$ rpki-client -vvf rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft File: B2lXYTNYblq0-b9NpSttXKFtnNU.mft (raw, json) Hash identifier: NWjjvPRLXfGy+eS0PxeS5KwqV48TEbxP+PenI2SKtkI= Subject key identifier: 69:87:5C:57:74:08:73:AB:60:B0:D0:6A:D9:0F:5D:BF:6A:40:7E:BF Authority key identifier: 07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5 Certificate issuer: /CN=A911057B/serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5 Certificate serial: 0C8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft Manifest number: 0C5F Signing time: Tue 12 May 2026 18:45:59 +0000 Manifest this update: Tue 12 May 2026 18:45:59 +0000 Manifest next update: Tue 19 May 2026 18:45:59 +0000 Files and hashes: 1: B2lXYTNYblq0-b9NpSttXKFtnNU.crl (hash: Q3ODwumPbbmeK5hKGpEnOgOEP0erH5f2Drdzs19MO0E=) 2: 4DC77C600A9111EEB13EAF44C4F9AE02.roa (hash: 2kqZ2ax/As32o8RRs0PQNYd+3fd0DLwwDpGPzi6gp20=) 3: DAFD055806F811EC9558C827C4F9AE02.roa (hash: SIPUDEhwO81LNv9dhcibvLJQkdYFv/PIhTjKFY7R3oc=) 4: 4B6A736E0A9111EEB13EAF44C4F9AE02.roa (hash: s0qB2iNNIUGZAV7Qs3yGnrF3Wpc6qo9NyC9+Hue+JMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3214 (0xc8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911057B, serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5 Validity Not Before: May 12 18:45:59 2026 GMT Not After : May 19 18:45:59 2026 GMT Subject: CN=6a037567-9278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:80:15:83:54:f6:d8:09:38:c2:0b:26:b9:f5: ee:18:78:59:8c:50:23:96:9b:20:19:62:a5:5e:10: 22:a4:eb:90:b5:8c:63:df:4f:59:f2:8c:c5:29:8b: 22:53:70:10:7f:f7:73:68:17:9f:ad:c6:3c:57:df: 17:32:ed:65:31:77:09:6c:5f:35:64:37:50:ce:3d: c7:26:34:36:6b:36:fc:ac:22:c6:51:ee:74:50:90: 17:3e:9f:ad:bc:46:a8:ae:2e:dc:1d:bf:e6:b7:ef: 7b:56:1b:47:99:2c:02:f9:06:30:7d:c6:b5:87:3f: 4d:a9:a0:5c:2b:7b:f0:34:a3:c9:88:4a:4f:ea:24: 3d:32:21:69:5f:9a:ac:cc:e9:64:47:dc:87:65:36: 62:1a:e5:12:cb:3c:97:64:eb:dc:65:e0:22:83:67: 74:ea:57:64:66:45:e9:7e:29:eb:a1:77:39:92:74: dc:0c:4b:0c:b8:03:d7:5f:c7:ea:58:50:60:55:64: 89:2d:58:55:d6:3b:ef:8e:dc:0e:2c:c2:ee:e7:43: fa:1e:90:03:1c:37:e6:8c:03:01:54:f0:cb:89:51: 34:37:eb:a2:83:36:02:16:3f:93:35:39:94:0a:e5: a1:3b:59:b9:e8:d2:17:e7:5a:11:48:10:02:12:95: 9d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:87:5C:57:74:08:73:AB:60:B0:D0:6A:D9:0F:5D:BF:6A:40:7E:BF X509v3 Authority Key Identifier: keyid:07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:61:16:39:85:01:7a:2a:54:24:6c:3c:b1:ac:c7:eb:51:22: 02:88:39:19:d4:38:0a:f2:be:96:f1:3e:cd:f2:44:50:eb:a9: bb:3b:32:9a:c2:84:20:4d:9b:74:51:ab:90:cf:41:96:81:7f: 27:2c:9c:00:8f:4c:42:40:6a:59:97:f9:95:df:ab:ee:dc:3d: ac:30:c4:ef:c1:ea:73:8d:dd:bf:67:a5:0a:fc:78:8b:58:09: 7b:9b:a1:c3:96:d7:1b:a3:f4:58:f1:a6:18:69:15:b2:b9:b0: 26:16:62:18:2f:04:59:dc:6b:92:3c:1f:bf:fe:07:e6:3c:cf: 85:a6:b0:1d:78:f3:ea:38:bc:4c:e6:1b:6e:45:ff:07:54:90: e4:6b:6f:ee:3d:3c:5f:08:4a:e6:9f:95:7d:ca:3c:bc:6c:0c: 30:73:3d:8d:c2:62:7c:d6:d0:29:ee:1e:23:cd:63:55:9c:d2: 75:3f:25:57:fb:65:1f:2d:3c:5f:13:d1:5e:49:59:85:89:aa: f7:cc:74:fd:54:35:0e:e9:5b:31:7b:11:74:a8:37:44:07:c2: 61:ba:99:f8:29:d2:20:76:6a:d5:60:fa:76:1b:2e:bb:bc:e7: 55:b2:e2:89:6d:1b:21:1b:c4:8b:ca:d2:44:1d:7e:1f:90:2d: 73:48:d7:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA1N0IxMTAvBgNVBAUTKDA3Njk1NzYxMzM1ODZFNUFCNEY5QkY0REE1MkI2RDVD QTE2RDlDRDUwHhcNMjYwNTEyMTg0NTU5WhcNMjYwNTE5MTg0NTU5WjAYMRYwFAYD VQQDEw02YTAzNzU2Ny05Mjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4AVg1T22Ak4wgsmufXuGHhZjFAjlpsgGWKlXhAipOuQtYxj309Z8ozFKYsi U3AQf/dzaBefrcY8V98XMu1lMXcJbF81ZDdQzj3HJjQ2azb8rCLGUe50UJAXPp+t vEaori7cHb/mt+97VhtHmSwC+QYwfca1hz9NqaBcK3vwNKPJiEpP6iQ9MiFpX5qs zOlkR9yHZTZiGuUSyzyXZOvcZeAig2d06ldkZkXpfinroXc5knTcDEsMuAPXX8fq WFBgVWSJLVhV1jvvjtwOLMLu50P6HpADHDfmjAMBVPDLiVE0N+uigzYCFj+TNTmU CuWhO1m56NIX51oRSBACEpWd6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGmHXFd0 CHOrYLDQatkPXb9qQH6/MB8GA1UdIwQYMBaAFAdpV2EzWG5atPm/TaUrbVyhbZzV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDU3Qi9BOTE3RTc1NDI2 MDUxMUVBQjQ2NEUxNTVDNEY5QUUwMi9CMmxYWVROWWJscTAtYjlOcFN0dFhLRnRu TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IybFhZVE5ZYmxxMC1iOU5wU3R0WEtGdG5OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDU3Qi9BOTE3RTc1NDI2MDUxMUVBQjQ2NEUxNTVDNEY5QUUwMi9CMmxYWVROWWJs cTAtYjlOcFN0dFhLRnRuTlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmmEWOYUBeipUJGw8sazH61EiAog5GdQ4CvK+lvE+zfJEUOupuzsymsKEIE2b dFGrkM9BloF/JyycAI9MQkBqWZf5ld+r7tw9rDDE78Hqc43dv2elCvx4i1gJe5uh w5bXG6P0WPGmGGkVsrmwJhZiGC8EWdxrkjwfv/4H5jzPhaawHXjz6ji8TOYbbkX/ B1SQ5Gtv7j08XwhK5p+Vfco8vGwMMHM9jcJifNbQKe4eI81jVZzSdT8lV/tlHy08 XxPRXklZhYmq98x0/VQ1DulbMXsRdKg3RAfCYbqZ+CnSIHZq1WD6dhsuu7znVbLi iW0bIRvEi8rSRB1+H5Atc0jX1Q== -----END CERTIFICATE-----Generated at Wed May 13 15:54:23 2026 by rpki-client