$ rpki-client -vvf rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft File: D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft (raw, json) Hash identifier: ajFDFWBRVtFci0cfMZONQXXRZrT+Sa3t0G2T3ukBJZ4= Subject key identifier: 21:87:05:F1:EE:A3:BD:2D:0D:98:10:DF:D6:B2:45:25:9C:22:0D:11 Authority key identifier: 0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86 Certificate issuer: /CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186 Certificate serial: 0240 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft Manifest number: 021E Signing time: Thu 21 May 2026 03:11:43 +0000 Manifest this update: Thu 21 May 2026 03:11:43 +0000 Manifest next update: Thu 28 May 2026 03:11:43 +0000 Files and hashes: 1: D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl (hash: oa1yAKuaDj8JBerqM8O+zUAE+1lcXh+ElGVPf4deMoE=) 2: E506BE2CF03811EFAD4C2257C4F9AE02.roa (hash: 4BghnC9zlIFOkenQJ/GFUUF/OmlIg8plx0INfrm7Jrc=) 3: A045C92CB46611EEAFEE8758C4F9AE02.roa (hash: GGi4WKr5J/co8rUxY6XhZiQWpGv4cgJGL7H5da+yC00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 03:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 576 (0x240) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A05D, serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186 Validity Not Before: May 21 03:11:43 2026 GMT Not After : May 28 03:11:43 2026 GMT Subject: CN=6a0e77ef-60d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5d:fd:78:89:bc:02:95:a6:f1:cf:33:a3:08: 4b:e6:9a:15:d9:ac:fd:9d:3f:36:39:10:e7:57:ee: 1e:cf:11:ee:e1:40:e6:09:77:0d:94:4c:9c:55:a1: 99:87:dd:40:9e:61:66:13:8a:8f:87:e1:66:c5:af: 90:99:c8:40:97:59:db:12:01:4f:b3:83:c1:e6:4a: 3f:4f:e6:07:1b:fc:18:89:29:6f:3c:7e:01:f7:29: 81:23:8b:b0:a4:ad:d0:ac:b6:6c:53:ec:0f:44:7b: af:90:4b:26:35:93:15:99:c3:d8:29:19:d0:2d:b7: 2d:4b:63:75:60:cc:bd:f8:e7:5d:6a:e9:48:9f:70: 2e:4c:54:07:84:c9:bd:b5:f7:77:f8:4e:65:d5:93: 72:bd:b6:26:7a:e8:f9:3c:52:15:2a:42:9b:d2:92: 8e:7e:e6:3e:8e:14:4f:cf:d2:a6:4f:6a:f6:c4:c3: e7:4e:bf:92:48:49:ec:a4:6b:b5:e2:7c:3d:bc:f2: 5b:1b:4f:41:37:77:33:2b:d1:44:c2:3b:11:00:c1: c9:be:bf:cb:c2:96:17:50:9f:31:b6:4a:81:69:35: b4:a0:15:f6:25:04:5e:7b:21:5c:6d:1d:c3:7d:05: fa:c4:d1:e3:91:db:57:07:46:96:56:f4:d8:0d:c6: 74:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:87:05:F1:EE:A3:BD:2D:0D:98:10:DF:D6:B2:45:25:9C:22:0D:11 X509v3 Authority Key Identifier: keyid:0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:8c:ef:6b:62:29:ab:b4:f4:ca:c8:a3:7c:44:77:8f:1e:6a: 6a:56:4e:17:4a:89:19:f5:d8:12:fc:e5:24:d3:19:52:cf:0e: d3:f3:a8:71:a2:52:b5:ea:9c:b1:43:25:34:29:9a:23:4c:db: 9e:82:b5:94:f0:eb:6f:97:67:3b:ff:a3:2b:4e:81:d0:24:2a: 8a:52:97:f3:ee:6c:cc:73:9c:2d:6b:30:21:98:b0:17:23:f1: 52:12:29:91:91:4a:6a:e0:9b:3f:fd:1d:ea:a1:63:2f:9d:59: f5:73:27:10:8a:93:3e:a8:b9:d5:90:89:f0:62:47:23:64:b9: 34:f3:f3:8e:c8:9b:1d:85:c7:2e:91:7a:4e:e7:1e:f0:5b:17: 28:01:8a:51:59:e6:7a:67:c6:02:f6:ab:2f:42:e1:0e:e3:ba: 9d:61:7e:07:28:3f:e6:71:8b:73:a5:0a:76:ab:f0:b1:b1:f3: 35:36:d9:8d:4a:37:3d:fd:4b:05:21:71:c8:ec:cb:a3:ea:bb: ff:c2:d1:a0:d7:57:66:2b:e2:f1:79:10:e2:ea:7f:3e:1c:d6: 13:eb:0d:50:29:25:1e:3e:08:bb:ba:29:fe:80:67:49:eb:9a: b7:33:c1:26:03:dc:a7:87:40:71:2d:30:67:95:63:2f:bb:96: 53:e3:c1:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEwNUQxMTAvBgNVBAUTKDBGNTQ1RTYyNzNEN0M5N0U5OTk1NDExRjc2RDVDNEYw MDZCQjUxODYwHhcNMjYwNTIxMDMxMTQzWhcNMjYwNTI4MDMxMTQzWjAYMRYwFAYD VQQDEw02YTBlNzdlZi02MGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm139eIm8ApWm8c8zowhL5poV2az9nT82ORDnV+4ezxHu4UDmCXcNlEycVaGZ h91AnmFmE4qPh+Fmxa+QmchAl1nbEgFPs4PB5ko/T+YHG/wYiSlvPH4B9ymBI4uw pK3QrLZsU+wPRHuvkEsmNZMVmcPYKRnQLbctS2N1YMy9+OddaulIn3AuTFQHhMm9 tfd3+E5l1ZNyvbYmeuj5PFIVKkKb0pKOfuY+jhRPz9KmT2r2xMPnTr+SSEnspGu1 4nw9vPJbG09BN3czK9FEwjsRAMHJvr/LwpYXUJ8xtkqBaTW0oBX2JQReeyFcbR3D fQX6xNHjkdtXB0aWVvTYDcZ0kQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCGHBfHu o70tDZgQ39ayRSWcIg0RMB8GA1UdIwQYMBaAFA9UXmJz18l+mZVBH3bVxPAGu1GG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTA1RC9DMUVGQjA4MDRF MjUxMUVFQUFBRTZENDlDNEY5QUUwMi9EMVJlWW5QWHlYNlpsVUVmZHRYRThBYTdV WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QxUmVZblBYeVg2WmxVRWZkdFhFOEFhN1VZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTA1RC9DMUVGQjA4MDRFMjUxMUVFQUFBRTZENDlDNEY5QUUwMi9EMVJlWW5QWHlY NlpsVUVmZHRYRThBYTdVWVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ4zva2Ipq7T0ysijfER3jx5qalZOF0qJGfXYEvzlJNMZUs8O0/OocaJSteqc sUMlNCmaI0zbnoK1lPDrb5dnO/+jK06B0CQqilKX8+5szHOcLWswIZiwFyPxUhIp kZFKauCbP/0d6qFjL51Z9XMnEIqTPqi51ZCJ8GJHI2S5NPPzjsibHYXHLpF6Tuce 8FsXKAGKUVnmemfGAvarL0LhDuO6nWF+Byg/5nGLc6UKdqvwsbHzNTbZjUo3Pf1L BSFxyOzLo+q7/8LRoNdXZivi8XkQ4up/PhzWE+sNUCklHj4Iu7op/oBnSeuatzPB JgPcp4dAcS0wZ5VjL7uWU+PB5g== -----END CERTIFICATE-----Generated at Thu May 21 10:19:45 2026 by rpki-client