$ rpki-client -vvf rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft File: P1VrwCUQM7zlcvxsirdgrMSXBZM.mft (raw, json) Hash identifier: 8nuh8TfVRdJWoOCcuad3XdFw3J5yAEuIdLrbxvQQRd8= Subject key identifier: 18:32:5B:6C:E2:FE:57:1B:78:18:5E:B2:04:E9:D8:2C:3D:A8:17:43 Authority key identifier: 3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93 Certificate issuer: /CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593 Certificate serial: 15F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft Manifest number: 15D1 Signing time: Wed 20 May 2026 16:44:54 +0000 Manifest this update: Wed 20 May 2026 16:44:53 +0000 Manifest next update: Wed 27 May 2026 16:44:53 +0000 Files and hashes: 1: P1VrwCUQM7zlcvxsirdgrMSXBZM.crl (hash: yiypdYp23QOP3SumqvrmtMSFY8SQzIdcUAvsv8FnFhE=) 2: 65C8C388EAFB11ED9F4DC557C4F9AE02.roa (hash: 49JEiOnck3YIqSnh0w+N5FmwAfU3DdS+vbKJpG7LI7Q=) 3: F148BE6E511611EE85A7E634C4F9AE02.roa (hash: GqZMFA0L7ACjbBy6EEKhCEh6yrXjeUh2/sYjzUSadNQ=) 4: 9FA735ECEAF811ED9E2D1958C4F9AE02.roa (hash: GS7Hz+JO/tFd7f6jkV506RLU0L8tY/ifzdZjJQhwPzk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 16:44:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5618 (0x15f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CF42, serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593 Validity Not Before: May 20 16:44:53 2026 GMT Not After : May 27 16:44:53 2026 GMT Subject: CN=6a0de505-2eaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d4:d4:18:7c:cd:ad:21:4a:4a:01:0d:9d:05: 97:3f:1d:68:a8:d4:1e:19:a6:bd:aa:6c:77:5d:1a: 4d:ca:c2:a7:2c:29:7a:00:f9:f6:d7:fc:7e:83:83: 49:3a:ce:77:72:05:4b:db:a4:fa:5c:c6:2f:06:58: 3e:2d:80:06:fa:d8:ce:42:a4:f6:71:22:35:1a:98: fa:b4:33:64:ef:56:2b:b4:bc:50:80:81:d8:64:3b: 8c:68:ee:e8:5c:c2:d1:e5:ed:95:d8:70:f4:bf:1d: ff:eb:9a:d6:cd:70:17:35:6f:8e:96:ce:34:fb:64: 61:6f:db:52:82:c3:50:ca:58:77:0e:b2:f6:95:8d: 1f:f1:5b:ee:f7:c5:20:16:f0:a0:b6:8e:1e:12:42: 5a:f9:8b:a2:b4:82:f4:60:02:f1:3c:b6:e4:ed:3a: c2:60:87:93:0c:8e:de:c4:b7:0a:85:0c:f5:0a:a7: 66:a9:3a:c0:b1:88:68:90:09:a3:2b:a3:db:1f:a3: 75:97:45:67:1e:03:22:82:62:16:6e:4c:5c:60:31: a7:e7:4f:de:c3:4b:99:34:8a:16:66:da:de:24:28: ff:5a:89:7a:de:cc:e0:dd:c5:34:af:9e:ac:96:f6: d9:b2:7c:96:50:98:d8:74:68:c0:74:6f:21:ed:cd: 16:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:32:5B:6C:E2:FE:57:1B:78:18:5E:B2:04:E9:D8:2C:3D:A8:17:43 X509v3 Authority Key Identifier: keyid:3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:6d:0a:c1:7c:b3:03:2b:15:76:52:46:38:fa:ce:27:8e:29: ba:4f:25:77:32:85:b4:a4:9c:b3:20:61:c0:ad:41:6b:b8:81: 95:09:b5:6f:d4:38:a9:02:a0:2f:1a:e6:af:a6:96:db:ce:82: 7e:e8:87:75:c7:d5:38:b2:68:04:bf:22:67:a0:22:e7:19:39: 50:11:35:aa:32:f4:b2:db:2f:89:68:29:a2:15:06:b3:3a:5e: 20:3f:fb:f9:55:0c:00:3e:a7:b7:87:7a:0d:8c:2c:a1:75:40: 04:30:9d:76:9e:ee:c7:77:30:53:b6:65:5f:90:6c:25:7a:00: f3:b8:c6:ce:dc:42:df:69:5e:62:82:ce:bf:b0:c0:f6:1e:0d: ce:84:c3:2e:83:90:ec:73:05:73:5f:23:da:e9:18:43:d6:5b: 8f:68:35:c3:46:d8:da:01:c3:f2:43:31:f3:63:bb:72:ef:7d: c3:21:65:b5:1c:5c:3b:e0:3c:3f:96:29:cc:23:ed:e5:8d:74: bb:9e:e5:c4:12:5b:f9:24:bf:2b:3e:9a:a9:6f:96:08:cf:8c: 87:d0:e7:8a:ee:93:69:0f:91:7a:80:d0:de:e9:48:21:bd:6a: f6:20:b9:37:2e:b0:75:8e:21:e1:fb:13:56:16:80:6c:12:c0: 19:15:31:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNGNDIxMTAvBgNVBAUTKDNGNTU2QkMwMjUxMDMzQkNFNTcyRkM2QzhBQjc2MEFD QzQ5NzA1OTMwHhcNMjYwNTIwMTY0NDUzWhcNMjYwNTI3MTY0NDUzWjAYMRYwFAYD VQQDEw02YTBkZTUwNS0yZWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0tTUGHzNrSFKSgENnQWXPx1oqNQeGaa9qmx3XRpNysKnLCl6APn21/x+g4NJ Os53cgVL26T6XMYvBlg+LYAG+tjOQqT2cSI1Gpj6tDNk71YrtLxQgIHYZDuMaO7o XMLR5e2V2HD0vx3/65rWzXAXNW+Ols40+2Rhb9tSgsNQylh3DrL2lY0f8Vvu98Ug FvCgto4eEkJa+YuitIL0YALxPLbk7TrCYIeTDI7exLcKhQz1CqdmqTrAsYhokAmj K6PbH6N1l0VnHgMigmIWbkxcYDGn50/ew0uZNIoWZtreJCj/Wol63szg3cU0r56s lvbZsnyWUJjYdGjAdG8h7c0WEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBgyW2zi /lcbeBhesgTp2Cw9qBdDMB8GA1UdIwQYMBaAFD9Va8AlEDO85XL8bIq3YKzElwWT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0Y0Mi83QTZBQkZDQzRD QzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03emxjdnhzaXJkZ3JNU1hC Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AxVnJ3Q1VRTTd6bGN2eHNpcmRnck1TWEJaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0Y0Mi83QTZBQkZDQzRDQzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03 emxjdnhzaXJkZ3JNU1hCWk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPm0KwXyzAysVdlJGOPrOJ44puk8ldzKFtKScsyBhwK1Ba7iBlQm1b9Q4qQKg Lxrmr6aW286CfuiHdcfVOLJoBL8iZ6Ai5xk5UBE1qjL0stsviWgpohUGszpeID/7 +VUMAD6nt4d6DYwsoXVABDCddp7ux3cwU7ZlX5BsJXoA87jGztxC32leYoLOv7DA 9h4NzoTDLoOQ7HMFc18j2ukYQ9Zbj2g1w0bY2gHD8kMx82O7cu99wyFltRxcO+A8 P5YpzCPt5Y10u57lxBJb+SS/Kz6aqW+WCM+Mh9Dniu6TaQ+ReoDQ3ulIIb1q9iC5 Ny6wdY4h4fsTVhaAbBLAGRUxvg== -----END CERTIFICATE-----Generated at Thu May 21 10:17:19 2026 by rpki-client