$ rpki-client -vvf rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft File: bu53G7POfpjbOWDE2C90Kiz36Ek.mft (raw, json) Hash identifier: YgcVaR/ApA9TkF0dqp9rQ6dGgw4SbaBIBP88K4yHvgI= Subject key identifier: 10:AA:27:B3:8F:72:FD:7B:25:47:6E:2E:DD:7A:4F:1D:81:CA:96:92 Authority key identifier: 6E:EE:77:1B:B3:CE:7E:98:DB:39:60:C4:D8:2F:74:2A:2C:F7:E8:49 Certificate issuer: /CN=A9118827/serialNumber=6EEE771BB3CE7E98DB3960C4D82F742A2CF7E849 Certificate serial: 0598 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft Manifest number: 0591 Signing time: Tue 12 May 2026 23:19:13 +0000 Manifest this update: Tue 12 May 2026 23:19:12 +0000 Manifest next update: Tue 19 May 2026 23:19:12 +0000 Files and hashes: 1: bu53G7POfpjbOWDE2C90Kiz36Ek.crl (hash: JA+LuHQVC2TnWei9PoSnQ5Zzw18aN8/PaKVbGQFU4j8=) 2: 95D9A9461BEC11EC97B39812C4F9AE02.roa (hash: v0rJzZLI+1O5nfOP2tDFakvguyT8MUXLjwiVOqN97W8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.crl rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 23:19:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1432 (0x598) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118827, serialNumber=6EEE771BB3CE7E98DB3960C4D82F742A2CF7E849 Validity Not Before: May 12 23:19:12 2026 GMT Not After : May 19 23:19:12 2026 GMT Subject: CN=6a03b571-b342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f0:4e:9e:bc:28:06:08:0f:e2:42:54:ba:ce: 23:a2:9e:32:7b:c4:c6:ac:0e:f1:fa:3d:c6:29:eb: c5:ed:64:bb:77:c7:4f:f3:b3:f6:ae:43:9f:c5:5c: bd:45:bb:16:f2:a2:18:f2:66:1d:6b:6f:6d:72:a5: c2:81:a1:dd:e7:14:c9:c5:f5:dc:14:ce:eb:a7:96: cc:60:b5:3d:ef:50:91:ff:5a:6a:1c:60:21:cc:ba: b8:54:94:62:cf:01:d0:48:10:5d:09:fd:47:54:81: 4a:62:c7:57:62:8f:b8:fa:ff:a0:72:6d:30:07:45: 0f:a5:cc:26:ec:06:6e:e2:5b:43:5f:5b:5d:9e:c3: 43:ef:aa:7e:51:d6:33:82:74:a9:8f:98:e1:83:be: 41:91:92:69:ea:d8:9a:07:5f:36:93:4f:4b:35:45: 55:35:4c:ec:43:d6:40:cc:d0:54:bc:63:ca:17:b7: 9a:61:41:c3:89:30:0b:bf:29:15:1e:0b:79:5a:59: 71:91:9d:5d:87:9b:88:2c:62:7d:18:0b:03:ba:6d: e9:59:b6:d7:7a:77:35:9c:85:bd:9a:59:64:64:be: 68:a8:80:86:e8:07:dc:f8:79:23:3b:d1:a8:3b:c2: a3:ea:ac:a2:62:83:23:94:e2:0d:ad:22:52:8f:8f: c5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AA:27:B3:8F:72:FD:7B:25:47:6E:2E:DD:7A:4F:1D:81:CA:96:92 X509v3 Authority Key Identifier: keyid:6E:EE:77:1B:B3:CE:7E:98:DB:39:60:C4:D8:2F:74:2A:2C:F7:E8:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:45:b3:ac:a6:1a:1b:34:54:06:69:61:4c:9c:50:62:47:8b: 92:64:1d:ed:fc:ff:f2:98:42:40:59:47:4b:ee:d8:a3:1b:54: 1d:1c:cf:d5:ed:b5:a6:8e:08:23:9f:1d:eb:e7:7f:ce:f5:01: 4f:ef:a7:7c:ab:3b:55:d3:ac:89:17:5a:c7:2f:b3:ed:aa:34: 1d:22:2f:96:c8:27:b4:e1:ce:f0:d2:8b:07:c6:32:08:5c:54: 02:89:6f:dd:6c:62:11:88:7f:bd:97:86:0c:21:b1:e5:a2:1e: e2:63:8c:68:56:51:54:32:75:d2:28:22:f0:fa:31:a7:90:77: a4:f2:7d:5f:38:67:c7:17:60:0f:e9:f5:79:9c:02:01:f5:78: a8:83:40:1c:d6:68:84:85:a4:e9:4f:e3:8a:6d:18:3f:6f:3d: 06:c1:2d:3b:8c:81:9a:11:b0:45:39:e3:a1:50:ad:e1:9e:57: c7:21:c1:c4:40:aa:15:0f:65:e2:f9:33:d9:d7:77:fc:7e:ca: 7f:b5:f2:7b:33:de:a6:9e:5b:5d:c7:96:e9:31:29:ef:cc:f1: 39:d7:04:ca:f4:d1:df:4d:e8:a0:7b:a3:55:36:1c:ab:28:bb: c0:e0:91:19:95:6a:80:96:d7:32:de:9b:d8:e0:53:51:0d:ac: da:fa:e0:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4MjcxMTAvBgNVBAUTKDZFRUU3NzFCQjNDRTdFOThEQjM5NjBDNEQ4MkY3NDJB MkNGN0U4NDkwHhcNMjYwNTEyMjMxOTEyWhcNMjYwNTE5MjMxOTEyWjAYMRYwFAYD VQQDEw02YTAzYjU3MS1iMzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfBOnrwoBggP4kJUus4jop4ye8TGrA7x+j3GKevF7WS7d8dP87P2rkOfxVy9 RbsW8qIY8mYda29tcqXCgaHd5xTJxfXcFM7rp5bMYLU971CR/1pqHGAhzLq4VJRi zwHQSBBdCf1HVIFKYsdXYo+4+v+gcm0wB0UPpcwm7AZu4ltDX1tdnsND76p+UdYz gnSpj5jhg75BkZJp6tiaB182k09LNUVVNUzsQ9ZAzNBUvGPKF7eaYUHDiTALvykV Hgt5WllxkZ1dh5uILGJ9GAsDum3pWbbXenc1nIW9mllkZL5oqICG6Afc+HkjO9Go O8Kj6qyiYoMjlOINrSJSj4/F/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBCqJ7OP cv17JUduLt16Tx2BypaSMB8GA1UdIwQYMBaAFG7udxuzzn6Y2zlgxNgvdCos9+hJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODgyNy8zQzdDQjQ1MDFC RTgxMUVDQkJBNjVCNTBDNEY5QUUwMi9idTUzRzdQT2ZwamJPV0RFMkM5MEtpejM2 RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J1NTNHN1BPZnBqYk9XREUyQzkwS2l6MzZFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODgyNy8zQzdDQjQ1MDFCRTgxMUVDQkJBNjVCNTBDNEY5QUUwMi9idTUzRzdQT2Zw amJPV0RFMkM5MEtpejM2RWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFUWzrKYaGzRUBmlhTJxQYkeLkmQd7fz/8phCQFlHS+7YoxtUHRzP1e21po4I I58d6+d/zvUBT++nfKs7VdOsiRdaxy+z7ao0HSIvlsgntOHO8NKLB8YyCFxUAolv 3WxiEYh/vZeGDCGx5aIe4mOMaFZRVDJ10igi8Poxp5B3pPJ9XzhnxxdgD+n1eZwC AfV4qINAHNZohIWk6U/jim0YP289BsEtO4yBmhGwRTnjoVCt4Z5XxyHBxECqFQ9l 4vkz2dd3/H7Kf7XyezPepp5bXceW6TEp78zxOdcEyvTR303ooHujVTYcqyi7wOCR GZVqgJbXMt6b2OBTUQ2s2vrgcw== -----END CERTIFICATE-----Generated at Wed May 13 06:51:04 2026 by rpki-client