbkhabGis/U5mUU9RekGm8eUQ6rFKaSmoEBRgqnHq8=) 5: 020607A2498711EFBB260663C4F9AE02.roa (hash: NE7gXopF/sfzGGjBPy5TRpiqm9S4sfZVevZ1+WaB9aw=) 6: 23852F72273711F1B6AB5B98AD833773.roa (hash: P31b2FKpx48VcLnsu7CI9st3Wk7Nus+neDGiJjmbJZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 705 (0x2c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Validity Not Before: May 21 02:31:21 2026 GMT Not After : May 28 02:31:21 2026 GMT Subject: CN=6a0e6e79-ca5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7a:44:fc:21:83:92:ab:2e:9a:7b:74:d3:a3: f8:fb:08:98:16:1f:65:cb:41:f9:77:36:91:f7:31: a9:6d:c5:38:f1:95:ff:96:46:9d:f4:df:f6:dd:1b: bb:6d:1e:5a:83:b4:12:85:e7:59:8a:04:90:3f:01: cc:78:e7:ef:fc:f6:d7:b5:08:b3:46:80:65:1c:f5: 1f:8e:b9:db:e0:19:5c:b8:e4:5c:09:38:c8:64:e8: 0c:04:35:dc:3e:59:dc:b6:77:6d:43:3f:1c:09:5d: bb:c9:c4:50:54:ca:48:a5:ed:a4:30:52:e1:55:b1: bc:7e:2c:bb:a9:3a:a2:36:08:e4:ee:f4:4c:dc:08: fe:51:8f:6d:fc:64:90:ab:eb:03:62:4a:83:b9:e9: 9b:4b:57:1e:08:b5:78:5f:fa:16:e8:03:a0:8c:e2: e6:05:6a:17:36:0d:3c:dc:d6:eb:a6:8c:c5:2b:df: 7c:3a:bf:e4:be:7b:ad:41:72:f7:cc:a2:f8:59:ae: a4:36:4f:fc:9c:b0:d9:6a:f6:1b:1c:e6:33:b0:09: be:04:36:dd:a6:28:0f:22:24:d0:06:7e:4f:8b:80: 4f:1c:9b:63:58:15:e5:cc:30:56:91:96:91:7e:68: 43:d7:85:33:12:b0:cb:19:74:07:d6:9e:c6:a1:b9: 21:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F6:C9:F8:90:88:9E:22:B3:4D:57:4C:1F:25:C7:83:C7:2C:5D:76 X509v3 Authority Key Identifier: keyid:54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d9:0e:ac:37:38:c7:de:a1:e7:b5:e0:f8:66:12:42:95:22: 9f:20:51:7c:bd:0d:82:bf:0a:f0:4b:cc:b3:fa:24:a6:e8:64: 8c:42:05:8c:3b:a4:35:51:9d:55:37:e5:87:11:e3:c8:d6:be: 7f:8c:54:68:b8:00:73:b0:4e:6f:b4:4f:ce:6d:5c:20:34:e7: c0:c1:8a:48:26:f9:ba:c9:92:9f:0c:42:af:71:2a:a5:35:20: 1a:2e:4c:44:bb:06:78:0e:98:ff:92:68:6f:4c:78:c6:9f:67: 28:79:b5:1a:24:87:c6:ae:80:de:c4:9d:7b:13:54:0c:d3:54: 0c:67:e6:08:4b:f7:69:c6:ea:08:bf:9c:dd:60:cf:8d:f2:d4: 5d:da:27:47:c4:76:c3:bf:12:10:e2:a6:7c:70:d2:64:a6:e9: 9d:53:fd:b6:07:f6:5e:09:80:ec:0e:6d:eb:35:b8:a5:e0:62: ca:e2:cb:98:fb:de:5f:e0:ac:cd:7d:d0:6a:ab:f8:d8:a6:c7: 87:2d:ed:6a:1d:6e:31:5c:31:1b:0c:11:d4:e1:a8:30:94:e2: 03:c0:60:64:26:2e:4f:db:8f:76:bb:0b:a5:1e:a7:1a:df:32: 99:ca:6b:eb:bf:0c:75:65:d2:17:f3:f3:e1:43:d3:a5:7f:2f: 9b:98:ac:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MjAxMTAvBgNVBAUTKDU0MkI5NEQ4NjI1Q0Y3MTE5NjRGRDEzNzQxMjk1RDI3 QUQ3QTkwMDQwHhcNMjYwNTIxMDIzMTIxWhcNMjYwNTI4MDIzMTIxWjAYMRYwFAYD VQQDEw02YTBlNmU3OS1jYTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnXpE/CGDkqsumnt006P4+wiYFh9ly0H5dzaR9zGpbcU48ZX/lkad9N/23Ru7 bR5ag7QShedZigSQPwHMeOfv/PbXtQizRoBlHPUfjrnb4BlcuORcCTjIZOgMBDXc PlnctndtQz8cCV27ycRQVMpIpe2kMFLhVbG8fiy7qTqiNgjk7vRM3Aj+UY9t/GSQ q+sDYkqDuembS1ceCLV4X/oW6AOgjOLmBWoXNg083NbrpozFK998Or/kvnutQXL3 zKL4Wa6kNk/8nLDZavYbHOYzsAm+BDbdpigPIiTQBn5Pi4BPHJtjWBXlzDBWkZaR fmhD14UzErDLGXQH1p7GobkhXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNH2yfiQ iJ4is01XTB8lx4PHLF12MB8GA1UdIwQYMBaAFFQrlNhiXPcRlk/RN0EpXSetepAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC8xNjFENEMwQUU0 Q0ExMUVEQTQxNEUyNTlDNEY5QUUwMi9WQ3VVMkdKYzl4R1dUOUUzUVNsZEo2MTZr QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDdVUyR0pjOXhHV1Q5RTNRU2xkSjYxNmtBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUyMC8xNjFENEMwQUU0Q0ExMUVEQTQxNEUyNTlDNEY5QUUwMi9WQ3VVMkdKYzl4 R1dUOUUzUVNsZEo2MTZrQVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPtkOrDc4x96h57Xg+GYSQpUinyBRfL0Ngr8K8EvMs/okpuhkjEIFjDukNVGd VTflhxHjyNa+f4xUaLgAc7BOb7RPzm1cIDTnwMGKSCb5usmSnwxCr3EqpTUgGi5M RLsGeA6Y/5Job0x4xp9nKHm1GiSHxq6A3sSdexNUDNNUDGfmCEv3acbqCL+c3WDP jfLUXdonR8R2w78SEOKmfHDSZKbpnVP9tgf2XgmA7A5t6zW4peBiyuLLmPveX+Cs zX3Qaqv42KbHhy3tah1uMVwxGwwR1OGoMJTiA8BgZCYuT9uPdrsLpR6nGt8ymcpr 678MdWXSF/Pz4UPTpX8vm5isbg== -----END CERTIFICATE-----Generated at Thu May 21 09:39:21 2026 by rpki-client