$ rpki-client -vvf rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft File: _gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft (raw, json) Hash identifier: RH7Rw8i9eHD+hC0RP/0CNGQLNEbSVfcUJuEiVGoRThw= Subject key identifier: DE:E9:B2:72:E5:90:6D:8B:05:9F:28:5B:81:27:51:A1:BF:9D:F6:17 Authority key identifier: FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C Certificate issuer: /CN=A919A3F0/serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C Certificate serial: 0230 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft Manifest number: 0222 Signing time: Thu 21 May 2026 02:57:35 +0000 Manifest this update: Thu 21 May 2026 02:57:34 +0000 Manifest next update: Thu 28 May 2026 02:57:34 +0000 Files and hashes: 1: _gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl (hash: PY3eiZByqqRaBMvi8lwo5Hoaqu4TdgaTzvHBwY6coU8=) 2: 27D894E81D4011F19325F4941B3D8C67.roa (hash: HG6t6YvzBlAumemzb2gstPcteAeL39jX+YuQ75GGVWA=) 3: 37D03D8CC48111F0BA91643FC4F9AE02.roa (hash: cpXny2w7RispSe37kaJTfb77RVD1gIo1S5cj5Rxm/G0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 560 (0x230) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A3F0, serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C Validity Not Before: May 21 02:57:34 2026 GMT Not After : May 28 02:57:34 2026 GMT Subject: CN=6a0e749e-6b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:93:44:20:ba:27:7c:04:b8:45:cf:40:1e:b2: 77:53:b4:06:34:9d:de:92:c2:cc:65:7d:f1:d6:b9: e8:62:9c:85:d7:e9:8b:c9:9f:2e:e7:8a:6d:47:22: 54:5b:5b:a8:10:4c:97:cc:aa:b9:56:34:ce:6f:f3: 58:72:ba:5a:a6:bd:27:3f:a1:b5:2f:0f:4e:88:f5: 5e:6c:c2:0d:b6:d4:9e:6d:c5:bd:2a:19:e2:8f:2f: 65:11:29:67:9d:42:a7:ad:69:f5:e5:5f:27:c6:3e: f9:1d:71:46:b6:80:ee:77:48:4a:73:99:30:bd:73: 68:1e:05:33:c6:2d:2f:bc:51:9b:82:1a:da:f0:4c: 54:77:2b:a1:3d:f2:35:54:61:d5:ac:c4:7c:05:7a: 38:eb:74:9d:f4:ea:87:cc:63:0a:37:dc:bb:29:58: 1b:9a:86:9f:cf:c1:c7:71:e5:49:54:53:d2:42:9f: 50:18:ef:aa:8b:2a:a3:a5:96:46:7a:fd:11:a7:7f: 55:e4:33:c6:bc:1c:e2:9f:00:26:54:a1:c3:2f:24: 43:46:f5:80:5a:0f:41:72:3f:41:27:c7:19:86:2d: 6c:4c:80:83:6c:4c:92:2e:0f:12:59:5f:a3:9c:93: 72:87:12:e2:b0:3d:d1:f3:7a:32:ac:00:ca:7e:22: ea:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E9:B2:72:E5:90:6D:8B:05:9F:28:5B:81:27:51:A1:BF:9D:F6:17 X509v3 Authority Key Identifier: keyid:FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:4b:e8:b9:4c:76:21:f5:bf:f7:17:68:d9:5d:11:d0:90:cd: 61:41:f2:5a:a6:7c:d0:6a:85:0a:fa:7f:90:74:90:c0:de:c0: da:b0:d3:0a:02:85:82:9c:7d:28:c1:06:ef:62:03:fa:94:ac: b3:b7:07:0c:bb:95:46:de:ae:db:83:fd:a1:89:0e:3e:9f:eb: f1:60:ac:9c:df:51:c5:25:16:41:19:04:70:a4:d0:5b:b0:0e: 67:63:44:32:20:9d:da:73:a5:22:7b:95:dc:16:ec:ec:11:8f: a5:a1:22:1b:58:4d:dc:ab:23:79:0f:f4:33:2c:2d:db:95:7f: 77:de:f0:f8:85:98:6e:1d:db:6f:c9:8d:e5:cf:f4:55:8f:58: 86:81:ae:7a:36:dd:ab:31:d1:d8:cf:70:92:ff:ae:c8:95:ae: 60:d2:2f:3f:a3:62:65:4e:ba:35:08:a2:2a:ac:81:35:86:e6: e7:c8:71:c7:60:04:ce:e5:6c:53:eb:e3:d7:5a:fd:04:34:b8: eb:d5:e8:95:39:e1:29:3b:00:30:db:fc:9a:0e:fc:de:a0:93: 43:b8:9d:2a:37:66:1b:84:e6:15:83:27:80:bd:3c:41:9b:1e: 2a:8e:76:35:fa:96:c3:a4:83:18:07:fc:90:0b:5d:9c:77:e9: 2d:f9:c6:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUEzRjAxMTAvBgNVBAUTKEZFMDVFRkI3MDEyNUQ1MjA0NzZGNjNCQzYwOUY1NTRE QzQ5QUM1OUMwHhcNMjYwNTIxMDI1NzM0WhcNMjYwNTI4MDI1NzM0WjAYMRYwFAYD VQQDEw02YTBlNzQ5ZS02YjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2pNEILonfAS4Rc9AHrJ3U7QGNJ3eksLMZX3x1rnoYpyF1+mLyZ8u54ptRyJU W1uoEEyXzKq5VjTOb/NYcrpapr0nP6G1Lw9OiPVebMINttSebcW9Khnijy9lESln nUKnrWn15V8nxj75HXFGtoDud0hKc5kwvXNoHgUzxi0vvFGbghra8ExUdyuhPfI1 VGHVrMR8BXo463Sd9OqHzGMKN9y7KVgbmoafz8HHceVJVFPSQp9QGO+qiyqjpZZG ev0Rp39V5DPGvBzinwAmVKHDLyRDRvWAWg9Bcj9BJ8cZhi1sTICDbEySLg8SWV+j nJNyhxLisD3R83oyrADKfiLq9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN7psnLl kG2LBZ8oW4EnUaG/nfYXMB8GA1UdIwQYMBaAFP4F77cBJdUgR29jvGCfVU3EmsWc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTNGMC9GM0MyQTkyMjJC OEExMUVFQUREMjIxMENDNEY5QUUwMi9fZ1h2dHdFbDFTQkhiMk84WUo5VlRjU2F4 WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19nWHZ0d0VsMVNCSGIyTzhZSjlWVGNTYXhady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTNGMC9GM0MyQTkyMjJCOEExMUVFQUREMjIxMENDNEY5QUUwMi9fZ1h2dHdFbDFT QkhiMk84WUo5VlRjU2F4WncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfkvouUx2IfW/9xdo2V0R0JDNYUHyWqZ80GqFCvp/kHSQwN7A2rDTCgKFgpx9 KMEG72ID+pSss7cHDLuVRt6u24P9oYkOPp/r8WCsnN9RxSUWQRkEcKTQW7AOZ2NE MiCd2nOlInuV3Bbs7BGPpaEiG1hN3KsjeQ/0Mywt25V/d97w+IWYbh3bb8mN5c/0 VY9YhoGuejbdqzHR2M9wkv+uyJWuYNIvP6NiZU66NQiiKqyBNYbm58hxx2AEzuVs U+vj11r9BDS469XolTnhKTsAMNv8mg783qCTQ7idKjdmG4TmFYMngL08QZseKo52 NfqWw6SDGAf8kAtdnHfpLfnGzw== -----END CERTIFICATE-----Generated at Thu May 21 10:14:46 2026 by rpki-client