$ rpki-client -vvf rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft File: 2szbgPh19VKJMaiCXRqvoYCpsXk.mft (raw, json) Hash identifier: JljI/0CaDWhVG8/I7Razi33n/XHi/WQnpOtdaiI5jis= Subject key identifier: EE:E1:95:0A:42:BB:5A:4D:D8:2A:F1:48:C3:FD:81:54:9D:09:55:39 Authority key identifier: DA:CC:DB:80:F8:75:F5:52:89:31:A8:82:5D:1A:AF:A1:80:A9:B1:79 Certificate issuer: /CN=A918D701/serialNumber=DACCDB80F875F5528931A8825D1AAFA180A9B179 Certificate serial: 025D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft Manifest number: 0255 Signing time: Thu 21 May 2026 02:21:13 +0000 Manifest this update: Thu 21 May 2026 02:21:12 +0000 Manifest next update: Thu 28 May 2026 02:21:12 +0000 Files and hashes: 1: 2szbgPh19VKJMaiCXRqvoYCpsXk.crl (hash: tT/LZs6ZUe9eR+SLHu3t/vgjc3eDcRiDJxz1c+6P/p0=) 2: 98D5AE30C88C11ED907C1C0EC4F9AE02.roa (hash: ZjWTn7RPw7EchMonKVaN+HGBpWShBdJZb78EKus3MRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.crl rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:21:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 605 (0x25d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D701, serialNumber=DACCDB80F875F5528931A8825D1AAFA180A9B179 Validity Not Before: May 21 02:21:12 2026 GMT Not After : May 28 02:21:12 2026 GMT Subject: CN=6a0e6c18-a2d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:27:4b:87:15:af:79:62:d8:eb:66:2e:2d:3e: 32:ec:66:88:ff:b1:98:2b:44:75:87:77:8e:6c:94: d3:3f:5b:12:29:27:57:86:3a:c0:b9:08:f0:2c:18: 7b:bb:ee:a9:ae:86:82:a7:3c:92:2c:c4:b1:69:5d: b6:86:7f:f3:a9:b9:df:1a:5e:52:11:22:4b:0d:0e: 1b:9a:ff:1b:5f:2a:ce:ab:9c:d6:52:c6:a9:4a:dd: ad:02:75:90:bc:a1:16:cb:25:8f:3d:44:3b:c9:b8: cd:11:1e:44:fe:47:51:98:48:c5:15:47:3c:91:26: 18:33:60:3b:89:7f:6f:4f:c1:4c:1f:eb:c2:e3:4e: 7c:ab:54:5c:3b:d8:62:44:e5:ec:04:ca:5f:1a:7b: 5b:a6:a5:a7:2c:cc:4d:59:c6:e7:93:76:9a:15:00: 55:6e:e1:ec:69:ab:11:7f:89:88:91:8b:e4:b0:22: 3c:a6:16:b9:5d:95:31:9f:91:41:8e:d1:42:c4:f3: 02:0e:23:a2:9d:ab:63:bb:c4:b1:28:a4:73:95:fd: 17:b8:d1:72:3b:c6:81:b4:7a:72:60:8b:f8:9c:c7: 54:c6:2c:ad:03:f4:88:2f:cf:35:dd:c8:1c:39:fa: a6:f3:1a:2f:e8:40:61:2c:ad:97:34:8d:4a:93:87: 4f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E1:95:0A:42:BB:5A:4D:D8:2A:F1:48:C3:FD:81:54:9D:09:55:39 X509v3 Authority Key Identifier: keyid:DA:CC:DB:80:F8:75:F5:52:89:31:A8:82:5D:1A:AF:A1:80:A9:B1:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:28:f9:3c:c4:34:9a:4a:ba:da:af:77:22:9e:b7:b1:10:03: 79:9e:e3:e0:09:c6:d2:b3:10:64:22:ae:d6:9d:b6:09:ad:e7: 94:3a:15:8c:6b:96:ef:c1:ec:b6:b6:df:5a:02:d2:2a:8c:d0: a5:83:20:4b:36:de:33:15:58:d0:07:c0:00:b8:73:02:6e:fc: 63:c8:bc:6d:c2:30:aa:55:f1:10:5d:92:81:41:39:6d:d6:c6: 90:8f:5d:5e:34:7a:a8:d2:ea:b8:47:7a:b6:0e:28:4a:ba:79: 5d:0b:85:3a:b9:89:d3:a7:c3:31:61:29:34:23:25:e9:3b:b8: 80:7f:e5:a2:13:b3:9f:4c:e4:96:0c:ac:8f:0a:48:63:6a:7b: a4:79:aa:49:bd:38:87:8f:a6:6f:7e:96:c9:66:0e:93:d8:d7: 58:be:9d:ad:f3:cb:e4:27:9c:fb:a5:63:29:4d:83:43:b2:5f: 0b:fe:18:91:d5:73:62:b7:cd:b0:38:d3:88:6c:ee:b8:7f:05: e8:80:b6:21:88:71:97:72:81:7f:c0:60:69:68:64:3e:14:8d: 3f:99:0e:4b:5b:60:dd:23:56:91:d7:e8:b9:48:35:0d:76:b4: eb:9d:61:ca:d7:41:66:aa:c7:b8:41:99:eb:64:5e:9a:f3:1e: b8:f5:68:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3MDExMTAvBgNVBAUTKERBQ0NEQjgwRjg3NUY1NTI4OTMxQTg4MjVEMUFBRkEx ODBBOUIxNzkwHhcNMjYwNTIxMDIyMTEyWhcNMjYwNTI4MDIyMTEyWjAYMRYwFAYD VQQDEw02YTBlNmMxOC1hMmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSdLhxWveWLY62YuLT4y7GaI/7GYK0R1h3eObJTTP1sSKSdXhjrAuQjwLBh7 u+6proaCpzySLMSxaV22hn/zqbnfGl5SESJLDQ4bmv8bXyrOq5zWUsapSt2tAnWQ vKEWyyWPPUQ7ybjNER5E/kdRmEjFFUc8kSYYM2A7iX9vT8FMH+vC4058q1RcO9hi ROXsBMpfGntbpqWnLMxNWcbnk3aaFQBVbuHsaasRf4mIkYvksCI8pha5XZUxn5FB jtFCxPMCDiOinatju8SxKKRzlf0XuNFyO8aBtHpyYIv4nMdUxiytA/SIL8813cgc Ofqm8xov6EBhLK2XNI1Kk4dPBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO7hlQpC u1pN2CrxSMP9gVSdCVU5MB8GA1UdIwQYMBaAFNrM24D4dfVSiTGogl0ar6GAqbF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDcwMS9EMTg3OEVGNkM4 ODcxMUVEQkJFNkEzMkJDNEY5QUUwMi8yc3piZ1BoMTlWS0pNYWlDWFJxdm9ZQ3Bz WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJzemJnUGgxOVZLSk1haUNYUnF2b1lDcHNYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDcwMS9EMTg3OEVGNkM4ODcxMUVEQkJFNkEzMkJDNEY5QUUwMi8yc3piZ1BoMTlW S0pNYWlDWFJxdm9ZQ3BzWGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhSj5PMQ0mkq62q93Ip63sRADeZ7j4AnG0rMQZCKu1p22Ca3nlDoVjGuW78Hs trbfWgLSKozQpYMgSzbeMxVY0AfAALhzAm78Y8i8bcIwqlXxEF2SgUE5bdbGkI9d XjR6qNLquEd6tg4oSrp5XQuFOrmJ06fDMWEpNCMl6Tu4gH/lohOzn0zklgysjwpI Y2p7pHmqSb04h4+mb36WyWYOk9jXWL6drfPL5Cec+6VjKU2DQ7JfC/4YkdVzYrfN sDjTiGzuuH8F6IC2IYhxl3KBf8BgaWhkPhSNP5kOS1tg3SNWkdfouUg1DXa0651h ytdBZqrHuEGZ62RemvMeuPVoCQ== -----END CERTIFICATE-----Generated at Thu May 21 09:38:55 2026 by rpki-client