$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft File: plb2DT8RZBpXG9H_rSRg3UV2My0.mft (raw, json) Hash identifier: J9KK2mdO4dPDMrQ+AABnXvYHqsSEK6uF0wimtIQoyrA= Subject key identifier: 58:77:6B:A6:23:8A:E2:60:7A:D5:7F:C9:67:2A:55:B6:BB:45:9E:AA Authority key identifier: A6:56:F6:0D:3F:11:64:1A:57:1B:D1:FF:AD:24:60:DD:45:76:33:2D Certificate issuer: /CN=A919986F/serialNumber=A656F60D3F11641A571BD1FFAD2460DD4576332D Certificate serial: 28ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft Manifest number: 28D9 Signing time: Wed 20 May 2026 15:35:49 +0000 Manifest this update: Wed 20 May 2026 15:35:48 +0000 Manifest next update: Wed 27 May 2026 15:35:48 +0000 Files and hashes: 1: plb2DT8RZBpXG9H_rSRg3UV2My0.crl (hash: UFWb7bKBcqqYQp9Gjdho592c6nxeWenfUwnLDkXVr6c=) 2: 27F621183B5D11EB97506B7AC4F9AE02.roa (hash: LoCmdUsK6L+TshugdKCnyVfyQSooI4RUEUwWon0yLJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.crl rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 15:35:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10477 (0x28ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919986F, serialNumber=A656F60D3F11641A571BD1FFAD2460DD4576332D Validity Not Before: May 20 15:35:48 2026 GMT Not After : May 27 15:35:48 2026 GMT Subject: CN=6a0dd4d5-e64a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:67:79:57:35:65:86:46:2c:60:fd:14:75:b6: 12:0d:e9:60:45:40:c4:23:d3:38:fe:4d:ee:c8:b2: 13:15:a5:d5:57:69:8d:c1:c4:08:81:0f:e4:73:5b: 1f:43:fe:17:21:87:ad:39:ed:bf:99:7c:bd:e1:b9: 97:a4:68:ff:e9:48:c2:97:48:d7:03:5d:a2:66:06: 34:56:33:e3:82:ba:f2:5c:07:56:d9:6d:5f:6c:95: c4:0c:c1:1d:ba:b5:5e:ca:6f:d2:4f:8e:4f:92:b4: 04:32:51:b3:39:70:8f:c0:81:d2:a6:d4:1f:61:84: 59:ee:37:b0:4f:01:c5:1f:12:53:41:19:5e:87:9a: c8:3a:3b:81:5f:10:fb:81:e0:db:19:cc:71:2e:5c: 36:8e:76:df:03:db:8d:d1:1a:3c:f6:52:3b:e1:a3: d7:f3:c0:f4:15:63:30:80:7f:39:66:7a:d7:b0:d5: 35:38:d5:b5:86:f0:76:9c:27:ff:69:24:0f:17:fe: 95:7b:21:68:4e:d4:ff:5b:b5:20:99:bf:44:3f:9d: 6e:ac:45:3a:eb:6e:0d:d3:2b:4e:f0:16:d9:cf:60: 62:3f:0c:26:f6:08:94:c2:a7:63:bf:a2:53:93:f4: df:65:81:4b:b9:aa:1e:59:82:7d:d4:5f:8d:8f:bd: 45:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:77:6B:A6:23:8A:E2:60:7A:D5:7F:C9:67:2A:55:B6:BB:45:9E:AA X509v3 Authority Key Identifier: keyid:A6:56:F6:0D:3F:11:64:1A:57:1B:D1:FF:AD:24:60:DD:45:76:33:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:68:21:7f:3b:3d:21:ef:39:58:19:b3:c1:e4:7b:6c:74:26: 0b:fb:00:7a:6e:da:25:91:67:50:2b:ca:d9:e2:df:1c:ec:57: 18:f4:ae:67:32:b5:bd:29:9b:8a:eb:3d:be:d2:6e:0b:f3:15: 56:15:24:33:d2:16:ef:2c:35:89:38:51:a5:c4:5a:30:1e:01: 7a:73:f2:31:a3:c4:34:5f:5a:a9:4b:b2:3c:90:44:77:94:26: ab:13:aa:50:0e:3d:d3:de:2f:30:57:45:4a:7b:e5:15:5e:1a: 0b:85:32:43:10:f6:bb:00:e6:72:22:85:e8:8e:9a:81:06:bd: 4e:87:82:56:75:d8:d4:e7:ee:57:72:62:13:d2:ff:c7:33:e2: d4:de:a0:b3:7b:7f:79:08:01:29:ed:a0:4b:43:c5:13:6b:ee: 85:f9:d4:a0:20:7b:4d:b8:43:4b:b2:d2:41:8c:43:f1:ad:55: 31:06:1a:33:d1:ef:33:c9:06:0e:94:56:79:50:0b:71:42:da: 3a:8b:86:8c:f3:45:89:86:b7:41:76:cb:2e:4e:3c:33:33:b9: 26:82:65:ea:58:ec:58:66:76:85:2a:63:22:3f:5b:6f:67:08: e9:21:96:15:52:17:a7:2c:ed:d9:86:50:2b:7c:2d:ad:ef:6b: b2:e7:dc:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4NkYxMTAvBgNVBAUTKEE2NTZGNjBEM0YxMTY0MUE1NzFCRDFGRkFEMjQ2MERE NDU3NjMzMkQwHhcNMjYwNTIwMTUzNTQ4WhcNMjYwNTI3MTUzNTQ4WjAYMRYwFAYD VQQDEw02YTBkZDRkNS1lNjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGd5VzVlhkYsYP0UdbYSDelgRUDEI9M4/k3uyLITFaXVV2mNwcQIgQ/kc1sf Q/4XIYetOe2/mXy94bmXpGj/6UjCl0jXA12iZgY0VjPjgrryXAdW2W1fbJXEDMEd urVeym/ST45PkrQEMlGzOXCPwIHSptQfYYRZ7jewTwHFHxJTQRleh5rIOjuBXxD7 geDbGcxxLlw2jnbfA9uN0Ro89lI74aPX88D0FWMwgH85ZnrXsNU1ONW1hvB2nCf/ aSQPF/6VeyFoTtT/W7Ugmb9EP51urEU6624N0ytO8BbZz2BiPwwm9giUwqdjv6JT k/TfZYFLuaoeWYJ91F+Nj71FyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFh3a6Yj iuJgetV/yWcqVba7RZ6qMB8GA1UdIwQYMBaAFKZW9g0/EWQaVxvR/60kYN1FdjMt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg2Ri9FQzg3MEI4NjhG MkExMUU0QkY5OEI0MzJDNEY5QUUwMi9wbGIyRFQ4UlpCcFhHOUhfclNSZzNVVjJN eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BsYjJEVDhSWkJwWEc5SF9yU1JnM1VWMk15MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg2Ri9FQzg3MEI4NjhGMkExMUU0QkY5OEI0MzJDNEY5QUUwMi9wbGIyRFQ4UlpC cFhHOUhfclNSZzNVVjJNeTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANmghfzs9Ie85WBmzweR7bHQmC/sAem7aJZFnUCvK2eLfHOxXGPSuZzK1vSmb ius9vtJuC/MVVhUkM9IW7yw1iThRpcRaMB4BenPyMaPENF9aqUuyPJBEd5QmqxOq UA49094vMFdFSnvlFV4aC4UyQxD2uwDmciKF6I6agQa9ToeCVnXY1OfuV3JiE9L/ xzPi1N6gs3t/eQgBKe2gS0PFE2vuhfnUoCB7TbhDS7LSQYxD8a1VMQYaM9HvM8kG DpRWeVALcULaOouGjPNFiYa3QXbLLk48MzO5JoJl6ljsWGZ2hSpjIj9bb2cI6SGW FVIXpyzt2YZQK3wtre9rsufcnQ== -----END CERTIFICATE-----Generated at Thu May 21 10:16:04 2026 by rpki-client