$ rpki-client -vvf rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft File: 509GTECGWe0lidtmTOjvamxgDEc.mft (raw, json) Hash identifier: 1JdDTKYQhVxnhu2HxZCmA24r0QtvZ6S6b7NTRDK5UJw= Subject key identifier: E8:38:80:0A:17:04:7A:44:C4:8A:AD:A2:B9:DC:2E:39:FA:42:51:A5 Authority key identifier: E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47 Certificate issuer: /CN=A91A06F2/serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47 Certificate serial: 0BEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft Manifest number: 0BDC Signing time: Wed 20 May 2026 18:57:09 +0000 Manifest this update: Wed 20 May 2026 18:57:08 +0000 Manifest next update: Wed 27 May 2026 18:57:08 +0000 Files and hashes: 1: 509GTECGWe0lidtmTOjvamxgDEc.crl (hash: QhAmsCJaMBRdRoKsLOE+SLT4Mln8zFIuhyibZQcA80Y=) 2: D40428EC3D5511F18320D810A8833773.roa (hash: GiqC1fPItzwUUjM6WaOHq6c0vxZNE0S017OV+sd3TxQ=) 3: 8B37D2C40D2511EFA2E4D985C4F9AE02.roa (hash: Nnnq4X2pr12xKRIifzfba52zTnL3E4FSIZx5q2aHomI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 18:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3055 (0xbef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A06F2, serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47 Validity Not Before: May 20 18:57:08 2026 GMT Not After : May 27 18:57:08 2026 GMT Subject: CN=6a0e0405-704e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:87:3f:40:43:c8:83:3f:28:a3:ba:49:d5:bc: 33:db:cd:2b:74:9c:9d:35:cf:48:0a:a8:08:8b:56: 1a:02:a1:2f:ff:66:57:74:8a:ee:07:73:e7:d9:3c: 23:fd:bd:fb:ba:ed:b3:86:19:cb:8c:8e:4d:f0:8d: b2:be:24:a3:10:15:fe:8f:cf:a8:0f:22:a6:7e:de: 4f:49:47:c2:40:af:dd:a4:0a:75:80:2e:09:a1:c2: ee:d4:d4:a6:7d:29:68:eb:ca:c4:0f:2f:89:01:dc: 35:52:fd:77:bc:aa:ff:e8:34:f6:98:b5:b3:62:21: d9:c6:c0:ae:e4:e9:e6:aa:9a:1b:6a:ea:4c:e7:be: 5a:17:48:7b:69:db:e9:ac:e9:0d:5f:e0:9a:fe:c5: 46:f7:15:0a:3d:64:90:7e:48:b1:02:df:fa:03:8e: bc:59:ca:10:2f:54:6e:c4:f8:0b:6a:e7:7e:d0:26: 0b:03:26:16:6c:32:88:c3:f6:5b:22:b5:b6:4c:bb: a0:c1:38:5a:fb:61:b0:57:01:d3:45:a0:4e:7c:40: e1:4c:9d:6e:4f:05:4d:cb:a2:3a:a8:5c:b7:ae:e8: 3c:6f:52:10:ec:59:b4:82:9d:98:87:d6:c1:29:52: 19:c8:f4:9a:78:65:62:da:a5:ff:21:c9:cb:8b:ec: 2e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:38:80:0A:17:04:7A:44:C4:8A:AD:A2:B9:DC:2E:39:FA:42:51:A5 X509v3 Authority Key Identifier: keyid:E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:70:db:c8:a3:81:84:20:9a:2a:a0:76:1a:fe:0c:fd:0c:ce: a5:5a:7a:34:ad:5b:37:0a:a8:fb:f6:c7:c0:dd:64:2d:1a:88: b6:f6:5e:fe:12:e3:80:45:ef:89:81:43:97:88:a8:33:ec:0e: 81:7e:df:41:4d:57:fe:c0:18:b7:e6:a2:06:fe:5d:70:48:09: 23:36:26:d6:e0:38:d9:1d:f1:9c:98:68:df:76:37:20:76:70: 86:11:f6:22:ec:77:37:70:e5:03:b1:18:37:ef:fc:5a:ca:7d: cb:20:53:c9:d9:96:c6:2a:35:18:c6:fe:ce:e7:94:8b:2e:55: e1:d5:d6:b8:29:79:bd:48:2f:86:3b:85:37:4a:c3:f7:44:4d: 38:aa:2b:ab:6e:80:9b:72:40:4a:0f:3e:f5:90:9b:cf:0d:1f: 8f:6b:5a:e5:d5:11:10:71:8c:f7:f2:3c:42:cd:68:72:0d:55: 0d:da:65:d4:5b:a0:44:62:59:c7:cd:0a:90:f1:94:20:00:41: ac:77:f1:44:ae:f3:d1:4c:13:59:72:f6:80:30:55:b7:29:63: 19:83:45:5f:6e:be:77:ab:7e:ec:3a:25:3d:08:3e:89:f5:12: fd:37:e8:c2:e2:29:78:e5:57:0c:a9:87:9c:4c:92:cc:3d:83: 78:ee:fe:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA2RjIxMTAvBgNVBAUTKEU3NEY0NjRDNDA4NjU5RUQyNTg5REI2NjRDRThFRjZB NkM2MDBDNDcwHhcNMjYwNTIwMTg1NzA4WhcNMjYwNTI3MTg1NzA4WjAYMRYwFAYD VQQDEw02YTBlMDQwNS03MDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34c/QEPIgz8oo7pJ1bwz280rdJydNc9ICqgIi1YaAqEv/2ZXdIruB3Pn2Twj /b37uu2zhhnLjI5N8I2yviSjEBX+j8+oDyKmft5PSUfCQK/dpAp1gC4JocLu1NSm fSlo68rEDy+JAdw1Uv13vKr/6DT2mLWzYiHZxsCu5OnmqpobaupM575aF0h7advp rOkNX+Ca/sVG9xUKPWSQfkixAt/6A468WcoQL1RuxPgLaud+0CYLAyYWbDKIw/Zb IrW2TLugwTha+2GwVwHTRaBOfEDhTJ1uTwVNy6I6qFy3rug8b1IQ7Fm0gp2Yh9bB KVIZyPSaeGVi2qX/IcnLi+wu/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOg4gAoX BHpExIqtorncLjn6QlGlMB8GA1UdIwQYMBaAFOdPRkxAhlntJYnbZkzo72psYAxH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDZGMi84QjhDNEREMjNG NDcxMUVBOEU1REE4N0NDNEY5QUUwMi81MDlHVEVDR1dlMGxpZHRtVE9qdmFteGdE RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUwOUdURUNHV2UwbGlkdG1UT2p2YW14Z0RFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDZGMi84QjhDNEREMjNGNDcxMUVBOEU1REE4N0NDNEY5QUUwMi81MDlHVEVDR1dl MGxpZHRtVE9qdmFteGdERWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhnDbyKOBhCCaKqB2Gv4M/QzOpVp6NK1bNwqo+/bHwN1kLRqItvZe/hLjgEXv iYFDl4ioM+wOgX7fQU1X/sAYt+aiBv5dcEgJIzYm1uA42R3xnJho33Y3IHZwhhH2 Iux3N3DlA7EYN+/8Wsp9yyBTydmWxio1GMb+zueUiy5V4dXWuCl5vUgvhjuFN0rD 90RNOKorq26Am3JASg8+9ZCbzw0fj2ta5dUREHGM9/I8Qs1ocg1VDdpl1FugRGJZ x80KkPGUIABBrHfxRK7z0UwTWXL2gDBVtyljGYNFX26+d6t+7DolPQg+ifUS/Tfo wuIpeOVXDKmHnEySzD2DeO7+wQ== -----END CERTIFICATE-----Generated at Thu May 21 09:38:14 2026 by rpki-client