$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft File: PS2TrIsQhlgX2adMyBoDDX010HQ.mft (raw, json) Hash identifier: 1661xs8nDPwidZYY2CPz7dRDMK96G/+KIyNFSTx8aLQ= Subject key identifier: 7A:84:86:EE:6E:B8:6D:9F:9B:91:80:EE:00:75:0E:CE:3D:35:0B:E9 Authority key identifier: 3D:2D:93:AC:8B:10:86:58:17:D9:A7:4C:C8:1A:03:0D:7D:35:D0:74 Certificate issuer: /CN=A9196D9E/serialNumber=3D2D93AC8B10865817D9A74CC81A030D7D35D074 Certificate serial: 01DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft Manifest number: 01DB Signing time: Thu 21 May 2026 03:33:39 +0000 Manifest this update: Thu 21 May 2026 03:33:39 +0000 Manifest next update: Thu 28 May 2026 03:33:39 +0000 Files and hashes: 1: PS2TrIsQhlgX2adMyBoDDX010HQ.crl (hash: ht2asxLyu7dQ8dKeM4p9skpJWLVhPxAv99mw39iHO2M=) 2: C8BDA37CF68A11EFB7F91E24C4F9AE02.roa (hash: zfGF7KOCQQRDY2l23rBtYS3NirQreMdPDlzYfVapP6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.crl rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 03:33:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 479 (0x1df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196D9E, serialNumber=3D2D93AC8B10865817D9A74CC81A030D7D35D074 Validity Not Before: May 21 03:33:39 2026 GMT Not After : May 28 03:33:39 2026 GMT Subject: CN=6a0e7d13-3a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ec:da:d0:fb:db:07:83:4b:9e:a7:00:a5:e5: 47:f1:a9:56:4d:98:27:20:f5:35:5a:c6:98:7e:d6: 70:d8:43:76:ea:7b:e4:79:06:74:2a:4c:58:69:5e: 81:c7:37:6a:35:cd:1e:95:9e:bb:64:5c:14:06:84: 66:77:54:40:41:63:ea:b9:62:4a:8c:01:d0:03:3e: 44:1e:b2:e2:df:55:89:a1:69:01:35:02:0b:49:0a: 17:3c:fc:d0:31:03:49:be:21:2b:bf:8e:8f:f5:ac: 88:3e:99:e2:03:6e:27:82:04:57:ea:c7:37:34:f2: e6:b1:0a:3c:c8:1d:bd:9a:19:1c:bb:01:ea:62:c7: 77:45:28:ba:25:b1:9c:37:f8:3a:cf:e4:6c:e3:b1: 74:2b:65:64:49:f7:e9:ad:2d:57:31:c6:27:45:4f: d8:bb:6d:4c:af:3b:29:06:8a:9f:48:ef:57:16:c3: 69:32:4d:dd:ed:9b:0e:dd:ab:2f:ca:bc:61:80:71: e3:42:13:43:4a:ce:4e:23:47:03:9f:a7:39:42:51: 39:b3:e4:11:37:aa:bf:75:63:84:95:88:de:72:da: 9a:49:88:27:3c:16:46:fd:fd:0b:ac:9b:b6:1e:eb: e0:85:e8:bf:ec:b1:d8:41:cd:66:58:a4:b4:d4:3d: 42:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:84:86:EE:6E:B8:6D:9F:9B:91:80:EE:00:75:0E:CE:3D:35:0B:E9 X509v3 Authority Key Identifier: keyid:3D:2D:93:AC:8B:10:86:58:17:D9:A7:4C:C8:1A:03:0D:7D:35:D0:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:c0:f3:a9:21:f7:57:a9:bf:2b:2c:aa:44:bb:98:ef:61:ba: 5d:ae:53:96:03:5d:40:66:4f:cc:e5:e4:7b:26:88:e1:12:64: bb:0b:3f:f2:c3:53:56:25:2e:f0:21:d9:e8:4e:a2:88:53:da: 18:59:e3:12:72:12:e3:c0:0b:1f:ae:1b:8d:a7:a9:f6:1c:ad: d1:ad:58:fa:92:84:05:54:c7:26:84:50:de:0e:22:a9:7b:c1: a0:02:cf:c0:ac:6f:ec:ff:29:cc:38:0f:59:28:ec:a8:65:e2: a2:34:9f:66:65:bc:16:51:de:4b:d3:0d:43:3e:85:c6:01:f8: ad:89:3f:f4:7f:33:2b:06:5f:47:62:42:58:67:73:54:f3:af: fb:3e:1f:57:ee:6f:1a:f3:4e:aa:82:0e:e7:79:66:38:92:57: 55:f8:18:5c:08:e5:34:59:b2:ab:d8:cc:c7:1e:8b:13:f6:11: a2:02:d9:d4:ab:e3:b6:34:ac:9a:5c:c3:08:f3:10:68:bc:04: 83:c6:89:d7:a3:43:3b:d9:5d:6e:0e:d7:db:39:62:ba:2d:56: 5b:d2:d6:fa:c0:47:80:fe:44:9d:ad:d8:49:c7:6f:20:1c:53: 4b:0c:b0:21:89:e9:d3:62:1d:0e:87:df:9f:f1:39:7f:d8:af: c2:d3:5d:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZEOUUxMTAvBgNVBAUTKDNEMkQ5M0FDOEIxMDg2NTgxN0Q5QTc0Q0M4MUEwMzBE N0QzNUQwNzQwHhcNMjYwNTIxMDMzMzM5WhcNMjYwNTI4MDMzMzM5WjAYMRYwFAYD VQQDEw02YTBlN2QxMy0zYTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+za0PvbB4NLnqcApeVH8alWTZgnIPU1WsaYftZw2EN26nvkeQZ0KkxYaV6B xzdqNc0elZ67ZFwUBoRmd1RAQWPquWJKjAHQAz5EHrLi31WJoWkBNQILSQoXPPzQ MQNJviErv46P9ayIPpniA24nggRX6sc3NPLmsQo8yB29mhkcuwHqYsd3RSi6JbGc N/g6z+Rs47F0K2VkSffprS1XMcYnRU/Yu21MrzspBoqfSO9XFsNpMk3d7ZsO3asv yrxhgHHjQhNDSs5OI0cDn6c5QlE5s+QRN6q/dWOElYjectqaSYgnPBZG/f0LrJu2 Huvghei/7LHYQc1mWKS01D1CiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHqEhu5u uG2fm5GA7gB1Ds49NQvpMB8GA1UdIwQYMBaAFD0tk6yLEIZYF9mnTMgaAw19NdB0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkQ5RS83N0JCOTg0QzdE NjExMUVFQjQ2M0M4NUFDNEY5QUUwMi9QUzJUcklzUWhsZ1gyYWRNeUJvRERYMDEw SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BTMlRySXNRaGxnWDJhZE15Qm9ERFgwMTBIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkQ5RS83N0JCOTg0QzdENjExMUVFQjQ2M0M4NUFDNEY5QUUwMi9QUzJUcklzUWhs Z1gyYWRNeUJvRERYMDEwSFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACsDzqSH3V6m/KyyqRLuY72G6Xa5TlgNdQGZPzOXkeyaI4RJkuws/8sNTViUu 8CHZ6E6iiFPaGFnjEnIS48ALH64bjaep9hyt0a1Y+pKEBVTHJoRQ3g4iqXvBoALP wKxv7P8pzDgPWSjsqGXiojSfZmW8FlHeS9MNQz6FxgH4rYk/9H8zKwZfR2JCWGdz VPOv+z4fV+5vGvNOqoIO53lmOJJXVfgYXAjlNFmyq9jMxx6LE/YRogLZ1KvjtjSs mlzDCPMQaLwEg8aJ16NDO9ldbg7X2zliui1WW9LW+sBHgP5Ena3YScdvIBxTSwyw IYnp02IdDoffn/E5f9ivwtNdZQ== -----END CERTIFICATE-----Generated at Thu May 21 10:52:33 2026 by rpki-client