$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft File: g2LSOGrBMH7vi7_YdPc45tqjVXI.mft (raw, json) Hash identifier: hIq0V9QPpBEYh4dbddQ/rMClsSvdG8juaBfFBJEpKDY= Subject key identifier: EE:6C:6D:62:F1:1C:52:05:68:DF:11:A0:7C:DB:90:E4:D0:DF:4B:CF Authority key identifier: 83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72 Certificate issuer: /CN=A917C0F5/serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572 Certificate serial: 0DD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft Manifest number: 0DD0 Signing time: Wed 20 May 2026 17:54:11 +0000 Manifest this update: Wed 20 May 2026 17:54:11 +0000 Manifest next update: Wed 27 May 2026 17:54:11 +0000 Files and hashes: 1: g2LSOGrBMH7vi7_YdPc45tqjVXI.crl (hash: lrqOti8//DCpDmn5iM62T0X0QVAjV52/X2MYj2sv1GM=) 2: D11C8B12DB7111E981104A54C4F9AE02.roa (hash: az5Wu3rdmwem1fp3sJ1LkEbrXCOkEOGTGhmGNaaRozA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3545 (0xdd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C0F5, serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572 Validity Not Before: May 20 17:54:11 2026 GMT Not After : May 27 17:54:11 2026 GMT Subject: CN=6a0df543-25bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:93:c3:74:c8:9c:e6:1b:98:b1:70:76:85:dd: 1f:97:d8:77:5e:df:cd:d7:1f:ad:15:be:a9:a3:35: 38:fe:cf:89:f7:18:89:c5:6a:56:ac:34:96:88:f9: 2f:3b:43:53:51:ab:cd:9f:f0:f1:3f:a6:11:29:56: b6:22:54:47:2d:95:94:4b:bb:74:b4:66:65:72:fa: e9:be:8f:9e:52:43:e5:48:32:0a:da:e7:86:6b:4c: 96:a5:65:0b:7a:cf:50:00:89:d3:22:15:c4:15:a6: 9b:9d:e9:c1:95:09:fd:19:d2:14:db:df:cd:78:dc: 5f:8d:ee:88:c4:f8:85:ad:81:17:5c:a0:cc:ce:ff: 6e:63:1a:70:2f:39:84:c9:a4:e3:cf:36:26:b9:c5: bb:b5:72:70:4b:0e:d2:c5:75:68:c3:22:e5:38:24: 77:60:ae:b5:e7:f8:a2:09:99:5b:9e:74:bb:ad:6f: 12:cf:e7:2b:55:f7:d4:b0:65:29:41:6a:7c:5e:a8: 03:8b:ae:4b:99:ae:65:f0:16:c9:a8:24:c8:d3:df: b1:df:3b:85:c4:8d:f2:bc:02:80:69:db:b7:74:f9: 40:c6:f7:fc:a9:be:6d:f8:8f:c7:3d:ed:53:b4:e0: 9f:4c:51:2c:6e:74:78:7e:69:b7:06:91:6d:18:e4: 78:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:6C:6D:62:F1:1C:52:05:68:DF:11:A0:7C:DB:90:E4:D0:DF:4B:CF X509v3 Authority Key Identifier: keyid:83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:7c:b8:b4:88:be:59:c1:35:da:6e:d2:7f:15:15:a2:ef:4a: 99:30:73:41:75:d3:d3:33:f2:cd:0f:3c:48:83:c9:e0:85:fa: db:22:28:6c:a1:f5:08:bd:4e:8b:ae:87:2a:f4:89:df:30:2e: cd:44:de:c9:f6:5a:61:ab:25:c7:2e:7e:5f:6a:b6:72:6c:99: d9:df:3f:66:2e:ce:2a:44:48:10:b9:dd:bf:a8:aa:00:e2:10: 19:6a:5e:5b:b1:f2:fa:ee:7b:32:56:bc:4c:0f:e1:a0:9c:6b: db:4f:6a:ef:b1:a5:a1:d4:9f:6c:92:51:c5:14:3a:06:0f:cd: 8e:7a:ee:da:b5:8d:f0:11:35:3a:62:db:30:57:b8:1b:17:2b: 8a:ca:03:2d:b7:45:c9:36:36:6e:5f:59:37:5b:26:25:10:6f: 98:e7:ec:d3:8c:ba:f8:e5:67:37:a8:21:62:41:cc:b1:54:4c: 3f:91:e1:97:74:4f:1e:e5:b4:44:47:1d:22:e5:20:f6:c1:ae: 95:26:7f:9b:ff:31:06:54:72:f7:db:99:98:df:a5:ae:ab:8f: 11:11:16:b7:27:54:1a:9e:ed:39:a6:73:07:56:88:33:5b:48: 3a:82:ce:4a:f1:75:3b:57:aa:53:bb:01:c7:7d:e4:d2:20:0b: df:a2:3d:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MwRjUxMTAvBgNVBAUTKDgzNjJEMjM4NkFDMTMwN0VFRjhCQkZEODc0RjczOEU2 REFBMzU1NzIwHhcNMjYwNTIwMTc1NDExWhcNMjYwNTI3MTc1NDExWjAYMRYwFAYD VQQDEw02YTBkZjU0My0yNWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAopPDdMic5huYsXB2hd0fl9h3Xt/N1x+tFb6pozU4/s+J9xiJxWpWrDSWiPkv O0NTUavNn/DxP6YRKVa2IlRHLZWUS7t0tGZlcvrpvo+eUkPlSDIK2ueGa0yWpWUL es9QAInTIhXEFaabnenBlQn9GdIU29/NeNxfje6IxPiFrYEXXKDMzv9uYxpwLzmE yaTjzzYmucW7tXJwSw7SxXVowyLlOCR3YK615/iiCZlbnnS7rW8Sz+crVffUsGUp QWp8XqgDi65Lma5l8BbJqCTI09+x3zuFxI3yvAKAadu3dPlAxvf8qb5t+I/HPe1T tOCfTFEsbnR4fmm3BpFtGOR4JQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO5sbWLx HFIFaN8RoHzbkOTQ30vPMB8GA1UdIwQYMBaAFINi0jhqwTB+74u/2HT3OObao1Vy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzBGNS8xRUM0RTA5QURC NzExMUU5QjYxMDUzNTNDNEY5QUUwMi9nMkxTT0dyQk1IN3ZpN19ZZFBjNDV0cWpW WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cyTFNPR3JCTUg3dmk3X1lkUGM0NXRxalZYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzBGNS8xRUM0RTA5QURCNzExMUU5QjYxMDUzNTNDNEY5QUUwMi9nMkxTT0dyQk1I N3ZpN19ZZFBjNDV0cWpWWEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO3y4tIi+WcE12m7SfxUVou9KmTBzQXXT0zPyzQ88SIPJ4IX62yIobKH1CL1O i66HKvSJ3zAuzUTeyfZaYaslxy5+X2q2cmyZ2d8/Zi7OKkRIELndv6iqAOIQGWpe W7Hy+u57Mla8TA/hoJxr209q77GlodSfbJJRxRQ6Bg/Njnru2rWN8BE1OmLbMFe4 GxcrisoDLbdFyTY2bl9ZN1smJRBvmOfs04y6+OVnN6ghYkHMsVRMP5Hhl3RPHuW0 REcdIuUg9sGulSZ/m/8xBlRy99uZmN+lrquPEREWtydUGp7tOaZzB1aIM1tIOoLO SvF1O1eqU7sBx33k0iAL36I9CA== -----END CERTIFICATE-----Generated at Thu May 21 10:15:12 2026 by rpki-client