$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft File: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft (raw, json) Hash identifier: YZDyK69k162mfrA9RlLsd9RVTpYBTmwLtF8uEXuW3M4= Subject key identifier: BA:6F:A4:FC:78:A8:20:F3:E2:F6:E6:D7:5B:8C:CF:F1:83:BD:C4:5C Authority key identifier: 75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94 Certificate issuer: /CN=A91C72E6/serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94 Certificate serial: 023F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft Manifest number: 0235 Signing time: Thu 21 May 2026 02:36:47 +0000 Manifest this update: Thu 21 May 2026 02:36:47 +0000 Manifest next update: Thu 28 May 2026 02:36:47 +0000 Files and hashes: 1: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl (hash: 6021UNlphUDhAi4/iExq9MEnC6kB7EHyXzXOPiLSFRA=) 2: 2340D07AF2F111ED91F08A4FC4F9AE02.roa (hash: 93lqVQhsdgkNqe+QLKSt6rzwX0cHhLHTkYfLV3iVFU8=) 3: 23EE2B76F2F111ED91F08A4FC4F9AE02.roa (hash: 5THegraPgMqqp6VrhQyR4hOqJ9d+jYAhvqCx1inYwhs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 02:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 575 (0x23f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C72E6, serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94 Validity Not Before: May 21 02:36:47 2026 GMT Not After : May 28 02:36:47 2026 GMT Subject: CN=6a0e6fbf-5af3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:17:23:02:47:7d:15:eb:fd:d6:72:35:b9:7d: 07:64:95:c8:51:68:34:e5:63:b3:c8:31:22:3b:9a: fe:77:12:42:39:05:14:87:00:b2:df:75:b7:fc:b5: 04:83:04:4d:2e:38:24:9d:20:1d:5a:2f:84:f8:f1: c3:37:d9:38:dd:20:3c:ae:3c:1b:9b:a8:bd:ee:f5: d9:42:5a:92:e3:f6:cb:62:a8:2f:ba:ab:61:74:c5: df:a2:53:15:80:2c:ed:4b:5c:7a:10:81:00:74:3a: 18:4e:8a:b4:0d:b1:b9:11:8c:d7:e3:44:0c:82:79: 46:51:d2:0b:d8:38:33:2d:6c:ff:e6:61:9f:94:89: de:11:fa:cb:d6:d5:ac:e3:05:7f:c8:48:91:6d:b4: 11:5f:fa:52:b2:88:7d:86:52:97:cf:cc:bf:d4:22: 9a:51:d3:a2:d7:b1:a1:92:a2:c0:00:99:3f:52:94: 2f:e3:5b:a3:cb:7b:79:03:1e:e8:e0:98:4a:55:70: 6e:49:21:f8:07:f6:3a:86:02:1d:f4:e3:36:e9:c3: 3c:64:44:65:ef:27:e3:8f:16:2d:0b:50:af:60:9d: 64:b8:13:fc:c0:52:28:9f:79:59:9b:bc:2e:0a:d9: 34:9d:31:32:70:2a:f1:8b:6d:af:70:44:ee:87:d8: 62:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:6F:A4:FC:78:A8:20:F3:E2:F6:E6:D7:5B:8C:CF:F1:83:BD:C4:5C X509v3 Authority Key Identifier: keyid:75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:3e:0e:e6:1f:da:33:30:92:6a:1b:93:55:93:cc:e9:79:b1: 70:f7:94:95:71:23:5c:94:a8:5a:e4:31:4c:6e:9f:f0:63:50: e5:94:50:5c:d7:27:98:0e:27:e7:04:14:06:d9:a3:17:60:8a: 56:47:d8:0f:dc:f6:da:d1:d2:ec:ae:58:7c:da:d8:68:06:96: 86:4b:85:63:a3:4b:6b:cb:f1:26:34:cf:bd:b8:b3:49:fc:98: 50:73:aa:75:91:c2:0f:20:7e:80:33:3d:65:2d:d2:25:0c:9f: e2:85:e0:46:b2:a6:a5:06:59:0e:c3:f2:1e:7f:da:2e:b6:17: fb:6b:48:c2:4b:db:9f:62:3e:a1:04:80:3b:6d:25:22:78:d7: 10:02:be:a9:08:06:23:47:82:91:c4:da:ed:41:42:ba:79:10: c7:2e:b5:c6:5b:3a:49:ab:cd:bb:e5:96:ce:0f:68:0e:fd:de: b7:5b:7d:15:6e:25:00:41:88:52:cf:3b:0d:e3:5d:fb:de:6d: 4d:ea:d8:5e:55:00:c0:02:8f:df:0a:f9:04:df:fc:b1:46:05: e8:91:be:7b:43:6b:d2:17:a7:6b:14:fd:d6:dd:1a:74:d6:95: 49:42:13:d0:70:cd:5a:c3:71:f4:9c:53:5d:a4:13:86:6d:e2: 27:81:50:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyRTYxMTAvBgNVBAUTKDc1MjUzM0IxODUyRjdEMkFDNkU3MERDREVCRkQ1NDdE REM0MzhGOTQwHhcNMjYwNTIxMDIzNjQ3WhcNMjYwNTI4MDIzNjQ3WjAYMRYwFAYD VQQDEw02YTBlNmZiZi01YWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAixcjAkd9Fev91nI1uX0HZJXIUWg05WOzyDEiO5r+dxJCOQUUhwCy33W3/LUE gwRNLjgknSAdWi+E+PHDN9k43SA8rjwbm6i97vXZQlqS4/bLYqgvuqthdMXfolMV gCztS1x6EIEAdDoYToq0DbG5EYzX40QMgnlGUdIL2DgzLWz/5mGflIneEfrL1tWs 4wV/yEiRbbQRX/pSsoh9hlKXz8y/1CKaUdOi17GhkqLAAJk/UpQv41ujy3t5Ax7o 4JhKVXBuSSH4B/Y6hgId9OM26cM8ZERl7yfjjxYtC1CvYJ1kuBP8wFIon3lZm7wu Ctk0nTEycCrxi22vcETuh9hiIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLpvpPx4 qCDz4vbm11uMz/GDvcRcMB8GA1UdIwQYMBaAFHUlM7GFL30qxucNzev9VH3cQ4+U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzJFNi9FNkU2RkIzMkYy RUExMUVEOTA5OTAwNEFDNEY5QUUwMi9kU1V6c1lVdmZTckc1dzNONl8xVWZkeERq NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RTVXpzWVV2ZlNyRzV3M042XzFVZmR4RGo1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzJFNi9FNkU2RkIzMkYyRUExMUVEOTA5OTAwNEFDNEY5QUUwMi9kU1V6c1lVdmZT ckc1dzNONl8xVWZkeERqNVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATj4O5h/aMzCSahuTVZPM6XmxcPeUlXEjXJSoWuQxTG6f8GNQ5ZRQXNcnmA4n 5wQUBtmjF2CKVkfYD9z22tHS7K5YfNrYaAaWhkuFY6NLa8vxJjTPvbizSfyYUHOq dZHCDyB+gDM9ZS3SJQyf4oXgRrKmpQZZDsPyHn/aLrYX+2tIwkvbn2I+oQSAO20l InjXEAK+qQgGI0eCkcTa7UFCunkQxy61xls6SavNu+WWzg9oDv3et1t9FW4lAEGI Us87DeNd+95tTerYXlUAwAKP3wr5BN/8sUYF6JG+e0Nr0henaxT91t0adNaVSUIT 0HDNWsNx9JxTXaQThm3iJ4FQJA== -----END CERTIFICATE-----Generated at Thu May 21 14:15:06 2026 by rpki-client